full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2006/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 14	² 19	³ 17	⁴ 19	⁵ 10
⁶ 22	⁷ 36	⁸ 21	⁹ 16	¹⁰ 33	¹¹ 24	¹² 13
¹³ 38	¹⁴ 36	¹⁵ 32	¹⁶ 41	¹⁷ 29	¹⁸ 13	¹⁹ 14
²⁰ 36	²¹ 54	²² 33	²³ 38	²⁴ 29	²⁵ 22	²⁶ 11
²⁷ 25	²⁸ 47

Messages by day:

February 1 (14 messages)

Filemaker Pro 7 - any known exploits/hacks available? (kokanin at gmail.com (Knud Erik Højgaard))
I stole code (lucianobellou at gmail.com (Luciano Faletti))
Windows Access Control Demystified. (lucianobellou at gmail.com (Luciano Faletti))
Filemaker Pro 7 - any known exploits/hacksavailable? (se_cur_ity at hotmail.com (Morning Wood))
SSH brute force scanner? (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
[SECURITY] [DSA 961-1] New pdfkit.framework packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 962-1] New pdftohtml packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Fcrontab - memory corruption on heap. (pi3ki31ny at wp.pl (Adam Zabrocki))
iDefense Security Advisory 02.01.06: Winamp m3u/pls .WMA Extension Buffer Overflow Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
iDefense Security Advisory 02.01.06: Winamp m3u Parsing Stack Overflow Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
IronMail-5.0.1-Advisory-SYN-flood-DoS-Attack (mark.sec at gmail.com (Mark Sec))
IronMail-5.0.1-Advisory-SYN-flood-DoS-Attack (dlcmacosx at mac.com (David Chastain))
AshWebStudio AshNews Multiple Vulnerabilities (zeus.olimpusklan at gmail.com (zeus olimpusklan))
[ MDKSA-2006:028 ] - Updated php packages fix XSS and response splitting vulnerabilities (security at mandriva.com (security@...driva.com))

February 2 (19 messages)

[SECURITY] [DSA 963-1] New mydns packages fix denial of service (joey at infodrom.org (Martin Schulze))
about uncovering skype (pwu at fortinet.com (Wu Ping))
CAID 33581 - CA Message Queuing Denial of Service Vulnerabilities (James.Williams at ca.com (Williams, James K))
The History of the Oracle PLSQL Gateway Flaw (davidl at ngssoftware.com (David Litchfield))
More on the workaround for the unpatched Oracle PLSQL Gateway flaw (davidl at ngssoftware.com (David Litchfield))
Fcrontab - memory corruption on heap. (appelast at drumnbass.art.pl (Karol Wiesek))
Anyone got any security contacts at Apple? (xyberpix at xyberpix.com (xyberpix))
[ MDKSA-2006:029 ] - Updated libast packages fixes buffer overflow vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:030 ] - Updated poppler packages fixes heap-based buffer overflow vulnerability (security at mandriva.com (security@...driva.com))
[SLAB] NetBSD / OpenBSD kernfs_xread patch evasion (SLAB_research at securitylab.net (SecurityLab Research))
Re: More on the workaround for the unpatched Oracle PLSQL Gateway flaw (thor at hammerofgod.com (Thor (Hammer of God)))
Re: More on the workaround for the unpatched Oracle PLSQL Gateway flaw (frank at knobbe.us (Frank Knobbe))
[ MDKSA-2006:031 ] - Updated kdegraphics packages fixes heap-based buffer overflow vulnerability (security at mandriva.com (security@...driva.com))
Flaw in rpcbind (anilkumar7in at gmail.com (Anil Kumar))
[ MDKSA-2006:032 ] - Updated xpdf packages fixes heap-based buffer overflow vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:033 ] - Updated OpenOffice.org packages fix issue with disabled hyperlinks (security at mandriva.com (security@...driva.com))
Anyone got any security contacts at Apple? (kf_lists at digitalmunition.com (KF (lists)))
Anyone got any security contacts at Apple? (kf_lists at digitalmunition.com (KF (lists)))
Anyone got any security contacts at Apple? (xyberpix at xyberpix.com (xyberpix))

February 3 (17 messages)

Neomail Cross Site Scripting Vulnerability (simo at morx.org (simo@...x.org))
Outblaze Cross Site Scripting Vulnerability (simo at morx.org (simo@...x.org))
cPanel Multiple Cross Site Scripting Vulnerability (simo at morx.org (simo@...x.org))
cPanel Multiple Cross Site Scripting Vulnerability (csullo at gmail.com (Sullo))
[SECURITY] [DSA 964-1] New gnocatan packages fix denial of service (joey at infodrom.org (Martin Schulze))
Re: cPanel Multiple Cross Site Scripting Vulnerability (sumit.siddharth at gmail.com (Sumit Siddharth))
phpBB 2.0.19 Cross Site Request Forgeries and XSS Admin (max at jestsuper.pl (Maksymilian Arciemowicz))
EXchangepop3 remote buffer overflow exploit (simo at morx.org (Simo Ben youssef))
phpBB 2.0.19 Cross Site Request Forgeries and XSSAdmin (berliner.does.not.mean.jelly.donut at googlemail.com (Berliner))
phpBB 2.0.19 Cross Site Request Forgeries and XSSAdmin (max at jestsuper.pl (Maksymilian Arciemowicz))
Open Letter on the Interpretation of "Vulnerability Statistics" (fw at deneb.enyo.de (Florian Weimer))
:: BobCat Alpha v0.2 :: (dave at northern-monkee.co.uk (Dave))
Re: Re: ZoneAlarm phones home (davek_throwaway at hotmail.com (Dave Korn))
Blacklist defenses as a breeding ground for vulnerability variants (coley at mitre.org (Steven M. Christey))
Text messaging information disclosure query (stan.bubrouski at gmail.com (Stan Bubrouski))
Re: Open Letter on the Interpretation of "Vulnerability Statistics" (coley at mitre.org (Steven M. Christey))
VSR Advisory: IBM Tivoli Access Manager - Web Server Plug-in File Retrieval Vulnerability (advisories at vsecurity.com (VSR Advisories))

February 4 (19 messages)

VSR Advisory: IBM Tivoli Access Manager - Web Server Plug-in File Retrieval Vulnerability (evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor))
big security bug (dnvdnv at hushmail.com (dnvdnv@...hmail.com))
zepcom001 (zepcumzepcum at hushmail.com (zepcumzepcum@...hmail.com))
zepcom001 (very at unprivate.com (Very Unprivate))
NSA tracking open source security tools (fyodor at insecure.org (Fyodor))
NSA tracking open source security tools (thegesus at gmail.com (TheGesus))
NSA tracking open source security tools (brudy at bruderer-research.com (Peter Bruderer))
zepcom001 (leife at dls.net (Leif Ericksen))
cPanel 10 File Editing Vulnerability (shell6 at gmail.com (Shell))
NSA tracking open source security tools (pauls at utdallas.edu (Paul Schmehl))
ProtoVer LDAP vs CommuniGate Pro 5.0.7 (research at gleg.net (Evgeny Legerov))
(OLD) Eudora WorldMail 3.0 Windows 2000 Remote System Exploit (winning_team555 at yahoo.de (markus magnus))
(OLD) Eudora WorldMail 3.0 Windows 2000 Remote System Exploit (evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor))
NSA tracking open source security tools (jasonc at science.org (Jason Coombs))
NSA tracking open source security tools (A.L.M.Buxey at lboro.ac.uk (A.L.M.Buxey@...ro.ac.uk))
NSA tracking open source security tools (mhoye at neon.polkaroo.net (Mike Hoye))
BackTrack live CD (muts at inter.net.il (muts))
NSA tracking open source security tools (jasonc at science.org (Jason Coombs))
NSA tracking open source security tools (mjcarter at ihug.co.nz (Mike))

February 5 (10 messages)

NSA tracking open source security tools (jimpop at yahoo.com (Jim Popovitch))
cPanel 10 File Editing Vulnerability (andfarm at gmail.com (Andrew Farmer))
NSA tracking open source security tools (slythers at gmail.com (Slythers Bro))
cPanel 10 mime/handle.html XSS Vulnerability (shell6 at gmail.com (Shell))
NSA tracking open source security tools (thegesus at gmail.com (TheGesus))
NSA tracking open source security tools (leife at dls.net (Leif Ericksen))
[ GLSA 200602-01 ] GStreamer FFmpeg plugin: Heap-based buffer overflow (dercorny at gentoo.org (Stefan Cornelius))
VHCS Security Patch - 2006-02-05 --> Fake! (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
Re: Re: ZoneAlarm phones home (ivanhec at gmail.com (Ivan .))
Re: VHCS Security Patch - 2006-02-05 --> Fake! (roman at rs-labs.com (Roman Medina-Heigl Hernandez))

February 6 (22 messages)

