full-disclosure mailing list - 2008/06

Messages by day:

June 1 (3 messages)

• Google GrandCentral XSS 0day ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
• Google GrandCentral XSS 0day ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
• ARP handler Inspection tool released (Andrea Di Pasquale <spikey.it@...il.com>)

• n3td3v.com (Greyhat Security <ghsec2010@...oo.com>)
• Re: Google GrandCentral XSS 0day ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
• rPSA-2008-0180-1 samba samba-client samba-server samba-swat (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2008-0181-1 openssl openssl-scripts (rPath Update Announcements <announce-noreply@...th.com>)
• [SECURITY] [DSA 1553-2] New ikiwiki packages fix regression (thijs@...ian.org (Thijs Kinkhorst))
• Immunity Debugger 1.6 is out! (Nicolas Waisman <nicolas@...unitysec.com>)
• Metasploit - Hack ? ("Jacques Erasmus" <jacques.erasmus@...vx.com>)
• Re: n3td3v.com ("T Biehn" <tbiehn@...il.com>)
• Re: Metasploit - Hack ? (H D Moore <fdlist@...italoffense.net>)
• Re: Metasploit - Hack ? (Paul Schmehl <pschmehl_lists@...rr.com>)
• Re: Metasploit - Hack ? (H D Moore <fdlist@...italoffense.net>)
• Re: n3td3v.com (Greyhat Security <ghsec2010@...oo.com>)
• Fwd: Comments on: Phoenix Mars Lander site hacked (n3td3v <xploitable@...il.com>)
• Re: Fwd: Comments on: Phoenix Mars Lander site hacked (Valdis.Kletnieks@...edu)
• Re: Fwd: Comments on: Phoenix Mars Lander site hacked (n3td3v <xploitable@...il.com>)
• Re: Fwd: Comments on: Phoenix Mars Lander site hacked (kat <lists@...spolina.org>)

• Anyone had ever got in contact with Symbian and Nokia security? ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
• Checkinterface for weak SSL and SSH-Keys ("Thomas Springer" <thomas.springer@...versniff.net>)
• DEFCON 16 Update - Get involved! ("The Dark Tangent" <dtangent@...con.org>)
• [SECURITY] CVE-2008-1947: Tomcat host-manager XSS vulnerability (Mark Thomas <markt@...che.org>)
• [SECURITY] [DSA 1591-1] New libvorbis packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
• [ GLSA 200806-01 ] mtr: Stack-based buffer overflow (Tobias Heinlein <keytoaster@...too.org>)
• [ GLSA 200806-02 ] libxslt: Execution of arbitrary code (Tobias Heinlein <keytoaster@...too.org>)
• London DEFCON June meet - DC4420 - Thursday 5th June (Major Malfunction <majormal@...ate-radio.org>)
• [USN-614-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
• AST-2008-008: Remote Crash Vulnerability in SIP channel driver when run in pedantic mode ("Asterisk Security Team" <security@...erisk.org>)
• [ MDVSA-2008:109 ] - Updated kernel packages fix bugs (security@...driva.com)
• Invitation to a Research Survey on Information Security in Organisations ("Anas TAWILEH" <anas@...ileh.net>)

