full-disclosure mailing list - 2007/10

Messages by day:

October 1 (19 messages)

• Re: .NET REMOTING on port 31337 ("Joel R. Helgeson" <joel@...geson.com>)
• Re: Trolls food ("Jimby Sharp" <jimbysharp@...il.com>)
• Re: New term "RDV" is born ("Jimby Sharp" <jimbysharp@...il.com>)
• Netscreen 5400 ("Fareeduddin Ahmad" <fareeduddin.ahmad@...il.com>)
• Re: Netscreen 5400 ("Brian Toovey" <admin@...ntrac.com>)
• High-Level Reverse Engineering whitepaper ("Andy Davis" <andy.davis@...plc.com>)
• Re: Firefox 2.0.0.7 has a very serious calculation bug (wac <waldoalvarez00@...il.com>)
• Re: Firefox 2.0.0.7 has a very serious calculation bug (wac <waldoalvarez00@...il.com>)
• Re: Firefox 2.0.0.7 has a very serious calculation bug (Valdis.Kletnieks@...edu)
• Unexploitable buffer-overflow in America's Army 2.8.2 through PB (Luigi Auriemma <aluigi@...istici.org>)
• Format string in F.E.A.R. 1.08 through PB (Luigi Auriemma <aluigi@...istici.org>)
• Format string in the Doom 3 engine through PB (Luigi Auriemma <aluigi@...istici.org>)
• Two buffer-overflow in FSD V2.052 d9 and FSFDT V3.000 d9 (Luigi Auriemma <aluigi@...istici.org>)
• Immunity Debugger v1.2 Release (Nicolas Waisman <nicolas.waisman@...unityinc.com>)
• Re: Testing DidTheyReadIt.com ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• [ MDKSA-2007:191 ] - Updated libsndfile packages fix vulnerability (security@...driva.com)
• Re: Testing DidTheyReadIt.com (Thierry Zoller <Thierry@...ler.lu>)
• Re: Testing DidTheyReadIt.com ("Anshuman G" <anshu.pg@...il.com>)
• [ MDKSA-2007:192 ] - Updated mplayer packages fix vulnerability (security@...driva.com)

• Re: Testing DidTheyReadIt.com (Gautam <g@...am>)
• WifiZoo v1.2 release ("Hernan Ochoa" <hernan@...il.com>)
• Re: Testing DidTheyReadIt.com ("James Matthews" <nytrokiss@...il.com>)
• [SECURITY] [DSA 1365-3] New id3lib3.8.3 packages fix denial of service (dann frazier <dannf@...ian.org>)
• Re: Firefox 2.0.0.7 has a very serious calculation bug ("Jimby Sharp" <jimbysharp@...il.com>)
• (no subject) (clappymonkey@...il.com)
• Original Photo Gallery Remote Command Execution (ascii <ascii@...amail.com>)
• TPTI-07-17: CA BrightStor Hierarchical Storage Manager SQL Injection Vulnerabilities (TSRT@...m.com)
• TPTI-07-16: CA BrightStor Hierarchical Storage Manager Buffer Overflow Vulnerabilities (TSRT@...m.com)
• iDefense Security Advisory 10.02.07: Multiple Vendor X Font Server Multiple Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• [SECURITY] [DSA 1380-1] New elinks packages fix information disclosure (Steve Kemp <skx@...ian.org>)
• [SECURITY] [DSA 1379-1] New openssl packages fix arbitrary code execution (Noah Meyerhans <noahm@...ian.org>)
• rPSA-2007-0203-1 rmake rmake-proxy rmake-repos (rPath Update Announcements <announce-noreply@...th.com>)

• Java Applets can connect to other hosts using HTTP 302 redirection (Kanatoko <anvil@...perz.net>)
• [SECURITY] [DSA 1381-1] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
• The real motivations of vulnerability disclosure ("Mr Frog" <hacking4froggies@...il.com>)
• FLEA-2007-0057-1 pidgin (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• [SECURITY] [DSA 1379-1] New quagga packages fix denial of service (Steve Kemp <skx@...ian.org>)
• Re: The real motivations of vulnerability disclosure ("worried security" <worriedsecurity@...glemail.com>)
• Re: The real motivations of vulnerability disclosure (endrazine <endrazine@...il.com>)
• Re: The real motivations of vulnerability disclosure ("worried security" <worriedsecurity@...glemail.com>)
• Life cycle of a hacker by n3td3v ("worried security" <worriedsecurity@...glemail.com>)
• Re: Life cycle of a hacker by n3td3v ("Peter Dawson" <slash.pd@...il.com>)
• iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Life cycle of a hacker by n3td3v ("Michael Simpson" <mikie.simpson@...il.com>)
• Re: Life cycle of a hacker by n3td3v ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: Life cycle of a hacker by n3td3v ("worried security" <worriedsecurity@...glemail.com>)
• Re: Original Photo Gallery Remote Command Execution ("Aidan Thornton" <makosoft@...glemail.com>)
• FLEA-2007-0058-1 openssl openssl-scripts (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• rPSA-2007-0204-1 qt-x11-free (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0205-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0206-1 openssl openssl-scripts (rPath Update Announcements <announce-noreply@...th.com>)
• Hijacking Feeds with Feedburner ("David Kierznowski" <david.kierznowski@...il.com>)
• [USN-523-1] ImageMagick vulnerabilities (Kees Cook <kees@...ntu.com>)

• Cart32 Arbitrary File Download Vulnerability ("Paul Craig" <paul.craig@...urity-assessment.com>)
• [RISE-2007002] Borland InterBase Multiple Buffer Overflow Vulnerabilities (RISE Security <advisories@...esecurity.org>)
• [RISE-2007003] Firebird Relational Database Multiple Buffer Overflow Vulnerabilities (RISE Security <advisories@...esecurity.org>)
• Re: Original Photo Gallery Remote Command Execution (Andrew Farmer <andfarm@...il.com>)
• Re: Life cycle of a hacker by n3td3v (mynameisdrewpeacock@...glemail.com)
• FLEA-2007-0059-1 qt qt-tools (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Vba32 AntiVirus v3.12.2 insecure file permissions (<edi.strosar@...nostne-novice.com>)
• Re: Life cycle of a hacker by n3td3v ("Lamer Buster" <lamerbuster@...il.com>)
• Re: iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [ GLSA 200710-01 ] RPCSEC_GSS library: Buffer overflow (Pierre-Yves Rofes <py@...too.org>)
• [ MDKSA-2007:193 ] - Updated openssl packages fix vulnerabilities (security@...driva.com)

• [USN-525-1] libsndfile vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-526-1] debian-goodies vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-524-1] OpenOffice.org vulnerability (Kees Cook <kees@...ntu.com>)
• password hash ("Brian Toovey" <admin@...ntrac.com>)
• Re: password hash (gjgowey@....blackberry.net)
• [SECURITY] [DSA 1383-1] New gforge packages fix cross-site scripting (Thijs Kinkhorst <thijs@...ian.org>)
• URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Juergen Schmidt <ju@...sec.de>)
• Re: password hash (Valdis.Kletnieks@...edu)
• Re: iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: password hash ("Mark Senior" <senatorfrog@...il.com>)
• Re: password hash (<full-disclosure@...hmail.com>)
• Core Impact 7.5 Web App pen-testing framework, as good as the hype? ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
• Multiple vulnerabilities in Dropteam 1.3.3 (Luigi Auriemma <aluigi@...istici.org>)
• Format string in The Dawn of Time 1.69s beta4 (Luigi Auriemma <aluigi@...istici.org>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? (M.B.Jr. <marcio.barbado@...il.com>)
• rPSA-2007-0209-1 elinks (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? (<full-disclosure@...hmail.com>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? (Valdis.Kletnieks@...edu)
• [SECURITY] [DSA 1384-1] New xen-utils packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? (<full-disclosure@...hmail.com>)
• DidTheyReadit - Results (Thierry Zoller <Thierry@...ler.lu>)

• Re: Java Applets can connect to other hosts using HTTP 302 redirection (Kanatoko <anvil@...perz.net>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: password hash (Nikolay Kichukov <hijacker@...um.net>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Thierry Zoller <Thierry@...ler.lu>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("Roger A. Grimes" <roger@...neretcs.com>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? (". Solo" <soloaway@...il.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Thierry Zoller <Thierry@...ler.lu>)
• SSHatter 0.6 (Tim Brown <timb@...-dimension.org.uk>)
• iPhone Safari zero day (<gaz_sec@...hmail.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("Geo." <geoincidents@....net>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Thierry Zoller <Thierry@...ler.lu>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("Kurt Dillard" <kurtdillard@....com>)
• The facts behind big screen hacks ("worried security" <worriedsecurity@...glemail.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Paul Szabo <psz@...hs.usyd.edu.au>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("KJK::Hyperion" <hackbunny@...tpj.org>)

• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("Geo." <geoincidents@....net>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("James Matthews" <nytrokiss@...il.com>)
• [ GLSA 200710-02 ] PHP: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• are the NetBIOS-like hacking days over? - wide open citrix services on critical domains ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("Roger A. Grimes" <roger@...neretcs.com>)
• Question re: Macro Virus behaviour ("Kelly Robinson" <caliana1989@...il.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (terry white <twhite@...ota.com>)
• Re: Question re: Macro Virus behaviour (gjgowey@....blackberry.net)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (gjgowey@....blackberry.net)
• Re: are the NetBIOS-like hacking days over? - wideopen citrix services on critical domains (gjgowey@....blackberry.net)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? (Valdis.Kletnieks@...edu)
• Re: are the NetBIOS-like hacking days over? - wide open citrix services on critical domains (<full-disclosure@...hmail.com>)
• Re: SSHatter 0.6 (<full-disclosure@...hmail.com>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? (<full-disclosure@...hmail.com>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? (<full-disclosure@...hmail.com>)
• [SECURITY] [DSA 1362-2] New lighttpd packages fix buffer overflow (Steve Kemp <skx@...ian.org>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Valdis.Kletnieks@...edu)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Thierry Zoller <Thierry@...ler.lu>)
• Re: SSHatter 0.6 (phioust <phioust@...il.com>)
• sqlninja 0.2.1 released ("A. R." <r00t@...thernfortress.net>)
• A waste of "research" money (phioust <phioust@...il.com>)
• [ GLSA 200710-03 ] libvorbis: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200710-04 ] libsndfile: Buffer overflow (Raphael Marichez <falco@...too.org>)
• [ GLSA 200710-05 ] QGit: Insecure temporary file creation (Pierre-Yves Rofes <py@...too.org>)
• [ GLSA 200710-06 ] OpenSSL: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• [ GLSA 200710-07 ] Tk: Buffer overflow (Raphael Marichez <falco@...too.org>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Paul Szabo <psz@...hs.usyd.edu.au>)
• Re: SSHatter 0.6 (ghost <ghosts@...il.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Re: SSHatter 0.6 (Anders B Jansson <hdw@...listi.se>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? ("Dude VanWinkle" <dudevanwinkle@...il.com>)

• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Glynn Clements <glynn@...ements.plus.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("Geo." <geoincidents@....net>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("Geo." <geoincidents@....net>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("Geo." <geoincidents@....net>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("Lamer Buster" <lamerbuster@...il.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (gjgowey@....blackberry.net)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("Morning Wood" <se_cur_ity@...mail.com>)
• Re: are the NetBIOS-like hacking days over? -wide open citrix services on critical domains ("Morning Wood" <se_cur_ity@...mail.com>)
• Re: are the NetBIOS-like hacking days over? - wide (<imul@...hmail.com>)
• Re: are the NetBIOS-like hacking days over? - wide open citrix services on critical domains ("Peter Dawson" <slash.pd@...il.com>)
• Is Your Kid Going to Jail Before College? ("worried security" <worriedsecurity@...glemail.com>)
• UNSUBSCRIBE ("Jones, Jeff (Enterprise Security)" <jeff.jones@...stellation.com>)
• CarolinaCon 2008 - Call For Papers/Speakers (Vic Vandal <vvandal@...l.com>)
• Re: UNSUBSCRIBE ("M. Shirk" <shirkdog_list@...mail.com>)
• Recall: UNSUBSCRIBE ("Jones, Jeff (Enterprise Security)" <jeff.jones@...stellation.com>)
• Re: Recall: UNSUBSCRIBE (Timo Schoeler <timo.schoeler@...cworks.net>)
• Re: Recall: UNSUBSCRIBE ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• If internet goes down out of hours, we're screwed ("worried security" <worriedsecurity@...glemail.com>)
• sqlninja 0.2.1 - fix! ("A. R." <r00t@...thernfortress.net>)
• BT Home Flub: Pwnin the BT Home Hub ("Adrian P" <unknown.pentester@...il.com>)
• Re: UNSUBSCRIBE (Jay Sulzberger <jays@...ix.com>)
• Re: If internet goes down out of hours, we're screwed (Valdis.Kletnieks@...edu)

• Re: UNSUBSCRIBE ("James Matthews" <nytrokiss@...il.com>)
• Re: If internet goes down out of hours, we're screwed ("Steven Adair" <steven@...urityzone.org>)
• Black Hat Tokyo + DC and Europe CfPs now open. (Jeff Moss <jmoss@...ckhat.com>)
• Re: UNSUBSCRIBE ("sushil Agarwal" <sushil.141@...il.com>)
• Re: UNSUBSCRIBE (gjgowey@....blackberry.net)
• Fw: Google Groups: No such group (gjgowey@....blackberry.net)
• Fw: News Delivery Report (Failure) (gjgowey@....blackberry.net)
• Re: UNSUBSCRIBE ("Harry Muchow" <wonderfulandromeda@...il.com>)
• Re: UNSUBSCRIBE (gjgowey@....blackberry.net)
• Re: UNSUBSCRIBE (S/U/N <s.u.n@...e.Fr>)
• Re: UNSUBSCRIBE (gjgowey@....blackberry.net)
• Re: UNSUBSCRIBE (Paul Ooi Cong Jen <paul@...izo.com>)
• Re: UNSUBSCRIBE (Ferdinand Klinzer <Klinzer@....de>)
• rPSA-2007-0210-1 xen (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0212-1 util-linux (rPath Update Announcements <announce-noreply@...th.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("Brett Moore" <brett.moore@...omniasec.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Andreas Lindenblatt <azrael@...ution.de>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Andreas Lindenblatt <azrael@...ution.de>)
• Re: UNSUBSCRIBE (Fabrizio <staticrez@...il.com>)
• Owning the internal network with SIP (part 1) and a Linksys Phone ("Radu State" <State@...ia.fr>)
• Re: UNSUBSCRIBE (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? (<full-disclosure@...hmail.com>)
• ANSA editorial system vulnerable ("Rosario Valotta" <rosario.valotta@...il.com>)
• Re: UNSUBSCRIBE (Valdis.Kletnieks@...edu)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Thierry Zoller <Thierry@...ler.lu>)
• [USN-527-1] xen-3.0 vulnerability (Kees Cook <kees@...ntu.com>)
• Re: UNSUBSCRIBE (<full-disclosure@...hmail.com>)
• NULL pointer crash in World in Conflict 1.000 (Luigi Auriemma <aluigi@...istici.org>)
• iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow (iDefense Labs <labs-no-reply@...fense.com>)
• The Death of Defence in Depth ? - An invitation to Hack.lu (Thierry Zoller <Thierry@...ler.lu>)
• URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (kriz.Full-Disclosure@....net)
• yahoo news been offline for hours ("worried security" <worriedsecurity@...glemail.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Thierry Zoller <Thierry@...ler.lu>)
• Who still trust filevault? Finally TrueCrypt for Mac OS X! (Fabio Pietrosanti <lists@...osecurity.ch>)
• Re: If internet goes down out of hours, we're screwed ("worried security" <worriedsecurity@...glemail.com>)
• [ GLSA 200710-09 ] NX 2.1: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
• [ GLSA 200710-08 ] KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow (Pierre-Yves Rofes <py@...too.org>)

• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("Gregory Rubin" <grrubin@...il.com>)
• Re: Who still trust filevault? Finally TrueCrypt for Mac OS X! ("Joey Mengele" <joey.mengele@...hmail.com>)
• [vuln.sg] Adobe PageMaker Long Font-Name Buffer Overflow Vulnerability (TAN Chew Keong <vulnpost-remove@...n.sg>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("john lokka" <merigoth@...il.com>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? (<full-disclosure@...hmail.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: yahoo news been offline for hours (Jim Popovitch <yahoo@...pop.com>)
• Re: If internet goes down out of hours, we're screwed ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? (<full-disclosure@...hmail.com>)
• Re: If internet goes down out of hours, we're screwed (<full-disclosure@...hmail.com>)
• Re: If internet goes down out of hours, we're screwed (<full-disclosure@...hmail.com>)
• Re: If internet goes down out of hours, we're screwed ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Report to Recipient(s) (gjgowey@....blackberry.net)
• Re: Report to Recipient(s) (Andrew Farmer <andfarm@...il.com>)
• Re: iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: iDefense Security Advisory 10.09.07:Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow (gjgowey@....blackberry.net)
• IRM Demonstrates Multiple Cisco IOS Exploitation Techniques ("Andy Davis" <andy.davis@...plc.com>)
• List of security conferences (<fts_skw@...hmail.com>)
• Re: The Death of Defence in Depth ? - An invitation to Hack.lu (Felix 'FX' Lindner <fx@...urity-labs.com>)
• Re: List of security conferences (Bernd Marienfeldt <bernd@...x.net>)
• Re: List of security conferences (silky <michaelslists@...il.com>)
• Re: List of security conferences ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
• Re: If internet goes down out of hours, we're screwed (<full-disclosure@...hmail.com>)
• Re: Core Impact 7.5 Web App pen-testing framework, as good as the hype? (<full-disclosure@...hmail.com>)
• Re: IRM Demonstrates Multiple Cisco IOS Exploitation Techniques (Damir Rajnovic <gaus@...co.com>)
• Re: IRM Demonstrates Multiple Cisco IOS Exploitation Techniques ("Andy Davis" <andy.davis@...plc.com>)
• Re: IRM Demonstrates Multiple Cisco IOS Exploitation Techniques ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
• Re: List of security conferences (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: IRM Demonstrates Multiple Cisco IOS Exploitation Techniques ("Andy Davis" <andy.davis@...plc.com>)
• Re: IRM Demonstrates Multiple Cisco IOS Exploitation Techniques ("Andy Davis" <andy.davis@...plc.com>)
• Re: List of security conferences ("phantom" <lostzero@...il.com>)
• Re: IRM Demonstrates Multiple Cisco IOS Exploitation Techniques ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
• Re: List of security conferences (Luiz Eduardo <le@...lophobia.net>)
• Re: The Death of Defence in Depth ? - An invitation to Hack.lu (Thierry Zoller <Thierry@...ler.lu>)
• Re: IRM Demonstrates Multiple Cisco IOS Exploitation Techniques ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
• Re: The Death of Defence in Depth ? - An invitation to Hack.lu (Sergio Alvarez <sergio.alvarez@...ns.com>)
• Re: IRM Demonstrates Multiple Cisco IOS Exploitation Techniques ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Cisco IOS LPD Remote Stack Overflow ("Andy Davis" <andy.davis@...plc.com>)
• Re: Is Your Kid Going to Jail Before College? (Cyneox <cyneox@...il.com>)
• Cisco IOS LPD Remote Stack Overflow - updated Cisco patch link (changed at the last minute) ("Andy Davis" <andy.davis@...plc.com>)
• Cisco Security Advisory: Cisco Wireless Control System Conversion Utility Adds Default Password (Cisco Systems Product Security Incident Response Team <psirt@c…)
• Re: Is Your Kid Going to Jail Before College? ("James Matthews" <nytrokiss@...il.com>)
• Remote Desktop Command Fixation Attacks ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• 0day: Hacking secured CITRIX from outside ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Cisco IOS LPD Remote Stack Overflow (Omar Santos <osantos@...co.com>)
• Tom Serson Serious Business ("Steve Bartman" <weatherman@...e-mail.net>)
• Re: Remote Desktop Command Fixation Attacks (<full-disclosure@...hmail.com>)
• Re: 0day: Hacking secured CITRIX from outside (<full-disclosure@...hmail.com>)
• Re: 0day: Hacking secured CITRIX from outside (M.B.Jr. <marcio.barbado@...il.com>)
• iDefense Security Advisory 10.10.07: Kaspersky Web Scanner ActiveX Format String Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Vulnerabilities digest (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Vulnerabilities digest (<full-disclosure@...hmail.com>)
• Getting TrueCrypt ported to Mac Os X! (Fabio Pietrosanti <lists@...osecurity.ch>)
• [Fwd: Google Groups: No such group] (Fabio Pietrosanti <lists@...osecurity.ch>)
• AST-2002-022: Buffer overflows in voicemail when using IMAP storage (The Asterisk Development Team <security@...erisk.org>)
• ZDI-07-056: IBM DB2 DB2JDS Multiple Vulnerabilities (zdi-disclosures@...m.com)
• ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability (zdi-disclosures@...m.com)
• ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability (zdi-disclosures@...m.com)
• TPTI-07-18: EMC RepliStor Server Heap Overflow Vulnerability (TSRT@...m.com)
• Email Disclaimers...Legally Liable if breached? ("Kelly Robinson" <caliana1989@...il.com>)
• Re: Email Disclaimers...Legally Liable if breached? (gjgowey@....blackberry.net)
• [SECURITY] [DSA 1379-2] New openssl packages fix arbitrary code execution (Noah Meyerhans <noahm@...ian.org>)
• Re: The Death of Defence in Depth ? - Aninvitation to Hack.lu (imipak <imipak@...il.com>)
• [SECURITY] [DSA 1385-1] New xfs packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Remote Desktop Command Fixation Attacks ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: ZDI-07-056: IBM DB2 DB2JDS Multiple Vulnerabilities (Joel Jaeggli <joelja@...us.com>)
• Re: Email Disclaimers...Legally Liable if breached? (Nick FitzGerald <nick@...us-l.demon.co.uk>)