Previously costly software now completely free. (stevenrakick at yahoo.com (Steven Rakick))
What can a Remote Vulnerability Scanner do in Future? (abryson at bytefocus.com (Alice Bryson))
[SECURITY] [DSA 965-1] New ipsec-tools packages fix denial of service (joey at infodrom.org (Martin Schulze))
[xfocus-SD-060206]BCB compiler incorrect deal sizeof operator vulnerability (security at xfocus.org (XFOCUS Security Team))
What can a Remote Vulnerability Scanner do in Future? (michael.holstein at csuohio.edu (Michael Holstein))
According to Ivan, the secret ZA phone-home server is located at 127.0.0.1 [was Re: Re: Re: ZoneAlarm phones home] (davek_throwaway at hotmail.com (Dave Korn))
Announcement: Domain Contamination By Amit Klein (contact at webappsec.org (contact@...appsec.org))
According to Ivan, the secret ZA phone-home server is located at 127.0.0.1 [was Re: Re: Re: ZoneAlarm phones home] (frank at knobbe.us (Frank Knobbe))
Re: NSA tracking open source security tools (davek_throwaway at hotmail.com (Dave Korn))
Re: NSA tracking open source security tools (very at unprivate.com (Very Unprivate))
[ Secuobs - Advisory ] Bluetooth : DoS on hcidump 1.29 + PoC (research at infratech.fr (Research Infratech))
[ Secuobs - Advisory ] Bluetooth : DoS on Sony/Ericsson cell phones (research at infratech.fr (Research Infratech))
[ Secuobs - Tools release ] BSS (Bluetooth Stack Smasher) fuzzer (research at infratech.fr (Research Infratech))
SECURITY.NNOV: The Bat! 2.x message headers spoofing (3APA3A at SECURITY.NNOV.RU (3APA3A))
[ GLSA 200602-02 ] ADOdb: PostgresSQL command injection (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200602-03 ] Apache: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Re: According to Ivan, the secret ZA phone-homeserver is located at 127.0.0.1 [was Re: Re: Re: ZoneAlarm phones home] (davek_throwaway at hotmail.com (Dave Ko…)
Re: Re: NSA tracking open source security tools (davek_throwaway at hotmail.com (Dave Korn))
CAIDA analysis on CME-24/BlackWorm (ge at linuxbox.org (Gadi Evron))
Re: According to Ivan, the secret ZA phone-homeserver is located at 127.0.0.1 [was Re: Re: Re: ZoneAlarm phones home] (ivanhec at gmail.com (Ivan .))
[ MDKSA-2006:034 ] - Updated openssh packages fix vulnerability (security at mandriva.com (security@...driva.com))
[ Secuobs - Advisory ] Bluetooth : DoS on Sony/Ericsson cell phones (stan.bubrouski at gmail.com (Stan Bubrouski))

February 7 (36 messages)

Re: CAIDA analysis on CME-24/BlackWorm (nick at virus-l.demon.co.uk (Nick FitzGerald))
Yahoo "Privacy" Policy (linguafatwa at gmail.com (Lingua Fatwa))
Re: [xfocus-SD-060206]BCB compiler incorrect deal sizeof operator vulnerability (security at xfocus.org (XFOCUS Security Team))
NSA tracking open source security tools (arias at m-a-g.net (Arias Hung))
Re: According to Ivan, the secret ZA phone-homeserver is located at 127.0.0.1 [was Re: Re:Re: ZoneAlarm phones home] (full-disclosure2 at pchandyman.com.au (G…)
What can a Remote Vulnerability Scanner do in Future? (abryson at bytefocus.com (Alice Bryson))
Re: According to Ivan, the secret ZA phone-homeserver is located at 127.0.0.1 [was Re: Re:Re: ZoneAlarm phones home] (ivanhec at gmail.com (Ivan .))
Re: According to Ivan, the secret ZA phone-homeserver is located at 127.0.0.1 [was Re: Re:Re: ZoneAlarm phones home] (ivanhec at gmail.com (Ivan .))
RE: [funsec] CAIDA analysis on CME-24/BlackWorm (AlexE at sunbelt-software.com (Alex Eckelberry))
RE: [funsec] CAIDA analysis on CME-24/BlackWorm (ratnakumarch at visualsoft-tech.com (Ratna Kumar))
aix sniffer (panczelos at freemail.hu (Zolee))
aix sniffer (ad at heapoverflow.com (ad@...poverflow.com))
Gutmann's research paper today (gimeshell at web.de (gimeshell@....de))
Gutmann's research paper today (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Gutmann's research paper today (frank at knobbe.us (Frank Knobbe))
Gutmann's research paper today (kyphros at gmail.com (Mike Owen))
Re: VHCS Security Patch - 2006-02-05 --> Fake! (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
Gutmann's research paper today (frank at knobbe.us (Frank Knobbe))
Hacked email reveals secrets (amadeo.avogadro at gmail.com (Amadeo Avogadro))
Hacked email reveals secrets (andrei at fq.ro (Andrei Galca-Vasiliu))
Hacked email reveals secrets (toddtowles at brookshires.com (Todd Towles))
Re: Re: According to Ivan, the secret ZA phone-homeserver is located at 127.0.0.1 [was Re: Re:Re: ZoneAlarm phones hom… (davek_throwaway at hotmail.com (Dave Ko…)
aix sniffer (xyberpix at xyberpix.com (xyberpix))
[ MDKSA-2006:035 ] - Updated php packages fix vulnerability (security at mandriva.com (security@...driva.com))
Hacked email reveals secrets (adf at code511.com (A-d-F))
Re: Re: According to Ivan, the secret ZA phone-homeserver is located at 127.0.0.1 [was Re: Re:Re: ZoneAlarm phones home] (ivanhec at gmail.com (Ivan .))
iDefense Security Advisory 02.07.06: QNX Neutrino RTOS libph PHOTON_PATH Buffer Overflow Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.c…)
iDefense Security Advisory 02.07.06: QNX Neutrino RTOS phfont Race Condition Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
iDefense Security Advisory 02.07.06: QNX Neutrino RTOS phgrafx Command Buffer Overflow (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
iDefense Security Advisory 02.07.06: QNX Neutrino RTOS su Command Buffer Overflow (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 Local Denial of Service Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 rc.local Insecure File Permissions Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com…)
iDefense Security Advisory 02.07.06: QNX Neutrino RTOS passwd Command Buffer Overflow (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
iDefense Security Advisory 02.07.06: QNX Neutrino RTOS crttrap Arbitrary Library Loading Vulnerability (vendor-disclosure at idefense.com (vendor-disclosure))
iDefense Security Advisory 02.07.06: QNX Neutrino RTOS fontsleuth Command Format String Vulnerability (vendor-disclosure at idefense.com (vendor-disclosure))
iDefense Security Advisory 02.07.06: QNX Neutrino RTOS libAp ABLPATH Buffer Overflow Vulnerability (vendor-disclosure at idefense.com (vendor-disclosure))

February 8 (21 messages)

[ MDKSA-2006:036 ] - Updated mozilla packages to address DoS vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:037 ] - Updated mozilla-firefox packages to address DoS vulnerability (security at mandriva.com (security@...driva.com))
gnucitizen.org - Massive Enumeration Toolset: OFFLINE? (linguafatwa at gmail.com (Lingua Fatwa))
gnucitizen.org - Massive Enumeration Toolset:OFFLINE? (cdupuis at cccure.org (Clement Dupuis))
Cpanel Admin login (username) Disclosure (sumit.siddharth at gmail.com (Sumit Siddharth))
Re: cPanel Multiple Cross Site Scripting Vulnerability (sumit.siddharth at gmail.com (Sumit Siddharth))
Gutmann's research paper today (gimeshell at web.de (gimeshell@....de))
aix sniffer (fd at g-0.org (GroundZero Security))
Gutmann's research paper today (tom at electric-sheep.org (Thomas))
Cpanel Admin login (username) Disclosure (h4cky0u.org at gmail.com (h4cky0u))
aix sniffer (tmb at 65535.com (Tim Brown))
NSA tracking open source security tools (thegesus at gmail.com (TheGesus))
London DC4420 February meet - Thursday 16th (majormal at pirate-radio.org (Major Malfunction))
Gutmann's research paper today (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
iDefense Labs Quarterly VCP Award Winners - Q4 2005 (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
Gutmann's research paper today (gautam.bipin at gmail.com (Bipin Gautam))
Using SMS spoofing to locate almost anyone in the UK without their permission (rsnlists at googlemail.com (Rootsecure.net Staff))
Using SMS spoofing to locate almost anyone in the UK without their permission (sebastian.wolfgarten at gmx.net (Sebastian Wolfgarten))
Using SMS spoofing to locate almost anyone in the UK without their permission (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Apple TPM need for disclosure (info at pcsage.biz (PCSC Information Services))
Using SMS spoofing to locate almost anyone in the UK without their permission (adam.laurie at thebunker.net (Adam Laurie))

February 9 (16 messages)

[ MDKSA-2006:038 ] - Updated groff packages fix temporary file vulnerabilities (security at mandriva.com (security@...driva.com))
Bluetooth Activesync - requesting test (full-disclosure2 at pchandyman.com.au (Greg))
Bluetooth Activesync - requesting test (stan.bubrouski at gmail.com (Stan Bubrouski))
Bluetooth Activesync - requesting test (kf_lists at digitalmunition.com (KF (lists)))
[SECURITY] [DSA 966-1] New adzapper packages fix denial of service (joey at infodrom.org (Martin Schulze))
Using SMS spoofing to locate almost anyone in the UK without their permission (virus at nolog.org (virus@...og.org))
Bluetooth Activesync - requesting test (adam.laurie at thebunker.net (Adam Laurie))
Using SMS spoofing to locate almost anyone in the UK without their permission (virus at nolog.org (virus@...og.org))
Bluetooth Activesync - requesting test (adam.laurie at thebunker.net (Adam Laurie))
Bluetooth Activesync - requesting test (adam.laurie at thebunker.net (Adam Laurie))
List Charter (johnc at grok.org.uk (John Cartwright))
Cringely's FUD-spreading leads to broken workarounds being suggested (davek_throwaway at hotmail.com (Dave Korn))
Re: Bluetooth Activesync - requesting test (davek_throwaway at hotmail.com (Dave Korn))
ProtoVer SSL: GnuTLS (research at gleg.net (Evgeny Legerov))
Details on new WMF vuln (joshua.russel at gmail.com (Joshua Russel))
Re: Bluetooth Activesync - requesting test (stan.bubrouski at gmail.com (Stan Bubrouski))

