full-disclosure mailing list - 2007/02

Messages by day:

February 1 (14 messages)

• Re: PC/Laptop microphones (chedder1@...il.com)
• Re: Defeating Microsoft Office Genuine Advantage (OGA) Check ("James Matthews" <nytrokiss@...il.com>)
• Re: PC/Laptop microphones (v3dt3n <mkmaxx@...il.com>)
• Re: stompy the session stomper - tool availability ("Thomas L. Romanis" <TLR@...tcullis-security.com>)
• (Psexec on *NIX) (Gianluca Giacometti <gianluca.giacometti@...pd.it>)
• Technika - Attack Scripting Environment ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: (Psexec on *NIX) ("Knud Erik Højgaard" <kokanin@...il.com>)
• Comodo Multiple insufficient argument validation of hooked SSDT function Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)
• Re: (Psexec on *NIX) ("M. Shirk" <shirkdog_list@...mail.com>)
• Re: (Psexec on *NIX) (Paul Schmehl <pauls@...allas.edu>)
• Re: (Psexec on *NIX) (Xavier Beaudouin <kiwi@....net>)
• Re: (Psexec on *NIX) (Troy Cregger <tcregger@...nedyinfo.com>)
• [USN-415-1] GTK vulnerability (Kees Cook <kees@...ntu.com>)
• umount crash and xterm (kind of) information leak! ("Carlos Barros" <barros001@...il.com>)

• Hushmail from full-disclosure-request@...ts.grok.org.uk (auto189837@...hmail.com)
• Re: (Psexec on *NIX) ("Eduardo Tongson" <propolice@...il.com>)
• Hushmail from propolice@...il.com (auto253657@...hmail.com)
• Re: (Psexec on *NIX) (Valdis.Kletnieks@...edu)
• Hushmail from Valdis.Kletnieks@...edu (auto149161@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto253657@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto143245@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto187684@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto51495@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto88814@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto271301@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto29856@...hmail.com)
• Hushmail from propolice@...il.com (auto284028@...hmail.com)
• Hushmail from propolice@...il.com (auto117847@...hmail.com)
• Hushmail from propolice@...il.com (auto189837@...hmail.com)
• Hushmail from propolice@...il.com (auto56638@...hmail.com)
• Hushmail from propolice@...il.com (auto149161@...hmail.com)
• Hushmail from propolice@...il.com (auto236137@...hmail.com)
• Hushmail from propolice@...il.com (auto275291@...hmail.com)
• Hushmail from propolice@...il.com (auto187684@...hmail.com)
• Hushmail from propolice@...il.com (auto51495@...hmail.com)
• Hushmail from propolice@...il.com (auto29856@...hmail.com)
• Hushmail from propolice@...il.com (auto271301@...hmail.com)
• Hushmail from propolice@...il.com (auto473378@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto189837@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto284028@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto473378@...hmail.com)
• Hushmail from propolice@...il.com (auto88814@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto236137@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto275291@...hmail.com)
• Re: (Psexec on *NIX) (Raj Mathur <raju@...ux-delhi.org>)
• Hushmail from raju@...ux-delhi.org (auto189837@...hmail.com)
• Hushmail from raju@...ux-delhi.org (auto284028@...hmail.com)
• Hushmail from raju@...ux-delhi.org (auto51495@...hmail.com)
• Hushmail from raju@...ux-delhi.org (auto117847@...hmail.com)
• Hushmail from raju@...ux-delhi.org (auto56638@...hmail.com)
• Re: (Psexec on *NIX) (Valdis.Kletnieks@...edu)
• Hushmail from Valdis.Kletnieks@...edu (auto149161@...hmail.com)
• Hushmail from Valdis.Kletnieks@...edu (auto51495@...hmail.com)
• Remote Sql Injection in EasyMoblog 0.5.1 # 2 ("tal argoni" <talargoni@...il.com>)
• Xss Vulnerability in EasyMoblog 0.5.1 ("tal argoni" <talargoni@...il.com>)
• Remote Sql Injection in EasyMoblog 0.5.1 ("tal argoni" <talargoni@...il.com>)
• Hushmail from Valdis.Kletnieks@...edu (auto29856@...hmail.com)
• Hushmail from raju@...ux-delhi.org (auto29856@...hmail.com)
• [TAUSEC] Next meeting of TAUSEC on Feb 11, 6 P.M ("Edward Aronovich" <eddiea@....ac.il>)
• Hushmail from talargoni@...il.com (auto149161@...hmail.com)
• Hushmail from talargoni@...il.com (auto284028@...hmail.com)
• Hushmail from talargoni@...il.com (auto189837@...hmail.com)
• Hushmail from talargoni@...il.com (auto29856@...hmail.com)
• Hushmail from talargoni@...il.com (auto253657@...hmail.com)
• Re: Hushmail from raju@...ux-delhi.org ("Rob Schreurs" <reh.schreurs@...e.nl>)
• Re: Hushmail from raju@...ux-delhi.org (Valdis.Kletnieks@...edu)
• Re: Vista Speech recognition (Thierry Zoller <Thierry@...ler.lu>)
• Re: Vista Speech recognition (Valdis.Kletnieks@...edu)
• Re: (Psexec on *NIX) ("Tyop?" <tyoptyop@...il.com>)
• Re: Hushmail from full-disclosure-request@...ts.grok.org.uk ("James Matthews" <nytrokiss@...il.com>)
• Re: (Psexec on *NIX) (chedder1@...il.com)
• Re: Vista Speech recognition ("James Matthews" <nytrokiss@...il.com>)
• Re: (Psexec on *NIX) ("Stan Bubrouski" <stan.bubrouski@...il.com>)
• Re: Hushmail from full-disclosure-request@...ts.grok.org.uk ("Mike Owen" <kyphros@...il.com>)
• Re: Hushmail from full-disclosure-request@...ts.grok.org.uk (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: JavaScript inLine Debugger - The fastest web sites debugger (technique, not a tool) (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Vista Speech recognition (Sûnnet Beskerming <info@...kerming.com>)
• [ MDKSA-2007:031 ] - Updated kdelibs packages fix KHTML vulnerability (security@...driva.com)

• [ MDKSA-2007:032 ] - Updated mpg123 packages fix DoS vulnerability. (security@...driva.com)
• [ MDKSA-2007:033 ] - Updated wireshark packages fix multiple vulnerabilities (security@...driva.com)
• Re: (Psexec on *NIX) ("Tyop?" <tyoptyop@...il.com>)
• Re: (Psexec on *NIX) ("Knud Erik Højgaard" <kokanin@...il.com>)
• Re: JavaScript inLine Debugger - The fastest web sites debugger (technique, not a tool) (Ben Bucksch <news@...ksch.org>)
• Web 2.0 backdoors made easy with MSIE & XMLHttpRequest (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest (Michal Zalewski <lcamtuf@...ne.ids.pl>)