• CSIS-RI-0003: Multiple buffer overflow vulnerabilities in HP ActiveX ("Dennis Rand" <rand@...s.dk>)
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages File Creation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Information Disclosure Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Multiple Command Injection Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Multiple Directory Traversal Vulnerabilities (iDefense Labs <labs-no-reply@...fense.co…)
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Authorization Bypass Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Metasploit - Hack ? (n3td3v <xploitable@...il.com>)
• Re: Fwd: Comments on: Phoenix Mars Lander site hacked (n3td3v <xploitable@...il.com>)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, … (VMware Security team <security@...are.c…)
• iDefense Security Advisory 06.04.08: Kaspersky Internet Security IOCTL Stack Based Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 06.04.08: Skype File URI Security Bypass Code Execution Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• ZDI-08-035: CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability (zdi-disclosures@...m.com)
• ZDI-08-036: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow (zdi-disclosures@...m.com)
• ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability (zdi-disclosures@...m.com)
• Re: Fwd: Comments on: Phoenix Mars Lander site hacked (Giany <giany007@...oo.com>)
• Re: [offtopic] Fwd: Comments on: Phoenix Mars Lander site hacked (Bardiir <bardiir@...il.com>)
• Re: [offtopic] Fwd: Comments on: Phoenix Mars Lander site hacked (n3td3v <xploitable@...il.com>)
• CORE-2008-0425 - NASA BigView Stack Buffer Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• Re: ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability (Luigi Auriemma <aluigi@...istici.org>)
• Re: [offtopic] Fwd: Comments on: Phoenix Mars Lander site hacked (Valdis.Kletnieks@...edu)
• Re: ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack ("M. Shirk" <shirkdog_list@...mail.com>)
• CA Secure Content Manager HTTP Gateway Service FTP Request Vulnerabilities ("Williams, James K" <James.Williams@...com>)
• Re: [offtopic] Fwd: Comments on: Phoenix Mars Lander site hacked (Anders B Jansson <hdw@...listi.se>)
• AST-2008-009: (Corrected subject) Remote crash vulnerability in ooh323 channel driver ("Asterisk Security Team" <security@...erisk.org>)
• AST-2008-009: AST-2008-007 Cryptographic keys generated by OpenSSL on Debian-based systems compromised ("Asterisk Security Team" <security@...erisk.org>)
• TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability (DVLabs <dvlabs@...pingpoint.com>)

• Akamai Download Manager File Downloaded To Arbitrary Location Vulnerability (cocoruder <cocoruder@...il.com>)
• Re: [offtopic] Fwd: Comments on: Phoenix MarsLander site hacked ("Patrick Nolan" <p.nolan@...cast.net>)
• Re: CORE-2008-0425 - NASA BigView Stack Buffer Overflow (root <root_@...ertel.com.ar>)
• Akamai Technologies Security Advisory 2008-0001 (Download Manager) (Akamai Security Team <security@...mai.com>)
• next generation sniffer ("inter inter" <intercepter.mail@...il.com>)
• Re: Gadi Evron not a troll but n3td3v is? (n3td3v <xploitable@...il.com>)
• Re: ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability (<titon@...tardlabs.com>)
• XSS in SamTodo v1.1 (SmOk3 <smok3f00@...il.com>)
• Re: [offtopic] Fwd: Comments on: PhoenixMarsLander site hacked ("Garrett M. Groff" <groffg@...design.com>)
• iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 06.04.08: VMware Multiple Products vmware-authd Untrusted Library Loading Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: To clear the air and conspiracy about n3td3v (n3td3v <xploitable@...il.com>)
• Re: To clear the air and conspiracy about n3td3v (Ureleet <ureleet@...il.com>)
• Re: [offtopic] Fwd: Comments on: PhoenixMarsLander site hacked (Ureleet <ureleet@...il.com>)
• Re: To clear the air and conspiracy about n3td3v (n3td3v <xploitable@...il.com>)
• Re: next generation sniffer (reepex <reepex@...il.com>)
• Re: Metasploit - Hack ? ("T Biehn" <tbiehn@...il.com>)
• Re: Fwd: Comments on: Phoenix Mars Lander site hacked (kat <lists@...spolina.org>)