February 10 (33 messages)

Re: HelpCtr - allow open any page or run (r_i_c_h_lists at btopenworld.com (Richard Maudsley))
[SECURITY] [DSA 967-1] New elog packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Drive Crypt Plus (m4ch3t3 at gmail.com (M4ch3T3 Hax))
ProtoVer Sample LDAP testsuite release (research at gleg.net (Evgeny Legerov))
New site with 0day xploits (vulnmonitor at fortinet.com (Fortinet Research))
New site with 0day xploits (dan-fd at f-box.org (DanB-FD))
blocking Google Desktop (michael.holstein at csuohio.edu (Michael Holstein))
New site with 0day xploits (unknown.pentester at gmail.com (pagvac))
blocking Google Desktop (jlevitsk at joshie.com (Joshua Levitsky))
blocking Google Desktop (michael.holstein at csuohio.edu (Michael Holstein))
blocking Google Desktop (jlevitsk at joshie.com (Joshua Levitsky))
blocking Google Desktop (300baud at gmail.com (Line Noise))
blocking Google Desktop (y0himba at technolounge.org (y0himba))
blocking Google Desktop (michael.holstein at csuohio.edu (Michael Holstein))
blocking Google Desktop (kyphros at gmail.com (Mike Owen))
blocking Google Desktop (pwicks at oxygen.com (J. Patterson Wicks))
blocking Google Desktop (brian.sims at siemens.com (Sims, Brian (MED US)))
iDEFENSE Security Advisory 02.10.06: IBM Lotus Domino Server LDAP DoS Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
blocking Google Desktop (toddtowles at brookshires.com (Todd Towles))
Microsoft Patchday 0206 (houser at hush.com (houser@...h.com))
Secunia Research: Lotus Notes Multiple Archive Handling Directory Traversal (vuln at secunia.com (Secunia Research))
Secunia Research: Lotus Notes HTML Speed Reader Link Buffer Overflows (vuln at secunia.com (Secunia Research))
Secunia Research: Lotus Notes TAR Reader File Extraction Buffer Overflow (vuln at secunia.com (Secunia Research))
Secunia Research: Lotus Notes UUE File Handling Buffer Overflow (vuln at secunia.com (Secunia Research))
Secunia Research: IBM Lotus Domino iNotes Client Script Insertion Vulnerabilities (vuln at secunia.com (Secunia Research))
Secunia Research: Lotus Notes ZIP File Handling Buffer Overflow (vuln at secunia.com (Secunia Research))
ARIN Security Contact (Security at peadro.net (Terminal Entry))
Drive Crypt Plus (securitylists at uniontown.com (Security Lists))
[thunkers.net] D-Link Fragmented UDP DoS Vulnerability (deft at thunkers.net (deft))
blocking Google Desktop (michael.holstein at csuohio.edu (Michael Holstein))
[ Secuobs - Advisory ] Bluetooth : DoS on Nokia cell phones (research at infratech.fr (Infratech Research))
blocking Google Desktop (slamboy at gmail.com (Jason Mayer))
Re: blocking Google Desktop (davek_throwaway at hotmail.com (Dave Korn))

February 11 (24 messages)

blocking Google Desktop (charles.heselton at gmail.com (Charles Heselton))
blocking Google Desktop (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
Microsoft AntiSpyware attacks Norton AV? (joel at helgeson.com (Joel R. Helgeson))
blocking Google Desktop (measl at mfn.org (J.A. Terranson))
blocking Google Desktop (jasonc at science.org (Jason Coombs))
[USN-247-1] Heimdal vulnerability (martin.pitt at canonical.com (Martin Pitt))
blocking Google Desktop (randallm at fidmail.com (Randall M))
Some one needs their coffee. WAS: blocking Google Desktop (randallm at fidmail.com (Randall M))
blocking Google Desktop (gboyce at badbelly.com (gboyce))
Cisco Certifications (andrew.rse at gmail.com (Andrew Smith))
Cisco Certifications (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
Google creates SPAM haven (adam.laurie at thebunker.net (Adam Laurie))
Hacked email reveals secrets (spaceweb1 at rediffmail.com (|:: space web :|))
Google creates SPAM haven (stan.bubrouski at gmail.com (Stan Bubrouski))
Google creates SPAM haven (stan.bubrouski at gmail.com (Stan Bubrouski))
Google creates SPAM haven (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Google creates SPAM haven (stan.bubrouski at gmail.com (Stan Bubrouski))
Google creates SPAM haven (measl at mfn.org (J.A. Terranson))
RR Donnelley & Sons - Security Contact (Security at peadro.net (Terminal Entry))
RS-2006-1: Multiple flaws in VHCS 2.x (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
blocking Google Desktop (nick at virus-l.demon.co.uk (Nick FitzGerald))
XSS in PlaySMS (mohajali2k4 at gmail.com (M.o.H.a.J.a.L.i))
Google creates SPAM haven (niek at asbak.coding-slaves.com (Niek))
blocking Google Desktop (gboyce at badbelly.com (gboyce))

February 12 (13 messages)

Cisco Certifications (mayhem at recursiva.org (Alessio Pennasilico))
Testing 3G technology ? (mark.sec at gmail.com (Mark Sec))
blocking Google Desktop (measl at mfn.org (J.A. Terranson))
Cisco Certifications (pingywon at hotmail.com (pingywon))
Google creates SPAM haven (adam.laurie at thebunker.net (Adam Laurie))
[ GLSA 200602-04 ] Xpdf, Poppler: Heap overflow (koon at gentoo.org (Thierry Carrez))
[ GLSA 200602-05 ] KPdf: Heap based overflow (koon at gentoo.org (Thierry Carrez))
Privilege Scalation for Windows Networks using weak Service restrictions v2.0 exploit (atarasco at gmail.com (Andres Tarasco))
Privilege Scalation for Windows Networks using weak Service restrictions v2.0 exploit (ad at heapoverflow.com (ad@...poverflow.com))
Google creates SPAM haven (vtlists at wyae.de (Volker Tanger))
Cisco Certifications (kez-fulld at crypt.gen.nz (Kerry Thompson))
Privilege Scalation for Windows Networks using weak Service restrictions v2.0 exploit (atarasco at gmail.com (Andres Tarasco))
Re: What can a Remote Vulnerability Scanner do in Future? (security at webalive.biz (Tim Nelson))

February 13 (38 messages)

Re: Microsoft AntiSpyware attacks Norton AV? (davek_throwaway at hotmail.com (Dave Korn))
Re: Microsoft AntiSpyware attacks Norton AV? (nekramer at mindtheater.net (Nancy Kramer))
Everyone's loginName variable Cross Site Scripting Vulnerability (simo at morx.org (simo@...x.org))
Re: Microsoft AntiSpyware attacks Norton AV? (me at n33t.org (Nick Hyatt))
Comment Spam: new trends, failing counter-measures and why it's a big deal (ge at linuxbox.org (Gadi Evron))
Re: Microsoft AntiSpyware attacks Norton AV? (gautam.bipin at gmail.com (Bipin Gautam))
Comment Spam: new trends, failing counter-measures and why it's a big deal (very at unprivate.com (php0t))
Comment Spam: new trends, failing counter-measures and why it's a big deal (nick at virus-l.demon.co.uk (Nick FitzGerald))
Comment Spam: new trends, failing counter-measures and why it's a big deal (michaelslists at gmail.com (Michael Silk))
Comment Spam: new trends, failing counter-measures and why it's a big deal (very at unprivate.com (php0t))
Comment Spam: new trends, failing counter-measures and why it's a big deal (gareth.davies at mynetsec.com (Gareth Davies))
HITB E-Zine #38 Released ! (prabu at hackinthebox.org (Praburaajan))
[SECURITY] [DSA 968-1] New noweb packages fix insecure temporary file creation (joey at infodrom.org (Martin Schulze))
Comment Spam: new trends, failing counter-measures and why it's a big deal (very at unprivate.com (php0t))
Comment Spam: new trends, failing counter-measures and why it's a big deal (ahaning at gmail.com (Andrew Haninger))
Bypass Fortinet anti-virus using FTP (mdessus at gmail.com (Mathieu Dessus))
URL filter bypass in Fortinet (mdessus at gmail.com (Mathieu Dessus))
[SECURITY] [DSA 969-1] New scponly packages fix potential root vulnerability (joey at infodrom.org (Martin Schulze))
Re: blocking Google Desktop (mamo74 at gmail.com (mamo))
Latest wu-ftpd exploit :-s (mark.heiligen at gmx.at (Mark Heiligen))
working of winpcap (yogesh_choubey at yahoo.com (yogesh choubey))
Internet Explorer drag&drop 0day (ge at linuxbox.org (Gadi Evron))
Internet Explorer drag&drop 0day (Thierry at Zoller.lu (Thierry Zoller))
Internet Explorer drag&drop 0day (shyaam at gmail.com (Shyaam))
Internet Explorer drag&drop 0day (ge at linuxbox.org (Gadi Evron))
Need some advice for a new customer (redleg18 at gmail.com (Red Leg))
Comment Spam: new trends, failing counter-measures and why it's a big deal (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Internet Explorer drag&drop 0day (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Need some advice for a new customer (prb at lava.net (Peter Besenbruch))
BackTrack developer edition (fabrice.ndjidie at gmail.com (Fabrice Ndjidie))
Comment Spam: new trends, failing counter-measures and why it's a big deal (very at unprivate.com (php0t))
blocking Google Desktop (michael.holstein at csuohio.edu (Michael Holstein))
blocking Google Desktop (hi.prabhat at gmail.com (Prabhat Sharma))
blocking Google Desktop (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
blocking Google Desktop (michael.holstein at csuohio.edu (Michael Holstein))
Comment Spam: new trends, failing counter-measures and why it's a big deal (very at unprivate.com (php0t))
[ GLSA 200602-06 ] ImageMagick: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
defeating voice captchas (ge at linuxbox.org (Gadi Evron))

