full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2003/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 61	² 29	³ 44
⁴ 68	⁵ 49	⁶ 28	⁷ 52	⁸ 42	⁹ 12	¹⁰ 17
¹¹ 61	¹² 135	¹³ 116	¹⁴ 120	¹⁵ 140	¹⁶ 45	¹⁷ 18
¹⁸ 49	¹⁹ 88	²⁰ 108	²¹ 140	²² 156	²³ 32	²⁴ 28
²⁵ 41	²⁶ 69	²⁷ 41	²⁸ 46	²⁹ 65	³⁰ 54	³¹ 28

Messages by day:

August 1 (61 messages)

I, morning_wood (se_cur_ity at hotmail.com (morning_wood))
rpc dcom -- net share (zorkshin at tampabay.rr.com (Justin Shin))
CounterAttack (PDolbow at NetTexas.com (Dolbow, Phil))
Insufficient input checking on web site allows dangerous HTML TAGS (dhtml at hush.com (dhtml@...h.com))
Re: CERT Advisory CA-2003-19 Exploitation of Vulnerabilities in Microsoft RPC Interface (fwd) (alf1num3rik at yahoo.com (Stephen))
[Advisory] IISShield V1.0.2 (rawdata at netcabo.pt (rawdata))
Guideliens for Security Vuln reporting and response process (ian at iwcg.net (Ian Wilson))
Sorry for the Previous message [Advisory] IISShield V1.0.2 (RawData at netcabo.pt (RawData))
OT but related. (dhtml at hush.com (dhtml@...h.com))
rpc dcom -- net share (liberoda at libero.it (liberoda@...ero.it))
Re: CERT Advisory CA-2003-19 Exploitation of Vulnerabilities in Microsoft RPC Interface (fwd) (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
[SECURITY] [DSA-359-1] New atari800 packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-358-1] New kernel source and i386, alpha kernel images fix multiple vulnerabilities (debian-security-announce at lists.debian.org (debian-securi…)
Guideliens for Security Vuln reporting and response process (jasonc at science.org (Jason Coombs))
Patching networks redux (fwd) (denatured at microsoftsucks.org (denatured))
Guideliens for Security Vuln reporting and response process (ian at iwcg.net (Ian Wilson))
DCOM exploit Italian offset (liberoda at libero.it (liberoda@...ero.it))
RE: Patching networks redux (fwd) (denatured at microsoftsucks.org (denatured))
DCOM Exploit MS03-026 attack vectors (Brad.Bemis at airborne.com (Brad Bemis))
Patching networks redux (fwd) (jonathan at xcorps.net (Jonathan Rickman))
RAV ActiveX Buffer overflow in ravupdt.dll file (trihuynh at zeeup.com (Tri Huynh))
Guideliens for Security Vuln reporting and response process (jasonc at science.org (Jason Coombs))
RAV ActiveX Buffer overflow in ravupdt.dll file (trihuynh at zeeup.com (Tri Huynh))
RPC DCOM Patches (jasper599 at hotmail.com (Jasper Blackwell))
RE: DCOM Exploit MS03-026 attack vectors (jasper599 at hotmail.com (Jasper Blackwell))
[psirt@...co.com: Cisco Security Notice: Data Leak in UDP Echo Service] (len at netsys.com (Len Rose))
Novell GroupWise 6.5 Clear Text Vulnerability (agray at novacoast.com (Adam Gray))
RE: DCOM Exploit MS03-026 attack vectors (dksaarth at unix.za.net (Richard Spiers))
CounterAttack (lists at nolog.org (Martin Peikert))
Out of Office AutoReply: Get Password mail... (Dkillion at netscreen.com (Dave Killion))
Oh no - the feds are on to us :-) (larryr at netbeam.net (Larry Roberts))
RPC DCOM Patches (Albert.Saerong at id.ey.com (Albert Saerong))
Re: Re: rpcdcom Universal offsets (australia001 at yahoo.com.au (Chris))
RPC DCOM Patches (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
DCOM Exploit MS03-026 attack vectors (nick at virus-l.demon.co.uk (Nick FitzGerald))
Most Important Vulnerabilities - July 2003 (support at sintelli.com (Sintelli Support))
Patching networks redux (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Oh no - the feds are on to us :-) (se_cur_ity at hotmail.com (morning_wood))
Most Important Vulnerabilities - July 2003 (sintraq at sintelli.com (Sintraq))
Oh no - the feds are on to us :-) (th.campos at bol.com.br (Thiago Campos))
[Full Disclosure] re: RPC - COM event Error (dev-null at no-id.com (dev-null@...id.com))
RE: DCOM Exploit MS03-026 attack vectors (jeff.t.parker at hp.com (Parker, Jeff (MSE)))
CounterAttack (suse at mail.bciassociates.com (Jeff Bankston))
[SECURITY] [DSA-360-1] New xfstt packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
DCOM Exploit MS03-026 attack vectors (pdt at jackhammer.org (Paul Tinsley))
Betr:Full-Disclosure digest, Vol 1 #993 - 32 msgs (christian.poersch at vodafone.com (Christian Poersch))
DCOM Exploit MS03-026 attack vectors (mbassett at omaha.com (Bassett, Mark))
Oh no - the feds are on to us :-) (pauls at utdallas.edu (Schmehl, Paul L))
CounterAttack (pauls at utdallas.edu (Schmehl, Paul L))
Re: Re: rpcdcom Universal offsets (mbassett at omaha.com (Bassett, Mark))
More for the grist mill (or bad news for admins) (pauls at utdallas.edu (Schmehl, Paul L))
How to easily bypass a firewall... (avalon at caligula.anu.edu.au (Darren Reed))
Oh no - the feds are on to us :-) (dlpassport at s2access.com (LaRose, Dallas))
DCOM Exploit MS03-026 attack vectors (bwatson at nettracers.com (Bryan K. Watson))
How to easily bypass a firewall... (amilabs at optonline.net (amilabs))
SRT2003-08-01-0126 - cdrtools-2.x local root exploit (dotslash at snosoft.com (KF))
DCOM Exploit MS03-026 attack vectors (jeremiah at nur.net (Jeremiah Cornelius))
RPC DCOM Patches (nodialtone at comcast.net (Byron Copeland))
How to easily bypass a firewall... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Oh no - the feds are on to us :-) (this_is_kris at hotmail.com (Kristian Hermansen))
[SECURITY] [DSA-361-1] New kdelibs packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)

August 2 (29 messages)

-- command line unix rpc/dcom vulnerability checker -- from buildtheb0x (bobbymanly at hotmail.com (bobby manly))
RPC exploit codez (m0rtis at adelphia.net (Mortis))
Can DCOM be disabled safely? (pauls at utdallas.edu (Paul Schmehl))
Reacting to a server compromise (marklist at comcast.net (Mark))
Reacting to a server compromise (peter at trusteddebian.org (Peter Busser))
Can DCOM be disabled safely? (cheekypeople at sec33.com (CHeeKY))
źćźćźćźćąśśąśąśż (yup at tlen.pl (yup@...n.pl))
DCOM Exploit MS03-026 attack vectors (nick at virus-l.demon.co.uk (Nick FitzGerald))
[SEC-LABS] Win32 Device Drivers Communication Vulnerabilities + PoC for Symantec Norton AntiVirus \'2002 (probably all versions) … (yup at tlen.pl (yup@...n.pl))
Re: Why it is posted as link... (yup at tlen.pl (yup@...n.pl))
Re: Why it is posted as link... (remko at elvandar.org (Remko Lodder))
[mailinglists-security] [SEC-LABS] Win32 Device Drivers Communication Vulnerabilities + PoC for Symantec Norton AntiVirus… (remko at elvandar.org (Remko Lodder))
Reacting to a server compromise (wchang at pnwsoft.com (Wayne Chang))
Can DCOM be disabled safely? (pauls at utdallas.edu (Paul Schmehl))
NTBUGTRAQ on DCOM (pauls at utdallas.edu (Paul Schmehl))
RE: DCOM Exploit MS03-026 attack vectors (geoincidents at getinfo.org (Geoincidents))
Reacting to a server compromise (jenbradley at webmail.co.za (Jennifer Bradley))
Disabling DCOM: Ramifications? (jason.eberly at onebox.com (Jason Eberly))
possible MS03-026 worm? (dhopper at ameritech.net (mobly99))
possible MS03-026 worm? (tcpdumb at pentiumbuster.homelinux.com (tcpdumb))
RE: possible MS03-026 worm? (dhopper at ameritech.net (mobly99))
Reacting to a server compromise (SecuresDotComs at hotmail.com (SecuresDotComs))
f-prot not catching mimail ? (mike at sentex.net (Mike Tancsa))
possible MS03-026 worm? (cheekypeople at sec33.com (CHeeKY))
RE: possible MS03-026 worm? (se_cur_ity at hotmail.com (morning_wood))
RE: possible MS03-026 worm? (zorkshin at tampabay.rr.com (Justin Shin))
possible MS03-026 worm? (dhopper at ameritech.net (mobly99))
RE: possible MS03-026 worm? (cheekypeople at sec33.com (CHeeKY))
[SECURITY] [DSA-362-1] New mindi packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)

August 3 (44 messages)

[SEC-LABS] Win32 Device Drivers Communication Vulnerabilities + PoC for Symantec Norton AntiVirus '2002 (probably all … (booger at unixclan.net (security snot))
DCOM Exploit MS03-026 attack vectors (dufresne at winternet.com (Ron DuFresne))
Reacting to a server compromise (devnull at iprimus.com.au (devnull@...imus.com.au))
Oh no - the feds are on to us :-) (madsaxon at direcway.com (madsaxon))
Reacting to a server compromise (support at mmicman.com (Edward W. Ray))
Oh no - the feds are on to us :-) (se_cur_ity at hotmail.com (morning_wood))
Reacting to a server compromise (SecuresDotComs at hotmail.com (SecuresDotComs))
Oh no - the feds are on to us :-) (madsaxon at direcway.com (madsaxon))
Reacting to a server compromise (marklist at comcast.net (Mark))
Re: [SEC-LABS] Win32 Device Drivers Communication ... (psz at maths.usyd.edu.au (Paul Szabo))
Reacting to a server compromise (madsaxon at direcway.com (madsaxon))
rpc/dcom -- de ja vu? (zorkshin at tampabay.rr.com (Justin Shin))
Oh no - the feds are on to us :-) (cslyon at netsvcs.com (Christopher Lyon))
Re: DCOM exploit Italian offset (zorrito at cob.megared.net.mx (Zorrito))
rpc/dcom -- de ja vu? (list at hardlined.com (Shanphen Dawa))
rpc/dcom -- de ja vu? (se_cur_ity at hotmail.com (morning_wood))
Reacting to a server compromise (jenbradley at webmail.co.za (Jennifer Bradley))
Re: DCOM exploit Italian offset (rlanguy at hotmail.com (Lan Guy))
Reacting to a server compromise (se_cur_ity at hotmail.com (morning_wood))
[bWM#012] Passing script/html-filter with special chars (multibrowser) (ben.moeckel at badwebmasters.net (ben.moeckel@...webmasters.net))
Reacting to a server compromise (seclistaddress at yahoo.com (manohar singh))
[bWM#013] IIS (patched) may execute any file in a ".asp"-directory (bad behavior) (ben.moeckel at badwebmasters.net (ben.moeckel@...webmasters.net))
[bWM#015] SQL-Injection @ Woltlab Burning Board + MOD Guthabenhack 1.3 (ben.moeckel at badwebmasters.net (ben.moeckel@...webmasters.net))
[bWM#012] Passing script/html-filter with special chars (multibrowser) (ben.moeckel at online.de (ben.moeckel@...ine.de))
possible MS03-026 worm? (dhopper at ameritech.net (mobly99))
Reacting to a server compromise (crypto at clouddancer.com (Aron Nimzovitch))
formatstring bug in Compaq HTTP Servers (mcw at wcd.se (mcw@....se))
[inbox] Re: Reacting to a server compromise (purdy at tecman.com (Curt Purdy))
Re: Reacting to a server compromise (alexandre.dulaunoy at ael.be (Alexandre Dulaunoy))
spanish win xp sp0 and sp1 offset (clete at incucai.gov.ar (clete@...ucai.gov.ar))
Postfix 1.1.12 remote DoS / Postfix 1.1.11 bounce scanning (lcamtuf at ghettot.org (Michal Zalewski))
possible MS03-026 worm? (guninski at guninski.com (Georgi Guninski))
f-prot not catching mimail ? (purdy at tecman.com (Curt Purdy))
[inbox] Re: Reacting to a server compromise (purdy at tecman.com (Curt Purdy))
[inbox] Re: Reacting to a server compromise (lcamtuf at ghettot.org (Michal Zalewski))
[inbox] Reacting to a server compromise (purdy at tecman.com (Curt Purdy))
[inbox] Re: Reacting to a server compromise (se_cur_ity at hotmail.com (morning_wood))
f-prot not catching mimail ? (psz at maths.usyd.edu.au (Paul Szabo))
(no subject) (regosec at seductive.com (Rego Security))
REGO SECURITY : DoS in Linux (regosec at seductive.com (Rego Security))
[SECURITY] [DSA-363-1] New postfix packages fix remote denial of service, bounce scanning (debian-security-announce at lists.debian.org (debian-security-announc…)
[VulnWatch] Postfix 1.1.12 remote DoS / Postfix 1.1.11 bounce scanning (lcamtuf at ghettot.org (Michal Zalewski))
[bWM#015] SQL-Injection @ Woltlab Burning Board + MOD Guthabenhack 1.3 (ben.moeckel at badwebmasters.net (ben.moeckel@...webmasters.net))
Reacting to a server compromise (jenbradley at webmail.co.za (Jennifer Bradley))

August 4 (68 messages)

[inbox] Re: Reacting to a server compromise (gaurav at e2-labs.com (Gaurav Kumar))
Reacting to a server compromise (computer at jacox.net (James A. Cox))
(no subject) (dotslash at snosoft.com (KF))
FreeBSD Security Advisory FreeBSD-SA-03:08.realpath (security-advisories at freebsd.org (FreeBSD Security Advisories))
Administrivia: Scheduled Maintenance 2003-08-08 (len at netsys.com (Len Rose))
MDKSA-2003:081 - Updated postfix packages fix remote DoS (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:082 - Updated php packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
wu-ftpd-2.6.2 off-by-one remote exploit. (xploit at hackermail.com (dong-h0un U))
[inbox] Re: Reacting to a server compromise (peter at trusteddebian.org (Peter Busser))
Re: Reacting to a server compromise (richard at tccnet.co.uk (Richard Stevens))
MDKSA-2003:081 - Updated postfix packages fix remote DoS (lcamtuf at ghettot.org (Michal Zalewski))
Microsoft win2003server phone home (b240503 at gyrniff.dk (gyrniff))
Re: Reacting to a server compromise (frank at chariot.net.au (Frank Bruzzaniti))
RPC DCOM + Kungfoo (joey2cool at yahoo.com (Joey))
Microsoft win2003server phone home (memoxyde at monet.no (martin scherer))
Recycle Bin Unavailability of Service (admin at securetarget.net (Kaveh Mofidi))
Microsoft win2003server phone home (seclistaddress at yahoo.com (manohar singh))
SuSE Security Announcement: postfix (SuSE-SA:2003:033) (krahmer at suse.de (Sebastian Krahmer))
f-prot not catching mimail ? (mike at sentex.net (Mike Tancsa))
[RHSA-2003:251-01] New postfix packages fix security issues. (bugzilla at redhat.com (bugzilla@...hat.com))
MS03-26 and Windows NT4.0 (curiositov at hotmail.com (Curious ByStander))
[TURBOLINUX SECURITY INFO] 04/Aug/2003 (security-announce at turbolinux.co.jp (Turbolinux))
Microsoft win2003server phone home (headhoncho at subverter.net (Mike Garegnani))
Microsoft win2003server phone home (orochford at cybermancer.org (Orochford))
Macromedia DW MX PHP Authentication Suit Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
MS03-26 and Windows NT4.0 (fw at deneb.enyo.de (Florian Weimer))
Recycle Bin Unavailability of Service (mbassett at omaha.com (Bassett, Mark))
[inbox] Re: Reacting to a server compromise (purdy at tecman.com (Curt Purdy))
Reacting to a server compromise (Brad.Bemis at airborne.com (Brad Bemis))
Oh no - the feds are on to us :-) (symbiot at elitemail.org (symbiot))
Re: Reacting to a server compromise (dufresne at winternet.com (Ron DuFresne))
Reacting to a server compromise (Brad.Bemis at airborne.com (Brad Bemis))
Reacting to a server compromise (Jones.David.H at principal.com (Jones, David H))
Recycle Bin Unavailability of Service (memoxyde at monet.no (martin scherer))
Re: FW: Please investigate (KMM6769685V17014L0KM) (mcw at wcd.se (mcw@....se))
Microsoft win2003server phone home (mattmurphy at kc.rr.com (Matthew Murphy))
NetBSD Security Advisory 2003-010: remote panic in OSI networking code (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2003-011: off-by-one error in realpath(3) (security-officer at NetBSD.org (NetBSD Security Officer))
[inbox] Re: Reacting to a server compromise (purdy at tecman.com (Curt Purdy))
MS Security Bulletin doing email harvesting? (kdurron at hotmail.com (Kyp Durron))
Microsoft win2003server phone home (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[inbox] Re: Reacting to a server compromise (purdy at tecman.com (Curt Purdy))
[inbox] Re: Reacting to a server compromise (purdy at tecman.com (Curt Purdy))
Re: Reacting to a server compromise (booger at unixclan.net (security snot))
Re: Why it is posted as link... (avalon at caligula.anu.edu.au (Darren Reed))
[ESA-20030804-019] 'postfix' Remote denial-of-service. (security at guardiandigital.com (EnGarde Secure Linux))
MS Security Bulletin doing email harvesting? (rms at computerbytesman.com (Richard M. Smith))
Microsoft win2003server phone home (jasonc at science.org (Jason Coombs))
[inbox] Re: Reacting to a server compromise (dufresne at winternet.com (Ron DuFresne))
Re: Reacting to a server compromise (madsaxon at direcway.com (madsaxon))
SV: Re: Reacting to a server compromise (memoxyde at monet.no (martin scherer))
[Updated]: Most Important Vulnerabilities - July 2003 (sintraq at sintelli.com (Sintraq))
MS Security Bulletin doing email harvesting? (pauls at utdallas.edu (Schmehl, Paul L))
f-prot not catching mimail ? (psz at maths.usyd.edu.au (Paul Szabo))
Microsoft win2003server phone home (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Reacting to a server compromise (avalon at caligula.anu.edu.au (Darren Reed))
Oh no - the feds are on to us :-) (se_cur_ity at hotmail.com (morning_wood))
Notepad popups in Internet Explorer and Outlook (rms at computerbytesman.com (Richard M. Smith))
off-by-one error in realpath(3) (list at hardlined.com (Shanphen Dawa))
f-prot not catching mimail ? (aditya at mail15.com (Aditya))
[RHSA-2003:251-01] New postfix packages fix security issues. (bugzilla at redhat.com (bugzilla@...hat.com))
f-prot not catching mimail ? (psz at maths.usyd.edu.au (psz@...hs.usyd.edu.au))
Re: Reacting to a server compromise (avalon at caligula.anu.edu.au (Darren Reed))
RPC DCOM + Kungfoo (joey2cool at yahoo.com (Joey))
NetBSD Security Advisory 2003-011: off-by-one error in realpath(3) (security-officer at NetBSD.org (NetBSD Security Officer))
off-by-one error in realpath(3) (list at hardlined.com (Shanphen Dawa))
+++++SPAM+++++ RPC DCOM + Kungfoo (joey2cool at yahoo.com (Joey))
MDKSA-2003:081 - Updated postfix packages fix remote DoS (lcamtuf at ghettot.org (Michal Zalewski))

August 5 (49 messages)