• [ MDVSA-2008:110 ] - Updated Firefox packages fix vulnerabilities (security@...driva.com)
• Microsoft RT Audio Codec, anyone has reversed it? ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
• Re: [OT] Fwd: Comments on: Phoenix Mars Lander site hacked ("Andrew Wallace" <andrew.awal.wallace@...il.com>)
• Re: iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• FW: SOMEONE CAN HELP WITH THE Microsoft GDI WMF Parsing Heap Overflow Vulnerability ? IT´s a bit wired... ("Nikolaos Rangos" <nikolaos.rangos@...ns.com>)
• Re: [OT] Fwd: Comments on: Phoenix Mars Lander site hacked (n3td3v <xploitable@...il.com>)
• Fwd: Amazon suffers outage (n3td3v <xploitable@...il.com>)
• Re: Amazon suffers outage (n3td3v <xploitable@...il.com>)
• rPSA-2008-0185-1 vsftpd (rPath Update Announcements <announce-noreply@...th.com>)
• Akamai Technologies Security Advisory 2008-0003 (Akamai Client Software) (Akamai Security Team <security@...mai.com>)
• Secunia Research: Akamai Red Swoosh Cross-Site Request Forgery (Secunia Research <remove-vuln@...unia.com>)
• netdouche (crunkd@...hmail.com)
• THE NEW RELEASE DOESNT HAVE ANY BUGS RIGHT, THEO?? ("Nikolaos Rangos" <nikolaos.rangos@...ns.com>)
• SOMEONE CAN HELP WITH THE Microsoft GDI WMF Parsing Heap Overflow Vulnerability ? IT´s a bit wired... ("Nikolaos Rangos" <nikolaos.rangos@...ns.com>)
• FW: THE NEW RELEASE DOESNT HAVE ANY BUGS RIGHT, THEO?? ("Nikolaos Rangos" <nikolaos.rangos@...ns.com>)
• Fwd: www.Amazon.com down? (n3td3v <xploitable@...il.com>)
• Re: THE NEW RELEASE DOESNT HAVE ANY BUGS RIGHT, THEO?? (Giancarlo Razzolini <linux-fan@...a.com.br>)
• Re: Fwd: www.Amazon.com down? ("Adam Jones" <ajones1@...il.com>)
• Re: Fwd: www.Amazon.com down? (n3td3v <xploitable@...il.com>)
• [USN-615-1] Evolution vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• netdouche ("n3td3v ." <xploitted@...il.com>)
• Re: netdouche (n3td3v <xploitable@...il.com>)
• FreeSSHD 1.2.1 (Post Auth) Remote Seh Overflow (Cipher <cipher@...mind.com>)
• Re: Was it illegal that Robert Lemos and Neal Krawetz wrote about n3td3v? (n3td3v <xploitable@...il.com>)
• Ministry of Information (Archibald Tuttle <lists@...spolina.org>)
• Re: Ministry of Information (n3td3v <xploitable@...il.com>)

• "I am who I am"... (n3td3v <xploitable@...il.com>)
• Re: Ministry of Information ("Slythers Bro" <slythers@...il.com>)
• Re: Was it illegal that Robert Lemos and Neal Krawetz wrote about n3td3v? (londone@...hmail.com)
• Re: Was it illegal that Robert Lemos and Neal Krawetz wrote about n3td3v? (Anders B Jansson <hdw@...listi.se>)
• Fwd: Re[2]: Ministry of Information (Archibald Tuttle <lists@...spolina.org>)

• Re: FreeSSHD 1.2.1 (Post Auth) Remote Seh Overflow ("Robert Holgstad" <rholgstad@...il.com>)
• [ GLSA 200806-03 ] Imlib 2: User-assisted execution of arbitrary code (Tobias Heinlein <keytoaster@...too.org>)

• POP QUIZ ("Professor Micheal Chatner" <mchatner@...il.com>)
• Re: "I am who I am"... ("Professor Micheal Chatner" <mchatner@...il.com>)
• Re: "I am who I am"... ("Robert Holgstad" <rholgstad@...il.com>)
• [SECURITY] [DSA 1592-1] New Linux 2.6.18 packages fix overflow conditions (dann frazier <dannf@...ian.org>)
• Mambo Cookie Authentication Bypass Exploit ("Halabaluza Team Halabaluza Team" <halabaluza.team@...il.com>)
• Full Disclosure - GSC Privilege / Authentication Bypass Exploit (Moose <moose@...erarium.net>)
• Re: Full-Disclosure Digest, Vol 40, Issue 14 ("Robert G. Marcone" <citicontact@...il.com>)
• [SECURITY] [DSA 1593-1] New tomcat5.5 packages cross-site scripting (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1592-2] New Linux 2.6.18 packages fix overflow conditions (dann frazier <dannf@...ian.org>)
• Re: POP QUIZ ("Robert Holgstad" <rholgstad@...il.com>)
• Re: POP QUIZ ("Garrett M. Groff" <groffg@...design.com>)
• avira update.exe (Archibald Tuttle <lists@...spolina.org>)
• List Charter (John Cartwright <johnc@...k.org.uk>)