• Re: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest ("Tyop?" <tyoptyop@...il.com>)
• Re: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Fwd: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest ("Giorgio Fedon" <giorgio.fedon@...il.com>)
• Re: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest ("James Matthews" <nytrokiss@...il.com>)
• Re: JavaScript inLine Debugger - The fastest web sites debugger (technique, not a tool) (SirDarckCat <sirdarckcat@...il.com>)
• Re: Any one saw these attacks before? ("Jason Miller" <jammer128@...il.com>)
• Vmare workstation guest isolation weaknesses (clipboard transfer) ("EitanCaspi@...oo.com" <eitancaspi@...oo.com>)
• rPSA-2007-0023-1 tshark wireshark (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest (Amit Klein <aksecurity@...il.com>)
• Full functional 0day exploit builder for sale! ("0dayDealer 0dayDealer" <a0daydealer@...mail.com>)
• Re: Vmare workstation guest isolation weaknesses (clipboard transfer) (coderman <coderman@...il.com>)

• Re: Full functional 0day exploit builder for sale! ("James Matthews" <nytrokiss@...il.com>)
• Re: (Psexec on *NIX) (Q-Ball <qballus@...il.com>)
• Re: (Psexec on *NIX) (Q-Ball <qballus@...il.com>)
• Re: Vmare workstation guest isolation weaknesses (clipboard transfer) ("James Matthews" <nytrokiss@...il.com>)
• Re: (Psexec on *NIX) ("James Matthews" <nytrokiss@...il.com>)
• Re: Vmare workstation guest isolation weaknesses (clipboard transfer) (coderman <coderman@...il.com>)
• Re: JavaScript inLine Debugger - The fastest web sites debugger (technique, not a tool) (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Full functional 0day exploit builder for sale! (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Firefox + popup blocker + XMLHttpRequest + srand() = oops (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Firefox + popup blocker + XMLHttpRequest + srand() = oops (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Firefox + popup blocker + XMLHttpRequest + srand() = oops ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest (Troy Cregger <tcregger@...nedyinfo.com>)
• iDefense Security Advisory 02.02.07: Blue Coat Systems WinProxy CONNECT Method Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [USN-417-1] PostgreSQL vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Re: (Psexec on *NIX) (Marcello Barnaba <marcello@...tmedia.info>)
• Informix SQL injection ("Joshua Tagnore" <joshua.tagnore@...il.com>)
• Re: Informix SQL injection ("Tyop?" <tyoptyop@...il.com>)
• [SECURITY] [DSA 1257-1] New samba packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [ MDKSA-2007:034 ] - Updated samba packages address multiple vulnerabilities (security@...driva.com)
• Re: Firefox + popup blocker + XMLHttpRequest + srand() = oops ("James Matthews" <nytrokiss@...il.com>)

• [USN-418-1] Bind vulnerabilities (Kees Cook <kees@...ntu.com>)
• Re: Firefox + popup blocker + XMLHttpRequest + srand() = oops (Ben Bucksch <news@...ksch.org>)
• Re: Firefox + popup blocker + XMLHttpRequest + srand() = oops ("James Matthews" <nytrokiss@...il.com>)
• Batch File Creator (A batch file that can create a program (exe, bat, mp3, etc..) and execute it without downloading anyth… (SirDarckCat <sirdarckcat@...il.com>)
• Every MS Exploit (layne@...enot.com)
• Orkut Vulnerability ("Fabio Neves Sarmento [ Gmail ]" <fabior2@...il.com>)
• PS Information Leak on HP True64 Alpha OSF1 v5.1 1885 ("Andrea \"bunker\" Purificato" <bunker@...twebnet.it>)
• Re: Informix SQL injection ("Zed Qyves" <zqyves.spamtrap@...il.com>)
• rPSA-2007-0025-1 postgresql postgresql-server (rPath Update Announcements <announce-noreply@...th.com>)
• Bluepill's Rutkowska was or is a Man ?! (<weirdstuff68@...hmail.com>)
• (offtopic) Re: Bluepill's Rutkowska was or is a Man ?! (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: PS Information Leak on HP Tru64 Alpha OSF1 v5.1 1885 ("Andrea \"bunker\" Purificato" <bunker@...twebnet.it>)
• Re: (offtopic) Re: Bluepill's Rutkowska was or is aMan ?! ("Lindley James R" <James.R.Lindley@....gov>)
• Re: Bluepill's Rutkowska was or is a Man ?! (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• [USN-419-1] Samba vulnerabilities (Kees Cook <kees@...ntu.com>)
• [USN-420-1] KDE library vulnerability (Kees Cook <kees@...ntu.com>)
• Re: Every MS Exploit ("Aaron Gray" <angray@...b.net>)
• Security Contact at Network Physics (Xyberpix <xyberpix@...erpix.com>)
• [USN-417-2] PostgreSQL 8.1 regression (Martin Pitt <martin.pitt@...onical.com>)
• How To Force Your ISP to Stop Child Porn ("Robert Kim Wireless Internet Advisor" <evdo.hsdpa@...il.com>)
• AP report: Hackers attack key Net traffic computers (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

• Re: Bluepill's Rutkowska was or is a Man ?! (nnp <version5@...il.com>)
• Re: How To Force Your ISP to Stop Child Porn ("Loptr Chaote" <loptr.chaote@...il.com>)
• [ MDKSA-2007:035 ] - Updated gd packages fix DoS vulnerability. (security@...driva.com)
• [ MDKSA-2007:036 ] - Updated libwmf packages fix embedded gd DoS vulnerability. (security@...driva.com)
• [ MDKSA-2007:037 ] - Updated postgresql packages address multiple vulnerabilities (security@...driva.com)
• [ MDKSA-2007:038 ] - Updated php packages to address multiple issues (security@...driva.com)
• Re: How To Force Your ISP to Stop Child Porn ("James Matthews" <nytrokiss@...il.com>)
• Re: AP report: Hackers attack key Net traffic computers ("James Matthews" <nytrokiss@...il.com>)
• Alibaba Alipay Remote Code Execute Vulnerability-0DAY ("ruder cocoruder" <frankruder@...mail.com>)
• Re: PS Information Leak on HP True64 Alpha OSF1 v5.1 1885 (Ivan Jager <aij+nospam@...rew.cmu.edu>)
• Re: (offtopic) Re: Bluepill's Rutkowska was or is aMan ?! (bambam <bambam.quiescence@...glemail.com>)
• Alibaba Alipay Remote Code Execute Vulnerability-0DAY ("ruder cocoruder" <frankruder@...mail.com>)
• [SECURITY] [DSA 1258-1] New Mozilla Firefox packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Zomg is vulnerable to singing drivers (<n33td33v@...hmail.com>)
• Medium level security hole in FreeProxy (Tim Brown <timb@...-dimension.org.uk>)
• rPSA-2007-0026-1 samba samba-swat (rPath Update Announcements <announce-noreply@...th.com>)
• Useful technique when performing XSS ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Bluepill's Rutkowska was or is a Man ?! (bambam <bambam.quiescence@...glemail.com>)
• Re: (Psexec on *NIX) (Siim Põder <windo@...rad-teel.net>)
• Re: AP report: Hackers attack key Net traffic computers (Simon Smith <simon@...soft.com>)
• Re: PS Information Leak on HP True64 Alpha OSF1 v5.1 1885 (Andrea Purificato - bunker <bunker@...twebnet.it>)
• iDefense Security Advisory 02.07.07: RARLabs Unrar Password Prompt Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 02.07.07: Trend Micro TmComm Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 02.07.07: Trend Micro AntiVirus UPX Parsing Kernel Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [ MDKSA-2007:039 ] - Updated gtk+2.0 packages address DoS, LSB issues, several bugs (security@...driva.com)
• [ MDKSA-2007:040 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
• Feburary 9th Chicago 2600/DefCon312 Meeting ("Steven McGrath" <steven.mcgrath@...geek.com>)
• Re: (Psexec on *NIX) (Denis Jedig <seclists@...eticon.de>)
• Re: [WEB SECURITY] Useful technique when performing XSS (Amit Klein <aksecurity@...il.com>)
• Re: [WEB SECURITY] Useful technique when performing XSS ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: [WEB SECURITY] Useful technique when performing XSS (Amit Klein <aksecurity@...il.com>)
• Re: [WEB SECURITY] Useful technique when performing XSS (Amit Klein <aksecurity@...il.com>)
• 0day remote vuln selling SAP / Linux Kernel / PHP etc... ("toto toto" <snacker@...uxmail.org>)
• Call for Papers: IT-Incident Management and IT-Forensics 2007 (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
• Re: [WEB SECURITY] Useful technique when performing XSS ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)