• Re: Email Disclaimers...Legally Liable if breached? (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: Email Disclaimers...Legally Liable if breached? (gabriel rosenkoetter <gr@...ipsed.net>)
• Re: Email Disclaimers...Legally Liable ifbreached? (gjgowey@....blackberry.net)
• Re: If internet goes down out of hours, we're screwed ("worried security" <worriedsecurity@...glemail.com>)
• Re: Email Disclaimers...Legally Liable if breached? (Ray P <sixsigma98@...mail.com>)
• Re: Email Disclaimers...Legally Liable ifbreached? ("Kelly Robinson" <caliana1989@...il.com>)
• CORE-2007-0928: Stack-based buffer overflow vulnerability in OpenBSD’s DHCP server (Core Security Technologies Advisories <advisories@...esecurity.com>)
• [ MDKSA-2007:194 ] - Updated libvorbis packages fix vulnerabilities (security@...driva.com)
• Re: Email Disclaimers...Legally Liable if breached? (Troy <gimmespam@...il.com>)
• [USN-528-1] MySQL vulnerabilities (Kees Cook <kees@...ntu.com>)
• CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability ("hfli" <hfli@...tinet.com>)
• SIPVicious v0.2 - tools for auditing sip devices / PBXs (Obscure <lists@...cure.ws>)
• Re: Remote Desktop Command Fixation Attacks ("M. Burnett" <mb@...o.net>)
• Re: Remote Desktop Command Fixation Attacks ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Paul Szabo <psz@...hs.usyd.edu.au>)
• Re: Remote Desktop Command Fixation Attacks (gjgowey@....blackberry.net)
• Re: Remote Desktop Command Fixation Attacks (gboyce <gboyce@...belly.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Thierry Zoller <Thierry@...ler.lu>)
• Re: Remote Desktop Command Fixation Attacks (Obscure <lists@...cure.ws>)
• Re: Remote Desktop Command Fixation Attacks ("Paul Melson" <pmelson@...il.com>)
• Re: Email Disclaimers...Legally Liable if breached? (<full-disclosure@...hmail.com>)
• Re: Remote Desktop Command Fixation Attacks (gboyce <gboyce@...belly.com>)
• Re: Email Disclaimers...Legally Liable ifbreached? (Valdis.Kletnieks@...edu)
• Re: Email Disclaimers...Legally Liable if breached? (Valdis.Kletnieks@...edu)
• October Microsoft Tuesday (Todd Manning <fdlist@...italoffense.net>)
• Jack Bauer Gets Jailed! ("worried security" <worriedsecurity@...glemail.com>)
• [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities ("Williams, James K" <James.Williams@...com>)
• Re: Remote Desktop Command Fixation Attacks ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Remote Desktop Command Fixation Attacks (Valdis.Kletnieks@...edu)
• Re: Remote Desktop Command Fixation Attacks ("Alex Everett" <alex.everett@....edu>)
• [USN-529-1] Tk vulnerability (Kees Cook <kees@...ntu.com>)
• Re: Email Disclaimers...Legally Liable if breached? ("Kurt Buff" <kurt.buff@...il.com>)
• EEYE: CA BrightStor ArcServe Backup Server Arbitrary Pointer Dereference ("eEye Advisories" <eEyeAdvisories@...e.com>)
• iDefense Security Advisory 10.11.07: Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Jack Bauer Gets Jailed! (Valdis.Kletnieks@...edu)
• Re: Jack Bauer Gets Jailed! ("Slythers Bro" <slythers@...il.com>)
• Re: Jack Bauer Gets Jailed! (Timo Schoeler <timo.schoeler@...cworks.net>)
• Re: Email Disclaimers...Legally Liable ifbreached? (<full-disclosure@...hmail.com>)
• Re: Email Disclaimers...Legally Liable if breached? (<full-disclosure@...hmail.com>)
• Re: Remote Desktop Command Fixation Attacks (<full-disclosure@...hmail.com>)
• GranParadiso persistent connexion ? (Advisories ZATAZ <advisories@...az.com>)
• S21SEC-037-en: OPAL SIP Protocol Remote Denial of Service (S21sec Labs <labs@...sec.com>)
• rPSA-2007-0214-1 initscripts (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Remote Desktop Command Fixation Attacks (Jim Harrison <Jim@...tools.org>)
• Re: Remote Desktop Command Fixation Attacks (Xo Plague <dusty.sploit@...il.com>)
• Tikiwiki 1.9.8 exploit ITW (Moritz Naumann <security@...itz-naumann.com>)
• Re: Remote Desktop Command Fixation Attacks ("John C. A. Bambenek, CISSP" <bambenek.infosec@...il.com>)
• Re: Remote Desktop Command Fixation Attacks ("Gautam R. Singh" <gautam.singh@...il.com>)
• Re: Email Disclaimers...Legally Liable if breached? (Ray P <sixsigma98@...mail.com>)

• Re: Jack Bauer Gets Jailed! (phioust <phioust@...il.com>)
• Re: Email Disclaimers...Legally Liable if breached? (Troy <gimmespam@...il.com>)
• Re: Email Disclaimers...Legally Liable if breached? (Troy <gimmespam@...il.com>)
• GranParadiso persistent connexion ? (Advisories ZATAZ <advisories@...az.com>)
• Technology and your Security Program ("Kelly Robinson" <caliana1989@...il.com>)
• Re: Remote Desktop Command Fixation Attacks ("Pete Simpson" <Pete.Simpson@...arswift.com>)
• Re: rPSA-2007-0212-1 util-linux (yearsilent <yearsilent@...oo.com>)
• Re: Tikiwiki 1.9.8 exploit ITW (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Technology and your Security Program ("Paul Melson" <pmelson@...il.com>)
• SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS (Bernhard Mueller <research@...-consult.com>)
• Re: rPSA-2007-0212-1 util-linux (Andrew Farmer <andfarm@...il.com>)
• Re: rPSA-2007-0212-1 util-linux (Marcus Meissner <meissner@...e.de>)
• Re: Tikiwiki 1.9.8 exploit ITW (<full-disclosure@...hmail.com>)
• Re: Remote Desktop Command Fixation Attacks ("Thor (Hammer of God)" <thor@...merofgod.com>)
• CallManager and OpeSer toll fraud and authentication forward attack ("Radu State" <State@...ia.fr>)
• gnucitizen bt home hub latest, attacks wide spread, outages reported ("worried security" <worriedsecurity@...glemail.com>)
• Re: gnucitizen bt home hub latest, attacks wide spread, outages reported ("worried security" <worriedsecurity@...glemail.com>)
• [USN-530-1] hplip vulnerability (Kees Cook <kees@...ntu.com>)
• REALLY GOOD ARTICLE FROM SECURITYFOCUS (<full-disclosure@...hmail.com>)
• 0day Orkut XSS [ NEW! ] ("Fabio N Sarmento [ Gmail ]" <fabior2@...il.com>)
• Re: 0day Orkut XSS [ NEW! ] ("Open Phugu" <openphugu@...il.com>)
• [ GLSA 200710-10 ] SKK Tools: Insecure temporary file creation (Raphael Marichez <falco@...too.org>)
• extension for Firefox to force HTTPS always? ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
• Re: gnucitizen bt home hub latest, attacks wide spread, outages reported ("Valery Marchuk" <tecklord@...uritylab.ru>)
• [ GLSA 200710-11 ] X Font Server: Multiple Vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• Re: extension for Firefox to force HTTPS always? (Ismail Dönmez <ismail@...dus.org.tr>)
• [ GLSA 200710-12 ] T1Lib: Buffer overflow (Pierre-Yves Rofes <py@...too.org>)
• Re: extension for Firefox to force HTTPS always? ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
• Re: gnucitizen bt home hub latest, attacks wide spread, outages reported ("worried security" <worriedsecurity@...glemail.com>)
• Re: gnucitizen bt home hub latest, attacks wide spread, outages reported (gjgowey@....blackberry.net)
• Re: gnucitizen bt home hub latest, attacks wide spread, outages reported ("Adrian P" <unknown.pentester@...il.com>)
• Re: The Death of Defence in Depth ? - An invitation to Hack.lu ("Eric Rachner" <eric@...hner.us>)
• Re: The Death of Defence in Depth ? - Aninvitation to Hack.lu (gjgowey@....blackberry.net)