• MOCA 2008: a dream come true ("Alessio L.R. Pennasilico" <mayhem@...ursiva.org>)
• Re: avira update.exe (Archibald Tuttle <lists@...spolina.org>)
• Secunia Research: Apple QuickTime PICT Image Parsing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• Re: Mambo Cookie Authentication Bypass Exploit (crunkd@...hmail.com)
• Re: Mambo Cookie Authentication Bypass Exploit ("Garrett M. Groff" <groffg@...design.com>)
• Who's Behind the GPcode Ransomware? ("Dancho Danchev" <dancho.danchev@...il.com>)
• Technical Details of Security Issues Regarding Safari for Windows ("LIUDIEYU dot COM" <liudieyu.com@...il.com>)
• Re: Who's Behind the GPcode Ransomware? (kat <lists@...spolina.org>)
• iDefense Security Advisory 06.10.08: Multiple Vendor OpenOffice rtl_allocateMemory() Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Mambo Cookie Authentication Bypass Exploit ("Brian Kim" <bmhkim@...il.com>)
• Cisco Security Advisory: SNMP Version 3 Authentication Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 PFB Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 PFB Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 Multiple Heap Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• ZDI-08-038: QuickTime SMIL qtnext Redirect File Execution (zdi-disclosures@...m.com)
• ZDI-08-037: Apple QuickTime Indeo Video Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• ZDI-08-039: Microsoft Internet Explorer DOM Ojbect substringData() Heap Overflow Vulnerability (zdi-disclosures@...m.com)
• ZDI-08-040: Microsoft DirectX SAMI File Format Name Parsing Stack Overflow Vulnerability (zdi-disclosures@...m.com)
• [ MDVSA-2008:111 ] - Updated Evolution packages fix vulnerabilities (security@...driva.com)

• Re: Technical Details of Security Issues Regarding Safari for Windows ("LIUDIEYU dot COM" <liudieyu.com@...il.com>)
• Re: Technical Details of Security Issues Regarding Safari for Windows ("LIUDIEYU dot COM" <liudieyu.com@...il.com>)
• CORE-2008-0125: CitectSCADA ODBC service vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• Many bugs on CMS system Piugame (Psymera <psymera@...il.com>)
• Re: Out of Office AutoReply: Snort Signature to det ect credit ca rds ("West, Bill (USA)" <Bill.West@...usa.com>)
• Re: Mambo Cookie Authentication Bypass Exploit (crunkd@...hmail.com)
• persistant XSS, Manipulation of Data and privileg escalation in gpotato.eu forums ("MC Iglo" <mc.iglo@...glemail.com>)
• Secunia Research: uTorrent / BitTorrent Web UI HTTP "Range" Header DoS (Secunia Research <remove-vuln@...unia.com>)
• XSS Browser hijacking PoC? ("Aaron Katz" <atkatz@...il.com>)
• Re: netdouche (Ureleet <ureleet@...il.com>)
• Re: "I am who I am"... (Ureleet <ureleet@...il.com>)
• Re: POP QUIZ (Ureleet <ureleet@...il.com>)
• Re: To clear the air and conspiracy about n3td3v (Ureleet <ureleet@...il.com>)
• Re: Metasploit - Hack ? (Ureleet <ureleet@...il.com>)
• Re: Fwd: www.Amazon.com down? (Ureleet <ureleet@...il.com>)
• Re: netdouche ("Professor Micheal Chatner" <mchatner@...il.com>)
• [SECURITY] [DSA 1594-1] New imlib2 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server Render Extension AllocateGlyph() Integer Overflow Vulner… (iDefense Labs <labs-no-reply@...fense.c…)
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server Render Extension ProcRenderCreateCursor() Integer Overflo… (iDefense Labs <labs-no-reply@...fense.c…)
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server Render Extension Gradient Creation Integer Overflow Vuln… (iDefense Labs <labs-no-reply@...fense.c…)
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server Record and Security Extensions Multiple Memory Corruption… (iDefense Labs <labs-no-reply@...fense.c…)
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server MIT-SHM Extension Information Disclosure Vulnerability (iDefense Labs <labs-no-reply@...fense.com…)