February 14 (36 messages)

Advisory: Internet Explorer Drag and Drop Redeux [CVE-2005-3240] (fwd) (mattmurphy at kc.rr.com (Matthew Murphy))
Advisory: Internet Explorer Drag and Drop Redeux [CVE-2005-3240] (fwd) (mattmurphy at kc.rr.com (Matthew Murphy))
Latest wu-ftpd exploit :-s (vun.list at gmail.com (John Smith))
[ MDKSA-2006:039 ] - Updated gnutls packages fix libtasn1 out-of-bounds access vulnerabilities (security at mandriva.com (security@...driva.com))
[SECURITY] [DSA 970-1] New kronolith packages fix cross-site scripting (joey at infodrom.org (Martin Schulze))
On the "0-day" term (coley at mitre.org (Steven M. Christey))
Internet Explorer drag&drop 0day (full-disclosure at sandman.za.net (Markus))
On the "0-day" term (jasonc at science.org (Jason Coombs))
defeating voice captchas (stelian.ene at gecadtech.com (Stelian Ene))
[SECURITY] [DSA 971-1] New xpdf packages fix denial of service (joey at infodrom.org (Martin Schulze))
defeating voice captchas (jerome.athias at free.fr (Jerome Athias))
Re: Latest wu-ftpd exploit :-s (marco.monicelli at marcegaglia.com (Marco Monicelli))
working of winpcap (barrie at reboot-robot.net (Barrie Dempster))
defeating voice captchas (ge at linuxbox.org (Gadi Evron))
Re: On the "0-day" term (ge at linuxbox.org (Gadi Evron))
Re: defeating voice captchas (ol at uncon.org (ol))
Re: On the "0-day" term (ad at heapoverflow.com (ad@...poverflow.com))
Anybody else getting trojans from someone masquerading as fyodor? (markc at beigebox.liquidev.com (Mark))
Anybody else getting trojans from someone masquerading as fyodor? (markc at beigebox.liquidev.com (Mark))
Re: On the "0-day" term (fd at g-0.org (GroundZero Security))
Interception of SSL 3 communication (feiginml at gmail.com (Eli Feigin))
blocking Google Desktop (sekure at gmail.com (sekure))
iDefense Labs Quarterly Hacking Challenge (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
blocking Google Desktop (michael.holstein at csuohio.edu (Michael Holstein))
iDefense Security Advisory 02.14.06: Microsoft Windows Media Player Plugin Buffer Overflow Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense…)
blocking Google Desktop (sekure at gmail.com (sekure))
XSS and SQL injection in sNews (joffer at gmail.com (Alexander Hristov))
Fun with Foundstone (orangeofficer at hushmail.com (orangeofficer@...hmail.com))
Tracking with etags (nard.list at gmail.com (Adam Gleave))
Re: Fun with Foundstone (davek_throwaway at hotmail.com (Dave Korn))
Fun with Foundstone (andfarm at gmail.com (Andrew Farmer))
Fun with Foundstone (jasonc at science.org (Jason Coombs))
Internet Explorer drag&drop 0day (Thierry at Zoller.lu (Thierry Zoller))
Re: Fun with Foundstone (ad at heapoverflow.com (ad@...poverflow.com))
Comment spam: drive-by sites, domains and spyware - analysis, samples and facts (ge at linuxbox.org (Gadi Evron))
[EEYEB-20051017] Windows Media Player BMP Heap Overflow (Advisories at eeye.com (eEye Advisories))

February 15 (32 messages)

Maxxuss does it again! OSx86 10.4.4 Security Broken! (prabu at hackinthebox.org (Praburaajan))
[ GLSA 200602-07 ] Sun JDK/JRE: Applet privilege escalation (dercorny at gentoo.org (Stefan Cornelius))
Re: Fun with Foundstone (mail at hackingspirits.com (Debasis Mohanty))
XSS and SQL injection in sNews (joffer at gmail.com (Alexander Hristov))
[SECURITY] [DSA 972-1] New pdfkit.framework packages fix denial of service (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 973-1] New OTRS packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
[USN-248-1] unzip vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-249-1] xpdf/poppler/kpdf vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-250-1] Linux kernel vulnerability (martin.pitt at canonical.com (Martin Pitt))
[ Secuobs - Advisory ] Another kind of DoS on Nokia cell phones (research at infratech.fr (Infratech Research))
[SECURITY] [DSA 974-1] New gpdf packages fix denial of service (joey at infodrom.org (Martin Schulze))
Tracking with etags (guninski at guninski.com (Georgi Guninski))
Kadu Remote Denial Of Service Fun (bania.piotr at gmail.com (Piotr Bania))
CYBSEC - Security Pre-Advisory: Arbitrary File Read/Delete in SAP BC (lmeiners at cybsec.com (Leandro Meiners))
CYBSEC - Security Pre-Advisory: Phishing Vector in SAP BC (lmeiners at cybsec.com (Leandro Meiners))
iDefense Labs Quarterly Hacking Challenge (simon at snosoft.com (Simon Smith))
CYBSEC - Security Pre-Advisory: Arbitrary File Read/Delete in SAP BC (kf_lists at digitalmunition.com (KF (lists)))
[USN-248-2] unzip regression fix (martin.pitt at canonical.com (Martin Pitt))
iDefense Labs Quarterly Hacking Challenge (ad at heapoverflow.com (ad@...poverflow.com))
[SECURITY] [DSA 975-1] New nfs-user-server packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Forensic Analysis of a Paypal Phishing Scam (bpasdar at igxglobal.com (Babak Pasdar))
[SECURITY] [DSA 976-1] New libast packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
iDefense Labs Quarterly Hacking Challenge (jerome.athias at free.fr (Jerome Athias))
Cisco Security Advisory: TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products (psirt at cisco.com (Cisco Systems Product Security I…)
iDefense Labs Quarterly Hacking Challenge (stan.bubrouski at gmail.com (Stan Bubrouski))
iDefense Labs Quarterly Hacking Challenge (michael.holstein at csuohio.edu (Michael Holstein))
Re: Re: Fun with Foundstone (davek_throwaway at hotmail.com (Dave Korn))
Re: Re: Fun with Foundstone (davek_throwaway at hotmail.com (Dave Korn))
iDefense Labs Quarterly Hacking Challenge (ad at heapoverflow.com (ad@...poverflow.com))
iDefense Labs Quarterly Hacking Challenge (str0ke at milw0rm.com (str0ke))
iDefense Labs Quarterly Hacking Challenge (stan.bubrouski at gmail.com (Stan Bubrouski))
Re: What can a Remote Vulnerability Scanner do in Future? (microchp at microchp.org (Aaron))