• [SECURITY] [DSA 1381-2] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
• Re: The Death of Defence in Depth ? - Aninvitation to Hack.lu (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• Re: The Death of Defence in Depth ? - An invitation to Hack.lu (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• Re: extension for Firefox to force HTTPS always? (Valdis.Kletnieks@...edu)
• Re: extension for Firefox to force HTTPS always? (<full-disclosure@...hmail.com>)
• Re: extension for Firefox to force HTTPS always? (gjgowey@....blackberry.net)
• Re: extension for Firefox to force HTTPS always? (Harry Hoffman <hhoffman@...solutions.net>)
• Re: extension for Firefox to force HTTPS always? (Valdis.Kletnieks@...edu)
• Re: extension for Firefox to force HTTPS always? (gjgowey@....blackberry.net)
• Re: extension for Firefox to force HTTPS always? ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
• Re: extension for Firefox to force HTTPS always? (silky <michaelslists@...il.com>)
• [ GLSA 200710-13 ] Ampache: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• [ GLSA 200710-14 ] DenyHosts: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
• Re: extension for Firefox to force HTTPS always? (<full-disclosure@...hmail.com>)
• Re: extension for Firefox to force HTTPS always? (<full-disclosure@...hmail.com>)
• full-disclosure@...hmail.com ("worried security" <worriedsecurity@...glemail.com>)
• Re: extension for Firefox to force HTTPS always? (Valdis.Kletnieks@...edu)
• PHP File Sharing System 1.5.1 (<jonasthambert@...h.ai>)
• Re: Email Disclaimers...Legally Liable if breached? (Ray P <sixsigma98@...mail.com>)
• Re: extension for Firefox to force HTTPS always? (<full-disclosure@...hmail.com>)
• Re: full-disclosure@...hmail.com (<full-disclosure@...hmail.com>)
• Re: full-disclosure@...hmail.com ("worried security" <worriedsecurity@...glemail.com>)
• Re: extension for Firefox to force HTTPS always? (Marcus Graf <m.graf@...plogistics.de>)
• Re: full-disclosure@...hmail.com (<full-disclosure@...hmail.com>)
• Re: extension for Firefox to force HTTPS always? (<full-disclosure@...hmail.com>)
• Clients buffer-overflow in Live for Speed 0.5X10 (Luigi Auriemma <aluigi@...istici.org>)
• Re: full-disclosure@...hmail.com ("worried security" <worriedsecurity@...glemail.com>)
• How to Handle ISPs Who Turn a Blind Eye to Criminal Activity? ("worried security" <worriedsecurity@...glemail.com>)
• Re: full-disclosure@...hmail.com ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: full-disclosure@...hmail.com ("worried security" <worriedsecurity@...glemail.com>)
• Re: full-disclosure@...hmail.com ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: full-disclosure@...hmail.com ("worried security" <worriedsecurity@...glemail.com>)
• Netgear SSL312 XSS vulnerability (SkyOut <skyout@....net>)
• Re: full-disclosure@...hmail.com ("worried security" <worriedsecurity@...glemail.com>)
• Re: full-disclosure@...hmail.com (scott <redhowlingwolves@...lsouth.net>)
• Re: full-disclosure@...hmail.com ("worried security" <worriedsecurity@...glemail.com>)
• Re: full-disclosure@...hmail.com (scott <redhowlingwolves@...lsouth.net>)

• Third-party patch for CVE-2007-3896 (Internet Explorer 7 invalid URI handling) available ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Re: Remote Desktop Command Fixation Attacks ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: full-disclosure@...hmail.com (<full-disclosure@...hmail.com>)
• Re: full-disclosure@...hmail.com (phioust <phioust@...il.com>)
• Re: How to Handle ISPs Who Turn a Blind Eye to Criminal Activity? (phioust <phioust@...il.com>)
• Re: full-disclosure@...hmail.com (phioust <phioust@...il.com>)
• Re: full-disclosure@...hmail.com (phioust <phioust@...il.com>)
• Re: Remote Desktop Command Fixation Attacks ("C Q" <kyle.c.quest@...il.com>)
• Apache Tomcat Rem0Te FiLe DiscloSure ZeroDay (W3bd4v) ("kcope" <kingcope@....net>)
• !!! W4RN1NG N1GS und P1GZ !!! ("Dude VanVinkle" <dudevanvinkle@...il.com>)
• ACHTUNG ("Dude VanVinkle" <dudevanvinkle@...il.com>)
• [ GLSA 200710-15 ] KDM: Local privilege escalation (Pierre-Yves Rofes <py@...too.org>)
• Re: !!! W4RN1NG N1GS und P1GZ !!! (silky <michaelslists@...il.com>)
• [ GLSA 200710-16 ] X.Org X server: Composite local privilege escalation (Pierre-Yves Rofes <py@...too.org>)
• Why criticize security researchers? On the recent PDP case. ("rpcxfsmd rpcxfsmd" <rpcxfsmd@...il.com>)
• Renaissance ("rpcxfsmd rpcxfsmd" <rpcxfsmd@...il.com>)
• Re: Remote Desktop Command Fixation Attacks ("C Q" <kyle.c.quest@...il.com>)
• Re: Why criticize security researchers? On the recent PDP case. (Peter Besenbruch <prb@...a.net>)
• Re: Why criticize security researchers? On the recent PDP case. ("C Q" <kyle.c.quest@...il.com>)

• Re: full-disclosure@...hmail.com ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: full-disclosure@...hmail.com (gjgowey@....blackberry.net)
• Re: full-disclosure@...hmail.com (<full-disclosure@...hmail.com>)
• Re: full-disclosure@...hmail.com ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: full-disclosure@...hmail.com (scott <redhowlingwolves@...lsouth.net>)
• Is this an attack? ("Kelly Robinson" <caliana1989@...il.com>)
• I made third-party patch for CVE-2007-3896 (Internet Explorer 7 invalid URI handling) ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Re: I made third-party patch for CVE-2007-3896 (Internet Explorer 7 invalid URI handling) ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Re: Is this an attack? ("Daniel Marsh" <jahilliya@...il.com>)
• Re: full-disclosure@...hmail.com (phioust <phioust@...il.com>)
• Re: full-disclosure@...hmail.com (gjgowey@....blackberry.net)
• Re: full-disclosure@...hmail.com (Peter Besenbruch <prb@...a.net>)
• [SECURITY] [DSA 1386-1] New wesnoth packages fix denial of service (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 1386-2] New wesnoth packages fix denial of service (joey@...odrom.org (Martin Schulze))
• Microsoft Windows default ZIP handler bug ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
• Re: full-disclosure@...hmail.com ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: full-disclosure@...hmail.com ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: full-disclosure@...hmail.com ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Remote Desktop Command Fixation Attacks ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Remote Desktop Command Fixation Attacks (gjgowey@....blackberry.net)
• eXtremail(ly easy) remote roots (mu-b <mu-b@...it-labs.org>)
• Re: full-disclosure@...hmail.com (<full-disclosure@...hmail.com>)
• Re: full-disclosure@...hmail.com ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: Remote Desktop Command Fixation Attacks ("James (njan) Eaton-Lee" <james.mailing@...il.com>)
• This list sucks ("Vlad Hackula" <vladhackula@...il.com>)
• Re: This list sucks ("John C. A. Bambenek, CISSP" <bambenek.infosec@...il.com>)
• tomserson tom serson full disclosure TheSersonFiles ("john myman" <johnmyman@...e-mail.net>)
• Re: This list sucks ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: This list sucks ("Stack Smasher" <stacksmasher@...il.com>)
• TheSersonFiles tomserson Tom Serson ("john myman" <johnmyman@...e-mail.net>)
• Re: This list sucks (phioust <phioust@...il.com>)
• pdp architect, drraid, beastiality, and incest (<imul@...hmail.com>)
• Re: Microsoft Windows default ZIP handler bug (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: This list sucks (phioust <phioust@...il.com>)
• Re: CallManager and OpeSer toll fraud and authentication forward attack (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Microsoft Windows default ZIP handler bug ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
• Re: Microsoft Windows default ZIP handler bug (naveed <naveedafzal@...il.com>)
• Re: CallManager and OpeSer toll fraud and authentication forward attack ("Radu State" <State@...ia.fr>)
• Re: pdp architect, drraid, beastiality, and incest (scott <redhowlingwolves@...lsouth.net>)
• Is this sane? ("Daniel Sichel" <daniels@...derosatel.com>)
• Re: Is this sane? (silky <michaelslists@...il.com>)
• [SECURITY] [DSA 1387-1] New librpcsecgss packages fix arbitrary code execution (Florian Weimer <fw@...eb.enyo.de>)
• Re: playing for fun with <=IE7 ("avivra" <avivra@...il.com>)

• [ MDKSA-2007:198 ] - Updated util-linux packages fix vulnerability (security@...driva.com)
• [ MDKSA-2007:197 ] - Updated tar packages prevent buffer overflow (security@...driva.com)
• [ MDKSA-2007:195 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
• [ MDKSA-2007:196 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
• Re: pdp architect, drraid, beastiality, and incest (phioust <phioust@...il.com>)
• Re: pdp architect, drraid, beastiality, and incest (scott <redhowlingwolves@...lsouth.net>)
• 0-day PDF exploit (biz4rre@...il.com)
• Re: full-disclosure@...hmail.com ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: pdp architect, drraid, beastiality, and incest (<full-disclosure@...hmail.com>)
• 0-day PDF exploit (biz4rre@...il.com)
• Re: 0-day PDF exploit (<full-disclosure@...hmail.com>)
• Fwd: Experience masturbation like never before. (<full-disclosure@...hmail.com>)
• FW: [Dailydave] Canada's Response to Black Hat - SecTor 2007 ("Taylor, Gord" <gord.taylor@....com>)
• IRM Vendor Alerts: Six critical remote vulnerabilities in TIBCO SmartPGM FX ("Andy Davis" <andy.davis@...plc.com>)
• Re: pdp architect, drraid, beastiality, and incest ("Morning Wood" <se_cur_ity@...mail.com>)
• Re: pdp architect, drraid, beastiality, and incest (<full-disclosure@...hmail.com>)
• Re: 0-day PDF exploit (<full-disclosure@...hmail.com>)
• Re: Fwd: Experience masturbation like never before. (<full-disclosure@...hmail.com>)
• Re: Fwd: Experience masturbation like never before. ("Brandon S. Allbery KF8NH" <allbery@....cmu.edu>)
• Re: Fwd: Experience masturbation like never before. (Valdis.Kletnieks@...edu)
• Re: 0-day PDF exploit (phioust <phioust@...il.com>)
• Re: IRM Vendor Alerts: Six critical remote vulnerabilities in TIBCO SmartPGM FX (phioust <phioust@...il.com>)
• Re: pdp architect, drraid, beastiality, and incest (phioust <phioust@...il.com>)
• Re: Fwd: Experience masturbation like never before. (<full-disclosure@...hmail.com>)
• Re: 0-day PDF exploit (biz4rre@...il.com)
• Re: Fwd: Experience masturbation like never before. ("Dude VanVinkle" <dudevanvinkle@...il.com>)
• Re: 0-day PDF exploit (<full-disclosure@...hmail.com>)
• Re: Fwd: Experience masturbation like never before. (<full-disclosure@...hmail.com>)
• password hash, funny myth in the industry! ("Bipin Gautam" <gautam.bipin@...il.com>)
• Re: password hash, funny myth in the industry! (Thierry Zoller <Thierry@...ler.lu>)
• Re: password hash, funny myth in the industry! (<full-disclosure@...hmail.com>)
• Re: password hash, funny myth in the industry! (<full-disclosure@...hmail.com>)
• Re: password hash, funny myth in the industry! (phioust <phioust@...il.com>)
• Re: Fwd: Experience masturbation like never before. ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Fwd: Experience masturbation like never before. (<full-disclosure@...hmail.com>)
• Re: [MailServer Notification]Content Filtering Notification (<full-disclosure@...hmail.com>)
• [ GLSA 200710-17 ] Balsa: Buffer overflow (Raphael Marichez <falco@...too.org>)