Microsoft win2003server phone home (gaurav at e2-labs.com (Gaurav Kumar))
Microsoft win2003server phone home (gaurav at e2-labs.com (Gaurav Kumar))
off-by-one error in realpath(3) (nodialtone at comcast.net (Byron Copeland))
Re: FW: Please investigate (KMM6769685V17014L0KM) (dotslash at snosoft.com (KF))
[SECURITY] [DSA-364-1] New man-db packages fix buffer overflows, arbitrary command execution (debian-security-announce at lists.debian.org (debian-security-anno…)
HTML FORMATED MAIL ( ie - oe - html ) bgsound local file - ding? (se_cur_ity at hotmail.com (morning_wood))
Notepad popups in Internet Explorer and Outlook (IT at Custersoft.de (IT@...tersoft.de))
HTML FORMATED MAIL ( ie - oe - html ) bgsou nd local file - ding? (JThomas at poweronemedia.com (Joshua Thomas))
Administrivia: Archives Rebuilt - Bad JuJu (len at netsys.com (Len Rose))
[SECURITY] [DSA-358-3] New kernel packages fix potential "oops" (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
f-prot not catching mimail ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Administrivia: Archives Rebuilt - Bad JuJu (nodialtone at comcast.net (Byron Copeland))
Re: Reacting to a server compromise (infotek at datasync.com (Jason Ellison))
f-prot not catching mimail ? (psz at maths.usyd.edu.au (Paul Szabo))
Re: Reacting to a server compromise (dbailey27 at ameritech.net (northern snowfall))
HTML FORMATED MAIL ( ie - oe - html ) bgsound local file - ding? (se_cur_ity at hotmail.com (morning_wood))
HTML FORMATED MAIL ( ie - oe - html ) bgsound local file - ding? (rwm8 at CSE.MsState.EDU (Robert Wesley McGrew))
RPC DCOM Patches (devnull at iprimus.com.au (devnull@...imus.com.au))
Scanning for DCOM & fingerprinting Windows Me (fw at deneb.enyo.de (Florian Weimer))
Reacting to a server compromise (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
(no subject) (harshul at ealcatraz.com (Harshul Nayak (ealcatraz)))
[inbox] Re: Reacting to a server compromise (lcamtuf at coredump.cx (Michal Zalewski))
vulnrability for dummy 101 (auto94042 at hushmail.com (brent))
[roy@...mess.com: TLD nameserver time survey.] (len at netsys.com (Len Rose))
[sec-labs] Zone Alarm Device Driver vulnerability (noreply at sec-labs.hack.pl (sec-labs team))
Full Disclosure Awards (m0rtis at adelphia.net (Mortis))
FreeBSD Security Advisory FreeBSD-SA-03:08.realpath [REVISED] (security-advisories at freebsd.org (FreeBSD Security Advisories))
[SECURITY] [DSA-358-2] New kernel packages fix potential "oops" (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
AW: How to easily bypass a firewall... (vogt at hansenet.com (vogt@...senet.com))
(no subject) (crypto at clouddancer.com (Aron Nimzovitch))
Local Vulnerability in IBM DB2 7.1 db2job binary (pask at cmlc.upv.es (pask@...c.upv.es))
Slight privilege elevation from bin to root in IBM DB2 7.1 - 8.1 all binaries (pask at cmlc.upv.es (pask@...c.upv.es))
�Bruce Schneir no intelligente? (lorenzofaggot at hushmail.com (Lorenzo Figueroa-Acuna-Gonzales-Garcia-Ortiz-Trujillo))
Vulnerability in TightVNC/Windows prior Version 1.2.9 (olaf.hahn at qsc.de (Olaf Hahn))
help (pappgeza at tolna.net (Papp Geza))
f-prot not catching mimail ? (now fixed) (mike at sentex.net (Mike Tancsa))
SV: help (memoxyde at monet.no (martin scherer))
Full Disclosure Awards (martin at hardlined.com (Martin Ekendahl))
Reacting to a server compromise (david.hayes at mci.com (David Hayes))
Full Disclosure Awards (madsaxon at direcway.com (madsaxon))
RE: ¿Bruce Schneir no intelligente? (jasonc at science.org (Jason Coombs))
Reacting to a server compromise (dufresne at winternet.com (Ron DuFresne))
Automating patch deployment (GKPeek at AllstateTicketing.com (George Peek))
Automating patch deployment (mjohnson at nmcr.com (Johnson, Mark))
Automating patch deployment (jheidtke at fmlh.edu (Jerry Heidtke))
Automating patch deployment (dlpassport at s2access.com (LaRose, Dallas))
Automating patch deployment (offthecuff at lineone.net (Andy Cuff [talisker]))
Hard drive images (craig at strong-box.net (Craig Pratt))
Re: ¿Bruce Schneir no intelligente? (jeremiah at nur.net (Jeremiah Cornelius))

August 6 (28 messages)

Automating patch deployment (se_cur_ity at hotmail.com (morning_wood))
[inbox] Re: Hard drive images (purdy at tecman.com (Curt Purdy))
[inbox] Re: Reacting to a server compromise (purdy at tecman.com (Curt Purdy))
IRC / Fyle the "Script Kiddy" (beavis_design at telus.net (Export))
[inbox] Re: Reacting to a server compromise (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
reply to me previous post (OT) (beavis_design at telus.net (Export))
Hard drive images (ldreamer at pisem.net (ldreamer))
Call for discussion (jasonc at science.org (Jason Coombs))
reply to me previous post (OT) (beavis_design at telus.net (Export))
[SECURITY] [DSA-366-1] New eroaster packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.…)
[SECURITY] [DSA-365-1] New phpgroupware package fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
Hard drive images (madsaxon at direcway.com (madsaxon))
Call for discussion (adam at hif.hu (Szilveszter Adam))
Re: Full Disclosure Awards (madduck at madduck.net (martin f krafft))
Re: Full Disclosure Awards (memoxyde at monet.no (memo))
[inbox] Re: Reacting to a server compromise (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
Automating patch deployment (chows at ozemail.com.au (gregh))
Automating patch deployment (mbassett at omaha.com (Bassett, Mark))
[ESA-20030806-020] 'stunnel' signal handler race denial-of-service. (security at guardiandigital.com (EnGarde Secure Linux))
[inbox] Re: Reacting to a server compromise (lcamtuf at coredump.cx (Michal Zalewski))
msn scan?? (paulniranjan at india.com (paulniranjan@...ia.com))
Automating patch deployment (pauls at utdallas.edu (Schmehl, Paul L))
[despammed] RE: Automating patch deployment (LevinsonK at STARS-SMI.com (Levinson, Karl))
Automating patch deployment (david.vincent at mightyoaks.com (David Vincent))
Samba Server Scannen (NRG-X at gmx.net (NRG-X))
Automating patch deployment (AltheideC at nv.doe.gov (Altheide, Cory B.))
RE: Automating patch deployment (egrau at hungmao.com (Erick Grau))
buffer overflow in Indiatimes Messenger (gaurav at e2-labs.com (Gaurav Kumar))

August 7 (52 messages)

f-prot not catching mimail ? (psz at maths.usyd.edu.au (Paul Szabo))
f-prot not catching mimail ? (nik at aboleo.net (Nik Reiman))
Administrivia: Duplicate Messages (len at netsys.com (Len Rose))
Ankit Fadia bullshit? (cutthroat_truth at yahoo.co.uk (Cutthroat Truth))
Ankit Fadia bullshit? (se_cur_ity at hotmail.com (morning_wood))
Ankit Fadia bullshit? (cutthroat_truth at yahoo.co.uk (Cutthroat Truth))
Administrivia: Duplicate Messages (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Ankit Fadia bullshit? (matthew at textbox.net (404))
Ankit Fadia bullshit? (f0x at squirrelsoup.net (Gabe Arnold))
Ankit Fadia bullshit? (IT at Custersoft.de (IT@...tersoft.de))
HOON: at&t-2-shellcode (nd at felinemenace.org (ned))
Automating patch deployment (jstutton at yahoo.com (jeff tutton))
Re: Full Disclosure Awards (mjcarter at ihug.co.nz (Mike))
defeating Lotus Sametime "encryption" (mycelium at hushmail.com (Mycelium))
DCOM Worm/scanner/autorooter !!! (alf1num3rik at yahoo.com (Stephen))
Fwd: Re: Ankit Fadia bullshit? (cutthroat_truth at yahoo.co.uk (Cutthroat Truth))
Ankit Fadia bullshit? (cutthroat_truth at yahoo.co.uk (Cutthroat Truth))
dupes (mbassett at omaha.com (Bassett, Mark))
dupes (security at dylanic.de (Michael Renzmann))
dupes (dotslash at snosoft.com (KF))
Red Bull Worm (joel at helgeson.com (Joel R. Helgeson))
Red Bull Worm (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
Red Bull Worm (eckman at umn.edu (Brian Eckman))
Vulnerability Disclosure Debate (gridrun at likes.smart-girlies.org (gridrun))
Red Bull Worm (cheekypeople at sec33.com (CHeeKY))
dupes (mattmurphy at kc.rr.com (Matthew Murphy))
Red Bull Worm (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Red Bull Worm (joel at helgeson.com (Joel R. Helgeson))
Vulnerability Disclosure Debate (joel at helgeson.com (Joel R. Helgeson))
Red Bull Worm (rabbit at wnonline.net (Adam))
Red Bull Worm (eckman at umn.edu (Brian Eckman))
Vulnerability Disclosure Debate (jeremiah at nur.net (Jeremiah Cornelius))
Vulnerability Disclosure Debate (fw at deneb.enyo.de (Florian Weimer))
Red Bull Worm (dotslash at snosoft.com (KF))
Vulnerability Disclosure Debate (cesarc56 at yahoo.com (Cesar))
Red Bull Worm (mbassett at omaha.com (Bassett, Mark))
Vulnerability Disclosure Debate (fw at deneb.enyo.de (Florian Weimer))
Incident response kit? Really OT, but need some help. (akloster at spp.org (Alan Kloster))
Blink IDS? (Anthony_Turk at ecmsi.com (Turk, Anthony))
Notepad popups in Internet Explorer and Outlook (guninski at guninski.com (Georgi Guninski))
Vulnerability Disclosure Debate (geoincidents at getinfo.org (Geoincidents))
Vulnerability Disclosure Debate (guninski at guninski.com (Georgi Guninski))
Red Bull Worm (gml at phrick.net (gml))
Red Bull Worm (eckman at umn.edu (Brian Eckman))
Ankit Fadia bullshit? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Blink IDS? (schenette at eeye.com (Stephan Chenette))
Incident response kit? Really OT, but need some help. (robadam at cisco.com (Rob Adams))
Vulnerability Disclosure Debate (chows at ozemail.com.au (gregh))
Ankit Fadia bullshit? (se_cur_ity at hotmail.com (morning_wood))
4nk1t F4d14 4nd B1ll G4yt3s T0rn 4p4rt 53r135 p4rt 0n3 1 (cutthroat_truth at yahoo.co.uk (Cutthroat Truth))
Incident response kit? Really OT, but need some help. (akatosh at rains.net (Akatosh))
Vulnerability Disclosure Debate (mattmurphy at kc.rr.com (Matthew Murphy))

August 8 (42 messages)

Vulnerability Disclosure Debate (DARREN.L.BENNETT at saic.com (Darren Bennett))
Vulnerability Disclosure Debate (mattmurphy at kc.rr.com (Matthew Murphy))
Vulnerability Disclosure Debate (mattmurphy at kc.rr.com (Matthew Murphy))
Vulnerability Disclosure Debate (joel at helgeson.com (Joel R. Helgeson))
Fwd: Re: Re: Full Disclosure Awards (steve at stevesworld.hopto.org (Stephen Clowater))
Vulnerability Disclosure Debate (mattmurphy at kc.rr.com (Matthew Murphy))
Incident response kit? Really OT, but need some help. (dougharold at lycos.com (Doug Harold))
Vulnerability Disclosure Debate (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Notepad popups in Internet Explorer and Outlook (rms at computerbytesman.com (Richard M. Smith))
DCOM Worm/scanner/autorooter !!! (joey2cool at yahoo.com (Joey))
commercially spy software (Ferdi.Oeztuerk at wincor-nixdorf.com (Ferdi Öztürk))
DCOM Worm/scanner/autorooter !!! (wrees at htoc.com (Warren Rees))
DCOM Worm/scanner/autorooter !!! (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
Administrivia: Upcoming Outage Reminder (johnc at grok.org.uk (John Cartwright))
Generic security problems in online games and applications (mmo at remote-exploit.org (mmo@...ote-exploit.org))
Notepad popups in Internet Explorer and Outlook (steve at stevesworld.hopto.org (Stephen Clowater))
commercially spy software (rms at computerbytesman.com (Richard M. Smith))
[SECURITY] [DSA-364-2] New man-db packages fix problem with DSA-364-1 (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-368-1] New xpcd packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-367-1] New xtokkaetama packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Disclose a bug, do not pass go, go directly to jail (rms at computerbytesman.com (Richard M. Smith))
Disclose a bug, do not pass go, go directly to jail (steve at stevesworld.hopto.org (Stephen Clowater))
Disclose a bug, do not pass go, go directly to jail (rms at computerbytesman.com (Richard M. Smith))
Disclose a bug, do not pass go, go directly to jail (steve at stevesworld.hopto.org (Stephen Clowater))
Automating patch deployment (rooster at attrition.org (Rooster))
Vulnerability Disclosure Debate (crypto at clouddancer.com (Aron Nimzovitch))
[RHSA-2003:255-01] up2date improperly checks GPG signature of packages (bugzilla at redhat.com (bugzilla@...hat.com))
Disclose a bug, do not pass go, go directly to jail (se_cur_ity at hotmail.com (morning_wood))
Disclose a bug, do not pass go, go directly to jail (steve at stevesworld.hopto.org (Stephen Clowater))
Vulnerability Disclosure Debate (gridrun at likes.smart-girlies.org (gridrun))
Vulnerability Disclosure Debate (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RPC DCOM footprints (delacruzma at msn.com (Michael De La Cruz))
RE: Secure.dcom.exe (opticfiber at topsight.net (opticfiber))
Re: Secure.dcom.exe (opticfiber at topsight.net (opticfiber))
Vulnerability Disclosure Debate (dhtml at hush.com (dhtml@...h.com))
Vulnerability Disclosure Debate (crypto at clouddancer.com (Aron Nimzovitch))
Vulnerability Disclosure Debate (crypto at clouddancer.com (Aron Nimzovitch))
Vulnerability Disclosure Debate (jasonc at science.org (Jason Coombs))
Re: Secure.dcom.exe (wcc at techmonkeys.org (Wcc))
Vulnerability Disclosure Debate (mfratto at nwc.com (Mike Fratto))
Re: Vulnerability Disclosure Debate (coley at mitre.org (Steven M. Christey))
PostNuke Downloads & Web_Links ttitle variable XSS (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))

August 9 (12 messages)

Vulnerability Disclosure Debate (jasonc at science.org (Jason Coombs))
Vulnerability Disclosure Debate (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
BGSOUND - redux (se_cur_ity at hotmail.com (morning_wood))
[SECURITY] [DSA-370-1] New pam-pgsql packages fix format string vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
[SECURITY] [DSA-369-1] New zblast packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
BGSOUND - redux (jimmys at myesn.com (Jimmy Sadri))
Re: Vulnerability Disclosure Debate (guninski at guninski.com (Georgi Guninski))
List Charter (johnc at grok.org.uk (John Cartwright))
RPC DCOM footprints (harqman at btopenworld.com (harq deman))
FWD: [teso-announce] new release: objobf 0.5 (kam at aversion.net (kam))
MS03-029 / Q823803 and not-only-RRAS Problems (daniele at muscetta.com (Daniele Muscetta))
[VulnDiscuss] FWD: [teso-announce] new release: objobf 0.5 (kam at aversion.net (kam))

August 10 (17 messages)

[SECURITY] [DSA-361-2] New kdelibs-crypto packages fix multiple vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.de…)
[normal] RE: Re: Secure.dcom.exe (opticfiber at topsight.net (opticfiber))
RPC DCOM footprints - Symantec sucks? (se_cur_ity at hotmail.com (morning_wood))
Cox is blocking port 135 (joey2cool at yahoo.com (Joey))
DCOM Worm/scanner/autorooter !!! (joey2cool at yahoo.com (Joey))
Re: DCOM Worm/scanner/autorooter !!! (alf1num3rik at yahoo.com (Stephen))
Ankit Fadia bullshit? (matthew at textbox.net (404))
TCP ports 1025-1030 and DCOM exploit (support at mmicman.com (Edward W. Ray))
+++++SPAM+++++ TCP ports 1025-1030 and DCOM exploit (support at mmicman.com (Edward W. Ray))
[normal] RE: Re: Secure.dcom.exe (opticfiber at topsight.net (opticfiber))
+++++SPAM+++++ TCP ports 1025-1030 and DCOM exploit; false positive (support at mmicman.com (Edward W. Ray))
TCP ports 1025-1030 and DCOM exploit (joey2cool at yahoo.com (Joey))
Cox is blocking port 135 - off topic (listuser at seifried.org (Kurt Seifried))
Re: Cox is blocking port 135 - off topic (madduck at madduck.net (martin f krafft))
Cox is blocking port 135 - off topic (pdt at jackhammer.org (pdt@...khammer.org))
Cox is blocking port 135 - off topic (harqman at btopenworld.com (harq deman))
Cox is blocking port 135 - off topic (joey2cool at yahoo.com (Joey))

August 11 (61 messages)

Cox is blocking port 135 - off topic (bugtracker505 at comcast.net (bugtracker505@...cast.net))
phpWebSite SQL Injection & DoS & XSS Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Cox is blocking port 135 - off topic (nick at virus-l.demon.co.uk (Nick FitzGerald))
Cox is blocking port 135 - off topic (volkam at comcast.net (Anthony Clark))
Cox is blocking port 135 - off topic (joey2cool at yahoo.com (Joey))
Cox is blocking port 135 - off topic (rkingsla at cox.net (Rick Kingslan))
Cox is blocking port 135 - off topic (volkam at comcast.net (Anthony Clark))
commercially spy software (nick at virus-l.demon.co.uk (Nick FitzGerald))
FreeBSD Security Advisory FreeBSD-SA-03:09.signal (security-advisories at freebsd.org (FreeBSD Security Advisories))
FreeBSD Security Advisory FreeBSD-SA-03:10.ibcs2 (security-advisories at freebsd.org (FreeBSD Security Advisories))
[MOOT INDUSTRIES] AIM Packet Injection for fun and propfit (m00m00 at singapore.net (Moot Industries))
[RHSA-2003:241-01] Updated ddskk packages fix temporary file vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:235-01] Updated KDE packages fix security issue (bugzilla at redhat.com (bugzilla@...hat.com))
LotusSametime 3.0 == vulnerable. Lotus lied (mycelium at hushmail.com (Mycelium))
Cox is blocking port 135 - off topic (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
Roxy / Randex.D client info needed (marc at marcd.org (Marc))
RE: FW: defeating Lotus Sametime "encryption" (gatekeep at mts.net (Ron Rempel))
Notepad popups in Internet Explorer and Out look (LevinsonK at STARS-SMI.com (Levinson, Karl))
Microsoft Internet Explorer about:blank Cross Site Scripting (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Microsoft Internet Explorer about:blank Cross Site Scripting (rms at computerbytesman.com (Richard M. Smith))
Cox is blocking port 135 - off topic (joey2cool at yahoo.com (Joey))
DCOM (pmarsh at nmefdn.org (Paul Marsh))
Cox is blocking port 135 - off topic (harqman at btopenworld.com (harq deman))
phpWebSite SQL Injection & DoS & XSS Vulnerabilities (seclists at violating.us (Jack Whitsitt (jofny)))
DCOM (pmarsh at nmefdn.org (Paul Marsh))
Notepad popups in Internet Explorer and Out look (steve at stevesworld.hopto.org (Stephen Clowater))
[Security] [vendor-sec] Re: Re: Vulnerability Disclosure Debate (sarnold at wirex.com (Seth Arnold))
Windows RPC/DCOM - MSBlast Worm (craig at lurhq.com (Craig Baltes))
DCOM Worm? (orniter at yahoo.com (Carl Sager))
AW: DCOM (rdo at tronet.de (Roman Doerr))
DCOM (jasonc at science.org (Jason Coombs))
rpc worm (jwiens at nersp.nerdc.ufl.edu (Jordan Wiens))
phpWebSite SQL Injection & DoS & XSS Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
DCOM Worm? (matt.bell at ladarling.com (Matt Bell))
DCOM Worm released (joey2cool at yahoo.com (Joey))
DCOM Worm? (danielh at loudcloud.com (Daniel Harrison))
msblast.exe (david.vincent at mightyoaks.com (David Vincent))
DCOM (dbx at home.nl (DBX @HOME))
phpWebSite SQL Injection & DoS & XSS Vulnerabilities (dg49379 at tux.appstate.edu (Darren Greene))
msblast (harqman at btopenworld.com (harq deman))
DCOM Worm? (orniter at yahoo.com (Carl Sager))
DCOM Worm released (dopacki at adotout.com (Dennis Opacki))
rpc worm (jasonc at science.org (Jason Coombs))
DCOM Worm released (dopacki at adotout.com (Dennis Opacki))
msblast.exe (scottf at uark.edu (Scott Fendley))
DCOM Worm released (jwiens at nersp.nerdc.ufl.edu (Jordan Wiens))
rpc worm (jwiens at nersp.nerdc.ufl.edu (Jordan Wiens))
DCOM Worm released (marc at eeye.com (Marc Maiffret))
msblast.exe (rober at videotron.ca (Robert Ersoni))
DCOM Worm released (panther- at gmx.de (Nils))
DCOM Worm released (daniel_clemens at autism.birmingham-infragard.org (daniel uriah clemens))
DCOM Worm? (p00lshark at hushmail.com (p00lshark@...hmail.com))
New Windows worm? (dickcox at quepasa.com (dickcox@...pasa.com))
KaHT II - Massive RPC Dcom exploit.. (at4r at hotmail.com (at4r ins4n3))
DCOM Worm? (se_cur_ity at hotmail.com (morning_wood))
DCOM Worm released (ragdelaed at catholic.org (ragdelaed@...holic.org))
DCOM (joey2cool at yahoo.com (Joey))
RE: FW: defeating Lotus Sametime "encryption" (mycelium at hushmail.com (Mycelium))
DCOM Worm? (tobias.heide at daasi.de (Tobias Heide))
DCOM (micah at style.net (/m))
RE: First Dcom Worm on wild (fulldisclosure at catholic.org (fulldisclosure@...holic.org))