February 16 (41 messages)

iUser Ecommerce - Remote Command Execution Vulnerability (wr0ck.lists at gmail.com (Scott Dewey))
Web Calendar Pro - Denial of Service SQL Injection Vulnerability (wr0ck.lists at gmail.com (Scott Dewey))
HostAdmin - Remote Command Execution Vulnerability (wr0ck.lists at gmail.com (Scott Dewey))
Wimpy MP3 Player - Text file overwrite vulnerability (wr0ck.lists at gmail.com (Scott Dewey))
Internet Explorer drag&drop 0day (full-disclosure at sandman.za.net (Markus))
Kyocera Network Printers (evader.aether at gmail.com (evader))
Re: Re: Fun with Foundstone (mail at hackingspirits.com (Debasis Mohanty))
What is the state of vulnerability research? (coley at mitre.org (Steven M. Christey))
[SECURITY] [DSA 977-1] New heimdal packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Winamp .m3u fun again ;) (smaillist at gmail.com (Sowhat))
BMP WMPlayer vulnerability (karma at designfolks.com.au (Karma))
Internet Explorer drag&drop 0day (Thierry at Zoller.lu (Thierry Zoller))
Internet Explorer drag&drop 0day (full-disclosure at sandman.za.net (Markus))
First WMF mass mailer ItW (phishing Trojan) (ge at linuxbox.org (Gadi Evron))
First WMF mass mailer ItW (phishing Trojan) (Vulnerability at messagelabs.com (Vulnerability Management))
First WMF mass mailer ItW (phishing Trojan) (ge at linuxbox.org (Gadi Evron))
First WMF mass mailer ItW (phishing Trojan) (ge at linuxbox.org (Gadi Evron))
First WMF mass mailer ItW (phishing Trojan) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
First MacOS X Trojan ITW (houser at hush.com (houser@...h.com))
Critical SQL Injection PHPNuke <= 7.8 - Your_Account module (sp3x at securityreason.com (SecurityReason - sp3x))
BMP WMPlayer vulnerability (kokanin at gmail.com (Knud Erik Højgaard))
MS06-005 BMP WMPlayer Exploit (redsand at redsand.net (redsand@...sand.net))
MS06-005 BMP WMPlayer Exploit (dbounds at gmail.com (Darren Bounds))
[USN-251-1] libtasn vulnerability (martin.pitt at canonical.com (Martin Pitt))
Few recent good security books (ktriv3di at msn.com (Hochin Chen))
Password disclosure and remote access in Netcool/NeuSecure Security information management platform (dsnezhkov at gmail.com (D.Snezhkov))
Fun with Foundstone (unknown.pentester at gmail.com (pagvac))
[ GLSA 200602-08 ] libtasn1, GNU TLS: Security flaw in DER decoding (koon at gentoo.org (Thierry Carrez))
[ GLSA 200602-09 ] BomberClone: Remote execution of arbitrary code (koon at gentoo.org (Thierry Carrez))
Your neighbor's security is critical to your security (bpasdar at igxglobal.com (Babak Pasdar))
Your neighbor's security is critical to your security (simon at snosoft.com (Simon Smith))
Your neighbor's security is critical to your security (bpasdar at igxglobal.com (Babak Pasdar))
Your neighbor's security is critical to your security (michael.holstein at csuohio.edu (Michael Holstein))
Soldier of Fortune II format string through PunkBuster 1.180 (aluigi at autistici.org (Luigi Auriemma))
MS06-06 Windows Media Player Exploitation (c0ntexb at gmail.com (c0ntex))
uzbekistan torture docs (stuart at cyberdelix.net (lsi))
MS06-06 Windows Media Player Exploitation (ad at heapoverflow.com (ad@...poverflow.com))
Your neighbor's security is critical to your security (chromazine at sbcglobal.net (Steve Kudlak))
MS06-06 Windows Media Player Exploitation (ad at heapoverflow.com (ad@...poverflow.com))
MS06-06 Windows Media Player Exploitation (fdlist at digitaloffense.net (H D Moore))
Your neighbor's security is critical to your security (bpasdar at igxglobal.com (Babak Pasdar))

February 17 (29 messages)

MS06-06 Windows Media Player Exploitation (c0ntexb at gmail.com (c0ntex))
MS06-06 Windows Media Player Exploitation (fdlist at digitaloffense.net (H D Moore))
Need some advice for a new customer (Mark.Handy at morganstanley.com (Handy, Mark (IT)))
MS06-0[0]6 Windows Media Player Exploitation [CODE] (mattmurphy at kc.rr.com (Matthew Murphy))
[SECURITY] [DSA 978-1] New GnuPG packages fix invalid success return (joey at infodrom.org (Martin Schulze))
MS06-06 Windows Media Player Exploitation (c0ntexb at gmail.com (c0ntex))
MS06-06 Windows Media Player Exploitation (c0ntexb at gmail.com (c0ntex))
Orwell's country wants Big Brother backdoor in Vista cipher! (etomcat at freemail.hu (Feher Tamas))
Looking behind the smoke screen of the Internet and Internationa Infrastructure: DNS recursive attacks, spamvrtised domains, p… (ge at linuxbox.org (Gadi Evron))
Orwell's country wants Big Brother backdoor in Vista cipher! (leife at dls.net (Leif Ericksen))
MS06-0[0]6 Windows Media Player Exploitation [CODE] (fdlist at digitaloffense.net (H D Moore))
MS06-0[0]6 Windows Media Player Exploitation [CODE] (fdlist at digitaloffense.net (H D Moore))
Orwell's country wants Big Brother backdoor inVista cipher! (fd at g-0.org (GroundZero Security))
[SECURITY] [DSA 979-1] New pdfkit.framework packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
[USN-252-1] gnupg vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-253-1] heimdal vulnerability (martin.pitt at canonical.com (Martin Pitt))
Orwell's country wants Big Brother backdoor in Vista cipher! (simon at snosoft.com (Simon Smith))
Orwell's country wants Big Brother backdoor in Vista cipher! (bpasdar at igxglobal.com (Babak Pasdar))
Re: First WMF mass mailer ItW (phishing Trojan) (bugtraq at securescience.net (Lance James))
Mozila Thunderbird 1.5 Address Book DoS (javor at securax.org (Javor Ninov))
[ MDKSA-2006:040 ] - Updated kernel packages fix multiple vulnerabilities (security at mandriva.com (security@...driva.com))
First WMF mass mailer ItW (phishing Trojan) (bkfsec at sdf.lonestar.org (bkfsec))
Cisco Certifications (andrew.rse at gmail.com (Andrew Smith))
Cisco Certifications (ccarpenter at dswa.net (Christopher Carpenter))
[ MDKSA-2006:041 ] - Updated bluez-hcidump packages fix buffer overflow vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:042 ] - Updated libtiff packages fix vulnerability (security at mandriva.com (security@...driva.com))
Cisco Certifications (michael.holstein at csuohio.edu (Michael Holstein))
[ MDKSA-2006:043 ] - Updated gnupg packages fix signature file verification vulnerability (security at mandriva.com (security@...driva.com))
Pharming breaks SSL via Trojan {Emerging Threats} (bugtraq at securescience.net (Lance James))

February 18 (13 messages)

Cisco Certifications (ivanhec at gmail.com (Ivan .))
Cisco Certifications (andrew.rse at gmail.com (Andrew Smith))
[ GLSA 200602-10 ] GnuPG: Incorrect signature verification (koon at gentoo.org (Thierry Carrez))
RE: Latest wu-ftpd exploit :-s (rvdwesten at gmail.com (Ronald van der Westen))
CALL FOR PAPER - SYSCAN'06 (organiser at syscan.org (organiser@...can.org))
Orwell's country wants Big Brother backdoor in Vista cipher! (chromazine at sbcglobal.net (Steve Kudlak))
[FLSA-2006:152809] Updated squid package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:168935] Updated openssh packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:175406] Updated Apache httpd packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
User Enumeration Flaw (Mar.Shatz at education.gov.il (Mar.Shatz@...cation.gov.il))
User Enumeration Flaw (simon at snosoft.com (Simon Smith))
new linux malware (ge at linuxbox.org (Gadi Evron))
User Enumeration Flaw (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

February 19 (14 messages)

The New Face of Phishing (ge at linuxbox.org (Gadi Evron))
new linux malware (fd at g-0.org (GroundZero Security))
new linux malware (ge at linuxbox.org (Gadi Evron))
new linux malware (fd at g-0.org (GroundZero Security))
new linux malware (ge at linuxbox.org (Gadi Evron))
update on the linux worm (ge at linuxbox.org (Gadi Evron))
update on the linux worm (wh1t3h4t3 at yahoo.co.uk (Micheal Turner))
update on the linux worm (filbert at pandora.be (Filbert))
update on the linux worm (bfilipov at gmail.com (Boris Filipov))
update on the linux worm (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
update on the linux worm (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
[TZO-062006] Safe'nVulnerable (Thierry at Zoller.lu (Thierry Zoller))
Multiple vulnerabilities in PostNuke <= 0.761 (max at jestsuper.pl (Maksymilian Arciemowicz))
Advisory: MiniNuke CMS System all versions (pages.asp) SQL Injection vulnerability (nukedx at nukedx.com (nukedx@...edx.com))

February 20 (36 messages)