• Re: Metasploit - Hack ? ("T Biehn" <tbiehn@...il.com>)
• rPSA-2008-0189-1 kernel xen (rPath Update Announcements <announce-noreply@...th.com>)
• [SECURITY] [DSA 1595-1] New xorg-server packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
• DEFCON Switzerland looking for DEFCON visitors ("DEF CON" <ch.defcon@...il.com>)
• HTTP cache poisoning via Host header injection (Carlos <carlos@...no.org>)
• Re: HTTP cache poisoning via Host header injection ("M. Shirk" <shirkdog_list@...mail.com>)
• Re: HTTP cache poisoning via Host header injection ("Kevin Wilcox" <kevin@....appstate.edu>)
• [ MDVSA-2008:112 ] - Updated kernel packages fix security issues (security@...driva.com)

• [USN-612-9] openssl-blacklist update (Jamie Strandboge <jamie@...onical.com>)
• [USN-612-10] OpenVPN regression (Jamie Strandboge <jamie@...onical.com>)
• (: ("I)ruid" <druid@...ghq.org>)
• Re: (: (silky <michaelslists@...il.com>)
• Re: (: ("Robert Holgstad" <rholgstad@...il.com>)
• [USN-616-1] X.org vulnerabilities (Kees Cook <kees@...ntu.com>)
• Re: (: (Sergio 'shadown' Alvarez <shadown@...il.com>)
• Re: (: ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10) ("Jessica Hope" <jessicasaulhope@...glemail.com>)
• [SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities (Devin Carraway <devin@...ian.org>)
• [SECURITY] [DSA 1596-1] New typo3 packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
• Securify bulletin: Microsoft Active Directory Denial-of-service ("Securify Bulletins" <bulletins@...urify.com>)
• Security/Hacking Paper Contest Win $100 ("GSO GSO" <gso.gsecur@...il.com>)
• [ MDVSA-2008:113 ] - Updated kernel packages fix security issue (security@...driva.com)
• Collection of Vulnerabilities in Fully Patched Vim 7.1 ("Jan Minář" <rdancer@...ncer.org>)

• [ MDVSA-2008:114 ] - Updated util-linux-ng packages fix log injection issue (security@...driva.com)
• Re: Security/Hacking Paper Contest Win $100 ("Knud Erik Højgaard" <kokanin@...il.com>)
• Re: Securify bulletin: Microsoft Active Directory Denial-of-service ("Michael Wojcik" <Michael.Wojcik@...rofocus.com>)
• [TKADV2008-003] Sun Solaris SIOCSIPMSFILTER Kernel Integer Overflow ("Tobias Klein" <tk@...pkit.de>)
• Re: Collection of Vulnerabilities in Fully Patched Vim 7.1 (Bram Moolenaar <Bram@...lenaar.net>)
• [ GLSA 200806-04 ] rdesktop: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)

• Informations disclosure in Crysis 1.21 (Luigi Auriemma <aluigi@...istici.org>)
• Denial of Service in S.T.A.L.K.E.R. 1.0006 (Luigi Auriemma <aluigi@...istici.org>)