August 12 (135 messages)

DCOM Worm released (gml at phrick.net (gml))
msblast (gml at phrick.net (gml))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (avalon at caligula.anu.edu.au (Darren Reed))
i wonder (bscabl at nycap.rr.com (bscabl))
rpc worm (jheidtke at fmlh.edu (Jerry Heidtke))
DCOM Worm? (orniter at yahoo.com (Carl Sager))
msblast.exe (security at raguenaud.org (Cedric Raguenaud))
New Windows worm? (AltheideC at nv.doe.gov (Altheide, Cory B.))
New Windows worm? (nick at virus-l.demon.co.uk (Nick FitzGerald))
what to do (zorkshin at tampabay.rr.com (Justin Shin))
DCOM Worm? (jwiens at nersp.nerdc.ufl.edu (Jordan Wiens))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (mattmurphy at kc.rr.com (Matthew Murphy))
New Windows worm? (psz at maths.usyd.edu.au (Paul Szabo))
rpc worm (arcturus at secrev.net (Arcturus))
what to do (f0x at squirrelsoup.net (Gabe Arnold))
Windows RPC/DCOM - MSBlast Worm (pauls at utdallas.edu (Paul Schmehl))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (gbunch at gmx.net (Gerald Cody Bunch))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (gbunch at gmx.net (Gerald Cody Bunch))
rpc worm (villain at protonic.com (ViLLaN))
what to do (tzu at plepstudios.com (akbara))
Symantec has released an MSBLast removal tool. (villain at protonic.com (ViLLaN))
aside: worm vs. worm? (homa0016 at umn.edu (Andrew J Homan))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (somatose at cox.net (Chris Garrett))
what to do (Calvyn at stny.rr.com (Calvyn))
Symantec has released an MSBLast removal tool. (gml at phrick.net (gml))
aside: worm vs. worm? (arian.evans at bigfoot.com (Arian J. Evans))
Microsoft Internet Explorer about:blank Cross Site Scripting (chows at ozemail.com.au (gregh))
aside: worm vs. worm? (gml at phrick.net (gml))
aside: worm vs. worm? (nick at virus-l.demon.co.uk (Nick FitzGerald))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (villain at protonic.com (ViLLaN))
what to do (gml at phrick.net (gml))
what to do (arian.evans at bigfoot.com (Arian J. Evans))
aside: worm vs. worm? (gml at phrick.net (gml))
Symantec has released an MSBLast removal tool. (scottf at uark.edu (Scott Fendley))
Symantec has released an MSBLast removal tool. (bvi at lair.moria.org (Barry Irwin))
attacks shutting down windows machines? (vogt at hansenet.com (vogt@...senet.com))
RE: Ooops-->was-->what to do (Arian.Evans at fishnetsecurity.com (Evans, Arian))
what to do (irwanhadi at phxby.com (Irwan Hadi))
DCOM (rocco.s at telstra.com (rocco.s))
attacks shutting down windows machines? (gavin.henry at magicfx.co.uk (Gavin Henry))
attacks shutting down windows machines? (mjcarter at ihug.co.nz (Mike))
DCOM (mjcarter at ihug.co.nz (Mike))
aside: worm vs. worm? (avalon at caligula.anu.edu.au (Darren Reed))
[SECURITY] [DSA-371-1] New perl packages fix cross-site scripting (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
RE: FW: defeating Lotus Sametime "encryption" (mycelium at hushmail.com (Mycelium))
AW: attacks shutting down windows machines? (vogt at hansenet.com (vogt@...senet.com))
aside: worm vs. worm? (tzu at plepstudios.com (akbara))
[TURBOLINUX SECURITY INFO] 12/Aug/2003 (security-announce at turbolinux.co.jp (Turbolinux))
aside: worm vs. worm? (joey2cool at yahoo.com (Joey))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (se_cur_ity at hotmail.com (morning_wood))
[fd] AW: attacks shutting down windows machines? (mike at blakogre.com (Mike Vasquez))
aside: worm vs. worm? (mjcarter at ihug.co.nz (Mike))
Windows Dcom Worm planned DDoS (andrewt at nmh.co.za (Andrew Thomas))
MSblast worm (jasper599 at hotmail.com (Jasper Blackwell))
MSblast worm (jdenoy at digital-connexion.info (Johan Denoyer))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (richard at tccnet.co.uk (Richard Stevens))
Windows Dcom Worm planned DDoS (cseagle at redshift.com (Chris Eagle))
AW: [fd] AW: attacks shutting down windows mach ines? (vogt at hansenet.com (vogt@...senet.com))
MSblast worm (simon at bsdbox.co.uk (Simon Glassman))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (somatose at cox.net (Chris Garrett))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (mjcarter at ihug.co.nz (Mike))
Windows Dcom Worm planned DDoS (nick at virus-l.demon.co.uk (Nick FitzGerald))
Windows Dcom Worm planned DDoS (andrewt at nmh.co.za (Andrew Thomas))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (richard at tccnet.co.uk (Richard Stevens))
MSblast worm (Mike.Keighley at lexicon.co.uk (Mike.Keighley@...icon.co.uk))
Windows Dcom Worm planned DDoS (andrew at generator.co.za (Andrew Thomas))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (andrews at mis-cds.com (Andrew Simmons))
MSblast worm (nick at virus-l.demon.co.uk (Nick FitzGerald))
[normal] RE: Windows Dcom Worm planned DDoS (opticfiber at topsight.net (opticfiber))
Windows Dcom Worm planned DDoS (liedekef at pandora.be (Franky Van Liedekerke))
MSblast worm (dotslash at snosoft.com (KF))
aside: worm vs. worm? (steve at stevesworld.hopto.org (Stephen Clowater))
dobble-clicking msblast.exe (madduck at madduck.net (martin f krafft))
Windows Dcom Worm planned DDoS (gszappanos at virusbuster.hu (Szappanos Gábor (VBuster)))
aside: worm vs. worm? (booger at unixclan.net (security snot))
aside: worm vs. worm? (andrew at generator.co.za (Andrew Thomas))
Re: [normal] RE: Windows Dcom Worm planned DDoS (madduck at madduck.net (martin f krafft))
aside: worm vs. worm? (steve at stevesworld.hopto.org (Stephen Clowater))
[normal] RE: Windows Dcom Worm planned DDoS (james.greenhalgh at worldpay.com (James Greenhalgh))
aside: worm vs. worm? (mfratto at nwc.com (Mike Fratto))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (rlanguy at hotmail.com (Lan Guy))
MSblast worm (tom at doctorunix.com (tom@...torunix.com))
MSblast worm (mattmurphy at kc.rr.com (Matthew Murphy))
short Blaster propagation algorithm analysis (vogt at hansenet.com (vogt@...senet.com))
[normal] RE: Windows Dcom Worm planned DDoS (se_cur_ity at hotmail.com (morning_wood))
Windows Dcom Worm planned DDoS (jeremiah at nur.net (Jeremiah Cornelius))
Windows Dcom Worm planned DDoS (mattmurphy at kc.rr.com (Matthew Murphy))
[normal] RE: Windows Dcom Worm planned DDoS (DStark at forseon.com (DStark@...seon.com))
SuSE Security Announcement: kernel (SuSE-SA:2003:034) (krahmer at suse.de (Sebastian Krahmer))
aside: worm vs. worm? (booger at unixclan.net (security snot))
Re: [normal] RE: Windows Dcom Worm planned DDoS (madduck at madduck.net (martin f krafft))
short Blaster propagation algorithm analysis (marc at eeye.com (Marc Maiffret))
future happenings.. (kalleth at nildram.co.uk (Kalleth))
Re: [normal] RE: Windows Dcom Worm planned DDoS (marc at eeye.com (Marc Maiffret))
MSBlast write up by Eeye (akloster at spp.org (Alan Kloster))
CERT Advisory CA-2003-20 W32/Blaster worm (fwd) (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
Windows Dcom Worm planned DDoS (killedbythoughts at mindcrime.net (Sebastian Niehaus))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (Arian.Evans at fishnetsecurity.com (Evans, Arian))
RE: Automating patch deployment (jeffrsonk at ksplastic.com (Krogh, Jefferson))
36 more messages

August 13 (116 messages)

(forw) [f0x@...irrelsoup.net: Re: Blaster: will it spread without tftp?] (se_cur_ity at hotmail.com (morning_wood))
Blaster: will it spread without tftp? (dsoeder at eeye.com (Derek Soeder))
Windows Dcom Worm planned DDoS (nick at virus-l.demon.co.uk (Nick FitzGerald))
::::: future happenings.. (gml at phrick.net (gml))
smarter dcom worm (gml at phrick.net (gml))
Phrack 61 Finally Released!! (dotslash at snosoft.com (KF))
PHRACK 61 IS OUT ! (del at hush.ai (del))
aside: worm vs. worm? (gml at phrick.net (gml))
PHRACK 61 IS OUT ! (dotslash at snosoft.com (KF))
MDKSA-2003:082-1 - Updated php packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Blaster: will it spread without tftp? (nick at virus-l.demon.co.uk (Nick FitzGerald))
smarter dcom worm (j at pureftpd.org (Jedi/Sector One))
PacBell Internet blocked port 135 (caferace at well.com (Jim Race))
smarter dcom worm (marc at eeye.com (Marc Maiffret))
Blaster: will it spread without tftp? (r.fulton at auckland.ac.nz (Russell Fulton))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (dennish at comcast.net (Dennis Heaton))
PHRACK 61 IS OUT ! (gml at phrick.net (gml))
Windows Dcom Worm planned DDoS (wcc at techmonkeys.org (Wcc))
RE: RE: MSblast worm (jasper599 at hotmail.com (Jasper Blackwell))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (gordon.ewasiuk at verizon.net (Gordon Ewasiuk))
dobble-clicking msblast.exe (dowlingg at sullcrom.com (Dowling, Gabrielle))
PacBell Internet blocked port 135 (SecuresDotComs at hotmail.com (SecuresDotComs))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (se_cur_ity at hotmail.com (morning_wood))
smarter dcom worm (edwin at link.net.id (SPAM))
Windows Dcom Worm Killer (xillwillx at yahoo.com (w g))
MSBlast DDoS (jasper599 at hotmail.com (Jasper Blackwell))
MSBLASTER - aka LOVESAN/POZA ? (avalon at caligula.anu.edu.au (Darren Reed))
smarter dcom worm (ksteele at securitypenetration.com (Kerry Steele))
MSBLASTER - aka LOVESAN/POZA ? (Max.Rapaille at nbb.be (Rapaill))
Windows Dcom Worm Killer (joey2cool at yahoo.com (Joey))
Re: Windows Dcom Worm planned DDoS (killedbythoughts at mindcrime.net (Sebastian Niehaus))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (greg-fulldisclosure at nest.cx (Gregory Steuck))
MSBLASTER - aka LOVESAN/POZA ? (cstone at pobox.com (cstone))
MSBLASTER - aka LOVESAN/POZA ? (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
PHP dlopen() -> Fun with apache (and other webservers) (andrewg at felinemenace.org (andrewg@...inemenace.org))
MSBLASTER - aka LOVESAN/POZA ? (avalon at caligula.anu.edu.au (Darren Reed))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (mjcarter at ihug.co.nz (Mike))
DameWare Mini-RC Shatter (ash at felinemenace.org (ash@...inemenace.org))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (nick at virus-l.demon.co.uk (Nick FitzGerald))
Windows Dcom Worm Killer (nick at virus-l.demon.co.uk (Nick FitzGerald))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (richard at tccnet.co.uk (Richard Stevens))
Blaster: will it spread without tftp? (greg-fulldisclosure at nest.cx (Gregory Steuck))
Blaster: will it spread without tftp? (pj7 at hushmail.com (Paul J.))
PHP dlopen() -> Fun with apache (and other (andrewg at felinemenace.org (andrewg@...inemenace.org))
DameWare Mini-RC Shatter (se_cur_ity at hotmail.com (morning_wood))
f-prot not catching mimail ? (dizzy at event-media.de (dizzy))
PHP dlopen() -> Fun with apache (and other (s.esser at e-matters.de (Stefan Esser))
PHP dlopen() -> Fun with apache (and other (andrewg at felinemenace.org (andrewg@...inemenace.org))
PHP dlopen() -> Fun with apache (and other (a.gietl at e-admin.de (Andreas Gietl))
DameWare Mini-RC Shatter (nick at virus-l.demon.co.uk (Nick FitzGerald))
windowsupdate.com (rkwasny at wp.pl (Rafa³ ^^MAg^^ Kwaœny))
MSBlast DDoS (cseagle at redshift.com (Chris Eagle))
what to do (chows at ozemail.com.au (gregh))
recent RPC/DCOM worm thought (deicher at sandia.gov (Eichert, Diana))
windowsupdate.com (a.gietl at e-admin.de (Andreas Gietl))
aside: worm vs. worm? (aditya at mail15.com (Aditya))
what to do (bc_kamikatze at yahoo.de (KaMiKaTzE))
PacBell Internet blocked port 135 (pappgeza at tolna.net (Geysap))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (chows at ozemail.com.au (gregh))
MSBlast DDoS (brobson at fulcrum.com.au (Benjamin M.A. Robson))
aside: worm vs. worm? (andrew at generator.co.za (Andrew Thomas))
windowsupdate.com (kryptos at phreaker.net (Kryptos))
recent RPC/DCOM worm thought (svgn at orbid.be (van Ginderachter Serge (svgn)))
aside: worm vs. worm? (pappgeza at tolna.net (Geysap))
MSBLASTER - aka LOVESAN/POZA ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
PHP dlopen() (andrewg at felinemenace.org (andrewg@...inemenace.org))
windowsupdate.com (andrews at mis-cds.com (Andrew Simmons))
windowsupdate.com (david.vincent at mightyoaks.com (David Vincent))
MSBLASTER - aka LOVESAN/POZA ? (jeremiah at nur.net (Jeremiah Cornelius))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (jeremiah at nur.net (Jeremiah Cornelius))
Upcoming MS chat (john_sec_lists at hotmail.com (John Sec))
smarter dcom worm (jeremiah at nur.net (Jeremiah Cornelius))
next blaster variant on its way (bobbrown at deloitte.com (Brown, Bobby (US - Hermitage)))
Microsoft MCWNDX.OCX ActiveX buffer overflow (trihuynh at zeeup.com (Tri Huynh))
new msblaster on the loose? (david.vincent at mightyoaks.com (David Vincent))
windowsupdate.com (Anthony_Turk at ecmsi.com (Turk, Anthony))
windowsupdate.com (dotslash at snosoft.com (KF))
MSBLASTER - aka LOVESAN/POZA ? (pappgeza at tolna.net (Geysap))
Windows Dcom Worm Killer (r1an at hush.ai (r1an@...h.ai))
Cisco Security Advisory: CiscoWorks Application Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Denial of Service Vulnerability in NFS on IRIX (agent99 at sgi.com (SGI Security Coordinator))
new msblaster on the loose? (devon at lithiumnode.com (Person))
Microsoft MCWNDX.OCX ActiveX buffer overflow (thor at pivx.com (Thor Larholm))
Administrivia: List Contact Changes (len at netsys.com (Len Rose))
smarter dcom worm (gml at phrick.net (gml))
dobble-clicking msblast.exe (gml at phrick.net (gml))
smarter dcom worm (gml at phrick.net (gml))
recent RPC/DCOM worm thought (ksteele at securitypenetration.com (Kerry Steele))
OpenBSD protect windows update ? (geggam692000 at yahoo.com (D B))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (joey2cool at yahoo.com (Joey))
Re: [Dshield] new msblaster on the loose? (jsage at finchhaven.com (John Sage))
(forw) [f0x@...irrelsoup.net: Re: windowsupdate.com] (f0x at squirrelsoup.net (Gabe Arnold))
windowsupdate.com (felipe at dorothea.com.br (Felipe Scuciatto dos Santos))
Firewalls (geoincidents at getinfo.org (Geo.))
windowsupdate.com (llevier at argosnet.com (Laurent LEVIER))
Vulnerability Disclosure Debate (ben at algroup.co.uk (Ben Laurie))
FW: smarter dcom worm (mbassett at omaha.com (Bassett, Mark))
Windows Dcom Worm Killer (xillwillx at yahoo.com (w g))
Microsoft MCWNDX.OCX ActiveX buffer overflow (jasonc at science.org (Jason Coombs))
17 more messages

August 14 (120 messages)