• WHM Exploit question ("Steve Ragan" <sragan@...y.rr.com>)
• rPSA-2007-0025-2 postgresql postgresql-server (rPath Update Announcements <announce-noreply@...th.com>)
• Re: 0day remote vuln selling SAP / Linux Kernel / PHP etc... (Ferdinand Klinzer <Klinzer@....de>)
• SecurityVulns.com: HP Network Node Manager remote console weak files permissions (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Axigen <2.0.0b1 DoS (Neil Kettle <mu-b@...35.com>)
• Re: 0day remote vuln selling SAP / Linux Kernel / PHP etc... ("toto toto" <snacker@...uxmail.org>)
• ZDI-07-007: HP Mercury LoadRunner Agent Stack Overflow Vulnerability (zdi-disclosures@...m.com)

• [ MDKSA-2007:037-1 ] - Updated postgresql packages address multiple vulnerabilities (security@...driva.com)
• rPSA-2007-0028-1 gd (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0029-1 ImageMagick (rPath Update Announcements <announce-noreply@...th.com>)
• Multiple vulnerabilities in SAP WebAS 6.40 and 7.00 (technical details) (Nicob <nicob@...ob.net>)
• TFTP directory traversal in Kiwi CatTools (Nicob <nicob@...ob.net>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• DVR (Digital Video Recorders) + hack? ("Mark Sec" <mark.sec@...il.com>)
• PAKCON III: Call for Papers [cfp] ("Ayaz Ahmed Khan" <ayaz@...con.org>)
• The Machine is Us/ing Us ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Denial Of Service in Internet Explorer for MS Windows Mobile 5.0 ("mike kemp" <clappymonkey@...il.com>)
• Re: 0day remote vuln selling SAP / Linux Kernel / PHP etc... (v3dt3n <mkmaxx@...il.com>)
• Re: DVR (Digital Video Recorders) + hack? (H D Moore <fdlist@...italoffense.net>)
• Anybody need an alibi (b.hines@...cast.net)
• Re: 0day remote vuln selling SAP / Linux Kernel / PHP etc... ("Tyop?" <tyoptyop@...il.com>)
• Re: Anybody need an alibi (Michael Holstein <michael.holstein@...ohio.edu>)
• Plain Old Webserver - The coolest firefox extension ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Anybody need an alibi (b.hines@...cast.net)
• [Fwd: Re: Full functional 0day exploit builder for sale!] (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: DVR (Digital Video Recorders) + hack? (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension (Stefano Di Paola <stefano.dipaola@...ec.it>)
• Re: Anybody need an alibi (Juergen Fiedler <juergen@...dlerfamily.net>)
• Re: Anybody need an alibi ("McCarty, Eric C." <emccarty@...ucsd.edu>)
• Re: Anybody need an alibi (Shyaam <shyaam@...il.com>)
• [ MDKSA-2007:041 ] - Updated ImageMagick packages fix buffer overflow vulnerability (security@...driva.com)
• Re: Anybody need an alibi (Valdis.Kletnieks@...edu)

• Re: DVR (Digital Video Recorders) + hack? ("Mark Sec" <mark.sec@...il.com>)
• Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension (ascii <ascii@...amail.com>)
• Re: Anybody need an alibi ("Michele Cicciotti" <mc@...msa.net>)
• [USN-421-1] MoinMoin vulnerability (Kees Cook <kees@...ntu.com>)
• [Tool Update]PReplay 1.1 Released ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• [USN-416-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• rPSA-2006-0233-1 dbus dbus-glib dbus-qt dbus-x11 (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0031-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
• Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• myspace redirection (beNi <backebackekuchen@...il.com>)
• [XSS] Qdig - Quick Digital Image Gallery Version 1.2.9.3 and -devel (Andrea Purificato - bunker <bunker@...twebnet.it>)
• New Transport Protocol RFC - Darknet (Pedro Martinez <pedromartinezlovesthebantown@...oo.com>)
• Hal Turner's Wife Phyllis: An expose on the Turner Breadwinner (Pedro Martinez <pedromartinezlovesthebantown@...oo.com>)
• Skype Reads Your BIOS and Motherboard Serial Number ("Michele Cicciotti" <mc@...msa.net>)
• Re: Skype Reads Your BIOS and Motherboard Serial Number (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

• "0day was the case that they gave me" ("kcope" <kingcope@....net>)
• Re: "0day was the case that they gave me" ("Tyop?" <tyoptyop@...il.com>)
• Re: [XSS] Qdig - Quick Digital Image Gallery Version 1.2.9.3 and -devel (Andrea Purificato - bunker <bunker@...twebnet.it>)
• Re: "0day was the case that they gave me" (Andrea Purificato - bunker <bunker@...twebnet.it>)
• Port randomization paper ("Fernando Gont" <fernando.gont@...il.com>)
• Arbitrary file disclosure vulnerability in php rrd browser < 0.2.1 (prb) (Sebastian Wolfgarten <sebastian@...fgarten.com>)
• Multiple vulnerabilities in phpMyVisites (Nicob <nicob@...ob.net>)
• [OpenPKG-SA-2007.009] OpenPKG Security Advisory (twiki) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
• Re: New Transport Protocol RFC - Darknet (Simon Smith <simon@...soft.com>)
• Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Arbitrary file disclosure vulnerability in IP3 NetAccess < 4.1.9.6 (Sebastian Wolfgarten <sebastian@...fgarten.com>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• different Wordpress Vulnerabilities (beNi <backebackekuchen@...il.com>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) (Ben Bucksch <news@...ksch.org>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) (Ben Bucksch <news@...ksch.org>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) (Paul Szabo <psz@...hs.usyd.edu.au>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) (Ben Bucksch <news@...ksch.org>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Firefox/MSIE focus stealing vulnerability - clarification (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)