• newbie needs password cracked (Judge Connie Lingus <redcom@...ebottle.com>)
• Re: newbie needs password cracked ("Ed Carp" <erc@...ox.com>)
• Advisory: SANS CMS fails to sanitize web scripting (Moritz Naumann <security@...itz-naumann.com>)
• Re: XSS Browser hijacking PoC? (Hanno Böck <hanno@...eck.de>)
• Re: XSS Browser hijacking PoC? (Tim Brown <tmb@...35.com>)
• Re: XSS Browser hijacking PoC? ("Aaron Katz" <atkatz@...il.com>)
• Re: Gadi Evron not a troll but n3td3v is? (Ureleet <ureleet@...il.com>)
• Autodesk Security Contact ("Elazar Broad" <elazar@...hmail.com>)
• Re: Security/Hacking Paper Contest Win $100 ("GSO GSO" <gso.gsecur@...il.com>)
• Re: Security/Hacking Paper Contest Win $100 (Archibald Tuttle <lists@...spolina.org>)
• Re: Security/Hacking Paper Contest Win $100 ("Michael Krymson" <krymson@...il.com>)
• Re: Security/Hacking Paper Contest Win $100 ("GSO GSO" <gso.gsecur@...il.com>)
• Re: Security/Hacking Paper Contest Win $100 ("GSO GSO" <gso.gsecur@...il.com>)
• [ MDVSA-2008:116 ] - Updated x11-server packages fix several vulnerabilities (security@...driva.com)
• NULL pointer in the HTTP/XML-RPC service of Crysis 1.21 (Luigi Auriemma <aluigi@...istici.org>)
• [ GLSA 200806-06 ] Evolution: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
• [ MDVSA-2008:115 ] - Updated x11-server packages fix several vulnerabilities (security@...driva.com)
• [ GLSA 200806-05 ] cbrPager: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
• Server freezed in Skulltag 0.97d2-RC2 (Luigi Auriemma <aluigi@...istici.org>)

• VMSA-2008-0010 Updated Tomcat and Java JRE packages for VMware ESX 3.5 (VMware Security Team <security@...are.com>)
• S21SEC-044-en:OpenDocMan Cross Site Scripting (XSS) ("S21sec labs" <s21seclabs@...sec.com>)
• iPhoneDbg Toolkit ("Nicolas A. Economou" <lists@...est.com>)
• iPhoneDbg Toolkit ("Nicolas A. Economou" <list@...est.com>)
• Fwd: Comments on: Internet-connected coffee maker has security holes (n3td3v <xploitable@...il.com>)
• Re: Fwd: Comments on: Internet-connected coffee maker has security holes ("T Biehn" <tbiehn@...il.com>)
• [USN-617-1] Samba vulnerabilities (Jamie Strandboge <jamie@...onical.com>)

• Coming soon : Firefox 3 Release overflow ("doulcet pierre" <hexapode@...il.com>)
• Skype chat encryption with OTR ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
• Announcement && CFP: ISOI 5, Tallinn Estonia (Gadi Evron <ge@...uxbox.org>)
• CA ARCserve Backup Discovery Service Denial of Service Vulnerability ("Williams, James K" <James.Williams@...com>)
• The Extended HTML Form attack revisited ("Sandro Gauci" <publists@...blesecurity.com>)
• screen 4.03 password bypass vuln - UPDATE (for you sec dudes...) ("rembrandt" <rembrandt@...erlin.de>)
• Flaw in Firefox 3.0: protocol-handler.warn-external are ignored ("carl hardwick" <hardwick.carl@...il.com>)
• Secunia Research: TorrentTrader Multiple SQL Injection Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
• xss dot(.) filter evasion ("Thomas Pollet" <thomas.pollet@...il.com>)
• Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Cisco Security Advisory: Cisco Intrusion Prevention System Jumbo Frame Denial of Service (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
• Re: Joel Esler comment on Sans ISC podcast (Joel Esler <joel.esler@....com>)
• Re: Joel Esler comment on Sans ISC podcast (Ureleet <ureleet@...il.com>)
• Re: Joel Esler comment on Sans ISC podcast (A.L.M.Buxey@...ro.ac.uk)
• Re: xss dot(.) filter evasion ("Thomas Pollet" <thomas.pollet@...il.com>)
• PHP 5.2.6 posix_access() (posix ext) safe_mode bypass ("Maksymilian Arciemowicz" <cxib@...urityreason.com>)
• PHP 5.2.6 chdir(), ftok() (standard ext) safe_mode bypass ("Maksymilian Arciemowicz" <cxib@...urityreason.com>)
• spyware in smplayer_portable.exe found in MPUI.2008-06-16.Full-Package.exe ? ("Dr. Mark A. Baiter [Chief Scatological Consultant]" <mbaiter2@...il.com>)
• Re: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• [USN-612-11] openssl-blacklist update (Jamie Strandboge <jamie@...onical.com>)