• AST-2007-023 - SQL Injection Vulnerabilty in cdr_addon_mysql (Asterisk Security Team <security@...erisk.org>)
• Secunia Research: IrfanView Palette File Importing Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
• AST-2007-023: SQL Injection vulnerability in cdr_addon_mysql (The Asterisk Development Team <asteriskteam@...ium.com>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• Re: 0-day PDF exploit ("cocoruder ." <frankruder@...mail.com>)
• OMG - I just won the lottery! For real!!11! ("Kelly Robinson" <caliana1989@...il.com>)
• Re: IRM Vendor Alerts: Six critical remote vulnerabilities in TIBCO SmartPGM FX ("Andy Davis" <andy.davis@...plc.com>)
• AST-2007-023: SQL Injection POC and details (state@...ia.fr)
• AST-2007-023: SQL Injection POC and details (state@...ia.fr)
• Net & System Security 2007 ("giovanni manunta" <gmanunta81@...il.com>)
• Re: *****SPAM***** OMG - I just won the lottery! For real!!11! (jeroen <nowhereman@...nen.org>)
• Re: *****SPAM***** OMG - I just won the lottery! For real!!11! ("James Matthews" <nytrokiss@...il.com>)
• Re: 0-day PDF exploit (eric@...hner.us)
• Net & System Security 2007 ("giovanni manunta" <gmanunta81@...il.com>)
• Re: password hash, funny myth in the industry! (upb <upbupb@...il.com>)
• Oracle TNS Listener DoS and/or remote memory inspection ("NGSSoftware Insight Security Research" <nisr@...software.com>)
• Re: password hash, funny myth in the industry! ("Stephan G." <st@...rent.ch>)
• Re: Third-party patch for CVE-2007-3896, UPDATE NOW ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Re: password hash, funny myth in the industry! (Valdis.Kletnieks@...edu)
• Re: Third-party patch for CVE-2007-3896, UPDATE NOW (<full-disclosure@....hush.com>)
• Oracle RDBMS TNS Data packet DoS ("NGSSoftware Insight Security Research" <nisr@...software.com>)
• (no subject) ("NGSSoftware Insight Security Research" <nisr@...software.com>)
• Multiple SQL Injection Flaws in Oracle CTX_DOC package ("NGSSoftware Insight Security Research" <nisr@...software.com>)
• Oracle audit issue with XMLDB ftp service ("NGSSoftware Insight Security Research" <nisr@...software.com>)
• SQL Injection Flaw in Oracle Workspace Manager ("David Litchfield" <davidl@...software.com>)
• Re: 0-day PDF exploit (Justin Klein Keane <jukeane@....upenn.edu>)
• Netscape Navigator 9.0 fixes several vulnerabilities (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: IRM Vendor Alerts: Six critical remote vulnerabilities in TIBCO SmartPGM FX (phioust <phioust@...il.com>)
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@c…)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Re: OMG - I just won the lottery! For real!!11! ("nigger johnson" <hardened.php@...il.com>)
• Re: IRM Vendor Alerts: Six critical remote vulnerabilities in TIBCO SmartPGM FX ("nigger johnson" <hardened.php@...il.com>)
• Re: OMG - I just won the lottery! For real!!11! (<full-disclosure@....hush.com>)
• Re: SQL Injection Flaw in Oracle Workspace Manager (<full-disclosure@....hush.com>)
• Re: 0-day PDF exploit (<full-disclosure@....hush.com>)
• Re: Netscape Navigator 9.0 fixes several vulnerabilities (<full-disclosure@....hush.com>)
• Did people power get rid of Gadi Evron from Full-Disclosure? ("worried security" <worriedsecurity@...glemail.com>)
• Most Secure Browser (<full-disclosure@....hush.com>)
• [ MDKSA-2007:199 ] - Updated phpMyAdmin packages fix multiple vulnerabilities (security@...driva.com)
• Fwd: To the list admin: address change. (<full-disclosure@....hush.com>)
• Re: Netscape Navigator 9.0 fixes several vulnerabilities (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Zone-H.org: 10 reasons websites get hacked (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: Zone-H.org: 10 reasons websites get hacked ("Dude VanVinkle" <dudevanvinkle@...il.com>)
• Re: Zone-H.org: 10 reasons websites get hacked ("worried security" <worriedsecurity@...glemail.com>)
• Re: Zone-H.org: 10 reasons websites get hacked ("Peter Dawson" <slash.pd@...il.com>)

• Re: Zone-H.org: 10 reasons websites get hacked (<full-disclosure@....hush.com>)
• Re: Most Secure Browser (<full-disclosure@....hush.com>)
• Re: Most Secure Browser ("Andre Gironda" <andre@...rations.net>)
• Re: 0-day PDF exploit ("cocoruder ." <frankruder@...mail.com>)
• Re: Most Secure Browser (<full-disclosure@....hush.com>)
• Re: Did people power get rid of Gadi Evron from Full-Disclosure? (<full-disclosure@....hush.com>)
• Re: Most Secure Browser ("Andre Gironda" <andreg@...il.com>)
• .aware eZine (beta edition) (rattle <rattle@...renetwork.org>)
• peace (fabio <ctrlaltca@...ero.it>)
• Re: .aware eZine (beta edition) (<full-disclosure@....hush.com>)
• Re: Your email requires verification. (<full-disclosure@....hush.com>)
• [SECURITY] [DSA 1388-1] New dhcp packages fix arbitrary code execution (Steve Kemp <skx@...ian.org>)
• Re: peace (Nikolay Kichukov <hijacker@...um.net>)
• Re: Netgear SSL312 XSS vulnerability (rembrandt@...erlin.de)
• Re: peace (<full-disclosure@....hush.com>)
• Re: Netgear SSL312 XSS vulnerability (<full-disclosure@....hush.com>)
• Re: Zone-H.org: 10 reasons websites get hacked ("worried security" <worriedsecurity@...glemail.com>)
• Re: Zone-H.org: 10 reasons websites get hacked (<full-disclosure@....hush.com>)
• password plugin for linux? (". /" <winter@...nkyholdings.com>)
• [ GLSA 200710-18 ] util-linux: Local privilege escalation (Raphael Marichez <falco@...too.org>)
• Re: password plugin for linux? (<full-disclosure@....hush.com>)
• [SECURITY] [DSA 1389-1] New zoph packages fix SQL injection (Moritz Muehlenhoff <jmm@...ian.org>)
• rPSA-2007-0219-1 libpng (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Netgear SSL312 XSS vulnerability ("Lolek of TK53" <lolek1337@...glemail.com>)
• Serious holes affecting SiteBar 3.3.8 (Tim Brown <timb@...-dimension.org.uk>)
• Re: password plugin for linux? (Valdis.Kletnieks@...edu)
• [ GLSA 200710-19 ] The Sleuth Kit: Integer underflow (Raphael Marichez <falco@...too.org>)
• S21SEC-038-en: Alcatel Omnivista 4760 Cross-Site Scripting (S21sec Labs <labs@...sec.com>)
• [ MDKSA-2007:200 ] - Updated tk packages fix vulnerabilities (security@...driva.com)
• [ GLSA 200710-20 ] PDFKit, ImageKits: Buffer overflow (Raphael Marichez <falco@...too.org>)
• [TOOL] w3af - Web Application Attack and Audit Framework ("Andres Riancho" <andres.riancho@...il.com>)

• Re: peace (fabio <ctrlaltca@...ero.it>)
• Gmail 1.1.0 for BlackBerry remote DoS ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
• Re: Netgear SSL312 XSS vulnerability (jpk <fulldisc@...essler.info>)
• XSS vulnerabilities on eBay, MySpace, CNN.com, etc ("jgffgjfgd rewrewrew" <ctjsme@...il.com>)
• rPSA-2007-0220-1 ImageMagick (rPath Update Announcements <announce-noreply@...th.com>)
• [SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution (Noah Meyerhans <noahm@...ian.org>)
• Creative spam (S/U/N <s.u.n@...e.Fr>)
• Re: Creative spam (<full-disclosure@....hush.com>)
• Re: XSS vulnerabilities on eBay, MySpace, CNN.com, etc (<full-disclosure@....hush.com>)
• Re: peace (<full-disclosure@....hush.com>)
• Re: Gmail 1.1.0 for BlackBerry remote DoS (<full-disclosure@....hush.com>)
• Re: password plugin for linux? (<full-disclosure@....hush.com>)
• Re: Serious holes affecting SiteBar 3.3.8 (<full-disclosure@....hush.com>)
• Re: Netgear SSL312 XSS vulnerability (<full-disclosure@....hush.com>)
• Re: Netgear SSL312 XSS vulnerability (<full-disclosure@....hush.com>)
• PhD Power in Efffect (<full-disclosure@....hush.com>)
• [CAID 35754]: CA Host-Based Intrusion Prevention System (CA HIPS) Server Vulnerability ("Williams, James K" <James.Williams@...com>)
• Marc Vilanova Vilasero está ausente de la oficina. (Marc Vilanova Vilasero <mvilanova@...caixa.com>)
• Re: Marc Vilanova Vilasero está ausente de la oficina. (<full-disclosure@....hush.com>)
• RE: Marc Vilanova Vilasero está ausente de la oficina. ("M. Shirk" <shirkdog_list@...mail.com>)
• Re: 0-day PDF exploit (gboyce <gboyce@...belly.com>)
• [SECURITY] [DSA 1391-1] New icedove packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Marc Vilanova Vilasero está ausente de la oficina. (German <karozo86@...il.com>)
• Re: Marc Vilanova Vilasero está ausente de la oficina. (<full-disclosure@....hush.com>)
• Re: Marc Vilanova Vilasero está ausente de la oficina. (Valdis.Kletnieks@...edu)
• Re: Marc Vilanova Vilasero está ausente de la oficina. (<full-disclosure@....hush.com>)
• Re: Marc Vilanova Vilasero está ausente de la oficina. (gjgowey@....blackberry.net)
• Re: XSS vulnerabilities on eBay, MySpace, CNN.com, etc (phioust <phioust@...il.com>)
• Re: Marc Vilanova Vilasero está ausente de la oficina. (lulzlulzluzluz <hardened.php@...il.com>)
• Ekoparty 3th. Edition 2007 CFP closed - Buenos Aires - Argentina. ("ekoparty" <no-reply@...party.com.ar>)
• Re: Marc Vilanova Vilasero está ausente de la oficina. (Joe Barr <joe@...rimer.com>)
• XSS and SQL injection via SIP (part 2) and toll fraud bonus ("Radu State" <State@...ia.fr>)