Re: [Dshield] new msblaster on the loose? (jeremiah at nur.net (Jeremiah Cornelius))
Microsoft urging users to buy Harware Firewalls (rms at computerbytesman.com (Richard M. Smith))
DDoS on the 16th - Fail if no DNS resolution? (jason at wittys.com (Jason Witty))
Re: Contents of Full-Disclosure digest (valmont27 at yahoo.com (Valmont vbamont))
New msbalster? (jeremiah at nur.net (Jeremiah Cornelius))
Microsoft urging users to buy Harware Firewalls (nik at aboleo.net (Nik Reiman))
Microsoft urging users to buy Harware Firew alls (AltheideC at nv.doe.gov (Altheide, Cory B.))
Firewalls (dufresne at winternet.com (Ron DuFresne))
DDoS on the 16th - Fail if no DNS resolution? (dbailey27 at ameritech.net (northern snowfall))
[cert-advisory@...t.org: CERT Advisory CA-2003-21 GNU Project FTP Server Compromise] (johnc at grok.org.uk (John Cartwright))
DDoS on the 16th - Fail if no DNS resolution? (avalon at caligula.anu.edu.au (Darren Reed))
Microsoft MCWNDX.OCX ActiveX buffer overflow (mattmurphy at kc.rr.com (Matthew Murphy))
Microsoft urging users to buy Harware Firewalls (rkingsla at cox.net (Rick Kingslan))
Microsoft urging users to buy Harware Firewalls (arny at ats.s.bawue.de (Thilo Schulz))
Firewalls (joey2cool at yahoo.com (Joey))
Microsoft urging users to buy Harware Firewalls (psz at maths.usyd.edu.au (Paul Szabo))
+++++SPAM+++++ RE: Microsoft urging users to buy Harware Firewalls (rkingsla at cox.net (Rick Kingslan))
[SECURITY] [DSA-358-4] New kernel packages fix potential "oops" (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
updated 135/tcp log counter mrtg image (rocco.s at telstra.com (rocco.s))
Microsoft urging users to buy Harware Firewalls (rms at computerbytesman.com (Richard M. Smith))
DDoS on the 16th - Fail if no DNS resolution? (gml at phrick.net (gml))
Microsoft urging users to buy Harware Firewalls (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Windows Dcom Worm Killer and source code (xillwillx at yahoo.com (w g))
DDoS on the 16th - Fail if no DNS resolution? (dbailey27 at ameritech.net (northern snowfall))
DDoS on the 16th - Fail if no DNS resolution? (cseagle at redshift.com (Chris Eagle))
DDoS on the 16th - Fail if no DNS resolution? (cseagle at redshift.com (Chris Eagle))
"MS Blast" Win2000 Patch Download (erc at pobox.com (Ed Carp))
Microsoft urging users to buy Harware Firewalls (avalon at caligula.anu.edu.au (Darren Reed))
Firewalls (cheekypeople at sec33.com (CHeeKY))
DDoS on the 16th - Fail if no DNS resolution? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Microsoft urging users to buy Harware Firewalls (rms at computerbytesman.com (Richard M. Smith))
Microsoft urging users to buy Harware Firewalls (scosol at yahoo.com (Nathan Seven))
Microsoft urging users to buy Harware Firewalls (rms at computerbytesman.com (Richard M. Smith))
Microsoft urging users to buy Harware Firewalls (se_cur_ity at hotmail.com (morning_wood))
DDoS on the 16th - Fail if no DNS resolution? (dsoeder at eeye.com (Derek Soeder))
Microsoft urging users to buy Harware Firew alls (rms at computerbytesman.com (Richard M. Smith))
Microsoft MCIWNDX.OCX ActiveX buffer overflow (trihuynh at zeeup.com (Tri Huynh))
Firewalls (cheekypeople at sec33.com (CHeeKY))
MSBLASTER - aka LOVESAN/POZA ? (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
MSBlast DDoS (kluge at fujitsu.com.au (Steffen Kluge))
Re: updated 135/tcp log counter mrtg image (robert at infoserf.net (Robert Lemos))
Microsoft urging users to buy Harware Firew alls (benjamin at seattlefenix.net (Benjamin Krueger))
new msblaster on the loose? (kane.lightowler at it.alstom.com.au (Kane Lightowler))
ISP's save the Inet from Blaster? (kdurron at hotmail.com (Kyp Durron))
Re: updated 135/tcp log counter mrtg image (rocco.s at telstra.com (rocco.s))
Firewalls (Zach.Forsyth at kiandra.com (Zach Forsyth))
Microsoft urging users to buy Harware Firewalls (daniele at muscetta.com (Daniele Muscetta))
DDoS on the 16th - Fail if no DNS resolution? (llevier at argosnet.com (Laurent LEVIER))
Microsoft urging users to buy Harware Firewalls (jeremiah at nur.net (Jeremiah Cornelius))
ISS Security Brief: 'MS Blast' MSRPC DCOM Worm Propagation (fwd) (daniele at muscetta.com (Daniele Muscetta))
Cisco Security Notice: W.32 BLASTER Worm Mitigation Recommendations (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
ISS Security Brief: 'MS Blast' MSRPC DCOM Worm Propagation (fwd) (joey2cool at yahoo.com (Joey))
Microsoft urging users to buy Harware Firewalls (arny at ats.s.bawue.de (Thilo Schulz))
Firewalls (joey2cool at yahoo.com (Joey))
msblast.exe (beavis_design at telus.net (Export))
ISS Security Brief: 'MS Blast' MSRPC DCOM Worm Propagation (fwd) (daniele at muscetta.com (Daniele Muscetta))
ISP's save the Inet from Blaster? (rlanguy at hotmail.com (Lan Guy))
+++++SPAM+++++ RE: Microsoft urging users to buy Harware Firewalls (scheidell at secnap.net (Michael Scheidell))
msblast.exe (_bsec_ at web.de (_bsec_@....de))
AW: short Blaster propagation algorithm analysi s (vogt at hansenet.com (vogt@...senet.com))
AW: future happenings.. (vogt at hansenet.com (vogt@...senet.com))
DDoS on the 16th - Fail if no DNS resolution? (keithp at corp.ptd.net (Keith Pachulski))
msblast.exe (rdo at tro.net (Roman Dorr))
AW: short Blaster propagation algorithm analysi s (vogt at hansenet.com (vogt@...senet.com))
ISP's save the Inet from Blaster? (swallis at ittc.ukans.edu (Shawn Wallis))
NAV (or any AV tool) and MSBlast (safeer_00 at msn.com (L G))
Microsoft urging users to buy Harware Firewalls (hescominsoon at adelphia.net (William Warren))
msblast.exe (GGolomb at enterasys.com (Golomb, Gary))
RE: new msblaster on the loose? (harnold at binghamton.edu (Arnold, Jamie))
Re: new msblaster on the loose? (jay_woody at tnb.com (Jay Woody))
+++++SPAM+++++ RE: Microsoft urging users to buyHarware Firewalls (simon at snosoft.com (Simon))
recent RPC/DCOM worm thought (david.vincent at mightyoaks.com (David Vincent))
Microsoft urging users to buy Harware Firew alls (david.vincent at mightyoaks.com (David Vincent))
Re: new msblaster on the loose? (rahnemann at affinity-mortgage.com (Robert Ahnemann))
"MS Blast" Win2000 Patch Download (Brad.Bemis at airborne.com (Brad Bemis))
Fwd: Re: Microsoft urging users to buy Harware Firewalls (steve at stevesworld.hopto.org (Stephen Clowater))
Fwd: Re: Microsoft urging users to buy Harware Firewalls (steve at stevesworld.hopto.org (Stephen Clowater))
MSBLASTER - aka LOVESAN/POZA ? (vladimir at arobas.net (Vladimir Parkhaev))
"MS Blast" Win2000 Patch Download (jeffdick at covirt.com (Jeffrey A.K. Dick))
Microsoft urging users to buy Harware Firewalls (jgrotegut at directpointe.com (Jonathan Grotegut))
Re: Buffer overflow prevention (steve at stevesworld.hopto.org (Stephen Clowater))
"MS Blast" Win2000 Patch Download (pwicks at oxygen.com (James Patterson Wicks))
Microsoft urging users to buy Harware Firewalls (pwicks at oxygen.com (James Patterson Wicks))
Microsoft urging users to buy Harware Firewalls (jeffdick at covirt.com (Jeffrey A.K. Dick))
"MS Blast" Win2000 Patch Download (strombrg at dcs.nac.uci.edu (Dan Stromberg))
New Blaster variant using UDP port 1038? (mstahlkrantz at lucent.com (Stahlkrantz, Mats (Mats)))
"MS Blast" Win2000 Patch Download (mfratto at nwc.com (Mike Fratto))
Firewalls (scosol at yahoo.com (Nathan Seven))
"MS Blast" Win2000 Patch Download (pwicks at oxygen.com (James Patterson Wicks))
Re: Buffer overflow prevention (emsi at ipartners.pl (Mariusz Woloszyn))
New Blaster variant using UDP port 1038? (mstahlkrantz at lucent.com (Stahlkrantz, Mats (Mats)))
Microsoft urging users to buy Harware Firewalls (joey2cool at yahoo.com (Joey))
"MS Blast" Win2000 Patch Download (DARREN.L.BENNETT at saic.com (Darren Bennett))
Microsoft urging users to buy Harware Firewalls (joey2cool at yahoo.com (Joey))
DDos counter measures (llevier at argosnet.com (Laurent LEVIER))
Microsoft urging users to buy Harware Firewalls (codex at bogus.net (Codex))
Microsoft urging users to buy Harware Firewalls (joey2cool at yahoo.com (Joey))
Re: Buffer overflow prevention (steve at stevesworld.hopto.org (Stephen Clowater))
New Blaster variant using UDP port 1038? (jeremiah at nur.net (Jeremiah Cornelius))
21 more messages

August 15 (140 messages)

[fd] Recycle Bin Unavailability of Service (mike at blakogre.com (Mike Vasquez))
unix entropy source can be used for keystroke timing attacks (lcamtuf at ghettot.org (Michal Zalewski))
DDos counter measures (nick at virus-l.demon.co.uk (Nick FitzGerald))
New Blaster variant using UDP port 1038? (xillwillx at yahoo.com (w g))
MS should point windowsupdate.com to 127.0.0.1 (jeroen at unfix.org (Jeroen Massar))
east coast powergrid / SCADA [OT?] (ALudwig at Calfingroup.com (Andre Ludwig))
"MS Blast" Win2000 Patch Download (jeremiah at nur.net (Jeremiah Cornelius))
east coast powergrid / SCADA [OT?] (gml at phrick.net (gml))
east coast powergrid / SCADA [OT?] (micah at style.net (/m))
east coast powergrid / SCADA [OT?] (kanel at it.alstom.com.au (Kane Lightowler))
DDos counter measures (gael at magicnet.org (Gael Martinez))
east coast powergrid / SCADA [OT?] (dotslash at snosoft.com (KF))
east coast powergrid / SCADA [OT?] (dbailey27 at ameritech.net (northern snowfall))
east coast powergrid / SCADA [OT?] (dotslash at snosoft.com (KF))
east coast powergrid / SCADA [OT?] (gml at phrick.net (gml))
MS should point windowsupdate.com to 127.0.0.1 (pauls at utdallas.edu (Schmehl, Paul L))
New Blaster variant using UDP port 1038? (nick at virus-l.demon.co.uk (Nick FitzGerald))
east coast powergrid / SCADA [OT?] (simon at snosoft.com (-SIMON-))
east coast powergrid / SCADA [OT?] (ALudwig at Calfingroup.com (Andre Ludwig))
east coast powergrid / SCADA [OT?] (dbailey27 at ameritech.net (northern snowfall))
DDos counter measures (vladimir at arobas.net (Vladimir Parkhaev))
www.microsoft.com (kanel at it.alstom.com.au (Kane Lightowler))
east coast powergrid / SCADA [OT?] (simon at snosoft.com (-SIMON-))
Re: New Blaster variant using UDP port 1038? (s2_pi_di_ty at hotmail.com (Donnie Weiner))
power grid vulnerable to buffer overflow? (rrm at gtd5.net (rrm))
east coast powergrid / SCADA [OT?] (tetsujin at comcast.net (tetsujin))
unix entropy source can be used for keystroke timing attacks (pauls at utdallas.edu (Schmehl, Paul L))
east coast powergrid / SCADA [OT?] (atd at secnetops.com (Adriel T. Desautels))
east coast powergrid / SCADA [OT?] (tetsujin at comcast.net (tetsujin))
The MSBlast Conspiracy Theory (weezspam at yahoo.com (Weezer Hutchins))
east coast powergrid / SCADA [OT?] (bpryce at sasktel.net (Brad Pryce))
DDos counter measures (hangman at steelballs.org (Charles Ballowe))
AW: MS should point windowsupdate.com to 127.0. 0.1 (Carsten.Truckenbrodt at Bertelsmann.de (Carsten.Truckenbrodt@...telsmann.de))
MS should point windowsupdate.com to 127.0.0.1 (BlueBoar at thievco.com (Blue Boar))
ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd) (pauls at utdallas.edu (Schmehl, Paul L))
msblast DDos counter measures (More Insight Maybe?) (cslyon at netsvcs.com (Christopher Lyon))
"MS Blast" Win2000 Patch Download (pauls at utdallas.edu (Schmehl, Paul L))
DDos counter measures (B3r3n at argosnet.com (B3r3n))
Administrivia: Power and Backlogs (len at netsys.com (Len Rose))
curious email (cgarrett at inixoma.com (Christopher Garrett))
[RHSA-2003:199-02] Updated unzip packages fix trojan vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
MS should point windowsupdate.com to 127.0.0.1 (oetiker at ee.ethz.ch (Tobias Oetiker))
MS should point windowsupdate.com to 127.0.0.1 (kluge at fujitsu.com.au (Steffen Kluge))
east coast powergrid / SCADA [OT?] (cta at hcsin.net (Bernie, CTA))
MS should point windowsupdate.com to 127.0.0.1 (bvi at lair.moria.org (Barry Irwin))
MS should point windowsupdate.com to 127.0.0.1 (bvi at lair.moria.org (Barry Irwin))
windows 2000 tcp filter (geggam692000 at yahoo.com (D B))
msblast DDos counter measures (More Insight Maybe?) (B3r3n at argosnet.com (B3r3n))
www.microsoft.com (manipeto at yahoo.co.uk (Syed Imran Ali))
msblast DDos counter measures (More Insight Maybe?) (somatose at cox.net (Chris Garrett))
HOON & shellcode again! (nd at felinemenace.org (ned))
curious email (tom.koehler at gmx.net (Tom Koehler))
anyone who catched the new blast worm? (bpryce at sasktel.net (Brad Pryce))
The MSBlast Conspiracy Theory (bpryce at sasktel.net (Brad Pryce))
curious email (anders at infomaker.se (Anders Bjarby))
MS should point windowsupdate.com to 127.0.0.1 (steve.wray at paradise.net.nz (Steve Wray))
msblast DDos counter measures (More Insight Maybe?) (vladimir at arobas.net (Vladimir Parkhaev))
DDos counter measures (matthew.lange at langeconsulting.com (Matthew Lange))
MS should point windowsupdate.com to 127.0.0.1 (pauls at utdallas.edu (Schmehl, Paul L))
"MS Blast" Win2000 Patch Download (pwicks at oxygen.com (James Patterson Wicks))
MS should point windowsupdate.com to 127.0.0.1 (vb at bitsmart.com (vb))
power grid vulnerable to buffer overflow? (list at hardlined.com (Shanphen Dawa))
MS should point windowsupdate.com to 127.0.0.1 (security at dylanic.de (Michael Renzmann))
AW: DDos counter measures (vogt at hansenet.com (vogt@...senet.com))
The MSBlast Conspiracy Theory (joey2cool at yahoo.com (Joey))
power grid vulnerable to buffer overflow? (vladimir at arobas.net (Vladimir Parkhaev))
DDos counter measures (B3r3n at argosnet.com (B3r3n))
MS should point windowsupdate.com to 127.0.0.1 (jeroen at unfix.org (Jeroen Massar))
msblast DDos counter measures (llevier at argosnet.com (Laurent LEVIER))
CERT site not available (harshul at ealcatraz.com (Harshul Nayak (ealcatraz)))
msblast is starting now (B3r3n at argosnet.com (B3r3n))
MS should point windowsupdate.com to 127.0.0.1 (richard at tccnet.co.uk (Richard Stevens))
curious email (biondi at cartel-securite.fr (Philippe Biondi))
msblast DDos counter measures - a new worm to fix the problem (lists at daniel-rudolph.de (Daniel Rudolph))
CERT site not available (security at dylanic.de (Michael Renzmann))
Msblast infection (Nr55 at linux.se (Ted Hansson))
curious email (kenneth at loafman.com (Kenneth Loafman))
"MS Blast" Win2000 Patch Download (pauls at utdallas.edu (Paul Schmehl))
The MSBlast Conspiracy Theory (jnoble at info1team.com (Noble, Jim))
Blaster Side Affect? (rabbit at wnonline.net (Adam))
MS should point windowsupdate.com to 127.0.0.1 (pauls at utdallas.edu (Paul Schmehl))
DDos counter measures (Roland.Arendes at de.flextronics.com (Roland Arendes))
Microsoft Scanning Tool, Parameterhandling (mail at carstenkiess.de (Carsten Kiess))
MS should point windowsupdate.com to 127.0.0.1 (dlhane at sbcglobal.net (David Hane))
msblast is starting now (vladimir at arobas.net (Vladimir Parkhaev))
"MS Blast" Win2000 Patch Download (dufresne at winternet.com (Ron DuFresne))
MS should point windowsupdate.com to 127.0. 0.1 (sam.pointer at hpdsoftware.com (Sam Pointer))
anyone who catched the new blast worm? (jeremiah at nur.net (Jeremiah Cornelius))
The MSBlast Conspiracy Theory (jeremiah at nur.net (Jeremiah Cornelius))
"MS Blast" Win2000 Patch Download (jeremiah at nur.net (Jeremiah Cornelius))
msblast DDos counter measures (More Insight Maybe?) (cslyon at netsvcs.com (Christopher Lyon))
msblast is starting now (jonathan at xcorps.net (Jonathan Rickman))
east coast powergrid / SCADA [OT?] (dotslash at snosoft.com (KF))
msblast is starting now (jonathan at xcorps.net (Jonathan Rickman))
The MSBlast Conspiracy Theory (Dark-Avenger at comcast.net (Dark-Avenger@...cast.net))
msblast DDos counter measures (More Insight Maybe?) (vladimir at arobas.net (Vladimir Parkhaev))
The Grid, Blaster v. Poor Security Engineering (cta at hcsin.net (Bernie, CTA))
Microsoft urging users to buy Harware Firewalls (gem at rellim.com (Gary E. Miller))
Windows Dcom Worm planned DDoS (maxvalde at fis.unam.mx (Max Valdez))
41 more messages

August 16 (45 messages)

east coast powergrid / SCADA [OT?] (simon at snosoft.com (-SIMON-))
east coast powergrid / SCADA [OT?] (simon at snosoft.com (-SIMON-))
Microsoft MCWNDX.OCX ActiveX buffer overflow (dcopley at eeye.com (Drew Copley))
DCOM WORM - preface (sf at diffusion.net (sf))
east coast powergrid / SCADA [OT?] (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Administrivia: Power and Backlogs (steve at stevesworld.hopto.org (Stephen Clowater))
Official Microsoft RPC DCOM scanning tool (joey2cool at yahoo.com (Joey))
DCOM WORM - preface (se_cur_ity at hotmail.com (morning_wood))
east coast powergrid / SCADA [OT?] (ALudwig at Calfingroup.com (Andre Ludwig))
Loss of windowsupdate.com breaks SUS? (pauls at utdallas.edu (Paul Schmehl))
DCOM WORM - preface (sf at diffusion.net (sf))
DCOM WORM Killer 2.0 (xillwillx at yahoo.com (w g))
east coast powergrid / SCADA [OT?] (gshively at pivx.com (Geoff Shively))
[0day] DCOM WORM - preface (darren at hushmail.com (darren@...hmail.com))
OpenServer 5.0.x : Samba security update available avaliable for download. (security at sco.com (security@....com))
UnixWare 7.1.x Open UNIX 8.0.0: exploitable buffer overrun in metamail (security at sco.com (security@....com))
east coast powergrid / SCADA [OT?] (steve at stevesworld.hopto.org (Stephen Clowater))
east coast powergrid / SCADA [OT?] (gshively at pivx.com (Geoff Shively))
The Grid, Blaster v. Poor Security Engineering (avalon at caligula.anu.edu.au (Darren Reed))
www.microsoft.com (kryptos at phreaker.net (Kryptos))
FIXED: HOON & shellcode (again) (nd at felinemenace.org (ned))
p0f 2 beta now out - fingerprint data needed (lcamtuf at ghettot.org (Michal Zalewski))
Loss of windowsupdate.com breaks SUS? (guninski at guninski.com (Georgi Guninski))
Execution Flow Control (EFC) (list at hardlined.com (Shanphen Dawa))
Execution Flow Control (EFC) (jarlin at ifrance.com (Jarlin))
Msblast infection (nodialtone at comcast.net (Byron Copeland))
Execution Flow Control (EFC) (joel at helgeson.com (Joel R. Helgeson))
OpenServer 5.0.x : Samba security update available avaliable for download. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
east coast powergrid / SCADA [OT?] (steve at stevesworld.hopto.org (Stephen Clowater))
east coast powergrid / SCADA [OT?] (cta at hcsin.net (Bernie, CTA))
east coast powergrid / SCADA [OT?] (rms at computerbytesman.com (Richard M. Smith))
Execution Flow Control (EFC) (gshively at pivx.com (Geoff Shively))
east coast powergrid / SCADA [OT?] (gshively at pivx.com (Geoff Shively))
east coast powergrid / SCADA [OT?] (gshively at pivx.com (Geoff Shively))
Execution Flow Control (EFC) (warchild at spoofed.org (Jon Hart))
Execution Flow Control (EFC) (jarlin at ifrance.com (Jarlin))
east coast powergrid / SCADA [OT?] (cta at hcsin.net (Bernie, CTA))
Execution Flow Control (EFC) (warchild at spoofed.org (Jon Hart))
Execution Flow Control (EFC) (esse0027 at tc.umn.edu (Jimb Esser))
east coast powergrid / SCADA [OT?] (cta at hcsin.net (Bernie, CTA))
Execution Flow Control (EFC) (jarlin at ifrance.com (Jarlin))
east coast powergrid / SCADA [OT?] (geoincidents at getinfo.org (Geoincidents))
east coast powergrid / SCADA [OT?] (cta at hcsin.net (Bernie, CTA))
east coast powergrid / SCADA [OT?] (steve at stevesworld.hopto.org (Stephen Clowater))
TCP port 25 traffic? (josh.karp at visionael.com (Josh Karp))