Insecurity in Finnish parlament (computers) (cruzan at gmail.com (Olli Haukkovaara))
RE: Latest wu-ftpd exploit :-s (andrew.rse at gmail.com (Andrew Smith))
Tel Aviv University Security Forum (TAUSEC) - Sunday 26/feb (ge at linuxbox.org (Gadi Evron))
How we caught an Identity Thief (bpasdar at igxglobal.com (Babak Pasdar))
How we caught an Identity Thief (barrie at reboot-robot.net (Barrie Dempster))
Re: User Enumeration Flaw (davek_throwaway at hotmail.com (Dave Korn))
How we caught an Identity Thief (bpasdar at igxglobal.com (Babak Pasdar))
Week.07 February'06 Security Intelligence Week-in-Review (bpasdar at igxglobal.com (Babak Pasdar))
How we caught an Identity Thief (barrie at reboot-robot.net (Barrie Dempster))
How we caught an Identity Thief (bpasdar at igxglobal.com (Babak Pasdar))
PHP and SCRIPT_NAME variable (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
Re: User Enumeration Flaw (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
How we caught an Identity Thief (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Gay Security Industry Experts Exposed! 1st Issue! What has JP (John Vranesevich) been up to lately? FIND OUT HERE! (ibash at hushmail.com (ibash@...hmail.com))
SUSE Security Announcement: gpg, liby2util signature checking problems (SUSE-SA:2006:009) (meissner at suse.de (Marcus Meissner))
How we caught an Identity Thief (bpasdar at igxglobal.com (Babak Pasdar))
How we caught an Identity Thief (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
PHPMyChat Authentication Bypass (mail at hackingspirits.com (Debasis Mohanty))
Re: new linux malware (ge at linuxbox.org (Gadi Evron))
[ GLSA 200602-11 ] OpenSSH, Dropbear: Insecure use of system() call (koon at gentoo.org (Thierry Carrez))
Quarantine your infected users spreading malware (ge at linuxbox.org (Gadi Evron))
Johnny Long's e-mail addy? (xyberpix at xyberpix.com (xyberpix))
Johnny Long's e-mail addy? (xyberpix at xyberpix.com (xyberpix))
“if you are not doing anything wrong, why should you worry about it?” (ge at linuxbox.org (Gadi Evron))
Sorry (ge at linuxbox.org (Gadi Evron))
Sorry (coderman at gmail.com (coderman))
Re: “if you are not doing a =?WINDOWS-1252?Q?nything_wrong, _why_should_you_worry_about_it=3F=94?= (coderman at gmail.com (coderman))
Compromised hosts lists (jlay at slave-tothe-box.net (James Lay))
Whitepaper by Amit Klein: "HTTP Response Smuggling" (aksecurity at hotpop.com (Amit Klein (AKsecurity)))
Re: First WMF mass mailer ItW (phishing Trojan) (bugtraq at securescience.net (Lance James))
Re: new linux malware (marco.monicelli at marcegaglia.com (Marco Monicelli))
Insecurity in Finnish parlament (computers) (markus.jansson at hushmail.com (Markus Jansson))
³if you are not doing anything wrong, why should you worry about it?² (php at thelonecoder.com (Stephen Johnson))
Re: update on the linux worm (smooge at gmail.com (Stephen J. Smoogen))
Secunia Research: NJStar Word Processor Font Name Buffer Overflow (remove-vuln at secunia.com (Secunia Research))
MiniNuke CMS System all versions (pages.asp) SQL Injection (nukedx at nukedx.com (nukedx@...edx.com))

February 21 (54 messages)

Compromised hosts lists (jasonc at science.org (Jason Coombs))
Sorry (ge at linuxbox.org (Gadi Evron))
Compromised hosts lists (ge at linuxbox.org (Gadi Evron))
“if you are not doing a =?WINDOWS-1252?Q?nything_wrong, _why_should_you_worry_about_it=3F=94?= (leife at dls.net (Leif Ericksen))
Forum / Site redone (nodialtone at comcast.net (nodialtone))
Sorry (measl at mfn.org (J.A. Terranson))
Johnny Long's e-mail addy? (native.code at gmail.com (Native.Code))
Re: “if you are not doing a =?WINDOWS-1252?Q?nything_wrong, _why_should_you_worry_about_it=3F=94?= (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Insecurity in Finnish parlament (computers) (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Compromised hosts lists (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Johnny Long's e-mail addy? (dudevanwinkle at gmail.com (Dude VanWinkle))
Johnny Long's e-mail addy? (xyberpix at xyberpix.com (xyberpix))
Forum / Site redone (njh at bandsman.co.uk (Nigel Horne))
Sorry (ad at heapoverflow.com (ad@...poverflow.com))
Insecurity in Finnish parlament (computers) (cruzan at gmail.com (Olli Haukkovaara))
Insecurity in Finnish parlament (computers) (markus.jansson at hushmail.com (Markus Jansson))
Insecurity in Finnish parlament (computers) (cruzan at gmail.com (Olli Haukkovaara))
Quarantine your infected users spreading malware (Simon.Richter at hogyros.de (Simon Richter))
Insecurity in Finnish parlament (computers) (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Quarantine your infected users spreading malware (njh at bandsman.co.uk (Nigel Horne))
Re: User Enumeration Flaw (michael.holstein at csuohio.edu (Michael Holstein))
Compromised hosts lists (jlay at slave-tothe-box.net (James Lay))
Compromised host list - some clarification... (jlay at slave-tothe-box.net (James Lay))
Re: if you are not doing anything wrong, why should you worry about it? (davek_throwaway at hotmail.com (Dave Korn))
Re: Forum / Site redone (davek_throwaway at hotmail.com (Dave Korn))
Re: Forum / Site redone (njh at bandsman.co.uk (Nigel Horne))
Insecurity in Finnish parlament (computers) (markus.jansson at hushmail.com (Markus Jansson))
Insecurity in Finnish parlament (computers) (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
[USN-256-1] bluez-hcidump vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-254-1] noweb vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-255-1] openssh vulnerability (martin.pitt at canonical.com (Martin Pitt))
msgina.dll (khaalel at gmail.com (khaalel))
Compromised host list - some clarification... (rmckenzi at rpmdp.com (Robert P. McKenzie))
“if you are not doing a =?WINDOWS-1252?Q?nything_wrong, _why_should_you_worry_about_it=3F=94?= (chromazine at sbcglobal.net (Steve Kudlak))
www.wpad.net (hi.prabhat at gmail.com (Prabhat Sharma))
SV: msgina.dll (jan at boyakasha.dk (Jan Nielsen))
[ GLSA 200602-12 ] GPdf: Heap overflows in included Xpdf code (koon at gentoo.org (Thierry Carrez))
www.wpad.net (thegesus at gmail.com (TheGesus))
Compromised host list - some clarification... (piercede at pdx.edu (Dean Pierce))
Compromised host list - some clarification... (jlay at slave-tothe-box.net (James Lay))
Compromised hosts lists (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Re: Forum / Site redone (davek_throwaway at hotmail.com (Dave Korn))
Re: Full-Disclosure Digest, Vol 12, Issue 39 (DMCCOY at bbl-inc.com (DONNY MCCOY))
Re: Full-Disclosure Digest, Vol 12, Issue 39 (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[ MDKSA-2006:044 ] - Updated kernel packages fix multiple vulnerabilities (security at mandriva.com (security@...driva.com))
Compromised hosts lists (frank at knobbe.us (Frank Knobbe))
Re: Full-Disclosure Digest, Vol 12, Issue 39 (michael.holstein at csuohio.edu (Michael Holstein))
msgina.dll (trains at doctorunix.com (trains@...torunix.com))
Compromised hosts lists (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: First WMF mass mailer ItW (phishing Trojan) - think singularities (bugtraq at securescience.net (Lance James))
msgina.dll (otter_e at yahoo.com (Otter E))
Insecurity in Finnish parlament (computers) (jess.kitchen at adjacentnetworks.net (Jess Kitchen))
RE: First WMF mass mailer ItW (phishing Trojan) - think singularities (kkousky at ip3inc.com (Ken Kousky))
Insecurity in Finnish parlament (computers) (markus.jansson at gmail.com (Markus Jansson))

February 22 (33 messages)

[ MDKSA-2006:045 ] - Updated MySQL packages fix temporary file vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:046 ] - Updated tar packages fix vulnerability (security at mandriva.com (security@...driva.com))
Re: Re: Forum / Site redone (nodialtone at comcast.net (nodialtone))
Re: Re: Forum / Site redone (simon at snosoft.com (Simon Smith))
[INetCop Security Advisory] Global Hauri Virobot cookie exploit (xploit at hackermail.com (dong-hun you))
New auditor security collection 081004-01 released (mixerhb at hotmail.com (Arturo Hern�ndez Bertrand))
New auditor security collection 081004-01 released (stefmit at gmail.com (Stef))
What is the state of vulnerability research? (now in spam flavor) (coley at mitre.org (Steven M. Christey))
Exploiting 'Non-Critical' Media Player Vulnerabilities for Fun and Profit [Perl Version of MS06-006 Exploit] (mattmurphy at kc.rr.com (Matthew Murphy))
InqTana Through the eyes of Dr. Frankenstein. (kf_lists at digitalmunition.com (KF (lists)))
Re: Quarantine your infected users spreading malware (radoslav.dejanovic at opsus.hr (Radoslav Dejanović))
SUSE Security Announcement: CASA remote code execution (SUSE-SA:2006:010) (meissner at suse.de (Marcus Meissner))
The Domain Name Service as an IDS (ge at linuxbox.org (Gadi Evron))
Automated Vulnerability Scanners (full-disclosure at list.za.net (Q Beukes))
Insecurity in Finnish parlament (computers) (cruzan at gmail.com (Olli Haukkovaara))
Insecurity in Finnish parlament (computers) (cruzan at gmail.com (Olli Haukkovaara))
www.wpad.net (hi.prabhat at gmail.com (Prabhat Sharma))
[SECURITY] [DSA 980-1] New tutos packages fix multiple vulnerabilities (mstone at klecker.debian.org (Michael Stone))
Re: Quarantine your infected users spreading malware (beck at bofh.cns.ualberta.ca (Bob Beck))
IpSwitch WhatsUp Professional 2006 DoS (jzlatin at ramat.cc (Josh Zlatin))
Compromised hosts lists (guardczar at yahoo.com (security czar))
Mozilla Thunderbird : Remote Code Execution & Denial of Service (r.lifchitz at sysdream.com (Renaud Lifchitz))
Google Reader "preview" and "lens" script improper feed validation (mail at hackingspirits.com (Debasis Mohanty))
Latest Google vulnerability threatens the world (obnoxious at hush.com (obnoxious@...h.com))
valid security contact for IronMountain / LiveVault (jhart at spoofed.org (Jon Hart))
obnoxious@...ksuck.lesscum back RE: Latest Google vulnerability threatens the world (john_fd at hushmail.com (john_fd@...hmail.com))
Mozilla Thunderbird : Remote Code Execution & Denial of Service (ad at heapoverflow.com (ad@...poverflow.com))
obnoxious@...ksuck.lesscum back RE: Latest Googlevulnerability threatens the world (fd at g-0.org (GroundZero Security))
Tech Tip: An Illustrated Guide to SSH Agent Forwarding (steve at unixwiz.net (Steve Friedl))
Mozilla Thunderbird : Remote Code Execution& Denial of Service (toddtowles at brookshires.com (Todd Towles))
Insecurity in Finnish parlament (computers) (markus.jansson at hushmail.com (Markus Jansson))
Detours and Trojans (thalm at hotmail.com (Tiago Halm))
fun w/phishers? (xbud at g0thead.com (Orlando Padilla))