• Re: Marc Vilanova Vilasero está ausente de la oficina. ("Kurt Dillard" <kurtdillard@....com>)
• Juniper JunOS gdb question ("Gyan Chawdhary" <gyan.chawdhary@...il.com>)
• Re: PhD Power in Efffect (professor buddha <pbuddha13@...oo.com>)
• Re: Marc Vilanova Vilasero está ausente de la oficina. (lulzlulzluzluz <hardened.php@...il.com>)
• Re: XSS and SQL injection via SIP (part 2) and toll fraud bonus (phioust <phioust@...il.com>)
• Re: Marc Vilanova Vilasero está ausente de la oficina. (scott <redhowlingwolves@...lsouth.net>)
• Re: Marc Vilanova Vilasero está ausente de la oficina. (phioust <phioust@...il.com>)
• Re: Marc Vilanova Vilasero está ausente de la oficina. (lulzlulzluzluz <hardened.php@...il.com>)
• Re: XSS vulnerabilities on eBay, MySpace, CNN.com, etc (lulzlulzluzluz <hardened.php@...il.com>)
• Re: XSS and SQL injection via SIP (part 2) and toll fraud bonus (phioust <phioust@...il.com>)
• Re: [MailServer Notification]Content Filtering Notification (phioust <phioust@...il.com>)
• Re: [MailServer Notification]Content Filtering Notification (lulzlulzluzluz <hardened.php@...il.com>)
• THE FIRESALE IS COMING!! (phioust <phioust@...il.com>)
• Re: XSS and SQL injection via SIP (part 2) and toll fraud bonus (state@...ia.fr)
• Re: THE FIRESALE IS COMING!! (kefka <kefka@...inbeardsucks.com>)
• Come on, let's do funding for Mac OS TrueCrypt porting ! (Fabio Pietrosanti <lists@...osecurity.ch>)
• Re: password plugin for linux? ("Guasconi Vincent" <tyoptyop@...il.com>)
• [SECURITY] [DSA 1392-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Marc Vilanova Vilasero est? ausente de ("RMueller" <randallm@...mail.com>)
• Inguma 0.0.5: Brute forcing and password cracking (Joxean Koret <joxeankoret@...oo.es>)
• Re: Come on, let's do funding for Mac OS TrueCrypt porting ! (phioust <phioust@...il.com>)
• Re: XSS and SQL injection via SIP (part 2) and toll fraud bonus (phioust <phioust@...il.com>)
• Re: THE FIRESALE IS COMING!! (phioust <phioust@...il.com>)
• Re: THE FIRESALE IS COMING!! (phioust <phioust@...il.com>)
• Re: Come on, let's do funding for Mac OS TrueCrypt porting ! (Fabio Pietrosanti <lists@...osecurity.ch>)
• Re: Come on, let's do funding for Mac OS TrueCrypt porting ! (scott <redhowlingwolves@...lsouth.net>)
• Re: Come on, let's do funding for Mac OS TrueCrypt porting ! (Fabio Pietrosanti <lists@...osecurity.ch>)
• Re: Madness? This is KWICKFIX!!!!!! (phioust <phioust@...il.com>)
• Re: Madness? This is KWICKFIX!!!!!! (<full-disclosure@....hush.com>)
• Cross Site Hacking Browser Injection Attack Vulnerability Paradigms (<full-disclosure@....hush.com>)
• Re: Cross Site Hacking Browser Injection Attack Vulnerability Paradigms (<full-disclosure@....hush.com>)
• Re: Madness? This is KWICKFIX!!!!!! (phioust <phioust@...il.com>)
• Re: Come on, let's do funding for Mac OS TrueCrypt porting ! (phioust <phioust@...il.com>)
• Re: Cross Site Hacking Browser Injection Attack Vulnerability Paradigms (phioust <phioust@...il.com>)
• [ GLSA 200710-21 ] TikiWiki: Arbitrary command execution (Raphael Marichez <falco@...too.org>)
• [ GLSA 200710-22 ] TRAMP: Insecure temporary file creation (Raphael Marichez <falco@...too.org>)
• Fifty Hitler ("Gadi Evron" <evron@...uxmail.org>)
• Perl or python: the debate ("Gadi Evron" <evron@...uxmail.org>)
• DailyGadi: Cyberwar alert, mass disruption coming ("Gadi Evron" <evron@...uxmail.org>)
• French frogs jump over the fog ("Gadi Evron" <evron@...uxmail.org>)
• DailyGadi: Russian whores ("Gadi Evron" <evron@...uxmail.org>)
• Fifty Hitler ("Gadi Evron" <evron@...uxmail.org>)
• Why? ("Gadi Evron" <evron@...uxmail.org>)
• DailyGadi: Rainbow tables ("Gadi Evron" <evron@...uxmail.org>)
• DailyGadi: My fro ("Gadi Evron" <evron@...uxmail.org>)
• My youth ("Gadi Evron" <evron@...uxmail.org>)
• Fifty Hitler ("Gadi Evron" <evron@...uxmail.org>)
• Queers ("Gadi Evron" <evron@...uxmail.org>)
• DailyGadi: Holocaust denial ("Gadi Evron" <evron@...uxmail.org>)
• DailyGadi: Molested ("Gadi Evron" <evron@...uxmail.org>)
• Damn trolls ("Gadi Evron" <evron@...uxmail.org>)
• SNOSOFT: Remote OpenSSH 0day! (yuck) ("Gadi Evron" <evron@...uxmail.org>)
• DailyGadi: Transvestites ("Gadi Evron" <evron@...uxmail.org>)
• DailyGadi: Rhino9 is back ("Gadi Evron" <evron@...uxmail.org>)
• Re: DailyGadi: Russian whores (phioust <phioust@...il.com>)
• DailyGadi: I hate you ("Gadi Evron" <evron@...uxmail.org>)
• Re: XSS and SQL injection via SIP (part 2) and toll fraud bonus ("Gadi Evron" <evron@...uxmail.org>)
• Re: DailyGadi: Cyberwar alert, mass disruption coming ("worried security" <worriedsecurity@...glemail.com>)

• the disappearance of the dog lover Petko D. Petkov (phioust <phioust@...il.com>)
• Re: DailyGadi: Cyberwar alert, mass disruption coming (phioust <phioust@...il.com>)
• Re: Perl or python: the debate (phioust <phioust@...il.com>)
• Someone is impersonating Gadi Evron and spamming this list (Anthony V. Vitale <anthony.vitale@...thlink.net>)
• artificial intelligence ("worried security" <worriedsecurity@...glemail.com>)
• Re: Someone is impersonating Gadi Evron and spamming this list (phioust <phioust@...il.com>)
• Re: DailyGadi: Cyberwar alert, mass disruption coming ("worried security" <worriedsecurity@...glemail.com>)
• Re: Someone is impersonating Gadi Evron and spamming this list (scott <redhowlingwolves@...lsouth.net>)
• Re: DailyGadi: Cyberwar alert, mass disruption coming (phioust <phioust@...il.com>)
• Re: Someone is impersonating Gadi Evron and spamming this list (phioust <phioust@...il.com>)
• Re: Someone is impersonating Gadi Evron and spamming this list (phioust <phioust@...il.com>)
• Re: Someone is impersonating Gadi Evron and spamming this list (phioust <phioust@...il.com>)
• Re: DailyGadi: Cyberwar alert, mass disruption coming ("worried security" <worriedsecurity@...glemail.com>)
• Re: DailyGadi: Cyberwar alert, mass disruption coming (phioust <phioust@...il.com>)
• Re: Someone is impersonating Gadi Evron and spamming this list (phioust <phioust@...il.com>)
• Re: DailyGadi: Cyberwar alert, mass disruption coming ("worried security" <worriedsecurity@...glemail.com>)
• Re: the disappearance of the dog lover Petko D. Petkov (scott <redhowlingwolves@...lsouth.net>)
• Re: the disappearance of the dog lover Petko D. Petkov (phioust <phioust@...il.com>)
• Re: Someone is impersonating Gadi Evron and spamming this list (M.B.Jr. <marcio.barbado@...il.com>)
• Re: the disappearance of the dog lover Petko D. Petkov (scott <redhowlingwolves@...lsouth.net>)
• Re: the disappearance of the dog lover Petko D. Petkov (phioust <phioust@...il.com>)
• Re: Cross Site Hacking Browser Injection Attack Vulnerability Paradigms (Valdis.Kletnieks@...edu)
• Re: XSS and SQL injection via SIP (part 2) and toll fraud bonus (Valdis.Kletnieks@...edu)
• Re: the disappearance of the dog lover Petko D. Petkov (Valdis.Kletnieks@...edu)
• Re: Someone is impersonating Gadi Evron and spamming this list (Peter Besenbruch <prb@...a.net>)
• Re: Someone is impersonating Gadi Evron andspamming this list (gjgowey@....blackberry.net)
• Fw: Someone is impersonating Gadi Evron andspamming this list (gjgowey@....blackberry.net)
• CISSPs securing ur networks ("cybergoth" <cybergoth@...tical.lt>)
• Re: CISSPs securing ur networks (forever.b0rked <forever.b0rked@...il.com>)
• Redirecting 404 error pages? ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: DailyGadi: Cyberwar alert, mass disruption coming ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: CISSPs securing ur networks ("M. Shirk" <shirkdog_list@...mail.com>)
• Re: CISSPs securing ur networks (reepex <reepex@...il.com>)
• Re: Redirecting 404 error pages? (reepex <reepex@...il.com>)