August 17 (18 messages)

east coast powergrid / SCADA [OT?] (steve at stevesworld.hopto.org (Stephen Clowater))
east coast powergrid / SCADA [OT?] (steve at stevesworld.hopto.org (Stephen Clowater))
[SECURITY] [DSA-372-1] New netris packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-373-1] New autorespond packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
TCP port 25 traffic? (joel at helgeson.com (Joel R. Helgeson))
Loss of windowsupdate.com breaks SUS? (weezspam at yahoo.com (Weezer Hutchins))
Advisory 02/2003: emule/xmule/lmule multiple remote vulnerabilities (s.esser at e-matters.de (Stefan Esser))
WinMySQLAdmin and MySQL(win32) Administrator Password Local Disclosure (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
TCP port 25 traffic? (ssy at niafc.de (Matthias Wabersich))
Automating patch deployment (GKPeek at AllstateTicketing.com (George Peek))
TCP port 25 traffic? (josh.karp at visionael.com (Josh Karp))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (dufresne at winternet.com (Ron DuFresne))
Microsoft to enable XP firewall by default (rms at computerbytesman.com (Richard M. Smith))
Re: p0f 2 beta now out - fingerprint data needed (lcamtuf at ghettot.org (Michal Zalewski))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (nodialtone at comcast.net (Byron Copeland))
Automating patch deployment (GKPeek at AllstateTicketing.com (George Peek))
Edwards AFB shut down (fwd) (dufresne at winternet.com (Ron DuFresne))
Execution Flow Control (EFC) (veryanon at pop.com.br (Veryanon da Silva))

August 18 (49 messages)

anyone who catched the new blast worm? (zhaowei at venustech.com.cn (zhao wei))
[0xbadc0ded #02] Dropbear SSH Server <= 0.34 (je-fulldisclosure at bitnux.com (Joel Eriksson))
Little Missunderstanding... (s.esser at e-matters.de (Stefan Esser))
Re: [Dshield] new msblaster on the loose? (victorvieira82 at yahoo.com (Victor Vieira))
Automating patch deployment (richard at tccnet.co.uk (Richard Stevens))
Re: Buffer overflow prevention (pageexec at freemail.hu (pageexec@...email.hu))
Re: PointGuard: It's not the Size of the Buffer, it's the Address (pageexec at freemail.hu (pageexec@...email.hu))
ping floods (B3r3n at argosnet.com (B3r3n@...osnet.com))
Update to emule/xmule/lmule vulnerabilities. (s.esser at e-matters.de (Stefan Esser))
[SCSA-020] Multiple vulnerabilities in AttilaPHP (gregory.lebras at security-corporation.com (Gregory LEBRAS))
Blaster Side Affect? (hmason at dbsinet.com (henry j. mason))
[UPDATE] ping floods (B3r3n at argosnet.com (B3r3n@...osnet.com))
[UPDATE] ping floods (B3r3n at argosnet.com (B3r3n@...osnet.com))
FTPServer Denial Of Service Vulnerability (florianrock at web.de (Florian Rock))
[SECURITY] [DSA-364-3] New man-db packages fix segmentation fault (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[UPDATE] ping floods (Antony at blr.cognizant.com (Abraham, Antony (Cognizant)))
Re: [Dshield] new msblaster on the loose? (momolly at kryptocrew.de (Redaktion - Kryptocrew))
[UPDATE] ping floods (mstahlkrantz at lucent.com (Stahlkrantz, Mats (Mats)))
FTPServer Denial Of Service Vulnerability (a.gietl at e-admin.de (Andreas Gietl))
Automating patch deployment (mbassett at omaha.com (Bassett, Mark))
[UPDATE] ping floods!! Nachi Worm! (B3r3n at argosnet.com (B3r3n@...osnet.com))
[UPDATE] ping floods (jheidtke at fmlh.edu (Jerry Heidtke))
[UPDATE] ping floods (Jon.Dolinar at tri-c.edu (Dolinar, Jon))
Blackout responsibility? (simon at snosoft.com (-SIMON-))
Administrivia: Binary Executables w/o Source (len at netsys.com (Len Rose))
[UPDATE] ping floods (Antony at blr.cognizant.com (Abraham, Antony (Cognizant)))
Blaster Side Affect? (dksaarth at unix.za.net (Richard Spiers))
Re: [Dshield] new msblaster on the loose? (jonathan at xcorps.net (Jonathan Rickman))
[UPDATE] ping floods (a.gietl at e-admin.de (Andreas Gietl))
[UPDATE] ping floods (sam.pointer at hpdsoftware.com (Sam Pointer))
[UPDATE] ping floods (falcon at geekery.net (Chris G. Turner))
Blaster Side Affect? (mbassett at omaha.com (Bassett, Mark))
[UPDATE] ping floods (benjurry at szcert.org (benjurry))
[UPDATE] ping floods (B3r3n at argosnet.com (B3r3n))
[UPDATE] ping floods (B3r3n at argosnet.com (B3r3n))
Reuters: Power Outage Not Internet Worm-Related (ops-lists at positivenetworks.net (Jason Sloderbeck))
Reuters: Power Outage Not Internet Worm-Related (mike at sentex.net (Mike Tancsa))
Why Fixer Worms Are A Bad Idea RE: [UPDATE] ping floods (dcopley at eeye.com (Drew Copley))
[UPDATE] ping floods (dcopley at eeye.com (Drew Copley))
Loopback packets (phathat at hushmail.com (Phathat))
Reuters: Power Outage Not Internet Worm-Related (gshively at pivx.com (Geoff Shively))
Administrivia: Binary Executables w/o Source (raju at linux-delhi.org (Raj Mathur))
[UPDATE] ping floods (r1an at hush.ai (r1an))
Administrivia: Binary Executables w/o Source (len at netsys.com (Len Rose))
Administrivia: Binary Executables w/o Source (attica at stackheap.org (S . f . Stover))
re: [UPDATE] ping floods (loper at hushmail.com (loper@...hmail.com))
re: [UPDATE] ping floods (smacdougall at idanalytics.com (MacDougall, Shane))
Administrivia: Binary Executables w/o Source (dcopley at eeye.com (Drew Copley))
Administrivia: Binary Executables w/o Source (devon at lithiumnode.com (Person))

August 19 (88 messages)

Administrivia: Binary Executables w/o Source (dcopley at eeye.com (Drew Copley))
Administrivia: Binary Executables w/o Source (a.gietl at e-admin.de (Andreas Gietl))
Administrivia: Binary Executables w/o Source (anthony at safferconsulting.com (Anthony Saffer))
Administrivia: Binary Executables w/o Source (dcopley at eeye.com (Drew Copley))
SCADA makes you a target for terrorists (cta at hcsin.net (Bernie, CTA))
Fwd: Re: Administrivia: Binary Executables w/o Source (steve at stevesworld.hopto.org (Stephen Clowater))
Fwd: Re: Administrivia: Binary Executables w/o Source (caferace at well.com (Jim Race))
SCADA makes you a target for terrorists take 2 (cta at hcsin.net (Bernie, CTA))
The Grid, Blaster v. Poor Security Engineering (MRMyers at anteon.com (Myers, Marvin))
SCADA makes you a target for terrorists (dufresne at winternet.com (Ron DuFresne))
Fwd: Re: Administrivia: Binary Executables w/o Source (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
SCADA makes you a target for terrorists tak e 2 (ALudwig at Calfingroup.com (Andre Ludwig))
Fwd: Re: Administrivia: Binary Executables w/o Source (r.fulton at auckland.ac.nz (Russell Fulton))
Fwd: Re: Administrivia: Binary Executables w/o Source (dufresne at winternet.com (Ron DuFresne))
Fwd: Re: Administrivia: Binary Executables w/o Source (steve.wray at paradise.net.nz (Steve Wray))
SCO Web Site Vulnerable to Slapper? (integerdotonefourfivenine at yahoo.com (Gherkin McDonalds))
Administrivia: Binary Executables w/o Source (a.gietl at e-admin.de (Andreas Gietl))
Administrivia: Binary Executables w/o Source (simon.thornton at swift.com (Simon Thornton))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (bwatson at netTracers.com (Bryan K. Watson))
R: Loopback packets (edp.lists at acerbis.it (edp))
Vhost-3.05rc3 DOS.. (deadbeat at sdf.lonestar.org (Daniel))
SCO Web Site Vulnerable to Slapper? (lwc at vapid.ath.cx (Larry W. Cashdollar))
Point of origin for new worm (was Re: AT&T US Network Slowdown?) (shrdlu at deaddrop.org (Etaoin Shrdlu))
NT 4.0 and DCOM (saliskor at cyberus.ca (Rick Salisko))
Re: NT 4.0 and DCOM (madduck at madduck.net (martin f krafft))
SCO Web Site Vulnerable to Slapper? (dotslash at snosoft.com (KF))
NT 4.0 and DCOM (dotslash at snosoft.com (KF))
NT 4.0 and DCOM (saliskor at cyberus.ca (Rick Salisko))
Administrivia: Binary Executables w/o Source (steve at stevesworld.hopto.org (Stephen Clowater))
New Worm in the wild (dbtrino2 at hush.com (dbtrino2@...h.com))
SCO Web Site Vulnerable to Slapper? (a.gietl at e-admin.de (Andreas Gietl))
R: NT 4.0 and DCOM (edp.lists at acerbis.it (edp))
New Worm in the wild (a.gietl at e-admin.de (Andreas Gietl))
Administrivia: Binary Executables w/o Source (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
New Worm in the wild (andy.van.hoof at pandora.be (Andy))
New Worm in the wild (mjohnson at nmcr.com (Johnson, Mark))
Re: New Worm in the wild (madduck at madduck.net (martin f krafft))
New Worm in the wild (malware at t-online.de (Michael Mueller))
Using LaBrea to slow down the worm (matthew.lange at langeconsulting.com (Matthew Lange))
New Worm in the wild (r1an at hush.ai (r1an))
New Worm in the wild (rgerhards at hq.adiscon.com (Rainer Gerhards))
New Worm in the wild (geoincidents at getinfo.org (Geo.))
Windows Update: A single point of failure for the world's economy? (rms at computerbytesman.com (Richard M. Smith))
Re: NT 4.0 and DCOM (alf1num3rik at yahoo.com (Stephen))
SCADA makes you a target for terrorists take 2 (jcaggy at logisoft.com (Caggy, James))
Re: New Worm in the wild (cheekypeople at sec33.com (CHeeKY))
Using LaBrea to slow down the worm (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[inbox] Re: Fwd: Re: Administrivia: Binary Executables w/o Source (purdy at tecman.com (Curt Purdy))
Windows Update: A single point of failure for the world's economy? (jeremiah at nur.net (Jeremiah Cornelius))
SCADA makes you a target for terrorists take 2 (dcopley at eeye.com (Drew Copley))
SCO Web Site Vulnerable to Slapper? (jeremiah at nur.net (Jeremiah Cornelius))
Windows Update: A single point of failure for the world's economy? (hescominsoon at adelphia.net (William Warren))
Anyone? Important Security Update for the .NET Messenger Service (koen4security at hotmail.com (Koen Van Impe))
Al Qaida claims responsibility for blackout (danjr at voyager.net (danjr))
Using LaBrea to slow down the worm (jeremiah at nur.net (Jeremiah Cornelius))
Windows Update: A single point of failure f or the world's economy? (svgn at orbid.be (Serge van Ginderachter (svgn)))
Anyone? Important Security Update for the .NET Messenger Service (svgn at orbid.be (Serge van Ginderachter (svgn)))
Anyone? Important Security Update for the .NET Messenger Service (steve at stevesworld.hopto.org (Stephen Clowater))
SoBig.F strange problem (scottp at dreamwright.com (Scott Phelps / Dreamwright Studios))
[fd] Al Qaida claims responsibility for blackout (danjr at voyager.net (danjr))
Anyone? Important Security Update for the .NET Messenger Service (cdevoney at u.washington.edu (Chris DeVoney))
[SCN #03] Windows* Shortcut (.lnk) File Denial of Service Resurfaced (tim-security at sentinelchicken.org (Tim))
SoBig.F strange problem (rms at computerbytesman.com (Richard M. Smith))
SoBig.F strange problem (fnab at acerbus.com (Joseph L. Hood))
SoBig.F strange problem (rgerhards at hq.adiscon.com (Rainer Gerhards))
SoBig.F strange problem (scottp at dreamwright.com (Scott Phelps / Dreamwright Studios))
Al Qaida claims responsibility for blackout (michael at bluesuperman.com (Michael Gale))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (pauls at utdallas.edu (Schmehl, Paul L))
SCO Web Site Vulnerable to Slapper? (dotslash at snosoft.com (KF))
Al Qaida claims responsibility for blackout (dcopley at eeye.com (Drew Copley))
SoBig.F strange problem (kboyer at ablelaw.org (Boyer Kristy))
Anyone? Important Security Update for the .NET Messenger Service (dcopley at eeye.com (Drew Copley))
SoBig.F strange problem (nathan.risser at express-scripts.com (Risser, Nathan (BLM)))
Administrivia: Testing Emergency Virus Filter.. (len (Len Rose))
SCO Web Site Vulnerable to Slapper? (dcopley at eeye.com (Drew Copley))
SoBig.F strange problem (ptourvi1 at twcny.rr.com (JT))
SoBig.F strange problem (rms at computerbytesman.com (Richard M. Smith))
Al Qaida claims responsibility for blackout (ptourvi1 at twcny.rr.com (JT))
SCO Web Site Vulnerable to Slapper? (zorkshin at tampabay.rr.com (Justin Shin))
SCO Web Site Vulnerable to Slapper? (dotslash at snosoft.com (KF))
SoBig.F strange problem (mbassett at omaha.com (Bassett, Mark))
securing php (zorkshin at tampabay.rr.com (Justin Shin))
MDKSA-2003:073-1 - Updated unzip packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:083 - Updated eroaster packages fix temporary file vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
SCO Web Site Vulnerable to Slapper? (jeremiah at nur.net (Jeremiah Cornelius))
SoBig.F strange problem (denis at dimick.net (Denis Dimick))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (dufresne at winternet.com (Ron DuFresne))
Administrivia: Testing Emergency Virus Filter.. (lists.netsys.com at jscript.dk (Thor Larholm))

August 20 (108 messages)

SoBig.F strange problem (anthony at safferconsulting.com (Anthony Saffer))
SCO Web Site Vulnerable to Slapper? (anthony at safferconsulting.com (Anthony Saffer))
SoBig.F strange problem (nick at virus-l.demon.co.uk (Nick FitzGerald))
Administrivia: Testing Emergency Virus Filter.. (steve at stevesworld.hopto.org (Stephen Clowater))
SCO Web Site Vulnerable to Slapper? (strombrg at dcs.nac.uci.edu (Dan Stromberg))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (michael at bluesuperman.com (Michael Gale))
securing php (michael at bluesuperman.com (Michael Gale))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (bwatson at netTracers.com (Bryan K. Watson))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (denis at dimick.net (Denis Dimick))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (pauls at utdallas.edu (Paul Schmehl))
securing php (pauls at utdallas.edu (Paul Schmehl))
[Desperately OT] Administrivia: Testing Emergency Virus Filter.. (raju at linux-delhi.org (Raj Mathur))
securing php (lwc at vapid.ath.cx (Larry W. Cashdollar))
Windows Update: A single point of failure for the world's economy? (michael at bluesuperman.com (Michael Gale))
Al Qaida claims responsibility for blackout (chows at ozemail.com.au (gregh))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (gbunch at gmx.net (Gerald Cody Bunch))
SCO Web Site Vulnerable to Slapper? (jeremiah at nur.net (Jeremiah Cornelius))
Administrivia: Testing Emergency Virus Filter.. (gem at rellim.com (Gary E. Miller))
securing php (rgerhards at hq.adiscon.com (Rainer Gerhards))
Re: Buffer overflow prevention (peter at trusteddebian.org (Peter Busser))
AW: securing php (vogt at hansenet.com (vogt@...senet.com))
Filtering sobig with postfix (vogt at hansenet.com (vogt@...senet.com))
Administrivia: Testing Emergency Virus Filter.. (scottp at dreamwright.com (Scott Phelps / Dreamwright Studios))
AW: securing php (fw at deneb.enyo.de (Florian Weimer))
Administrivia: Testing Emergency Virus Filter.. (lists.netsys.com at jscript.dk (Thor Larholm))
FTPServer Denial Of Service Vulnerability (aditya at online.gr8domain.biz (Aditya [Aditya Lalit Desgmukh]))
securing php (evan at coeus-group.com (Evan Nemerson))
Cisco Security Notice: Nachi Worm Mitigation Recommendations (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Re: Filtering sobig with postfix (madduck at madduck.net (martin f krafft))
securing php (kris at koehntopp.de (Kristian Koehntopp))
Al Qaida claims responsibility for blackout (gshively at pivx.com (Geoff Shively))
AW: securing php (rgerhards at hq.adiscon.com (Rainer Gerhards))
Administrivia: Testing Emergency Virus Filter.. (rms at computerbytesman.com (Richard M. Smith))
Slammer worm crashed Ohio nuke plant network (rms at computerbytesman.com (Richard M. Smith))
SoBig.F strange problem (steveb at nebcoinc.com (Steve Bremer))
Administrivia: Testing Emergency Virus Filter.. (jeroen at unfix.org (Jeroen Massar))
AW: AW: securing php (vogt at hansenet.com (vogt@...senet.com))
AW: Re: Filtering sobig with postfix (vogt at hansenet.com (vogt@...senet.com))
Re: Filtering sobig with postfix (madduck at madduck.net (martin f krafft))
AW: Filtering sobig with postfix (vogt at hansenet.com (vogt@...senet.com))
AW: Re: Filtering sobig with postfix (vogt at hansenet.com (vogt@...senet.com))
Re: Filtering sobig with postfix (madduck at madduck.net (martin f krafft))
Re: Filtering sobig with postfix (madduck at madduck.net (martin f krafft))
Snorting Nachi (akloster at spp.org (Alan Kloster))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (steve at stevesworld.hopto.org (Stephen Clowater))
SoBig.F strange problem (steve at stevesworld.hopto.org (Stephen Clowater))
SoBig.F strange problem (steve at stevesworld.hopto.org (Stephen Clowater))
[Desperately OT] Administrivia: Testing Emergency Virus Filter.. (steve at stevesworld.hopto.org (Stephen Clowater))
Administrivia: Testing Emergency Virus Filter.. (pauls at utdallas.edu (Schmehl, Paul L))
SoBig.F strange problem (mbassett at omaha.com (Bassett, Mark))
Administrivia: Testing Emergency Virus Filter.. (pauls at utdallas.edu (Schmehl, Paul L))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (pauls at utdallas.edu (Schmehl, Paul L))
SoBig.F strange problem (R.Ferris at napier.ac.uk (Ferris, Robin))
SoBig.F strange problem (pauls at utdallas.edu (Schmehl, Paul L))
Administrivia: Testing Emergency Virus Filter.. (pauls at utdallas.edu (Schmehl, Paul L))
W32/Welchia, W32/Nachi backdoor? (bvi at lair.moria.org (Barry Irwin))
SoBig.F strange problem (felix.roennebeck at gaussvip.com (felix.roennebeck@...ssvip.com))
SoBig.F strange problem (m.graf at firmenwelt.de (Marcus Graf))
Administrivia: Testing Emergency Virus Filt er.. (david.vincent at mightyoaks.com (David Vincent))
bouncing SoBig.F mail (was: RE: SoBig.F strange problem) (ARouse at n2bb.com (Alan Rouse))
Administrivia: Testing Emergency Virus Filter.. (madsaxon at direcway.com (madsaxon))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (michael at bluesuperman.com (Michael Gale))
[fd] RE: [Fwd: Edwards AFB shut down by W32Blaster] (fwd) (mike at blakogre.com (Mike Vasquez))
W32/Welchia, W32/Nachi backdoor? (cseagle at redshift.com (Chris Eagle))
SoBig.F strange problem (mike at blakogre.com (Mike Vasquez))
W32/Welchia, W32/Nachi backdoor? (malware at t-online.de (Michael Mueller))
Al Qaida claims responsibility for blackout (dcopley at eeye.com (Drew Copley))
[fd] Re: SoBig.F strange problem (mike at blakogre.com (Mike Vasquez))
SoBig.F strange problem (jeremiah at nur.net (Jeremiah Cornelius))
Administrivia: Testing Emergency Virus Filter.. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Filtering sobig with postfix (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Buffer overflow prevention (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Administrivia: Testing Emergency Virus Filter.. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[fd] Al Qaida claims responsibility for blackout (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Al Qaida claims responsibility for blackout (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
SRT2003-08-11-0729 - Linux based antivirus software contains several local overflows (dotslash at snosoft.com (KF))
Administrivia: Testing Emergency Virus Filter.. (gem at rellim.com (Gary E. Miller))
Administrivia: Testing Emergency Virus Filter.. (gem at rellim.com (Gary E. Miller))
Administrivia: Testing Emergency Virus Filter.. (pauls at utdallas.edu (Schmehl, Paul L))
Re: Administrivia: Testing Emergency Virus Filter.. (madduck at madduck.net (martin f krafft))
Administrivia: Testing Emergency Virus Filter.. (psz at maths.usyd.edu.au (Paul Szabo))
MSBlaster EXE file (safeer_00 at msn.com (L G))
Administrivia: Testing Emergency Virus Filter.. (b-nordquist at bethel.edu (Brent J. Nordquist))
MSBlaster EXE file (a.gietl at e-admin.de (Andreas Gietl))
RE: [ISN] The sad tale of a security whistleblower (jasonc at science.org (Jason Coombs))
virus-binaries (a.gietl at e-admin.de (Andreas Gietl))
[inbox] Re: Fwd: Re: Administrivia: Binary Executables w/o Source (jasonc at science.org (Jason Coombs))
[fd] RE: [Fwd: Edwards AFB shut down by W32 Blaster] (fwd) (ALudwig at Calfingroup.com (Andre Ludwig))
Al Qaida claims responsibility for blackout (dcopley at eeye.com (Drew Copley))
Re: NT 4.0 and DCOM (saliskor at cyberus.ca (Rick Salisko))
RE: Certs. (JThomas at poweronemedia.com (Joshua Thomas))
Administrivia: Testing Emergency Virus Filter.. (gem at rellim.com (Gary E. Miller))
[inbox] Re: Fwd: Re: Administrivia: Binary Executables w/o Source (dietmar.goldbeck at acm.org (Dietmar Goldbeck))
virus-binaries (anthony.aykut at frame4.com (Anthony Aykut))
[inbox] Re: Fwd: Re: Administrivia: Binary Executables w/o Source (rgerhards at hq.adiscon.com (Rainer Gerhards))
Al Qaida claims responsibility for blackout (scheidell at secnap.net (Michael Scheidell))
[inbox] Re: Fwd: Re: Administrivia: Binary Executables w/o Source (lists.netsys.com at jscript.dk (Thor Larholm))
HP-OV is Impacted by Blaster (gperales at avantel.com.mx (Gerardo Perales))
Re: Filtering sobig with postfix (chows at ozemail.com.au (gregh))
9 more messages