• Re: Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: New Transport Protocol RFC - Darknet (Marcello Barnaba <bofh@...tmedia.info>)
• Re: New Transport Protocol RFC - Darknet ("James Matthews" <nytrokiss@...il.com>)
• Digital Mechanical Lock Unsafe (Clark Mills <c.mills@...kland.ac.nz>)
• Re: Digital Mechanical Lock Unsafe (Andrew Farmer <andfarm@...il.com>)
• Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
• Re: Solaris telnet vulnberability - how many on yournetwork? (Oscar Fajardo Sanchez <oscar.fajardo@...sorigin.com>)
• Re: Solaris telnet vulnberability - how many on your network? (Vincent Archer <varcher@...yall.com>)
• Web Server Botnets and Server Farms as Attack Platforms (Gadi Evron <ge@...uxbox.org>)
• Re: Solaris telnet vulnberability - how many on your network? ("Huzeyfe Onal" <huzeyfe.onal@...il.com>)
• [USN-417-3] PostgreSQL regression (Martin Pitt <martin.pitt@...onical.com>)
• defacements for the installation of malcode (Gadi Evron <ge@...uxbox.org>)
• MLabs Is Up (Aditya K Sood <zeroknock@...aeye.org>)
• Pedophiles On YouTube (ringleader Irish282) (Jaime Demetur <sniffikins@...oo.com>)
• Not that new: Hotmail & Yahoo are insecure via WLANs ("Hank Nussbacher" <hnussbacher@...il.com>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Solaris telnet vulnberability - how many on yournetwork? (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension (ascii <ascii@...amail.com>)
• Re: Solaris telnet vulnberability - how many on your network? (Graham Reed <greed@...ox.com>)
• Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension ("Giorgio Fedon" <giorgio.fedon@...il.com>)
• SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000). (3APA3A <3APA3A@...urity.nnov.ru>)
• Re: Firefox/MSIE focus stealing vulnerability - clarification (Marcello Barnaba <marcello@...tmedia.info>)
• Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension ("Billy Hoffman" <Billy.Hoffman@...dynamics.com>)
• Re: Solaris telnet vulnerability - how many on your network? (Brad_Powell@...t.com)
• Re: Solaris telnet vulnerability - how many on your network? (Brad_Powell@...t.com)
• Re: Firefox/MSIE focus stealing vulnerability - clarification ("Ruud H.G. van Tol" <rvtol@...lution.nl>)
• Re: Pedophiles On YouTube (ringleader Irish282) (Nicholas Winn <nwinn@...ationexpress.com>)

• Aruba Mobility Controller Management Buffer Overflow (<security@...ns.com>)
• Re: Firefox focus stealing vulnerability (possibly other browsers) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Aruba Networks - Unauthorized Administrative and WLAN Access through Guest Account (<security@...ns.com>)
• [ MDKSA-2007:042 ] - Updated smb4k packages fix numerous vulnerabilities (security@...driva.com)
• Re: Firefox/MSIE focus stealing vulnerability - clarification ("Tyop?" <tyoptyop@...il.com>)
• Re: Firefox/MSIE focus stealing vulnerability - clarification (Marcello Barnaba <marcello@...tmedia.info>)
• Re: Solaris telnet vulnberability - how many on yournetwork? ("K K" <kkadow@...il.com>)
• Re: Solaris telnet vulnberability - how many on your network? ("Oliver Friedrichs" <oliver_friedrichs@...antec.com>)
• Symbian Security Contact ? ("Fuffologist Doctor" <fuffologist@...mail.com>)
• Re: Pedophiles On YouTube (ringleader Irish282) (TheGesus <thegesus@...il.com>)
• Re: Pedophiles On YouTube (ringleader Irish282) (Siim Põder <windo@...rad-teel.net>)
• Re: Pedophiles On YouTube (ringleader Irish282) (Simon Smith <simon@...soft.com>)
• Torpark breaks with DEP enabled, and how to break it further so that it works (KJKHyperion <hackbunny@...tpj.org>)
• Cisco Security Advisory: Multiple IOS IPS Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• UPDATE: [ GLSA 200611-05 ] Netkit FTP Server: Privilege escalation (Raphael Marichez <falco@...too.org>)
• Re: Solaris telnet vulnberability - how many on your network? (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• [ GLSA 200702-01 ] Samba: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• iDefense Security Advisory 02.13.07: Microsoft 'wininet.dll' FTP Reply Null Termination Heap Corruption Vulnerability (iDefense Labs NO-REPLY <labs-no-reply@id…)
• Re: Solaris telnet vulnerability - how many on your network? (Graham Reed <greed@...ox.com>)
• Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
• Re: Solaris telnet vulnberability - how many on your network? ("Oliver Friedrichs" <oliver_friedrichs@...antec.com>)
• Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
• Re: Solaris telnet vulnberability - how many on your network? (Casper.Dik@....COM)
• Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
• Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
• Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
• Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
• Re: Solaris telnet vulnberability - how many on your network? (Casper.Dik@....COM)
• Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
• Re: Solaris telnet vulnberability - how many onyour network? ("Peter Ferrie" <pferrie@...antec.com>)
• Re: Solaris telnet vulnberability - how many on your network? (Casper.Dik@....com)
• Re: Solaris telnet vulnberability - how many on your network? (Casper.Dik@....COM)
• Re: Pedophiles On YouTube (ringleader Irish282) (<ninjadaito@...hmail.com>)
• [ GLSA 200702-02 ] ProFTPD: Local privilege escalation (Raphael Marichez <falco@...too.org>)
• [ GLSA 200702-03 ] Snort: Denial of Service (Raphael Marichez <falco@...too.org>)
• [ GLSA 200702-04 ] RAR, UnRAR: Buffer overflow (Raphael Marichez <falco@...too.org>)