• Fwd: I want to be with you (<full-disclosure@....hush.com>)
• Spike in SSH scans (James Lay <jlay@...ve-tothe-box.net>)
• Re: Redirecting 404 error pages? ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Distributed SSH username/password brute force attack (Philipp <subs07@...g.dhs.org>)
• Re: Spike in SSH scans (Adrian <adrian@...netcoding.net>)
• Re: Spike in SSH scans ("J. Oquendo" <sil@...iltrated.net>)
• Re: Fwd: I want to be with you ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• ifnet.it WEBIF XSS Vulnerability (SkyOut <skyout@....net>)
• Re: Distributed SSH username/password brute forceattack ("subs07" <subs07@...g.dhs.org>)
• Call for Papers for Security Track at ApacheCon Europe 2008 (Lars Eilebrecht <lars@...che.org>)
• Cracking the iPhone (5 article series) (H D Moore <fdlist@...italoffense.net>)
• Re: Distributed SSH username/password brute forceattack ("cybergoth" <cybergoth@...tical.lt>)
• Re: Spike in SSH scans (Shaun <shaun@...unc.com>)
• Re: Fwd: I want to be with you (Valdis.Kletnieks@...edu)
• simple dns rebinding protection with dnsmasq ("Collin R. Mulliner" <collin@...aversion.net>)
• [USN-532-1] nagios-plugins vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-533-1] util-linux vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-534-1] OpenSSL vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-531-1] dhcp vulnerability (Kees Cook <kees@...ntu.com>)
• Re: Spike in SSH scans ("Steven Adair" <steven@...urityzone.org>)
• Re: Distributed SSH username/password brute forceattack ("Valery Marchuk" <tecklord@...uritylab.ru>)
• Camino release 1.5.2 fixes several vulnerabilities (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• PacSec 2007 Agenda (Tokyo 11-29/30) (Dragos Ruiu <dr@....net>)
• PacSec 2007 Agenda (Tokyo 11-29/30) (Dragos Ruiu <dr@....net>)
• Re: Distributed SSH username/password brute forceattack (A.L.M.Buxey@...ro.ac.uk)
• Re: ifnet.it WEBIF XSS Vulnerability (reepex <reepex@...il.com>)
• [ GLSA 200710-23 ] Star: Directory traversal vulnerability (Raphael Marichez <falco@...too.org>)
• Re: Distributed SSH username/password brute forceattack (Anders B Jansson <hdw@...listi.se>)
• [USN-501-2] Ghostscript vulnerability (Kees Cook <kees@...ntu.com>)

• [ MDKSA-2007:201 ] - Updated hplip packages fix vulnerabilities (security@...driva.com)
• CFP for HITBSecConf2008 - Dubai now open (Praburaajan <prabu@...kinthebox.org>)
• CFP for HITBSecConf2008 - Dubai now open (Praburaajan <prabu@...kinthebox.org>)
• [USN-535-1] Firefox vulnerabilities (Kees Cook <kees@...ntu.com>)
• [ GLSA 200710-24 ] OpenOffice.org: Heap-based buffer overflow (Raphael Marichez <falco@...too.org>)
• Re: simple dns rebinding protection with dnsmasq ("Guasconi Vincent" <tyoptyop@...il.com>)
• PDF mailto exploit in the wild (Paul Szabo <psz@...hs.usyd.edu.au>)
• How to use the tools rainbowrack 1.2-src (edison <loneyli78@...n.com>)
• [PoC] DNS Recursion bandwidth amplification (Shadow <chemshadow@...il.com>)
• Re: PDF mailto exploit in the wild ("Nick Boyce" <nick.boyce@...il.com>)
• Re: PDF mailto exploit in the wild (Gregory Boyce <gboyce@...belly.com>)
• Airscanner Mobile Security Advisory #07101401: Mobile-spy Victim/User Phone/SMS/URL Log Spoofing and Persistent XSS Injection (Seth Fogie <seth@...scanner.com>)
• [vuln.sg] IBM Lotus Notes Attachment Viewer Buffer Overflow Vulnerabilities (TAN Chew Keong <vulnpost-remove@...n.sg>)
• IRM Discover More Vulnerabilities in Cisco IOS ("Andy Davis" <andy.davis@...plc.com>)
• Re: PDF mailto exploit in the wild (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: IRM Discover More Vulnerabilities in Cisco IOS ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• 3proxy double free vulnerability ("xiaojunli.air" <xiaojunli.air@...il.com>)
• Re: PDF mailto exploit in the wild (biz4rre@...il.com)
• [ MDKSA-2007:202 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
• Re: Airscanner Mobile Security Advisory #07101401: Mobile-spy Victim/User Phone/SMS/URL Log Spoofing and Persistent XSS Injection (reepex <reepex@...il.com>)
• Re: IRM Discover More Vulnerabilities in Cisco IOS (reepex <reepex@...il.com>)
• [SECURITY] [DSA 1372-2] New ktorrent packages fix directory traversal (Steve Kemp <skx@...ian.org>)
• Re: IRM Discover More Vulnerabilities in Cisco IOS (<full-disclosure@....hush.com>)
• Re: PDF mailto exploit in the wild ("Nick Boyce" <nick.boyce@...il.com>)
• [SECURITY] [DSA 1393-1] New xfce4-terminal packages fix arbitrary command execution (Steve Kemp <skx@...ian.org>)
• 3proxy 0.5.3j released (bugfix) (3APA3A <3APA3A@...URITY.NNOV.RU>)
• [USN-531-2] dhcp vulnerability (Kees Cook <kees@...ntu.com>)
• Miranda IM Multiple Buffer Overflow Vulnerabilities ("Research" <research@...ureworks.com>)
• [USN-536-1] Thunderbird vulnerabilities (Kees Cook <kees@...ntu.com>)
• [USN-537-1] gnome-screensaver vulnerability (Kees Cook <kees@...ntu.com>)
• Re: PDF mailto exploit in the wild (Paul Szabo <psz@...hs.usyd.edu.au>)
• DHS need to get on top of this right now ("worried security" <worriedsecurity@...glemail.com>)

• Re: DHS need to get on top of this right now (John Kinsella <jlk@...ashyour.com>)
• Re: Distributed SSH username/password brute forceattack (nocfed <nocfed@...il.com>)
• Re: DHS need to get on top of this right now ("worried security" <worriedsecurity@...glemail.com>)
• Re: DHS need to get on top of this right now (<31337@...h.ai>)
• Re: DHS need to get on top of this right now ("worried security" <worriedsecurity@...glemail.com>)
• Re: DHS need to get on top of this right now (scott <redhowlingwolves@...lsouth.net>)
• Re: DHS need to get on top of this right now (<31337@...h.ai>)
• [SECURITY] [DSA 1394-1] New reprepro packages fix authentication bypass (Thijs Kinkhorst <thijs@...ian.org>)
• rPSA-2007-0222-1 cpio tar (rPath Update Announcements <announce-noreply@...th.com>)
• Re: DHS need to get on top of this right now ("php0t" <php0t@...ro.hu>)
• Re: DHS need to get on top of this right now (John Kinsella <jlk@...ashyour.com>)
• Re: Distributed SSH username/password brute forceattack (Vincent Archer <varcher@...yall.com>)
• Re: DHS need to get on top of this right now (Prohest <prohest@...il.com>)
• Re: How to use the tools rainbowrack 1.2-src (Verhoeven Dimitri <cytron@...ertronica.be>)
• Re: DHS need to get on top of this right now ("Mark Senior" <senatorfrog@...il.com>)
• Re: DHS need to get on top of this right now ("worried security" <worriedsecurity@...glemail.com>)
• iDefense Security Advisory 10.23.07: IBM Lotus Notes Client TagAttributeListCopy Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.23.07: IBM Lotus Domino IMAP Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: DHS need to get on top of this right now (<Glenn.Everhart@...se.com>)
• Re: DHS need to get on top of this right now (Epic <epic@...k3r.com>)
• rPSA-2007-0221-1 php php-mysql php-pgsql (rPath Update Announcements <announce-noreply@...th.com>)
• Re: DHS need to get on top of this right now (Valdis.Kletnieks@...edu)
• Re: DHS need to get on top of this right now ("Mike Owen" <kyphros@...il.com>)
• Re: DHS need to get on top of this right now (<31337@...h.ai>)
• Re: DHS need to get on top of this right now ("worried security" <worriedsecurity@...glemail.com>)
• Re: DHS need to get on top of this right now (Michael Holstein <michael.holstein@...ohio.edu>)
• "Hackers can divert Vonage calls: security firm" =>? ("Peter Dawson" <slash.pd@...il.com>)
• Using GPUs to crack hashes ("North, Quinn" <QNorth@....com>)
• [ GLSA 200710-25 ] MLDonkey: Privilege escalation (Raphael Marichez <falco@...too.org>)
• [ GLSA 200710-26 ] HPLIP: Privilege escalation (Raphael Marichez <falco@...too.org>)
• [ GLSA 200710-27 ] ImageMagick: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)

• [SECURITY] [DSA 1389-2] New zoph packages fix SQL injection (Thijs Kinkhorst <thijs@...ian.org>)
• [SECURITY] [DSA 1395-1] New xen-utils packages fix file truncation (Steve Kemp <skx@...ian.org>)
• iDefense Security Advisory 10.25.07: Trend Micro Tmxpflt.sys IOCTL 0xa0284403 Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: "Hackers can divert Vonage calls: security firm" =>? ("Muskegon Whitehall" <muskegon.whitehall@...il.com>)
• TCP Hijacking (aka Man-in-the-Middle) (Oliver <olivereatsolives@...il.com>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (reepex <reepex@...il.com>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (Oliver <olivereatsolives@...il.com>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (Valdis.Kletnieks@...edu)
• Re: "Hackers can divert Vonage calls: security firm" =>? ("Peter Dawson" <slash.pd@...il.com>)
• Re: "Hackers can divert Vonage calls: security firm" =>? ("Muskegon Whitehall" <muskegon.whitehall@...il.com>)
• Re: "Hackers can divert Vonage calls: security firm" =>? ("Muskegon Whitehall" <muskegon.whitehall@...il.com>)
• Re: TCP Hijacking (aka Man-in-the-Middle) ("Mike Frantzen" <frantzen@....org>)
• Google Sacure (<whupass@...hmail.com>)
• Re: Google Sacure (Tremaine Lea <tremaine@...il.com>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (Valdis.Kletnieks@...edu)
• [USN-538-1] libpng vulnerabilities (Kees Cook <kees@...ntu.com>)
• [ GLSA 200710-28 ] Qt: Buffer overflow (Raphael Marichez <falco@...too.org>)
• Re: Google Sacure (<whupass@...hmail.com>)
• [ GLSA 200710-29 ] Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
• Re: Google Sacure (Tremaine Lea <tremaine@...il.com>)
• Re: Google Sacure (<whupass@...hmail.com>)
• Re: Google Sacure (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

• Re: Google Sacure (Fabrizio <staticrez@...il.com>)
• Re: Google Sacure (Michael Bann <mbann@...s.umn.edu>)
• RealNetworks RealPlayer/RealOne Player/Helix Player Remote Memory Corruption ("Piotr Bania" <bania.piotr@...il.com>)
• RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Corruption ("Piotr Bania" <bania.piotr@...il.com>)
• Re: Google Sacure (scott <redhowlingwolves@...lsouth.net>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (A.L.M.Buxey@...ro.ac.uk)
• FLEA-2007-0060-1 initscripts (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (Valdis.Kletnieks@...edu)
• Re: TCP Hijacking (aka Man-in-the-Middle) (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Google Sacure (A. Jodoin) (alexandre jodoin <jodoin_alexandre@...mail.com>)
• Re: Using GPUs to crack hashes (rx8volution <rx8volution@...ackingyou.com>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (don bailey <don.bailey@...il.com>)
• Re: Google Sacure (A. Jodoin) (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• RealPlayer vuln - versions affected? ("Murray, Mike" <MMurray@...chico.edu>)
• Re: Google Sacure (A. Jodoin) (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: RealPlayer vuln - versions affected? ("TERRY HE" <terry.secure@...il.com>)
• Re: Google Sacure (A. Jodoin) (alexandre jodoin <jodoin_alexandre@...mail.com>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (Valdis.Kletnieks@...edu)
• [USN-538-1] libpng vulnerabilities (Kees Cook <kees@...ntu.com>)
• Re: Google Sacure (<whupass@...hmail.com>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (reepex <reepex@...il.com>)