August 21 (140 messages)

more on securing php (mnsan11 at earthlink.net (Elvedin))
EEYE: Internet Explorer Object Data Remote Execution Vulnerability (marc at eeye.com (Marc Maiffret))
Re: Administrivia: Testing Emergency Virus Filter.. (dcopley at eeye.com (Drew Copley))
securing php (jeremy at 33ad.org (jeremy@...d.org))
Administrivia: Testing Emergency Virus Filter.. (nick at virus-l.demon.co.uk (Nick FitzGerald))
SoBig.F strange problem (nick at virus-l.demon.co.uk (Nick FitzGerald))
[Fwd: Edwards AFB shut down by W32Blaster] (fwd) (nodialtone at comcast.net (Byron Copeland))
SoBig.F strange problem (salgatt at turtleshell.net (Scott M. Algatt))
MDKSA-2003:084 - Updated perl-CGI packages fix cross-site scripting vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: Administrivia: Testing Emergency Virus Filter.. (gem at rellim.com (Gary E. Miller))
[fd] RE: [Fwd: Edwards AFB shut down by W32Blaster] (fwd) (gbunch at gmx.net (Gerald Cody Bunch))
Al Qaida claims responsibility for blackout (ALudwig at Calfingroup.com (Andre Ludwig))
more on securing php (fd at braingia.org (Steve Suehring))
Administrivia: Testing Emergency Virus Filter.. (pauls at utdallas.edu (Paul Schmehl))
SCADA providers say security not our problem (scheidell at secnap.net (Michael Scheidell))
Re: Administrivia: Testing Emergency Virus Filter.. (pauls at utdallas.edu (Paul Schmehl))
SoBig.F strange problem (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
(no subject) (1 at malware.com (http-equiv@...ite.com))
Re: Filtering sobig with postfix (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
(no subject) (kalleth at nildram.co.uk (Tom Russell))
Macafee Virusscan ONLINE (chows at ozemail.com.au (gregh))
Administrivia: Testing Emergency Virus Filter.. (dowlingg at sullcrom.com (Dowling, Gabrielle))
SoBig.F strange problem (lists at venom600.org (Ben Nelson))
Re: Filtering sobig with postfix (JThomas at poweronemedia.com (Joshua Thomas))
SoBig.F strange problem (dowlingg at sullcrom.com (Dowling, Gabrielle))
Re: EEYE: Internet Explorer Object Data Remote Execution Vulnerability (1 at malware.com (http-equiv@...ite.com))
[fd] RE: [Fwd: Edwards AFB shut down by W32Blaster] (fwd) (steve.wray at paradise.net.nz (Steve Wray))
windowsupdate (hobbit at avian.org (*Hobbit*))
Re: Administrivia: Testing Emergency Virus Filter.. (gem at rellim.com (Gary E. Miller))
Administrivia: Testing Emergency Virus Filter.. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
windowsupdate (jeremiah at nur.net (Jeremiah Cornelius))
Re: Administrivia: Testing Emergency Virus Filter.. (lists.netsys.com at jscript.dk (Thor Larholm))
MSBlaster EXE file (simon.thornton at swift.com (Simon Thornton))
Re: Filtering sobig with postfix (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
Automating patch deployment (jorgen at hoffmeister.dk (Jørgen Hoffmeister))
Administrivia: Testing Emergency Virus Filter.. (nick at virus-l.demon.co.uk (Nick FitzGerald))
AW: Al Qaida claims responsibility for blackout (vogt at hansenet.com (vogt@...senet.com))
AW: Re: Filtering sobig with postfix (vogt at hansenet.com (vogt@...senet.com))
Re: Filtering sobig with postfix (secur at dzogchen.ru (securdz))
HP Tandem NonStop servers (newsgroups789 at yahoo.co.uk (david king))
windowsupdate (mfratto at nwc.com (Mike Fratto))
Re: Administrivia: Testing Emergency Virus Filter.. (nick at virus-l.demon.co.uk (Nick FitzGerald))
[inbox] Re: Fwd: Re: Administrivia: Binary Executables w/o Source (nick at virus-l.demon.co.uk (Nick FitzGerald))
HP Tandem NonStop servers (dotslash at snosoft.com (KF))
jdbgmgr.exe hoax virus? (Sch4143291 at aol.com (Sch4143291@....com))
Administrivia: Testing Emergency Virus Filter.. (strombrg at dcs.nac.uci.edu (Dan Stromberg))
HP Tandem NonStop servers (knienieder at khamsin.ch (Tom Knienieder))
jdbgmgr.exe hoax virus? (dotslash at snosoft.com (KF))
jdbgmgr.exe hoax virus? (security_lists at jam-gmbh.de (Christoph Handel))
jdbgmgr.exe hoax virus? (matt.bell at ladarling.com (Matt Bell))
Thanks for the hoax info. (Sch4143291 at aol.com (Sch4143291@....com))
jdbgmgr.exe hoax virus? (caferace at well.com (Jim Race))
jdbgmgr.exe hoax virus? (visus at ec-security.com (Alexander Müller))
[Fwd: Caveat Emptor: Verizon's email service and ol 'live' customer support challenges] (fmonkey at fmonkey.net (Adam H. Pendleton))
jdbgmgr.exe hoax virus? (anthony.aykut at frame4.com (Anthony Aykut))
jdbgmgr.exe hoax virus? (dgianndrea at comsquared.com (David Gianndrea))
jdbgmgr.exe hoax virus? (space_saturn at hotmail.com (Saturn))
Thanks re: info on jdbgmgr hoax (Sch4143291 at aol.com (Sch4143291@....com))
jdbgmgr.exe hoax virus? (Rizwan.Jiwan at kingston.hummingbird.com (Rizwan Jiwan))
quit the dumd chat man!! (R.Ferris at napier.ac.uk (Ferris, Robin))
HP Tandem NonStop servers (dotslash at snosoft.com (KF))
[SPAM] jdbgmgr.exe hoax virus? (hmason at dbsinet.com (henry j. mason))
Anyone? Important Security Update for the .NET Messenger Service (koen4security at hotmail.com (Koen Van Impe))
HP Tandem NonStop servers (lwc at vapid.ath.cx (Larry W. Cashdollar))
JAP back doored (error at lostinthenoise.net (error))
[Fwd: Caveat Emptor: Verizon's email service and ol 'live' customer support challenges] (MRMyers at anteon.com (Myers, Marvin))
jdbgmgr.exe hoax virus? (cdevoney at u.washington.edu (Chris DeVoney))
Subject prefix changing! READ THIS! SURVEY!! (chris at nmedia.net (Chris Cappuccio))
jdbgmgr.exe hoax virus? (strombrg at dcs.nac.uci.edu (Dan Stromberg))
Re: Administrivia: Testing Emergency Virus Filter.. (dcopley at eeye.com (Drew Copley))
JAP back doored (lists.netsys.com at jscript.dk (Thor Larholm))
SCADA providers say security not our problem (dcopley at eeye.com (Drew Copley))
HP Tandem NonStop servers (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
windowsupdate (dcopley at eeye.com (Drew Copley))
Re: Administrivia: Testing Emergency Virus Filter.. (dcopley at eeye.com (Drew Copley))
Re: Popular Net anonymity service back-doored (fw at deneb.enyo.de (Florian Weimer))
JAP back doored (dcopley at eeye.com (Drew Copley))
Re: Thanks for the hoax info. (madduck at madduck.net (martin f krafft))
jdbgmgr.exe hoax virus? (se_cur_ity at hotmail.com (morning_wood))
Subject prefix changing! READ THIS! SURVEY!! (dcopley at eeye.com (Drew Copley))
Subject prefix changing! READ THIS! SURVEY!! (tac at noldata.com (Noldata TAC))
EEYE: Internet Explorer Object Data Remote Execution Vulnerability (marc at eeye.com (Marc Maiffret))
JAP back doored (list at nutz.ch (Adrian Nutz))
Subject prefix changing! READ THIS! SURVEY!! (johnc at grok.org.uk (John Cartwright))
Google Private IP is 10.7.0.73 !!!!!! (gaurav at e2-labs.com (Gaurav Kumar))
[RHSA-2003:258-01] GDM allows local user to read any file. (bugzilla at redhat.com (bugzilla@...hat.com))
Subject prefix changing! READ THIS! SURVEY!! (dksaarth at unix.za.net (Richard Spiers))
Subject prefix changing! READ THIS! SURVEY!! (chris at nmedia.net (Chris Cappuccio))
JAP back doored (fw at deneb.enyo.de (Florian Weimer))
Re: Popular Net anonymity service back-doored (thomas.greene at theregister.co.uk (Thomas C. Greene ))
Re: Popular Net anonymity service back-doored (dcopley at eeye.com (Drew Copley))
Idea (geggam692000 at yahoo.com (D B))
Subject prefix changing! READ THIS! SURVEY!! (jgrotegut at directpointe.com (Jonathan Grotegut))
HP Tandem NonStop servers and other off topic crap (listuser at seifried.org (Kurt Seifried))
Re: Popular Net anonymity service back-doored (fw at deneb.enyo.de (Florian Weimer))
Subject prefix changing! READ THIS! SURVEY!! (8tImER at gmx.net (8tImER))
Re: Full-Disclosure digest, Vol 1 #1052 - 29 msgs (corliss at digitalmages.com (Arthur Corliss))
Google Private IP is 10.7.0.73 !!!!!! (nc at ncartron.org (Nicolas Cartron))
Idea (JThomas at poweronemedia.com (Joshua Thomas))
41 more messages

August 22 (156 messages)

Subject prefix changing! READ THIS! SURVEY!! (list at hardlined.com (Shanphen Dawa))
Google Private IP is 10.7.0.73 !!!!!! (se_cur_ity at hotmail.com (morning_wood))
Idea (irwanhadi at phxby.com (Irwan Hadi))
funny things - SpamAssassin results (se_cur_ity at hotmail.com (morning_wood))
Google Private IP is 10.7.0.73 !!!!!! (idoru at videosoft.net.uy (idoru@...eosoft.net.uy))
Idea (mnsan11 at earthlink.net (Elvedin))
Pinging... And lots of it.. (Calvyn at stny.rr.com (Calvyn))
[fd] Re: Google Private IP is 10.7.0.73 !!!!!! (mike at blakogre.com (Mike V))
Re: Filtering sobig with postfix (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
JAP back doored (fw at deneb.enyo.de (Florian Weimer))
[inbox] Re: Fwd: Re: Administrivia: Binary Executables w/o Source (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Popular Net anonymity service back-doored (fw at deneb.enyo.de (Florian Weimer))
AD20030820...testing made easy (roelof at sensepost.com (Roelof Temmingh))
MDKSA-2003:085 - Updated gdm packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: Full-Disclosure digest, Vol 1 #1052 - 29 msgs (seclists at violating.us (Jack Whitsitt (jofny)))
Re: Filtering sobig with postfix (JThomas at poweronemedia.com (Joshua Thomas))
Subject prefix changing! READ THIS! SURVEY!! (jkp at xionic.net (Jeff Pickell))
Subject prefix changing! READ THIS! SURVEY!! (nick at virus-l.demon.co.uk (Nick FitzGerald))
Pinging... And lots of it.. (pauls at utdallas.edu (Paul Schmehl))
Subject prefix changing! READ THIS! SURVEY!! (raju at linux-delhi.org (Raj Mathur))
Re: Filtering sobig with postfix (psz at maths.usyd.edu.au (Paul Szabo))
Google Private IP is 10.7.0.73 !!!!!! (conde0 at telefonica.net (conde0@...efonica.net))
Command Injection Vulnerability in stat.qwest.net (csiwebmaster at csi.edu (Dan Daggett))
Re: Popular Net anonymity service back-doored (barney at databus.com (Barney Wolff))
RE: Popular Net anonymity service back-doored (davids at webmaster.com (David Schwartz))
New usages of the RPC exploit (was: quit the dumd chat man!!) (malware at t-online.de (Michael Mueller))
Pinging... And lots of it.. (villain at protonic.com (ViLLaN))
[fd] Re: Google Private IP is 10.7.0.73 !!! !!! (ALudwig at Calfingroup.com (Andre Ludwig))
JAP back doored (gml at phrick.net (gml))
HP Tandem NonStop servers (rkingsla at cox.net (Rick Kingslan))
Re: Full-Disclosure digest, Vol 1 #1052 - 29 msgs (joel at helgeson.com (Joel R. Helgeson))
Subject prefix changing! READ THIS! SURVEY!! (micah at style.net (micah mcnelly))
Idea (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Google Private IP is 10.7.0.73 !!!!!! (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
US Governement War3z Server? (gfreeman51 at hotmail.com (Glen Freeman))
IE6 Download (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Subject prefix changing! READ THIS! SURVEY!! (lists at venom600.org (Ben Nelson))
EEYE: Internet Explorer Object Data Remote Execution Vulnerability (chows at ozemail.com.au (gregh))
Command Injection Vulnerability in stat.qwest.net - OFFTOPIC (listuser at seifried.org (Kurt Seifried))
funny things - SpamAssassin results (stephane.nasdrovisky at uniway.be (stephane nasdrovisky))
SV: Subject prefix changing! READ THIS! SURVEY!! (azmodan at linux.online.no (Mads Tansø))
HP Tandem NonStop servers (yossarian at planet.nl (yossarian))
JAP back doored (felix.roennebeck at gaussvip.com (felix.roennebeck@...ssvip.com))
JAP back doored (rgerhards at hq.adiscon.com (Rainer Gerhards))
Subject prefix changing! READ THIS! SURVEY!! (jim at rootjuice.co.uk (Jim Quantrell))
JAP back doored (rgerhards at hq.adiscon.com (Rainer Gerhards))
Re: SV: Subject prefix changing! READ THIS! SURVEY!! (madduck at madduck.net (martin f krafft))
Subject prefix changing! READ THIS! SURVEY!! (dan at lockedbox.net (Daniel B))
[inbox] Re: Fwd: Re: Administrivia: Binary Executables w/o Source (jasonc at science.org (Jason Coombs))
Subject prefix changing! READ THIS! SURVEY!! (ed at well.com (Edward Rustin))
Re: SV: Subject prefix changing! READ THIS! SURVEY!! (rgerhards at hq.adiscon.com (Rainer Gerhards))
SECURITY ADVISORY (bugzilla at redhat.com (Bug Zilla))
Subject prefix changing! READ THIS! SURVEY!! (daniele at muscetta.com (Daniele Muscetta))
Subject prefix changing! READ THIS! SURVEY! ! (svgn at orbid.be (Serge van Ginderachter (svgn)))
RE: Popular Net anonymity service back-doored (davids at webmaster.com (David Schwartz))
Subject prefix changing! READ THIS! SURVEY!! (dbtrino at gmx.net (dbtrino@....net))
Re: Popular Net anonymity service back-doored (nordi at addcom.de (nordi))
Re: Popular Net anonymity service back-doored (schlenk at uni-oldenburg.de (Michael Schlenker))
Final thoughts on 'Popular Net anonymity service back-doored' (thomas.greene at theregister.co.uk (Thomas C. Greene ))
JAP back doored (killedbythoughts at mindcrime.net (Sebastian Niehaus))
Subject prefix changing! READ THIS! SURVEY!! (vb at bitsmart.com (vb))
RE: Popular Net anonymity service back-doored (felix.roennebeck at gaussvip.com (felix.roennebeck@...ssvip.com))
JAP back doored (Azerail at supersecretninjaskills.com (Azerail))
Wap-Serv Enterprise Has serious problems (blue_eyeguy4u at hushmail.com (Blue eyeguy4u))
Subject prefix changing! READ THIS! SURVEY!! (jasonc at science.org (Jason Coombs))
Subject prefix changing! READ THIS! SURVEY!! (xlopkov at eml.cc (xlopkov@....cc))
Re: Popular Net anonymity service back-doored (alex at netWindows.org (Alex Russell))
JAP back doored (adam at homeport.org (Adam Shostack))
JAP back doored (felix.roennebeck at gaussvip.com (felix.roennebeck@...ssvip.com))
JAP back doored (fw at deneb.enyo.de (Florian Weimer))
Subject prefix changing! READ THIS! SURVEY! ! (sam.pointer at hpdsoftware.com (Sam Pointer))
R: Google Private IP is 10.7.0.73 !!!!!! (edp.lists at acerbis.it (edp))
Subject prefix changing! READ THIS! SURVEY!! (wcolburn at nmt.edu (William D. Colburn (aka Schlake)))
IE6 Download (computer at jacox.net (James A. Cox))
Subject prefix changing! READ THIS! SURVEY!! (Glenn_Everhart at bankone.com (Glenn_Everhart@...kone.com))
Re: Subject prefix changing! READ THIS! SURVEY!! (odin at cleannorth.org (Dan Brosemer))
Re: Subject prefix changing! READ THIS! SURVEY! ! (esm at logic.net (esm@...ic.net))
Subject prefix changing! READ THIS! SURVEY!! (damian at sentex.net (Damian Gerow))
[Fwd: R: Subject prefix changing! READ THIS! SURVEY!!] (jim at rootjuice.co.uk (Jim Quantrell))
US Governement War3z Server? (k.habayeb at cox.net (Kamal N Habayeb))
Re: Subject prefix changing! READ THIS! SURVEY! ! (ricky.blaikie at servercity.co.uk (Ricky Blaikie))
[FD] (flaterates at hotmail.com (barry jaffe))
R: Google Private IP is 10.7.0.73 !!!!!! (ed at well.com (Edward Rustin))
Subject prefix changing! READ THIS! SURVEY!! (cdevoney at u.washington.edu (Chris DeVoney))
Re: Subject prefix changing! READ THIS! SURVEY!! (esm at logic.net (esm@...ic.net))
Re: US Governement War3z Server? (madduck at madduck.net (martin f krafft))
US Governement War3z Server? (R.Ferris at napier.ac.uk (Ferris, Robin))
[FD] (nik at aboleo.net (Nik Reiman))
Command Injection Vulnerability in stat.qwest.net - OFFTOPIC (BlueBoar at thievco.com (Blue Boar))
JAP back doored (rgerhards at hq.adiscon.com (Rainer Gerhards))
Subject prefix changing! READ THIS! SURVEY!! (f0x at squirrelsoup.net (Gabe Arnold))
Google Private IP is 10.7.0.73 !!!!!! (mbassett at omaha.com (Bassett, Mark))
msblast -> mslaugh.exe (rom.k at swissonline.ch (rom.k@...ssonline.ch))
Command Injection Vulnerability in stat.qwest.net- OFFTOPIC (smacdougall at idanalytics.com (MacDougall, Shane))
Google Private IP is 10.7.0.73 !!!!!! (smacdougall at idanalytics.com (MacDougall, Shane))
Subject prefix changing! READ THIS! SURVEY!! (ravyn at omega2.com (ravyn))
Subject prefix changing! READ THIS! SURVEY!! (mathieu at gougle.net (Mathieu))
Sobig.F...what took so long (rahnemann at affinity-mortgage.com (Robert Ahnemann))
Sobig has a surprise... (spostma at travizon.com (Steve Postma))
57 more messages