• Re: The Extended HTML Form attack revisited (kuza55 <kuza55@...il.com>)
• Fwd: fag (Ureleet <ureleet@...il.com>)
• Re: Joel Esler comment on Sans ISC podcast (Ureleet <ureleet@...il.com>)
• Re: Fwd: Comments on: Internet-connected coffee maker has security holes (Ureleet <ureleet@...il.com>)
• Re: Skype chat encryption with OTR (Ureleet <ureleet@...il.com>)
• Re: Coming soon : Firefox 3 Release overflow (Ureleet <ureleet@...il.com>)
• Re: xss dot(.) filter evasion (Andrew Farmer <andfarm@...il.com>)
• Re: Skype chat encryption with OTR (rawket <r4wk3t@...il.com>)
• Re: Skype chat encryption with OTR ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
• Re: Skype chat encryption with OTR (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• Re: Skype chat encryption with OTR ("Eliah Kagan" <degeneracypressure@...il.com>)
• Re: Skype chat encryption with OTR (rawket <r4wk3t@...il.com>)
• Re: Skype chat encryption with OTR ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
• Re: xss dot(.) filter evasion ("Thomas Pollet" <thomas.pollet@...il.com>)
• Re: Flaw in Firefox 3.0: protocol-handler.warn-external are ignored (Daniel Veditz <dveditz@...zio.com>)
• Re: Joel Esler comment on Sans ISC podcast ("Michael Simpson" <mikie.simpson@...il.com>)
• Fwd: Joel Esler comment on Sans ISC podcast ("Michael Simpson" <mikie.simpson@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Brazilian Bank (Caixa Economica Federal) vuln ("H2G-Labs Information Security" <h2glabs.infosec@...il.com>)
• Re: Skype chat encryption with OTR (JM <ubahmapk@...il.com>)
• vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index ("Jessica Hope" <jessicasaulhope@...glemail.com>)
• Re: Full-Disclosure Digest, Vol 40, Issue 30 ("Jesse Bacon" <dread.roberts@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (Ureleet <ureleet@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (Ureleet <ureleet@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Re: Full-Disclosure Digest, Vol 40, Issue 30 (numbnut@...h.com)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (Ureleet <ureleet@...il.com>)
• [ GLSA 200806-07 ] X.Org X server: Multiple vulnerabilities (Matthias Geerdsen <vorlon@...too.org>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (Valdis.Kletnieks@...edu)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast ("James Rankin" <kz20fl@...glemail.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (rawket <r4wk3t@...il.com>)
• Facebook fb:silverlight persistent XSS ("Jouko Pynnonen" <jouko@....fi>)