February 23 (38 messages)

update on the linux worm (nodialtone at comcast.net (Byron Copeland))
ISC(2) Any news? (measl at mfn.org (J.A. Terranson))
Gay Security Industry Experts Exposed! 1st Issue! What has JP (John Vranesevich) been up to lately? FIND OUT HERE! (don.bailey at gmail.com (Don Bailey))
Gay Security Industry Experts Exposed! 1st Issue! What has JP (John Vranesevich) been up to lately? FIND OUT HERE! (nodialtone at comcast.net (nodialtone))
Gay Security Industry Experts Exposed! 1st Issue! What has JP (John Vranesevich) been up to lately? FIND OUT HERE! (pvnick at gmail.com (Paul))
ISC2 vs Rob Slade (measl at mfn.org (J.A. Terranson))
Gay Security Industry Experts Exposed! 1st Issue! What has JP (John Vranesevich) been up to lately? FIND OUT HERE! (don.bailey at gmail.com (Don Bailey))
[ MDKSA-2006:047 ] - Updated metamail packages fix vulnerability (security at mandriva.com (security@...driva.com))
Gay Security Industry Experts Exposed! 1st Issue! What has JP (John Vranesevich) been up to lately? FIND OUT HERE! (don.bailey at gmail.com (Don Bailey))
zoo contains exploitable buffer overflows (jean-sebastien at guay-leroux.com (Jean-Sébastien Guay-Leroux))
Gay Security Industry Experts Exposed! 1st Issue! What has JP (John Vranesevich) been up to lately? FIND OUT HERE! (Valdis.Kletnieks at vt.edu (Valdis.Kletni…)
Gay Security Industry Experts Exposed! 1st Issue! What has JP (John Vranesevich) been up to lately? FIND OUT HERE! (kyle at randomvoids.com (Kyle Lutze))
Gay Security Industry Experts Exposed! 1st Issue! What has JP (John Vranesevich) been up to lately? FIND OUT HERE! (nodialtone at comcast.net (nodialtone))
Gay Security Industry Experts Exposed! 1st Issue! What has JP (John Vranesevich) been up to lately? FIND OUT HERE! (nodialtone at comcast.net (nodialtone))
Reported Google Vuln (nodialtone at comcast.net (nodialtone))
Insecurity in Finnish parlament (computers) (cruzan at gmail.com (Olli Haukkovaara))
Detours and Trojans (eflorio at edmaster.it (eflorio))
fun w/phishers? (native.code at gmail.com (Native.Code))
Security Contact at Network Intelligence? (xyberpix at xyberpix.com (Xyberpix))
Firewall bug or not ? (Michal.Grzybczyk at vattenfall.pl (Michal.Grzybczyk@...tenfall.pl))
Secunia Research: Visnetic AntiVirus Plug-in for MailServer Privilege Escalation (remove-vuln at secunia.com (Secunia Research))
Security Contact at Network Intelligence? (h4cky0u.org at gmail.com (h4cky0u))
Security Contact at Network Intelligence? (csullo at gmail.com (Sullo))
Security Contact at Network Intelligence? (xyberpix at xyberpix.com (Xyberpix))
Google Reader "preview" and "lens" scriptimproper feed val (cedric.blancher at hotmail.com (Cedric Blancher))
[USN-257-1] tar vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: Reported Google Vuln (davek_throwaway at hotmail.com (Dave Korn))
funny :-) (unknown.pentester at gmail.com (pagvac))
Secunia Research: WinACE ARJ Archive Handling Buffer Overflow (remove-vuln at secunia.com (Secunia Research))
Adobe Macromedia ShockWave Code Execution (ad at heapoverflow.com (ad@...poverflow.com))
ZDI-06-002: Adobe Macromedia ShockWave Code Execution (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
HYSA-2006-003 Oi! Email Marketing 3.0 SQL Injection (h4cky0u.org at gmail.com (h4cky0u))
Re: How hackers cause damage... was Vulnerabilites in new laws on computer hacking (jasonc at science.org (Jason Coombs))
Re: How hackers cause damage... was Vulnerabilites in new laws on computer hacking (simon at snosoft.com (Simon Smith))
Re: How hackers cause damage... was Vulnerabilites in new laws on computer hacking (mattmurphy at kc.rr.com (Matthew Murphy))
Re: How hackers cause damage... was Vulnerabilites in new laws on computer hacking (jasonc at science.org (Jason Coombs))
RE: How hackers cause damage... was Vulnerabilites in new laws on computer hacking (cwright at bdosyd.com.au (Craig Wright))
Insecurity in Finnish parlament (computers) (markus.jansson at hushmail.com (Markus Jansson))

February 24 (29 messages)

[FLSA-2006:162750] Updated sudo packages fix security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:180036-1] Updated mozilla packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:180036-2] Updated firefox package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
Pod Slurping Code (bpasdar at igxglobal.com (Babak Pasdar))
Taking from 1 is copying. Taking from 2 is Plagiarism. (measl at mfn.org (J.A. Terranson))
Taking from 1 is copying. Taking from 2 is Plagiarism. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Quarantine your infected users spreading malware (499nag at oninet.pt (499nag))
Re: Reported Google Vuln (randy at procyonlabs.com (Randal T. Rioux))
Insecurity in Finnish parlament (computers) (cruzan at gmail.com (Olli Haukkovaara))
Pod Slurping Code (Robert.MacDonald at Haworth.com (Robert MacDonald))
Tech Tip: An Illustrated Guide to SSH Agent Forwarding (andrew2005 at ledge.co.za (Andrew McGill))
announcement: reporting and mitigating botnets (ge at linuxbox.org (Gadi Evron))
Pod Slurping Code (kokanin at gmail.com (Knud Erik Højgaard))
Pod Slurping Code (bpasdar at igxglobal.com (Babak Pasdar))
Automated Vulnerability Scanners (full-disclosure at list.za.net (Q Beukes))
Automated Vulnerability Scanners (tkrpata at bjs.com (Krpata, Tyler))
Advisory: CilemNews System <= 1.1 Remote SQL Injection Vulnerability (nukedx at nukedx.com (nukedx@...edx.com))
Advisory: Woltlab Burning Board 2.x (JGS-Gallery MOD <= 4.0) multiple XSS vulnerabilities (nukedx at nukedx.com (nukedx@...edx.com))
Advisory: MyPHPNuke <= 1.8.8 multiple XSS vulnerabilities (nukedx at nukedx.com (nukedx@...edx.com))
Automated Vulnerability Scanners (ge at linuxbox.org (Gadi Evron))
SSH bypassing in Phishing (ge at linuxbox.org (Gadi Evron))
Automated Vulnerability Scanners (simon at snosoft.com (Simon Smith))
Pod Slurping Code (full-disclosure at nospam.wafel.org (Jorrit Kronjee))
Tech Tip: An Illustrated Guide to SSH Agent Forwarding (raju at linux-delhi.org (Raj Mathur))
iDefense Security Advisory 02.24.06: SCO Unixware Setuid ptrace Local Privilege Escalation Vulnerability (labs-no-reply at idefense.com (labs-no-reply))
Automated Vulnerability Scanners (dudevanwinkle at gmail.com (Dude VanWinkle))
Automated Vulnerability Scanners (michael.holstein at csuohio.edu (Michael Holstein))
Automated Vulnerability Scanners (michael.holstein at csuohio.edu (Michael Holstein))
WinAmp Vulns (nodialtone at comcast.net (nodialtone))

February 25 (22 messages)