August 23 (32 messages)

Sobig.F...what took so long (nick at virus-l.demon.co.uk (Nick FitzGerald))
JAP back doored (adam at homeport.org (Adam Shostack))
Idea (chows at ozemail.com.au (gregh))
Re: Subject prefix changing! READ THIS! SURVEY!! (marc at chabot.net (Marc Chabot (.net)))
Microsoft urging users to buy Harware Firewalls (sven at timegate.de (Sven Hoexter))
Sobig has a surprise... (jheidtke at fmlh.edu (Jerry Heidtke))
Sobig has a surprise... (david.vincent at mightyoaks.com (David Vincent))
Sobig has a surprise... (pauls at utdallas.edu (Paul Schmehl))
Sobig has a surprise... (pauls at utdallas.edu (Paul Schmehl))
Sobig has a surprise... (pauls at utdallas.edu (Paul Schmehl))
JAP back doored (Azerail at supersecretninjaskills.com (Azerail))
Anybody know what Sobig.F has downloaded? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Is this caused by Sobig? (chows at ozemail.com.au (gregh))
Is this caused by Sobig? (irwanhadi at phxby.com (Irwan Hadi))
Is this caused by Sobig? (rottz at securityflaw.com (Peter E. Johnson))
Sobig has a surprise... (fw at deneb.enyo.de (Florian Weimer))
Administrivia: Noise and Subject Lines (len at netsys.com (Len Rose))
Sobig has a surprise... (dufresne at winternet.com (Ron DuFresne))
Sobig has a surprise... (pauls at utdallas.edu (Paul Schmehl))
Sobig has a surprise... (pauls at utdallas.edu (Paul Schmehl))
Sobig has a surprise... (jheidtke at fmlh.edu (Jerry Heidtke))
Sobig has a surprise... (pauls at utdallas.edu (Paul Schmehl))
Fwd: [martini@...ision.net - W32/Sobig-F - Halflife correlation ???] (dhamilton at voyager.net (David Hamilton))
Sobig has a surprise... (dufresne at winternet.com (Ron DuFresne))
SRT2003-08-22-104 - Wireless Intrusion dection remote root compromise (dotslash at snosoft.com (KF))
Anybody know what Sobig.F has downloaded? (tim at night-shade.org.uk (Tim Fletcher))
Anybody know what Sobig.F has downloaded? (tim at night-shade.org.uk (Tim Fletcher))
Re: Filtering sobig with postfix (robert at rootprompt.net (Robert Banniza))
Anybody know what Sobig.F has downloaded? (security at dylanic.de (Michael Renzmann))
Subject prefix changing! READ THIS! SURVEY!! (steve at stevesworld.hopto.org (Stephen Clowater))
Sobig has a surprise... (pferrie at symantec.com (Peter Ferrie))
Subject prefix changing! READ THIS! SURVEY! ! (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

August 24 (28 messages)

Anyone know anything about this... (anthony at safferconsulting.com (Anthony Saffer))
Re: Filtering sobig with postfix (A.J.Caines at halplant.com (Andrew J Caines))
Worm hitting 445/tcp, signature same as Blaster.A (y4k4t4k at yahoo.com (y4k4t4k))
Sobig has a surprise... (jheidtke at fmlh.edu (Jerry Heidtke))
Sobig has a surprise... (jstewart at lurhq.com (Joe Stewart))
Anyone know anything about this... (madsaxon at direcway.com (madsaxon))
Google Private IP is 10.7.0.73 !!!!!! (micah at style.net (micah mcnelly))
Subject prefix changing! READ THIS! SURVEY!! (se_cur_ity at hotmail.com (morning_wood))
ports 111 / 707 (se_cur_ity at hotmail.com (morning_wood))
Google Private IP is 10.7.0.73 !!!!!! (se_cur_ity at hotmail.com (morning_wood))
SpamAssasin - path disclosure (se_cur_ity at hotmail.com (morning_wood))
No more windowsupdate for Windows 2000 Server Family? (irwanhadi at phxby.com (Irwan Hadi))
No more windowsupdate for Windows 2000 Server Family? (lists.netsys.com at jscript.dk (Thor Larholm))
SpamAssasin - path disclosure (evertjan at vanramselaar.nl (Evert Jan van Ramselaar))
No more windowsupdate for Windows 2000 Server Family? (irwanhadi at phxby.com (Irwan Hadi))
Re: Popular Net anonymity service back-doored (darsie at gmx.at (Bernhard Kuemel))
Re: Subject prefix changing! READ THIS! SURVEY!! (madscientist at wyoming.com (Philip Stortz))
Strange packets (4mgc at myrealbox.com (Henna Yatsu))
Strange packets (warchild at spoofed.org (Jon Hart))
Strange packets (malware at t-online.de (Michael Mueller))
No more windowsupdate for Windows 2000 Server Family? (pauls at utdallas.edu (Paul Schmehl))
SpamAssasin - path disclosure (kane.lightowler at it.alstom.com.au (Kane Lightowler))
Strange packets - OFFTOPIC (listuser at seifried.org (Kurt Seifried))
Google Private IP is 10.7.0.73 !!!!!! (jwiens at nersp.nerdc.ufl.edu (Jordan Wiens))
SpamAssasin - path disclosure (se_cur_ity at hotmail.com (morning_wood))
Miatrade Guestbook - Persistant XSS (se_cur_ity at hotmail.com (morning_wood))
RE: Miatrade Guestbook - Persistant XSS (dev-null at no-id.com (dev-null@...id.com))
Re: Popular Net anonymity service back-doored (darsie at gmx.at (Bernhard Kuemel))

August 25 (41 messages)

SpamAssasin - path disclosure (villain at protonic.com (ViLLaN))
SpamAssasin - path disclosure (se_cur_ity at hotmail.com (morning_wood))
SpamAssasin - path disclosure (villain at protonic.com (ViLLaN))
SpamAssasin - path disclosure (suicyc0 at hush.com (suicyc0@...h.com))
SpamAssasin - path disclosure (kane.lightowler at it.alstom.com.au (Kane Lightowler))
Interscan - path disclosure - WAS:SpamAssasin - path disclosure (se_cur_ity at hotmail.com (morning_wood))
Interscan - path disclosure - WAS:SpamAssasin - path disclosure (joshv at bcgsys.com (Joshua Vince))
Interscan - path disclosure - WAS:SpamAssasin - path disclosure (kluge at fujitsu.com.au (Steffen Kluge))
SpamAssasin - path disclosure (se_cur_ity at hotmail.com (morning_wood))
Interscan - path disclosure - WAS:SpamAssasin - path disclosure (suicyc0 at hush.com (suicyc0@...h.com))
Interscan - path disclosure - WAS:SpamAssasin - path disclosure (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
RE: Miatrade Guestbook - Persistant XSS (security at dylanic.de (Michael Renzmann))
fingerprinting windows via 135/tcp (sq5bpf at andra.com.pl (Jacek Lipkowski))
JAP back doored (felix.roennebeck at gaussvip.com (felix.roennebeck@...ssvip.com))
JAP back doored (felix.roennebeck at gaussvip.com (felix.roennebeck@...ssvip.com))
JAP back doored (se_cur_ity at hotmail.com (morning_wood))
[TURBOLINUX SECURITY INFO] 25/Aug/2003 (security-announce at turbolinux.co.jp (Turbolinux))
RE: Miatrade Guestbook - Persistant XSS (dev-null at no-id.com (dev-null@...id.com))
Re: Popular Net anonymity service back-doored (alex at netWindows.org (Alex Russell))
[RHSA-2003:213-01] Updated iptables packages are available (bugzilla at redhat.com (bugzilla@...hat.com))
Real bugs (dave at immunitysec.com (dave@...unitysec.com))
RE: Miatrade Guestbook - Persistant XSS (security at dylanic.de (Michael Renzmann))
JAP back doored (felix.roennebeck at gaussvip.com (felix.roennebeck@...ssvip.com))
JAP back doored (se_cur_ity at hotmail.com (morning_wood))
Sendmail DNS Map Vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
JAP back doored (dcopley at eeye.com (Drew Copley))
Non-Lame XSS Vulnerability - Analog-X Proxy (illectro2001 at yahoo.com (Chris Sharp))
JAP back doored (jeroen at unfix.org (Jeroen Massar))
Worm side effects (geoincidents at getinfo.org (Geo.))
JAP back doored (rgerhards at hq.adiscon.com (Rainer Gerhards))
Re: RealServer bugs + Exploit (australia001 at yahoo.com.au (Jim))
Worm side effects (fw at deneb.enyo.de (Florian Weimer))
CERT Employee Gets Owned (badpack3t at security-protocols.com (badpack3t))
CERT Employee Gets Owned (listuser at seifried.org (Kurt Seifried))
Worm side effects (geoincidents at getinfo.org (Geoincidents))
FW: SCADA providers say security not our problem (shoffman at computer.org (Stan Hoffman))
[RHSA-2003:213-01] Updated iptables packages are available (bugzilla at redhat.com (bugzilla@...hat.com))
SpamAssasin - path disclosure (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
JAP back doored (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Sendmail DNS Map Vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
JAP back doored (gem at rellim.com (Gary E. Miller))

August 26 (69 messages)

CERT Employee Gets Owned (gml at phrick.net (gml))
CERT Employee Gets Owned - OFFTOPIC (listuser at seifried.org (Kurt Seifried))
CERT Employee Gets Owned - ONTOPIC (badpack3t at security-protocols.com (badpack3t))
CERT Employee Gets Owned [Way Off Topic] (JThomas at poweronemedia.com (Joshua Thomas))
Worm side effects (malware at t-online.de (Michael Mueller))
CERT Employee Gets Owned - ONTOPIC (dufresne at winternet.com (Ron DuFresne))
JAP back doored (dcopley at eeye.com (Drew Copley))
Call for papers ... G-Con 2 (nahual at g-con.org (El Nahual))
CERT Employee Gets Owned [Way Off Topic] (jeremiah at nur.net (Jeremiah Cornelius))
CERT Employee Gets Owned - OFFTOPIC (jeremiah at nur.net (Jeremiah Cornelius))
MDKSA-2003:086 - Updated sendmail packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: RealServer bugs + Exploit (dimitry at al.org.ua (Dmitry Alyabyev))
CERT Employee Gets Owned [Way Off Topic] (se_cur_ity at hotmail.com (morning_wood))
Re: RealServer bugs + Exploit (tuxalex at yahoo.de (Alex))
Re: RealServer bugs + EXPLOIT (australia001 at yahoo.com.au (Jim))
CERT Employee Gets Owned [Way Off Topic] (dbailey27 at ameritech.net (northern snowfall))
Java Anonymous Proxy (JAP) backdoored - another interesting story (goncalo.costa at kpnqwest.pt (Goncalo Costa))
CERT Employee Gets Owned (peter at bank-connect.com (Peter van den Heuvel))
CERT Employee Gets Owned [Way Off Topic] (devnull at iprimus.com.au (Mathew Meins))
CERT Employee Gets Owned [Way Off Topic] (vdongen at hetisw.nl (I.R.van Dongen))
CERT Employee Gets Owned (MRMyers at anteon.com (Myers, Marvin))
[RHSA-2003:261-01] Updated pam_smb packages fix remote buffer overflow. (bugzilla at redhat.com (bugzilla@...hat.com))
towards a taxonomy of Information Assurance (IA) (abe.usher at sharp-ideas.net (Abe Usher))
Re: [RHSA-2003:261-01] Updated pam_smb packages fix remote buffer overflow. (bergansk at eosdata.gsfc.nasa.gov (Michael Berganski))
[SECURITY] [DSA-344-2] New unzip packages fix directory traversal vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.de…)
ADODB.Stream object (jkuperus at planet.nl (jelmer))
CERT Employee Gets Owned (hmason at dbsinet.com (henry j. mason))
CERT Employee Gets Owned (peter at bank-connect.com (Peter van den Heuvel))
CERT Employee Gets Owned (pauls at utdallas.edu (Schmehl, Paul L))
CERT Employee Gets Owned [WAY Off Topic] (damian at sentex.net (Damian Gerow))
JAP back doored (felix.roennebeck at gaussvip.com (felix.roennebeck@...ssvip.com))
CERT Employee Gets Owned (nelson-brito at ig.com.br (Nelson))
towards a taxonomy of Information Assurance (IA) (jbarbo1 at umbc.edu (jbarbo1@...c.edu))
CERT Employee Gets Owned (mnsan11 at earthlink.net (Elvedin))
ADODB.Stream object (lists.netsys.com at jscript.dk (Thor Larholm))
CERT Employee Gets Owned (BRAD.BEMIS at dhl.com (Brad Bemis))
[SECURITY] [DSA-374-1] New libpam-smb packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
CERT Employee Gets Owned (MRMyers at anteon.com (Myers, Marvin))
CERT Employee Gets Owned - ONTOPIC (DStark at forseon.com (DStark@...seon.com))
ADODB.Stream object (rms at computerbytesman.com (Richard M. Smith))
(no subject) (chad at 28place.net (Chad Boeckmann))
FreeBSD Security Advisory FreeBSD-SA-03:11.sendmail (security-advisories at freebsd.org (FreeBSD Security Advisories))
SuSE Security Announcement: sendmail (SuSE-SA:2003:035) (thomas at suse.de (Thomas Biege))
GOOD: A legal fix for software flaws? (dhtml at hush.com (dhtml@...h.com))
OpenLinux: The docview package allows anonymous remote users to view any publicly readable files on a OpenLinux 3.1.1 sys… (security at sco.com (security@....com))
SCO Linux 4.0 : The docview package allows anonymous remote users to view any publicly readable files on a SCO Linux 4.0 … (security at sco.com (security@....com))
OpenServer 5.0.7 : The docview package allows anonymous remote users to view any publicly readable files on a OpenServer … (security at sco.com (security@....com))
UnixWare 7.1.3 : The docview package allows anonymous remote users to view any publicly readable files on a UnixWare syst… (security at sco.com (security@....com))
CERT Employee Gets Owned - ONTOPIC (dhtml at hush.com (dhtml@...h.com))
CERT Employee Gets Owned (list at hardlined.com (Shanphen Dawa))
CfP DIMVA 2004 (mm at Informatik.TU-Cottbus.DE (Michael Meier))
CERT Employee Gets Owned (pauls at utdallas.edu (Schmehl, Paul L))
sobig.f - ip address location (se_cur_ity at hotmail.com (morning_wood))
#include <stdio.h> #include <stdlib.h> #include <string.h> (tuxalex at yahoo.de (Alex))
CERT Employee Gets Owned [Way Off Topic] (booger at unixclan.net (security snot))
ADODB.Stream object (lists.netsys.com at jscript.dk (Thor Larholm))
CERT Employee Gets Owned (nelson-brito at ig.com.br (Nelson))
CERT Employee Gets Owned [Way Off Topic] (rahnemann at affinity-mortgage.com (Robert Ahnemann))
RE: Miatrade Guestbook - Persistant XSS (knud at skodliv.dk (Knud Erik Højgaard))
Speculation in the media (Was: Re: CERT Employee Gets Owned) (peter at trusteddebian.org (Peter Busser))
ADODB.Stream object (rms at computerbytesman.com (Richard M. Smith))
JAP back doored (dbounds at intrusense.com (Darren Bounds))
Someone hacked anti-spam database. World bouncing email (scheidell at secnap.net (Michael Scheidell))
CERT Employee Gets Owned [Way Off Topic] (matthew at textbox.net (404))
ADODB.Stream object (steve at stevesworld.hopto.org (Stephen Clowater))
Speculation in the media (Was: Re: CERT Emp loyee Gets Owned) (ALudwig at Calfingroup.com (Andre Ludwig))
Someone hacked anti-spam database. World bouncing email (lists.netsys.com at jscript.dk (Thor Larholm))
CERT Employee Gets Owned (mds at helices.org (Michael D Schleif))
[RHSA-2003:261-01] Updated pam_smb packages fix remote buffer overflow. (bugzilla at redhat.com (bugzilla@...hat.com))

August 27 (41 messages)