• Re: Solaris telnet vulnberability - how many on your network? ("Ham Beast" <i.am.hambeast@...il.com>)
• Re: Torpark breaks with DEP enabled, and how to break it further so that it works (KJKHyperion <hackbunny@...tpj.org>)
• Re: [Fwd: Re: Full functional 0day exploit builder for sale!] (chedder1@...il.com)
• Re: Solaris telnet vulnberability - how many on your network? (Thierry Zoller <Thierry@...ler.lu>)
• Re: Torpark breaks with DEP enabled, and how to break it further so that it works (coderman <coderman@...il.com>)
• Re: Torpark breaks with DEP enabled, and how to break it further so that it works (KJKHyperion <hackbunny@...tpj.org>)
• iDefense Security Advisory 02.13.07: Hewlett-Packard HP-UX SLSd Arbitrary File Creation Vulnerability (iDefense Labs NO-REPLY <labs-no-reply@...fense.com>)
• Re: Torpark breaks with DEP enabled, and how to break it further so that it works (KJKHyperion <hackbunny@...tpj.org>)
• Re: Torpark breaks with DEP enabled, and how to break it further so that it works (coderman <coderman@...il.com>)
• Diagnostics Mode + Phreaking ("Mark Sec" <mark.sec@...il.com>)
• Re: Torpark breaks with DEP enabled, and how to break it further so that it works (afed <bsdusr@...il.com>)
• MailEnable DoS POC (mu-b <mu-b@...it-labs.org>)
• MS Interactive Training .cbo Overflow ("Brett Moore" <brett.moore@...urity-assessment.com>)
• Re: Solaris telnet vulnberability - how many onyour network? (Gadi Evron <ge@...uxbox.org>)
• Re: Solaris telnet vulnberability - how many on your network? (Joe Shamblin <wjs@...duke.edu>)
• Solaris telnet vuln solutions digest and network risks (Gadi Evron <ge@...uxbox.org>)
• Re: Solaris telnet vulnberability - how many on your network? ("Adrian Sanabria" <adrian.sanabria@...il.com>)
• Re: Solaris telnet vulnberability - how many on your network? (Casper.Dik@....COM)
• Secunia Research: MailEnable Web Mail Client Multiple Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
• Re: Solaris telnet vulnberability - how many onyour network? ("David Taylor" <ltr@....upenn.edu>)
• (no subject) ("j0F" <j0uf@...mail.com>)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• MailEnable DoS POC-2 (mu-b <mu-b@...it-labs.org>)
• Sample Packet Captures ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: Sample Packet Captures (H D Moore <fdlist@...italoffense.net>)
• Re: Solaris telnet vulnberability - how many on your network? (v3dt3n <mkmaxx@...il.com>)
• [ALERT] CLICK HERE TO PARTY [ALERT] ("Christopher Abad" <mkmaxx@...il.com>)
• Re: Solaris telnet vulnberability - how many on your network? (Rodrigo Barbosa <rodrigob@...kover.org>)
• [SECURITY] [DSA 1259-1] New fetchmail packages fix information disclosure (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1260-1] New imagemagick package fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Firefox: serious cookie stealing / same-domain bypass vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability (Ben Bucksch <news@...ksch.org>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability (Peter Besenbruch <prb@...a.net>)

• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability (Daniel Veditz <dveditz@...zio.com>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability ("James Matthews" <nytrokiss@...il.com>)
• Re: Diagnostics Mode + Phreaking ("Paul Melson" <pmelson@...il.com>)
• XSS + XSRF/CSRF... (Baey <baey@...pl>)
• Nifty New Open Source Management Tools (Reece Mills <reece.mills@...rter.net>)
• Lizardtech DjVu Browser Plug-in - Multiple Vulnerabilities ("Brett Moore" <brett.moore@...urity-assessment.com>)
• Re: Solaris telnet vulnberability - how many on your network? (Damien Miller <djm@...drot.org>)
• Re: defacements for the installation of malcode (Jeremy Epstein <jepstein@...methods.com>)
• Re: Solaris telnet vulnberability - how many on your network? (Gadi Evron <ge@...uxbox.org>)
• Re: defacements for the installation of malcode (Gadi Evron <ge@...uxbox.org>)
• Re: Solaris telnet vulnberability - how many on your network? (Darren Reed <avalon@...igula.anu.edu.au>)
• Comodo DLL injection via weak hash function exploitation Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)
• Re: Sample Packet Captures ("Joe Hancock" <joe.hancock@...il.com>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: XSS + XSRF/CSRF... (pagvac <unknown.pentester@...il.com>)
• Re: Sample Packet Captures ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: XSS + XSRF/CSRF... ("Brian Eaton" <eaton.lists@...il.com>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability ("Stan Bubrouski" <stan.bubrouski@...il.com>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Drive-by Pharming ("Oliver Friedrichs" <oliver_friedrichs@...antec.com>)

• iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV MIME Parsing Directory Traversal Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Solaris telnet vulnberability - how many on your network? (Joe Beasley <securityadmin@...beasley.org>)
• [USN-422-1] ImageMagick vulnerabilities (Kees Cook <kees@...ntu.com>)
• Word flaw CVE-2007-0870 confirmed as code execution type issue (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: Torpark breaks with DEP enabled, and how to break it further so that it works (KJKHyperion <hackbunny@...tpj.org>)
• [ GLSA 200702-05 ] Fail2ban: Denial of Service (Raphael Marichez <falco@...too.org>)
• Re: Drive-by Pharming ("James Matthews" <nytrokiss@...il.com>)
• phishing sites examples "source code" ("Andres Riancho" <andres.riancho@...il.com>)
• More MailEnable exploits.. (mu-b <mu-b@...it-labs.org>)
• [SECURITY] [DSA 1261-1] New PostgreSQL packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Drive-by Pharming (psirt@...co.com)
• iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV CAB File Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: defacements for the installation of malcode (phish_n_bots@...ty.ece.cmu.edu)
• utorrent issue? (Gadi Evron <ge@...uxbox.org>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability (Base64 <base640@...il.com>)
• Re: Drive-by Pharming ("Knud Erik Højgaard" <kokanin@...il.com>)
• Re: phishing sites examples "source code" (Ben Bucksch <news@...ksch.org>)
• Re: phishing sites examples "source code" ("Exibar" <exibar@...lair.com>)
• Re: phishing sites examples "source code" (Shaun <shaun@...unc.com>)
• Re: Drive-by Pharming ("Brian Eaton" <eaton.lists@...il.com>)
• Re: phishing sites examples "source code" (M.B.Jr. <marcio.barbado@...il.com>)
• Re: Drive-by Pharming ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Phishmarket #2 (IFrame Spoofing/XSS on Austrian bank sites) (skyout@....net)
• Re: Web Server Botnets and Server Farms as Attack Platforms (Tom <dshield@...c.com>)
• Re: Web Server Botnets and Server Farms as Attack Platforms ("James Matthews" <nytrokiss@...il.com>)
• Re: utorrent issue? ("James Matthews" <nytrokiss@...il.com>)
• Re: Drive-by Pharming ("McCarty, Eric C." <emccarty@...ucsd.edu>)
• Re: Drive-by Pharming ("Dario Ciccarone \(dciccaro\)" <dciccaro@...co.com>)
• Re: phishing sites examples "source code" (Simon Smith <simon@...soft.com>)
• Re: Drive-by Pharming ("Fabian (Lists)" <lists@...enlayers.org>)
• fd@...ty.ece.cmu.edu likes spam (but does spam like fd@...ty.ece.cmu.edu?) (fd@...ty.ece.cmu.edu)
• Re: fd@...ty.ece.cmu.edu likes spam (but does spam like fd@...ty.ece.cmu.edu?) (str0ke <str0ke@...w0rm.com>)
• Re: Solaris telnet vulnberability - how many on your network? ("Just1n T1mberlake" <hotpackets@...lokitty.com>)
• Axigen server version: 2.0.0-beta1 (Linux/i686) - pop3 remote shell (fugich <fugich@...il.com>)
• Re: Phishmarket #2 (IFrame Spoofing/XSS on Austrian bank sites) (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Solaris telnet vulnberability - how many on your network? (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Solaris telnet vulnberability - how many on your network? (don bailey <don.bailey@...il.com>)
• Re: Solaris telnet vulnberability - how many on your network? (Matthew Flaschen <matthew.flaschen@...ech.edu>)