[ MDKSA-2005:048 ] - Updated mplayer packages fix integer overflow vulnerabilities (security at mandriva.com (security@...driva.com))
Hotmail/MSN Cookie Theft Advisory/Xploit (simo at morx.org (simo@...x.org))
iDefense Security Advisory 02.24.06: SCO Unixware Setuid ptrace Local Privilege Escalation Vulnerability (wh1t3h4t3 at yahoo.co.uk (Micheal Turner))
[FLSA-2006:138098] Updated nfs-utils package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:158543] Updated gaim package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:176731] Updated perl packages fix security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
ArGoSoft FTP server remote heap overflow (jerome.athias at free.fr (Jerome Athias))
Advisory: Pentacle In-Out Board <= 6.03 (login.asp) Authencation ByPass Vulnerability (nukedx at nukedx.com (nukedx@...edx.com))
Advisory: Pentacle In-Out Board <= 6.03 (newsdetailsview.asp newsid) Remote SQL Injection Vulnerability (nukedx at nukedx.com (nukedx@...edx.com))
Advisory: ICQmail.com & Mail2World.com (ms_inbox.asp Current_folder) XSS vulnerability (nukedx at nukedx.com (nukedx@...edx.com))
Advisory: eZ publish <= 3.7.3 (imagecatalogue module) XSS vulnerability (nukedx at nukedx.com (nukedx@...edx.com))
fun of openoffice (alert7 at xfocus.org (alert7@...cus.org))
fun of openoffice (j.schipper at math.uu.nl (Joachim Schipper))
WinAmp Vulns (andrew.rse at gmail.com (Andrew Smith))
fun of openoffice (jkalergis at gmail.com (john kalergis))
WinAmp Vulns (nodialtone at comcast.net (nodialtone))
Re: [funsec] SSH bypassing in Phishing (fw at deneb.enyo.de (Florian Weimer))
WinAmp Vulns (smaillist at gmail.com (Sowhat))
fun of openoffice (bart2k at hushmail.com (bart2k@...hmail.com))
WinAmp Vulns (andrew.rse at gmail.com (Andrew Smith))
ArGoSoft FTP server remote heap overflow (ad at heapoverflow.com (ad@...poverflow.com))
PowerTerm (nodialtone at comcast.net (nodialtone))

February 26 (11 messages)

WinAmp Vulns (nodialtone at comcast.net (nodialtone))
WinAmp Vulns (sikurezza at nexlab.it (sikurezza@...lab.it))
WinAmp Vulns (nodialtone at comcast.net (nodialtone))
Kalimba (nodialtone at comcast.net (nodialtone))
Norton Monitoring system funny problems (joffer at gmail.com (Alexander Hristov))
mysql <= 5.0.18 (sockaddr at tochka.ru (sockaddr@...hka.ru))
[ GLSA 200602-13 ] GraphicsMagick: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
[ GLSA 200602-14 ] noweb: Insecure temporary file creation (koon at gentoo.org (Thierry Carrez))
WinAmp Vulns (srattus at gmail.com (rattus))
Norton Monitoring system funny problems (yossarian at planet.nl (yossarian))
WebEx (Security at peadro.net (Terminal Entry))

February 27 (25 messages)

WebEx (adf at code511.com (A-d-F))
Quarantine your infected users spreading malware (dhudes at hudes.org (Dana Hudes))
[USN-258-1] PostgreSQL vulnerability (martin.pitt at canonical.com (Martin Pitt))
[INetCop Security Advisory] Global Hauri Virobot cookie exploit (xploit at hackermail.com (dong-hun you))
SUSE Security Announcement: kernel various security problems (SUSE-SA:2006:012) (meissner at suse.de (Marcus Meissner))
Google + Amazon fun scam (ad at heapoverflow.com (ad@...poverflow.com))
[SECURITY] [DSA 982-1] New gpdf packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Google + Amazon fun scam (nick at virus-l.demon.co.uk (Nick FitzGerald))
Google + Amazon fun scam (ad at heapoverflow.com (ad@...poverflow.com))
SAN security checklist (security.list.06 at gmail.com (victor gonzalez))
directory traversal in DirectContact 0.3b (fdonato at autistici.org (Donato Ferrante))
CarolinaCon-2006 - Call for Speakers/Papers (vvandal at well.com (Vic Vandal))
Using domain whois information for fun and profit (lolirt at gmail.com (Response Team))
Using domain whois information for fun and profit (very at unprivate.com (php0t))
IN CASE YOU MISSED: Gay Security Industry Experts Exposed! 1st Issue! What has JP (John Vranesevich) been up to lately… (ibash at hushmail.com (ibash@...hmail.c…)
Using domain whois information for fun and profit (j.schipper at math.uu.nl (Joachim Schipper))
Fwd: FAQ: How to subscribe and or contribute to cypherpunks (coderman at gmail.com (coderman))
[ MDKSA-2006:049 ] - Updated squirrelmail packages fix vulnerabilities (security at mandriva.com (security@...driva.com))
Fwd: hamachi p2p vpn nat-friendly protocol details (coderman at gmail.com (coderman))
Gay Security Industry Experts Exposed! 2nd Issue! What has James Lohman (DigiEbola) been up to lately? FIND OUT HERE! (ibash at hushmail.com (ibash@...hmail.co…)
Using domain whois information for fun and profit (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Using domain whois information for fun and profit (lolirt at gmail.com (Response Team))
Fwd: FAQ: How to subscribe and or contribute to cypherpunks (dudevanwinkle at gmail.com (Dude VanWinkle))
Re: Fwd: FAQ: How to subscribe and or contribute to cypherpunks (rsw at jfet.org (Riad S. Wahby))
Secunia Research: ArGoSoft Mail Server Pro viewheaders Script Insertion (remove-vuln at secunia.com (Secunia Research))

February 28 (47 messages)

[FLSA-2006:157366] Updated PostgreSQL packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:175818] Updated udev packages fix a security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:177326] Updated mod_auth_pgsql package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:177694] Updated auth_ldap package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:181014] Updated gnutls packages fix a security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[ MDKSA-2005:050 ] - Updated unzip packages fix vulnerabilities (security at mandriva.com (security@...driva.com))
Question about Mac OS X 10.4 Security (Klinzer at gmx.de (Ferdinand Klinzer))
Question about Mac OS X 10.4 Security (maillists at thelonecoder.com (Stephen Johnson))
[SECURITY] [DSA 983-1] New pdftohtml packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
recursive DNS servers DDoS as a growing DDoS problem (ge at linuxbox.org (Gadi Evron))
Fedex Kinkos Smart Card Authentication Bypass (bugtraq at securescience.net (Lance James))
Question about Mac OS X 10.4 Security (stevenrakick at yahoo.com (Steven Rakick))
Question about Mac OS X 10.4 Security (michael.holstein at csuohio.edu (Michael Holstein))
reduction of brute force login attempts via SSH through iptables --hashlimit (libove at felines.org (Jay Libove))
Question about Mac OS X 10.4 Security (pauls at utdallas.edu (Paul Schmehl))
Question about Mac OS X 10.4 Security (kf_lists at digitalmunition.com (KF (lists)))
Question about Mac OS X 10.4 Security (kf_lists at digitalmunition.com (KF (lists)))
Question about Mac OS X 10.4 Security (stefmit at gmail.com (Stef))
reduction of brute force login attempts via SSH through iptables --hashlimit (thotter at gmail.com (Matthijs van Otterdijk))
reduction of brute force log (rsradvan at unixworks.net (Bob Radvanovsky))
Question about Mac OS X 10.4 Security (stevenrakick at yahoo.com (Steven Rakick))
reduction of brute force log (thotter at gmail.com (Matthijs van Otterdijk))
Question about Mac OS X 10.4 Security (stefmit at gmail.com (Stef))
reduction of brute force log (thotter at gmail.com (Matthijs van Otterdijk))
reduction of brute force log (j.schipper at math.uu.nl (Joachim Schipper))
Question about Mac OS X 10.4 Security (kyphros at gmail.com (Mike Owen))
Question about Mac OS X 10.4 Security (pauls at utdallas.edu (Paul Schmehl))
Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities (r.lifchitz at sysdream.com (Renaud Lifchitz))
Re: Google + Amazon fun scam (davek_throwaway at hotmail.com (Dave Korn))
Re: Google + Amazon fun scam (stevenrakick at yahoo.com (Steven Rakick))
reduction of brute force log (gem at rellim.com (Gary E. Miller))
reduction of brute force log (rsradvan at unixworks.net (Bob Radvanovsky))
reduction of brute force login attempts via SSH through iptables --hashlimit (fd at g-0.org (GroundZero Security))
reduction of brute force login attempts via SSH through iptables --hashlimit (full-disclosure at kharkerlake.net (Christian "Khark" Lauf))
reduction of brute force login attempts via SSH through iptables --hashlimit (tastytastybeef at googlemail.com (Gary Leons))
Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities (dveditz at cruzio.com (Daniel Veditz))
reduction of brute force login attempts via SSH through iptables --hashlimit (fd at g-0.org (GroundZero Security))
reduction of brute force login attempts via SSH through iptables --hashlimit (tastytastybeef at googlemail.com (Gary Leons))
Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities (dveditz at cruzio.com (Daniel Veditz))
[ MDKSA-2006:051 ] - Updated gettext packages fix temporary file vulnerabilities (security at mandriva.com (security@...driva.com))
reduction of brute force login attempts via SSHthrough iptables --hashlimit (josh.berry at netschematics.com (Josh Berry))
Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities (r.lifchitz at sysdream.com (Renaud Lifchitz))
reduction of brute force login attempts via SSHthrough iptables --hashlimit (full-disclosure at kharkerlake.net (Christian "Khark" Lauf))
reduction of brute force login attempts via SSHthrough iptables --hashlimit (full-disclosure at kharkerlake.net (Christian "Khark" Lauf))
Limbo CMS code execution (joffer at gmail.com (Alexander Hristov))
Re: Fedex Kinkos Smart Card Authentication Bypass (ericboothe at gmail.com (Eric B))
Re: Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities (steve.shockley at shockley.net (Steve Shockley))

742 messages