• [xssworm.com] Alert : XSS Worms - Cross-Site Scripting and Web 2.0 Application Security Blog ("XSS Worm XSS Security Information Portal" <xssworm@...il.com>)
• rPSA-2007-0225-1 firefox (rPath Update Announcements <announce-noreply@...th.com>)
• MySpace URL redirection (Fabrizio <staticrez@...il.com>)
• Re: Google Sacure (scott <redhowlingwolves@...lsouth.net>)
• Re: Google Sacure (Jim Popovitch <yahoo@...pop.com>)
• Re: MySpace URL redirection (<imul@...hmail.com>)
• [SECURITY] [DSA 1396-1] New iceweasel packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Best TCP IP stack? ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: Best TCP IP stack? ("Robert D. Holtz - Lists" <robert.d.holtz@...il.com>)
• Re: Google Sacure ("webby devil" <w3bd3vil@...il.com>)
• IBM Lotus Domino - IMAP4 Mailbox Name Stack Overflow Exploit (FistFuXXer <FistFuXXer@....de>)
• Re: Google Sacure (<whupass@...hmail.com>)
• Re: MySpace URL redirection ("Morning Wood" <se_cur_ity@...mail.com>)
• Re: MySpace URL redirection ("worried security" <worriedsecurity@...glemail.com>)
• Re: MySpace URL redirection (scott <redhowlingwolves@...lsouth.net>)
• lol @ you (<donglesby@...hmail.com>)
• Re: lol @ you (scott <redhowlingwolves@...lsouth.net>)
• Re: MySpace URL redirection (reepex <reepex@...il.com>)
• Re: Google Sacure (reepex <reepex@...il.com>)
• Re: lol @ you (gjgowey@....blackberry.net)
• Re: MySpace URL redirection (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• pdp is leaving us (reepex <reepex@...il.com>)
• Re: lol @ you (reepex <reepex@...il.com>)
• Re: pdp is leaving us (scott <redhowlingwolves@...lsouth.net>)

• Re: pdp is leaving us ("Nate McFeters" <nate.mcfeters@...il.com>)
• Re: lol @ you ("Muskegon Whitehall" <muskegon.whitehall@...il.com>)
• spammer wades into US Presidential race ("lsi" <stuart@...erdelix.net>)
• Re: spammer wades into US Presidential race ("Aaron Katz" <atkatz@...il.com>)
• Re: pdp is leaving us (reepex <reepex@...il.com>)
• Re: spammer wades into US Presidential race (reepex <reepex@...il.com>)
• Re: pdp is leaving us ("lists@...-recon.net" <lists@...-recon.net>)
• Re: spammer wades into US Presidential race (Leif Ericksen <lericksen@...global.net>)
• How to subvert Oracle Database Vault (Joxean Koret <joxeankoret@...oo.es>)
• Re: MySpace URL redirection ("Morning Wood" <se_cur_ity@...mail.com>)
• Re: MySpace URL redirection (reepex <reepex@...il.com>)

• FLEA-2007-0062-1 firefox (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• FLEA-2007-0061-1 sun-jre sun-jdk (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: pdp is leaving us (Chris Benedict <chrisb@...updates.com>)
• Advisory SE-2007-01: TikiWiki Remote PHP Code Evaluation Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (Oliver <olivereatsolives@...il.com>)
• Secunia Research: IBM Tivoli Storage Manager Client CAD Service Script Insertion (Secunia Research <remove-vuln@...unia.com>)
• Advisory SE-2007-01: TikiWiki Remote PHP Code Evaluation Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
• Team SHATTER Alert: Oracle Database Buffer overflow vulnerability in function MDSYS.SDO_CS.TRANSFORM (Team SHATTER <shatter@...secinc.com>)
• Team SHATTER Alert: Oracle Database Buffer overflow vulnerability in procedure DBMS_AQADM_SYS.DBLINK_INFO (Team SHATTER <shatter@...secinc.com>)
• Re: pdp is leaving us (<imul@...hmail.com>)
• SAXON version 5.4 Multiple Path Disclosure Vulnerabilities ("SecurityResearch" <securityresearch@...vigilance.com>)
• Re: spammer wades into US Presidential race (Valdis.Kletnieks@...edu)
• SAXON version 5.4 SQL Injection Vulnerability ("SecurityResearch" <securityresearch@...vigilance.com>)
• SAXON version 5.4 XSS Attack Vulnerability ("SecurityResearch" <securityresearch@...vigilance.com>)
• Re: pdp is leaving us (Chris Benedict <chrisb@...updates.com>)
• pdp interview now online ("worried security" <worriedsecurity@...glemail.com>)
• Re: Google Sacure ("worried security" <worriedsecurity@...glemail.com>)
• Re: SAXON version 5.4 Multiple Path Disclosure Vulnerabilities (reepex <reepex@...il.com>)
• Holes in the firewall of Mac OS X Leopard (Juergen Schmidt <ju@...sec.de>)
• Re: Holes in the firewall of Mac OS X Leopard ("Brandon S. Allbery KF8NH" <allbery@....cmu.edu>)

• Re: Holes in the firewall of Mac OS X Leopard (Juergen Schmidt <ju@...sec.de>)
• Re: spammer wades into US Presidential race (Leif Ericksen <lericksen@...global.net>)
• RFIDIOt release - version 0.1q (Adam Laurie <adam@...roup.co.uk>)
• [SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution (Noah Meyerhans <noahm@...ian.org>)
• rPSA-2007-0225-2 firefox thunderbird (rPath Update Announcements <announce-noreply@...th.com>)
• Heap overflow in RealPlayer ID3 tag parser (NGSSoftware Insight Security Research <nisr@...software.com>)
• Untrusted Java applet can connect to localhost (NGSSoftware Insight Security Research <nisr@...software.com>)
• Memory overwrites in JVM via malformed TrueType font (NGSSoftware Insight Security Research <nisr@...software.com>)
• Secunia Research: IPSwitch IMail Server IMail Client Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• Re: spammer wades into US Presidential race ("John C. A. Bambenek, CISSP" <bambenek.infosec@...il.com>)
• Re: spammer wades into US Presidential race ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• iDefense Security Advisory 10.30.07: IBM AIX swcons Local Arbitrary File Access Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.30.07: IBM AIX 5.2 crontab BSS Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.30.07: IBM AIX dig dns_name_fromtext Integer Underflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.30.07: IBM AIX lqueryvg Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.30.07: IBM AIX lquerypv Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.30.07: IBM AIX ftp domacro Parameter Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.30.07: IBM AIX bellmail Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Assessing Malware Embedded Attack Campaigns ("Dancho Danchev" <dancho.danchev@...il.com>)
• [ GLSA 200710-31 ] Opera: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200710-30 ] OpenSSL: Remote execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
• In Memoriam: Jun-ichiro Hagino (Dragos Ruiu <dr@....net>)

• Re: spammer wades into US Presidential race ("Aaron Katz" <atkatz@...il.com>)
• Re: spammer wades into US Presidential race ("lsi" <stuart@...erdelix.net>)
• [+] Vulnerability in less version 394 and prior (glopeda.com <glopeda@...peda.com>)
• Re: [+] Vulnerability in less version 394 and prior (fdlist@...italoffense.net)
• Re: [+] Vulnerability in less version 394 and prior (Jonathan Smith <smithj@...ethemallocs.com>)
• Re: spammer wades into US Presidential race (jam@...dtechnologies.com)
• Ten ways to thwart Big Brother ("Ivan ." <ivanhec@...il.com>)
• Re: [+] Vulnerability in less version 394 and prior ("Jeffrey Denton" <dentonj@...il.com>)
• Re: Microsoft Windows default ZIP handler bug (Nicolas RUFF <nicolas.ruff@...il.com>)
• Re: [+] Vulnerability in less version 394 and prior (glopeda.com <glopeda@...peda.com>)
• SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability (Bernhard Mueller <research@...-consult.com>)
• Richard Curtis State Rep R-La Center Spokane Washington ("tom skilling jr." <manweather@...oo.com>)
• Open Text security contact ("mike kemp" <clappymonkey@...il.com>)
• Secunia Research: McAfee E-Business Server Auth Packet Handling Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: CUPS IPP Tags Memory Corruption Vulnerability (Secunia Research <remove-vuln@...unia.com>)
• Re: [gentoo-announce] [ GLSA 200710-30 ] OpenSSL: Remote execution of arbitrary code ("Steffan Baron" <sbaron@...n-source-consultants.de>)
• iDefense Security Advisory 10.31.07: Macrovision InstallShield Update Service ActiveX Unsafe Method Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.31.07: Symantec Altiris Deployment Solution TFTP/MTFTP Service Directory Traversal Vulne… (iDefense Labs <labs-no-reply@...fense.c…)
• Flash that simulates virus scan ("Joshua Tagnore" <joshua.tagnore@...il.com>)
• Re: Flash that simulates virus scan (reepex <reepex@...il.com>)
• Re: TCP Hijacking (aka Man-in-the-Middle) (Oliver <olivereatsolives@...il.com>)
• Re: Flash that simulates virus scan (Valdis.Kletnieks@...edu)
• Re: Flash that simulates virus scan ("Michael Neal Vasquez" <mnv@...mni.princeton.edu>)
• Re: Flash that simulates virus scan (jf <jf@...glingpointers.net>)
• ZDI-07-059: Verity KeyView SDK Multiple File Format Parsing Vulnerabilities (zdi-disclosures@...m.com)
• ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability (zdi-disclosures@...m.com)
• ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability (zdi-disclosures@...m.com)
• ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability (zdi-disclosures@...m.com)
• ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability (zdi-disclosures@...m.com)
• ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability (zdi-disclosures@...m.com)
• ZDI-07-064: Novell Client Trust Heap Overflow Vulnerability (zdi-disclosures@...m.com)
• Re: Flash that simulates virus scan ("Dude VanWinkle" <dudevanwinkle@...il.com>)

933 messages

Powered by blists - more mailing lists