• Re: Solaris telnet vulnberability - how many on yournetwork? (pagvac <unknown.pentester@...il.com>)
• Re: Solaris telnet vulnberability - how many on yournetwork? (Marcin Antkiewicz <fd@...tek.org>)
• Re: Solaris telnet vulnberability - how many on yournetwork? (pagvac <unknown.pentester@...il.com>)
• Re: Phishmarket #2 (IFrame Spoofing/XSS on Austrian bank sites) (skyout@....net)
• Re: defacements for the installation of malcode (Vympel <vympel@...e-h.org>)
• Re: Solaris telnet vulnberability - how many on yournetwork? (endrazine <endrazine@...il.com>)
• Re: Solaris telnet vulnberability - how many on yournetwork? (pagvac <unknown.pentester@...il.com>)
• [ GLSA 200702-06 ] BIND: Denial of Service (Raphael Marichez <falco@...too.org>)
• [ GLSA 200702-07 ] Sun JDK/JRE: Execution of arbitrary code (Raphael Marichez <falco@...too.org>)
• [ GLSA 200702-08 ] AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Drive-by Pharming (pagvac <unknown.pentester@...il.com>)

• ALERT! A piece of internet security history is missing (The Anonymous Historian <full-disclosure@...EOPENBSD.ORG>)
• Re: Solaris telnet vulnberability - how many on yournetwork? (Marcin Antkiewicz <fd@...tek.org>)
• Re: ALERT! A piece of internet security history is missing (Marcin Owsiany <marcin@...iany.pl>)
• Re: ALERT! A piece of internet security history is missing (chedder1@...il.com)
• XSS & SQL bugs in Conference website (Scarlet Pimpernel <kishfellow@...oo.com>)

• Re: [inbox] Re: Drive-by Pharming ("Exibar" <exibar@...lair.com>)
• Remote DoS in libevent DNS parsing <= 1.2a (Jon Oberheide <jon@...rheide.org>)
• [MSG] Metaeye Released ZmbScap (Metaeye Security <contact@...aeye.org>)
• DC4420 London meet - this Wednesday (21st February 2007) (Adam Laurie <adam.laurie@...bunker.net>)
• Re: phishing sites examples "source code" (Juergen Fiedler <juergen@...dlerfamily.net>)
• Re: Firefox: about:blank is phisher's best friend ("Michael Wojcik" <Michael.Wojcik@...rofocus.com>)
• Re: Drive-by Pharming Threat (<auto400208@...hmail.com>)
• Re: phishing sites examples "source code" (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• new worm traveling the net? (GNU/Linux) (Timo Schoeler <timo.schoeler@...cworks.net>)
• Re: new worm traveling the net? (GNU/Linux) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: FW: [Fwd: Re[2]: Fun with event logs (semi-offtopic)] (Microsoft Security Response Center <secure@...rosoft.com>)
• Analysis of Myspace passwords (Jeremy Saintot <jeremy@...amiel.com>)
• Microsoft Internet Explorer Local File Accesses Vulnerability ("Rajesh Sethumadhavan" <rajesh.sethumadhavan@...oo.com>)
• Re: Analysis of Myspace passwords (Todd Troxell <ttroxell@...ian.org>)
• Re: new worm traveling the net? (GNU/Linux) (Timo Schoeler <timo.schoeler@...cworks.net>)
• Re: Drive-by Pharming Threat (Andrew Farmer <andfarm@...il.com>)
• Re: new worm traveling the net? (GNU/Linux) (Timo Schoeler <timo.schoeler@...cworks.net>)
• Re: Microsoft Internet Explorer Local File Accesses Vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• [ MDKSA-2007:043 ] - Updated clamav packages address multiple issues. (security@...driva.com)
• Re: Drive-by Pharming Threat ("Martin Johns" <martin.johns@...il.com>)

• Re: Microsoft Internet Explorer Local File Accesses Vulnerability [7244ks] (Microsoft Security Response Center <secure@...rosoft.com>)
• Re: Microsoft Internet Explorer Local File Accesses Vulnerability ("Peter Dawson" <slash.pd@...il.com>)
• Re: Analysis of Myspace passwords ("James Matthews" <nytrokiss@...il.com>)
• Re: Drive-by Pharming Threat (Gaurang Pandya <gaubrig@...oo.com>)
• Re: Drive-by Pharming Threat (mikeiscool <michaelslists@...il.com>)
• Re: Drive-by Pharming Threat (Gaurang Pandya <gaubrig@...oo.com>)
• Re: Drive-by Pharming Threat (Andrew Farmer <andfarm@...il.com>)
• Re: Drive-by Pharming Threat (Gaurang Pandya <gaubrig@...oo.com>)
• Re: Microsoft Internet Explorer Local File Accesses Vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: new worm traveling the net? (GNU/Linux) (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
• Re: Microsoft Internet Explorer Local File Accesses Vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
• VMware Workstation multiple denial of service and isolation manipulation vulnerabilities ("EitanCaspi@...oo.com" <eitancaspi@...oo.com>)
• Re: Drive-by Pharming Threat (<auto400208@...hmail.com>)
• Re: Drive-by Pharming Threat (<auto400208@...hmail.com>)
• Drone Armies C&C Report - 19 Feb 2007 (c2report@...tf.org)
• Re: Microsoft Internet Explorer Local File Accesses Vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Firefox3 offline support speculations ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Drive-by Pharming Threat (Jeremy Saintot <jeremy.saintot@...e.fr>)
• Re: Web Server Botnets and Server Farms as Attack Platforms (Anders Henke <anders.henke@...d1.com>)
• Rootkit Profiler LX ("Tobias Klein" <tk@...pkit.de>)
• Re: Firefox3 offline support speculations (Denis Jedig <seclists@...eticon.de>)
• Blind sql injection attack in INSERT syntax on PHP-nuke <=8.0 Final (krasza <krasza@...il.com>)
• Re: Searching chroot-like jail for Windows (Victor Krapivin <vik@...nd.com>)
• Re: Searching chroot-like jail for Windows ("T Biehn" <tbiehn@...il.com>)
• Re: Searching chroot-like jail for Windows (Victor Krapivin <vik@...nd.com>)
• Re: Searching chroot-like jail for Windows (<Glenn.Everhart@...se.com>)
• TSRT-07-02: Trend Micro ServerProtect eng50.dll Stack Overflow Vulnerabilities (TSRT@...m.com)
• TSRT-07-01: Trend Micro ServerProtect StCommon.dll Stack Overflow Vulnerabilities (TSRT@...m.com)
• [USN-423-1] MoinMoin vulnerabilities (Kees Cook <kees@...ntu.com>)
• /bin/ls with gid=0 in Debian linux-ftpd (Paul Szabo <psz@...hs.usyd.edu.au>)