CERT Employee Gets Owned [Way Off Topic] (dotslash at snosoft.com (KF))
Improving E-mail security... (bengtij at hotmail.com (Bengt Ruusunen))
Improving E-mail security... (lsawyer at gci.com (Leif Sawyer))
ADODB.Stream object (nick at virus-l.demon.co.uk (Nick FitzGerald))
CERT Employee Gets Owned (tss at iki.fi (Timo Sirainen))
CERT Employee Gets Owned (zorkshin at tampabay.rr.com (Justin Shin))
suidperl path disclosure (psz at maths.usyd.edu.au (Paul Szabo))
ADODB.Stream object (nick at virus-l.demon.co.uk (Nick FitzGerald))
[LONG] Improving E-mail security... (lceone at comcast.net (lceone@...cast.net))
[LONG] Improving E-mail security... (rgerhards at hq.adiscon.com (Rainer Gerhards))
Improving E-mail security... (eric at intraspect.com (Eric Wagner))
FreeBSD Security Advisory FreeBSD-SA-03:11.sendmail (steve at stevesworld.hopto.org (Stephen Clowater))
Improving E-mail security... (vdongen at hetisw.nl (I.R.van Dongen))
Re: Popular Net anonymity service back-doored (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
ADODB.Stream object (jkuperus at planet.nl (jelmer))
[TURBOLINUX SECURITY INFO] 27/Aug/2003 (security-announce at turbolinux.co.jp (Turbolinux))
Someone hacked anti-spam database. World bouncing email (scheidell at secnap.net (scheidell@...nap.net))
ADODB.Stream object (nick at virus-l.demon.co.uk (Nick FitzGerald))
FreeBSD Security Advisory FreeBSD-SA-03:11.sendmail (pauls at utdallas.edu (Schmehl, Paul L))
Someone hacked anti-spam database. World bouncing email (scheidell at secnap.net (Michael Scheidell))
[LONG] Improving E-mail security... (dufresne at winternet.com (Ron DuFresne))
JAP team scores a success (kris at koehntopp.de (Kristian Koehntopp))
[LONG] Improving E-mail security... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
CERT Employee Gets Owned (alexander.s at mccd.edu (Steven Alexander))
GOOD: A legal fix for software flaws? (levinson_k at despammed.com (levinson_k@...pammed.com))
JAP back doored (helmut.hauser at intraplan.de (Helmut Hauser))
[LONG] Improving E-mail security... (pauls at utdallas.edu (Schmehl, Paul L))
new virii? - Tinh` cho khong bieu' khong (dotslash at snosoft.com (KF))
GOOD: A legal fix for software flaws?] (hescominsoon at adelphia.net (William Warren))
Backdoor, Virus, Dialer? (security at dylanic.de (Michael Renzmann))
GOOD: A legal fix for software flaws? (goncalo.costa at kpnqwest.pt (Goncalo Costa))
JAP back doored (goncalo.costa at kpnqwest.pt (Goncalo Costa))
GOOD: A legal fix for software flaws? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: CERT Employee Gets Something! ( Explective Deleted ) (aditya at mail15.com (Aditya))
new virii? - Tinh` cho khong bieu' khong (Dallas_LaRose at s2systems.com (LaRose, Dallas))
new virii? - Tinh` cho khong bieu' khong (gar at askgar.com (Gary Warner))
new virii? - Tinh` cho khong bieu' khong (dotslash at snosoft.com (KF))
Backdoor, Virus, Dialer? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
new virii? - Tinh` cho khong bieu' khong (gar at askgar.com (Gary Warner))
JAP back doored (dcopley at eeye.com (Drew Copley))
GOOD: A legal fix for software flaws? (fabio at gs2.com.br (Fabio Gomes de Souza))

August 28 (46 messages)

JAP back doored (jeremiah at nur.net (Jeremiah Cornelius))
GOOD: A legal fix for software flaws? (nick at virus-l.demon.co.uk (Nick FitzGerald))
JAP back doored (dcopley at eeye.com (Drew Copley))
GOOD: A legal fix for software flaws? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[RHSA-2003:265-01] Updated Sendmail packages fix vulnerability. (bugzilla at redhat.com (bugzilla@...hat.com))
JAP back doored (goncalo.costa at kpnqwest.pt (Goncalo Costa))
Backdoor, Virus, Dialer? More information. (security at dylanic.de (Michael Renzmann))
[OpenPKG-SA-2003.037] OpenPKG Security Advisory (sendmail) (openpkg at openpkg.org (OpenPKG))
Backdoor, Virus, Dialer? More information. (oliver.ritter at aor-consult.de (Oliver Ritter))
AV "feature" does more DDoS than Sobig (bugtraq at gs2.com.br (Fabio Gomes de Souza))
AV "feature" does more DDoS than Sobig (hescominsoon at adelphia.net (William Warren))
AV "feature" does more DDoS than Sobig (madsaxon at direcway.com (madsaxon))
AV "feature" does more DDoS than Sobig (hescominsoon at adelphia.net (William Warren))
AV "feature" does more DDoS than Sobig (rms at computerbytesman.com (Richard M. Smith))
AV "feature" does more DDoS than Sobig (rgerhards at hq.adiscon.com (Rainer Gerhards))
AV "feature" does more DDoS than Sobig (3APA3A at SECURITY.NNOV.RU (3APA3A))
AV "feature" does more DDoS than Sobig (rms at computerbytesman.com (Richard M. Smith))
AV "feature" does more DDoS than Sobig (Rob.Barrett at zurnwilkins.com (Barrett, Rob))
AV "feature" does more DDoS than Sobig (vladimir at arobas.net (Vladimir Parkhaev))
Need contact in the BTOPENWORLD.COM security department (rms at computerbytesman.com (Richard M. Smith))
JAP service un-backdoored (thomas.greene at theregister.co.uk (Thomas C. Greene ))
Need contact in the BTOPENWORLD.COM security department (ak at synflood.at (Andreas Krennmair))
AV "feature" does more DDoS than Sobig (DStark at forseon.com (DStark@...seon.com))
AV "feature" does more DDoS than Sobig (james.greenhalgh at worldpay.com (James Greenhalgh))
AV "feature" does more DDoS than Sobig (vasil at cs.utk.edu (David Vasil))
Need contact in the BTOPENWORLD.COM security department (bkdelong at pobox.com (B.K. DeLong))
AV "feature" does more DDoS than Sobig (listas at istf.com.br (Marcos Machado))
Backdoor, Virus, Dialer? More information. (security at dylanic.de (Michael Renzmann))
Need contact in the BTOPENWORLD.COM securit y department (dlpassport at s2access.com (LaRose, Dallas))
GOOD: A legal fix for software flaws? (dufresne at winternet.com (Ron DuFresne))
AV "feature" does more DDoS than Sobig (dufresne at winternet.com (Ron DuFresne))
Need contact in the BTOPENWORLD.COM security department (montanatenor at yahoo.com (Montana Tenor))
AV "feature" does more DDoS than Sobig (yossarian at planet.nl (yossarian))
Sophos Anti-Virus alert: W32/Blaster-E (bugtracklist at freemail.hu (B$H))
AV "feature" does more DDoS than Sobig (rms at computerbytesman.com (Richard M. Smith))
Need contact in the BTOPENWORLD.COM security department (david.c.maynard at xo.com (Maynard, David C))
AV "feature" does more DDoS than Sobig (dufresne at winternet.com (Ron DuFresne))
Need contact in the BTOPENWORLD.COM security department (rms at computerbytesman.com (Richard M. Smith))
Need contact in the BTOPENWORLD.COM securit y department (sbirl at temple.edu (Birl))
AV "feature" does more DDoS than Sobig (steve.wray at paradise.net.nz (Steve Wray))
Need contact in the BTOPENWORLD.COM securit y department (lists.netsys.com at jscript.dk (Thor Larholm))
Sophos Anti-Virus alert: W32/Blaster-E (Dallas_LaRose at s2systems.com (LaRose, Dallas))
AV "feature" does more DDoS than Sobig (steve.wray at paradise.net.nz (Steve Wray))
[fd] RE: Sophos Anti-Virus alert: W32/Blaster-E (mike at blakogre.com (Mike V))
AV "feature" does more DDoS than Sobig (hescominsoon at adelphia.net (William Warren))
Need contact in the BTOPENWORLD.COM security department (guninski at guninski.com (Georgi Guninski))

August 29 (65 messages)

AV "feature" does more DDoS than Sobig (hescominsoon at adelphia.net (William Warren))
MDKSA-2003:087 - Updated gkrellm packages fix remote arbitrary code executeion vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
AV "feature" does more DDoS than Sobig (avalon at caligula.anu.edu.au (Darren Reed))
GOOD: A legal fix for software flaws? (avalon at caligula.anu.edu.au (Darren Reed))
AV "feature" does more DDoS than Sobig (steve.wray at paradise.net.nz (Steve Wray))
GOOD: A legal fix for software flaws? (alexandre.dulaunoy at ael.be (Alexandre Dulaunoy))
Selfmade worms in the wild ;) (momolly at kryptocrew.de (Redaktion-Kryptocrew))
Authorities eye MSBlaster suspect (larryr at netbeam.net (Larry Roberts))
[SECURITY] [DSA 274-1] New node packages fix remote root vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Need contact in the BTOPENWORLD.COM security department (steve at stevesworld.hopto.org (Stephen Clowater))
AWK Problem (helmut.hauser at intraplan.de (Helmut Hauser))
Authorities eye MSBlaster suspect (fw at deneb.enyo.de (Florian Weimer))
AW: AV "feature" does more DDoS than Sobig (vogt at hansenet.com (vogt@...senet.com))
Need contact in the BTOPENWORLD.COM securit y department (p.pe at btopenworld.com (Peter Ellison))
Authorities eye MSBlaster suspect (nick at virus-l.demon.co.uk (Nick FitzGerald))
Authorities eye MSBlaster suspect (steve at stevesworld.hopto.org (Stephen Clowater))
[RHSA-2003:267-01] New up2date available with updated SSL certificate authority file (bugzilla at redhat.com (bugzilla@...hat.com))
CIA Accused Of Bank Heist (verzonnen at hotmail.com (Ver Zonnen))
Authorities eye MSBlaster suspect (00005702 at no-id.com (00005702@...id.com))
[TURBOLINUX SECURITY INFO] 29/Aug/2003 (security-announce at turbolinux.co.jp (Turbolinux))
Authorities eye MSBlaster suspect (hangman-fulldisclosure at steelballs.org (Charles Ballowe))
Blaster.B/LovSan writer arrested (Chad.Boeckmann at IntegrisMetals.com (Chad Boeckmann))
Authorities eye MSBlaster suspect (se_cur_ity at hotmail.com (morning_wood))
Authorities eye MSBlaster suspect (rgerhards at hq.adiscon.com (Rainer Gerhards))
Gator droppings (se_cur_ity at hotmail.com (morning_wood))
Authorities eye MSBlaster suspect (jeremiah at nur.net (Jeremiah Cornelius))
Authorities eye MSBlaster suspect (madsaxon at direcway.com (madsaxon))
Authorities eye MSBlaster suspect (jeremiah at nur.net (Jeremiah Cornelius))
.inc injection (fockertrip at ig.com.br (fockertrip@...com.br))
Authorities eye MSBlaster suspect (rob at vees.net (Rob Carlson))
GOOD: A legal fix for software flaws? (jeremiah at nur.net (Jeremiah Cornelius))
RIP: ActiveX controls in Internet Explorer? (rms at computerbytesman.com (Richard M. Smith))
Authorities eye MSBlaster suspect (lists at venom600.org (Ben Nelson))
Authorities eye MSBlaster suspect (cdevoney at u.washington.edu (Chris DeVoney))
Authorities eye MSBlaster suspect (jheidtke at fmlh.edu (Jerry Heidtke))
Authorities eye MSBlaster suspect (pauls at utdallas.edu (Schmehl, Paul L))
Authorities eye MSBlaster suspect (dcs at tcoip.com.br (Daniel C. Sobral))
Authorities eye MSBlaster suspect (pauls at utdallas.edu (Schmehl, Paul L))
Authorities eye MSBlaster suspect (se_cur_ity at hotmail.com (morning_wood))
Authorities eye MSBlaster suspect (jeremiah at nur.net (Jeremiah Cornelius))
Authorities eye MSBlaster suspect (mike at sentex.net (Mike Tancsa))
Authorities eye MSBlaster suspect (se_cur_ity at hotmail.com (morning_wood))
Authorities eye MSBlaster suspect (pauls at utdallas.edu (Schmehl, Paul L))
Authorities eye MSBlaster suspect (anthony at safferconsulting.com (Anthony Saffer))
Authorities eye MSBlaster suspect (jheidtke at fmlh.edu (Jerry Heidtke))
MsBlaster Source? (list at hardlined.com (Shanphen Dawa))
Authorities eye MSBlaster suspect (se_cur_ity at hotmail.com (morning_wood))
Authorities eye MSBlaster suspect (chenry at radiologycorp.com (Henry, Christopher M.))
Fw: Computers crashed just before blackout (gshively at pivx.com (Geoff Shively))
Authorities eye MSBlaster suspect (Brent.Colflesh at ulticom.com (Brent Colflesh))
Authorities eye MSBlaster suspect (se_cur_ity at hotmail.com (morning_wood))
Authorities eye MSBlaster suspect (steve.wray at paradise.net.nz (Steve Wray))
Authorities eye MSBlaster suspect (khermansen at ht-technology.com (Kristian Hermansen))
Authorities eye MSBlaster suspect (jeremiah at nur.net (Jeremiah Cornelius))
Authorities eye MSBlaster suspect (pauls at utdallas.edu (Paul Schmehl))
Authorities eye MSBlaster suspect (pauls at utdallas.edu (Paul Schmehl))
Fw: Computers crashed just before blackout (scheidell at secnap.net (Michael Scheidell))
How to massively remove DCOM RPC Worms (B3r3n at argosnet.com (B3r3n))
Authorities eye MSBlaster suspect (rms at computerbytesman.com (Richard M. Smith))
Authorities eye MSBlaster suspect (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Authorities eye MSBlaster suspect (long reply) (cdevoney at u.washington.edu (Chris DeVoney))
Authorities eye MSBlaster suspect (jasonc at science.org (Jason Coombs))
MsBlaster Source? (jheidtke at fmlh.edu (Jerry Heidtke))
JAP back doored (dcopley at eeye.com (Drew Copley))
MsBlaster Source? (jeremiahcornelius at hotmail.com (Jeremiah Cornelius))

August 30 (54 messages)

Authorities eye MSBlaster suspect (anthony at safferconsulting.com (Anthony Saffer))
Authorities eye MSBlaster suspect (jasonc at science.org (Jason Coombs))
Authorities eye MSBlaster suspect (jasonc at science.org (Jason Coombs))
RIP: ActiveX controls in Internet Explorer? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Authorities eye MSBlaster suspect (jasonc at science.org (Jason Coombs))
Authorities eye MSBlaster suspect (jasonc at science.org (Jason Coombs))
Authorities eye MSBlaster suspect (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Authorities eye MSBlaster suspect (pauls at utdallas.edu (Paul Schmehl))
MsBlaster Source? (gml at phrick.net (gml))
Authorities eye MSBlaster suspect (jheidtke at fmlh.edu (Jerry Heidtke))
Authorities eye MSBlaster suspect (gml at phrick.net (gml))
Authorities eye MSBlaster suspect (mds at helices.org (Michael D Schleif))
Authorities eye MSBlaster suspect (long reply) (pauls at utdallas.edu (Paul Schmehl))
Authorities eye MSBlaster suspect (nick at virus-l.demon.co.uk (Nick FitzGerald))
Authorities eye MSBlaster suspect (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Authorities eye MSBlaster suspect (pauls at utdallas.edu (Paul Schmehl))
Selfmade worms in the wild ;) (knitti at t-base71.no-ip.org (knitti))
Selfmade worms in the wild ;) (lists2k3 at t-base71.no-ip.org (knitti))
Authorities eye MSBlaster suspect (nodialtone at comcast.net (Byron Copeland))
Authorities eye MSBlaster suspect (nodialtone at comcast.net (Byron Copeland))
Authorities eye MSBlaster suspect (nodialtone at comcast.net (Byron Copeland))
The Jeffrey Parson criminal complaint is online (rms at computerbytesman.com (Richard M. Smith))
Lets discuss, Firewalls... (mike at suzzal.net (Mike @ Suzzal.net))
Authorities eye MSBlaster suspect (nick at virus-l.demon.co.uk (Nick FitzGerald))
GOOD: A legal fix for software flaws? (jeremiah at nur.net (Jeremiah Cornelius))
(SPAM?) Lets discuss, Firewalls... (caferace at well.com (Jim Race))
My life sucks - was Re: Authorities eye MSBlaster suspect (security at brvenik.com (security@...enik.com))
HIS life sucks Re: Authorities eye MSBlaster suspect (technoboy at packetswar.org (technoboy))
Authorities eye MSBlaster suspect (avalon at caligula.anu.edu.au (Darren Reed))
Selfmade worms in the wild ;) (se_cur_ity at hotmail.com (morning_wood))
Authorities eye MSBlaster suspect (lwc at vapid.ath.cx (Larry W. Cashdollar))
Lets discuss, Firewalls... (scheidell at secnap.net (Michael Scheidell))
Selfmade worms in the wild ;) (momolly at kryptocrew.de (Redaktion-Kryptocrew))
... ... ... (fockertrip at ig.com.br (fockertrip@...com.br))
MS Blaster author / morning_wood misinformed (darren at hushmail.com (darren@...hmail.com))
Authorities eye MSBlaster suspect (mds at helices.org (Michael D Schleif))
Authorities eye MSBlaster suspect (mds at helices.org (Michael D Schleif))
Authorities eye MSBlaster suspect (pauls at utdallas.edu (Paul Schmehl))
Lets discuss, Firewalls... (lists at venom600.org (Ben Nelson))
MS Blaster author / morning_wood misinformed (peter at trusteddebian.org (Peter Busser))
MS Blaster author / morning_wood misinformed (pauls at utdallas.edu (Paul Schmehl))
unsuscribe list please (mundomorbo at mundofree.com (CreativNet Pro Design))
MS Blaster author / morning_wood misinformed (hoho at tacomeat.net (Hoho))
The Jeffrey Parson criminal complaint is online (gowen at swynwyr.com (Greg Owen))
GOOD: A legal fix for software flaws? (avalon at caligula.anu.edu.au (Darren Reed))
xss holes (seguridad at masev.cl (SeSMA))
MS Blaster author / morning_wood misinformed (kurtbuff at spro.net (Kurt))
MS Blaster author / morning_wood misinformed (bruen at coldrain.net (Stormwalker))
Re: Fwd: Computers crashed just before blackout (ju at ct.heise.de (Juergen Schmidt))
<no subject> (webappsec at technicalinfo.net (webappsec@...hnicalinfo.net))
Authorities eye MSBlaster suspect (jasonc at science.org (Jason Coombs))
Authorities eye MSBlaster suspect (madsaxon at direcway.com (madsaxon))
Lets discuss, Firewalls... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Authorities eye MSBlaster suspect (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

August 31 (28 messages)

MS Blaster author / morning_wood misinformed (yossarian at planet.nl (yossarian))
MS Blaster author / morning_wood misinformed (pauls at utdallas.edu (Paul Schmehl))
MS Blaster author / morning_wood misinformed (kryptos at phreaker.net (Kryptos))
Authorities eye MSBlaster suspect (bitbucket at STYX.ORG (bitbucket@...X.ORG))
Authorities eye MSBlaster suspect (ww at STYX.ORG (ww@...X.ORG))
OpenBSD 3.2 Kthread Madness (nd at felinemenace.org (ned))
(SPAM?) Lets discuss, Firewalls... (konfusius at gmx.de (Manfred Schmitt))
MS Blaster author / morning_wood misinformed (peter at trusteddebian.org (Peter Busser))
Microsoft Outlook PST Exposure (Admin at SecureTarget.Net (Kaveh Mofidi))
Cross Site Scripting in Webbased Virusencyclopedia (momolly at kryptocrew.de (Redaktion-Kryptocrew))
Microsoft Outlook PST Exposure (nick at virus-l.demon.co.uk (Nick FitzGerald))
CrossOver (nodialtone at comcast.net (Byron Copeland))
Bill Gates blames the victim (rms at computerbytesman.com (Richard M. Smith))
Bill Gates blames the victim (bkdelong at pobox.com (B.K. DeLong))
Bill Gates blames the victim (pandora at swi.com.br (pandora@....com.br))
Authorities eye MSBlaster suspect (mds at helices.org (Michael D Schleif))
Re: OpenBSD 3.2 Kthread Madness (maja at cntw.com (Mats O Jansson))
Bill Gates blames the victim (pauls at utdallas.edu (Paul Schmehl))
XSS in ezboard (idoru at videosoft.net.uy (David F. Madrid))
DCOM/RPC story (Analogy) (khermansen at ht-technology.com (Kristian Hermansen))
Bill Gates blames the victim (fw at deneb.enyo.de (Florian Weimer))
DCOM/RPC story (Analogy) (steven_fruchter at hotmail.com (Steven Fruchter))
DCOM/RPC story (Analogy) (j_joensuu at yahoo.com (Jarmo Joensuu))
DCOM/RPC story (Analogy) (madsaxon at direcway.com (madsaxon))
Bill Gates blames the victim (peter at trusteddebian.org (Peter Busser))
DCOM/RPC story (Analogy) (khermansen at ht-technology.com (Kristian Hermansen))
DCOM/RPC story (Analogy) (ww at STYX.ORG (ww@...X.ORG))
DCOM/RPC story (Analogy) (steven_fruchter at hotmail.com (Steven Fruchter))

1982 messages