• Overtaking Google Desktop ("Yair Amit" <yairam_ng@...chfire.com>)
• [ MDKSA-2007:044 ] - Updated ekiga packages fix string vulnerabilities. (security@...driva.com)
• [ MDKSA-2007:045 ] - Updated gnomemeeting packages fix string vulnerabilities (security@...driva.com)
• [ MDKSA-2007:046 ] - Updated gnucash packages fix temp file issues. (security@...driva.com)
• Re: iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV CAB File Denial of Service Vulnerability (aCaB <aaacab@...il.com>)
• Bank of America [phising email] (Troy Cregger <tcregger@...nedyinfo.com>)
• [USN-424-1] PHP vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Cisco Security Advisory: Cisco Unified IP Conference Station and IP Phone Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
• Cisco Security Advisory: Multiple Vulnerabilities in 802.1X Supplicant (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Players disconnection in Simbin racing games (Luigi Auriemma <aluigi@...istici.org>)
• Full Disclosure Advisory on Full-Disclosure hax0r3rz ("Mofo Haxsor" <m0f0p1mp1nghax0r3r@...hnologist.com>)
• Re: Overtaking Google Desktop ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Solaris telnet vulnberability - how many on your network? (Thierry Zoller <Thierry@...ler.lu>)
• Re: Full Disclosure Advisory on Full-Disclosure hax0r3rz (jf <jf@...glingpointers.net>)
• Call Center Software - Remote Xss Post Exploit - (<corrado.liotta@...ce.it>)
• [ MDKSA-2007:047 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
• iDefense Security Advisory 02.16.07: Trend Micro ServerProtect Web Interface Authorization Bypass Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Firefox bookmark cross-domain surfing vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)

• Re: Firefox bookmark cross-domain surfing vulnerability ("Tyop?" <tyoptyop@...il.com>)
• Re: Bank of America [phising email] ("James Rankin" <kz20fl@...glemail.com>)
• Re: Firefox bookmark cross-domain surfing vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Firefox bookmark cross-domain surfing vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• [USN-425-1] slocate vulnerability (Kees Cook <kees@...ntu.com>)
• Re: Bank of America [phising email] ("James Matthews" <nytrokiss@...il.com>)
• Re: Full Disclosure Advisory on Full-Disclosure hax0r3rz ("Ham Beast" <i.am.hambeast@...il.com>)
• Re: Firefox bookmark cross-domain surfing vulnerability (v3dt3n <mkmaxx@...il.com>)
• Re: Overtaking Google Desktop ("Steven Scheffler" <steven@...wardslash.com>)
• Re: Overtaking Google Desktop ("Steve Ragan" <sragan@...y.rr.com>)
• Re: Overtaking Google Desktop (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• [USN-426-1] Ekiga vulnerabilities (Kees Cook <kees@...ntu.com>)
• Re: Overtaking Google Desktop ("Steve Ragan" <sragan@...y.rr.com>)
• Re: Overtaking Google Desktop ("Yair Amit" <yairam_ng@...chfire.com>)
• Re: phishing sites examples "source code" (Fabien Bourdaire <lists@...c.co.uk>)
• Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak (3APA3A <3APA3A@...urity.nnov.ru>)
• Re: Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak ("Andres Tarasco" <atarasco@...il.com>)
• Re: Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Firefox bookmark cross-domain surfing vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Fwd: [full disclosure] Linux generic devices / pam.console problem (John Cartwright <johnc@...k.org.uk>)
• Re: Firefox bookmark cross-domain surfing vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: phishing sites examples "source code" (M.B.Jr. <marcio.barbado@...il.com>)
• 802.1q Vlan Packets ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: Firefox bookmark cross-domain surfing vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Solaris telnet vulnberability - how many on your network? ("Roger A. Grimes" <roger@...neretcs.com>)
• Re: [WEB SECURITY] Overtaking Google Desktop ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• Re: Firefox: about:blank is phisher's best friend (Florian Weimer <fw@...eb.enyo.de>)
• Re: Firefox: about:blank is phisher's best friend (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• iDefense Security Advisory 02.22.07: VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

• iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Bank of America [phising email] ("Peter Dawson" <slash.pd@...il.com>)
• iDefense Security Advisory 02.22.07: IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• MSIE7 browser entrapment vulnerability (probably Firefox, too) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: MSIE7 browser entrapment vulnerability (probably Firefox, too) (KJKHyperion <hackbunny@...tpj.org>)
• Re: Firefox bookmark cross-domain surfing vulnerability (Daniel Veditz <dveditz@...zio.com>)
• [ MDKSA-2007:048 ] - Updated php packages fix multiple vulnerabilities (security@...driva.com)
• Re: MSIE7 browser entrapment vulnerability (probably Firefox, too) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• [USN-427-1] enigmail vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• Firefox: onUnload tailgating (MSIE7 entrapment bug variant) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Firefox Cache Hack - Firefox History Hack redux ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Secunia Research: Internet Explorer 7 "onunload" Event Spoofing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
• Re: 802.1q Vlan Packets (pengo13 <pengo13@...il.com>)
• Re: Firefox Cache Hack - Firefox History Hack redux ("Michael Silk" <michaelslists@...il.com>)
• Re: 802.1q Vlan Packets (Cedric Blancher <blancher@...tel-securite.fr>)
• Re: Firefox Cache Hack - Firefox History Hack redux (Ben Bucksch <news@...ksch.org>)
• Re: Firefox Cache Hack - Firefox History Hack redux (Ismail Dönmez <ismail@...dus.org.tr>)
• Re: Firefox Cache Hack - Firefox History Hack redux ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• CarolinaCon 2007 Announcement/Press Release (Vic Vandal <vvandal@...l.com>)
• [OpenPKG-SA-2007.010] OpenPKG Security Advisory (php) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
• rPSA-2007-0036-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
• Re: 802.1q Vlan Packets (David Barroso <tomac@...sinia.net>)
• Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: myspace redirection (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Client Integer Underflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability (Stefan Esser <sesser@...dened-php.net>)
• Re: Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• [ MDKSA-2007:049 ] - Updated spamassassin packages fix DoS vulnerability (security@...driva.com)

• Re: Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability (Stefan Esser <sesser@...dened-php.net>)
• rPSA-2007-0038-1 spamassassin (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: MSIE7 browser entrapment vulnerability (probably Firefox, too) ("Jeffrey Katz" <jdkatz23@...il.com>)

• New release: "OWASP TESTING GUIDE 2007" ("Matteo Meucci" <matteo.meucci@...il.com>)
• [ GLSA 200702-09 ] Nexuiz: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200702-10 ] UFO2000: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• Few unreported vulnerabilities by SehaTo (3APA3A <3APA3A@...urity.nnov.ru>)
• M$ Groove (Dennis Mowers <dlmowers@...oo.com>)
• Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Daniel Veditz <dveditz@...zio.com>)
• Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) ("Stan Bubrouski" <stan.bubrouski@...il.com>)
• Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Ismail Dönmez <ismail@...dus.org.tr>)
• Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) ("Stan Bubrouski" <stan.bubrouski@...il.com>)
• Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Ismail Dönmez <ismail@...dus.org.tr>)
• Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Ismail Dönmez <ismail@...dus.org.tr>)
• Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) ("Stan Bubrouski" <stan.bubrouski@...il.com>)
• Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Paul Schmehl <pauls@...allas.edu>)
• Know your Enemy: Web Application Threats (Gadi Evron <ge@...uxbox.org>)
• Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Michal Zalewski <lcamtuf@...ne.ids.pl>)

• flickr not truly private ("John Duhuh" <john.duhuh@...glemail.com>)
• Cursor Injection - A New Method for Exploiting PL/SQL Injection and Potential Defences ("David Litchfield" <davidl@...software.com>)
• Call for Paper - SyScan'07 ("Thomas Lim" <thomas@...einc.com>)
• R: Cursor Injection - A New Method for Exploiting PL/SQL Injection and Potential Defences (<bunker@...twebnet.it>)
• Re: flickr not truly private ("Line Noise" <300baud@...il.com>)
• Re: flickr not truly private (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: MSIE7 browser entrapment vulnerability (probably Firefox, too) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Local user to root escalation in apache 1.3.34 (Debian only) (Richard Thrippleton <ret28@....ac.uk>)
• Re: Local user to root escalation in apache 1.3.34 (Debian only) ("Nikolay Kichukov" <hijacker@...um.net>)
• SEC Consult SA-20070226-0 :: File Disclosure in Pagesetter for PostNuke (research@...-consult.com)
• rPSA-2007-0040-1 firefox (rPath Update Announcements <announce-noreply@...th.com>)
• WordPress AdminPanel CSRF/XSS - 0day (SaMuschie <samuschie@...oo.de>)
• Re: MSIE7 browser entrapment vulnerability (probably Firefox, too) ("Matt S" <m.schalkham@...il.com>)
• ViewCVS 0.9.4 issues (Moritz Naumann <security@...itz-naumann.com>)
• Extracting files from SMB packet captures ("Jim O'Gorman" <jogorman@...il.com>)

• Re: Local user to root escalation in apache 1.3.34 (Debian only) (Richard Thrippleton <ret28@....ac.uk>)
• Re: ViewCVS 0.9.4 issues (Moritz Naumann <security@...itz-naumann.com>)
• Re: Extracting files from SMB packet captures ("Mike Vasquez" <mnv@...mni.princeton.edu>)
• Re: SEC Consult SA-20070226-0 :: File Disclosure in Pagesetter for PostNuke (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Kiwi CatTools TFTP server path traversal ("noreply" <noreply@...ecurity.ru>)
• Multiple SQL Injection bugs in TCS website (Scarlet Pimpernel <kishfellow@...oo.com>)
• Re: Extracting files from SMB packet captures ("Zed Qyves" <zqyves.spamtrap@...il.com>)
• Re: Extracting files from SMB packet captures (Thorolf <thorolf@...d.einherjar.de>)
• Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Kiwi CatTools TFTP server path traversal (3APA3A <3APA3A@...URITY.NNOV.RU>)
• [ GLSA 200702-11 ] MPlayer: Buffer overflow (Raphael Marichez <falco@...too.org>)
• [ GLSA 200702-12 ] CHMlib: User-assisted remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
• Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Richard Moore <rich@...tpoint.ltd.uk>)
• Disabling Google Desktop Link Integration In Google Pages ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr) (Richard Moore <rich@...tpoint.ltd.uk>)
• Wordpress 2.1.1 - Multiple Script Injection Vulnerabilities (Stefan Friedli <stfr@...p.ch>)
• WordPress Search Function SQL-Injection (SaMuschie <samuschie@...oo.de>)
• Nullsoft ShoutcastServer Persistant XSS - 0day (SaMuschie <samuschie@...oo.de>)
• iDefense Security Advisory 02.27.07: Computer Associates eTrust Intrusion Detection Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [NETRAGARD-20070220 SECURITY ADVISORY] [McAfee VirusScan for Mac (Virex) Local root exploit and Scan Bypass] (Netragard Security Advisories <advisories@...raga…)
• Re: WordPress Search Function SQL-Injection (ascii <ascii@...amail.com>)

• rPSA-2007-0043-1 php php-mysql php-pgsql (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0043-1 php php-mysql php-pgsql ISSUE=4168 PROJ=30 (supportdb@...imeterusa.com <supportdb@...imeterusa.com>)
• Re: WordPress Search Function SQL-Injection (Justin Frydman - Thinkweb Media <justin@...nkwebmedia.com>)
• Re: WordPress Search Function SQL-Injection (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• German cops and spooks prep own spyware ("lsi" <stuart@...erdelix.net>)
• Re: WordPress Search Function SQL-Injection (missi <missi@...or.de>)
• Xbox 360 Hypervisor Privilege Escalation Vulnerability ("Anonymous Hacker" <anohacker@...glemail.com>)
• Re: WordPress Search Function SQL-Injection (Biomech <biomech@...0uk.com>)
• Quicksilver Social Bookmark plugin v.8F: password in clear text ("max perience" <mperience@...glemail.com>)
• Cisco Security Advisory: Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability (Cisco Systems Product Security Incident Response Team <psir…)
• Cisco Security Advisory: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerab… (Cisco Systems Product Security Incident…)
• PDF Strikes Back ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• [USN-428-1] Firefox vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• [CAID 35112]: CA eTrust Intrusion Detection Denial of Service Vulnerability ("Williams, James K" <James.Williams@...com>)
• Stealing Browser History Without Using JavaScript (RSnake <rsnake@...cking.com>)
• Re: Stealing Browser History Without Using JavaScript (Ben Bucksch <news@...ksch.org>)
• New Variant of the Storm Virus ("gerald.m.davis" <gerald.m.davis@...izonbusiness.com>)
• Re: New Variant of the Storm Virus (eflorio <eflorio@...aster.it>)
• [ MDKSA-2007:050 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)

628 messages

Powered by blists - more mailing lists