• Re: Fwd: Joel Esler comment on Sans ISC podcast (Ureleet <ureleet@...il.com>)
• Re: Skype chat encryption with OTR ("I)ruid" <druid@...ghq.org>)
• OT: Re: Joel Esler comment on Sans ISC podcast ("Garrett M. Groff" <groffg@...design.com>)
• [ MDVSA-2008:117 ] - Updated fetchmail packages fix DoS vulnerability (security@...driva.com)
• Re: Skype chat encryption with OTR (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast ("James Rankin" <kz20fl@...glemail.com>)
• How to encrypt voice skype calls? ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
• Re: How to encrypt voice skype calls? (Steward Smith <fulldisc@...ll.org>)
• Re: How to encrypt voice skype calls? ("Peter Dawson" <slash.pd@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Re: Brazilian Bank (Caixa Economica Federal) vuln ("H2G-Labs Information Security" <h2glabs.infosec@...il.com>)
• Re: How to encrypt voice skype calls? (Arturo 'Buanzo' Busleiman <buanzo@...nzo.com.ar>)
• Re: How to encrypt voice skype calls? (Ureleet <ureleet@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (Arturo 'Buanzo' Busleiman <buanzo@...nzo.com.ar>)
• [USN-618-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
• [SECURITY] [DSA 1598-1] New libtk-img packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
• Secunia Research: XnView, NConvert, and GFL SDK Sun TAAC Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast ("Exibar" <exibar@...lair.com>)
• How to encrypt voice skype calls? ("Zacheusz Siedlecki" <z.acheusz.s@...il.com>)
• Re: How to encrypt voice skype calls? ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
• Re: How to encrypt voice skype calls? (Arturo 'Buanzo' Busleiman <buanzo@...nzo.com.ar>)
• Diigo Toolbar - Global XSS and Information Leakage in SSL URLs ("Ferruh Mavituna" <ferruh@...ituna.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast ("James Rankin" <kz20fl@...glemail.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast ("razi garbie" <r.garbie@...il.com>)
• [ MDVSA-2008:118 ] - Updated net-snmp/ucd-snmp packages fix vulnerabilities (security@...driva.com)
• BackTrack 3 Final has been released ("Mati Aharoni" <muts@...ensive-security.com>)
• Re: How to encrypt voice skype calls? (Arturo 'Buanzo' Busleiman <buanzo@...nzo.com.ar>)

• Re: Fwd: Joel Esler comment on Sans ISC podcast (Ureleet <ureleet@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Re: Flaw in Firefox 3.0: protocol-handler.warn-external are ignored (Daniel Veditz <dveditz@...zio.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (Ureleet <ureleet@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• [ MDVSA-2008:119 ] - Updated exiv2 packages fix vulnerability (security@...driva.com)
• Re: Fwd: Joel Esler comment on Sans ISC podcast ("Garrett M. Groff" <groffg@...design.com>)
• 来自yunshang@....com的邮件 (yunshang <yunshang@....com>)
• Tool release: Bsqlbf-v2 ("Sumit Siddharth" <sumit.siddharth@...il.com>)
• rPSA-2008-0200-1 xorg-server (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2008-0201-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (rPath Update Announcements <announce-noreply@...th.com>)
• [ MDVSA-2008:120 ] - Updated nasm packages fix vulnerability (security@...driva.com)

• Re: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)

• Fwd: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Re: OT: Re: Joel Esler comment on Sans ISC podcast ("Anders Klixbull" <akl@...erian.dk>)
• n.runs-SA-2008.001 - Jscape Secure FTP Applet (<security@...ns.com>)
• Re: Fwd: Fwd: Joel Esler comment on Sans ISC podcast (Ureleet <ureleet@...il.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (Valdis.Kletnieks@...edu)
• Double Denial of Service in Call of Duty 4 1.6 (Luigi Auriemma <aluigi@...istici.org>)
• NULL pointer in World in Conflict 1.008 (Luigi Auriemma <aluigi@...istici.org>)
• [ MDVSA-2008:121 ] - Updated freetype2 packages fix vulnerabilities (security@...driva.com)
• [ GLSA 200806-08 ] OpenSSL: Denial of Service (Robert Buchholz <rbu@...too.org>)
• [ GLSA 200806-09 ] libvorbis: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
• [ GLSA 200806-10 ] FreeType: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)

• Join me on Last.fm! (Joel Jose <joeljose420@...il.com>)
• Re: Securify bulletin: Microsoft Active Directory Denial-of-service (Nicolas RUFF <nicolas.ruff@...il.com>)
• Re: Fwd: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Secunia Research: Motion "read_client()" HTTP Request Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• Re: Fwd: Joel Esler comment on Sans ISC podcast (n3td3v <xploitable@...il.com>)
• Re: The Extended HTML Form attack revisited ("Sandro Gauci" <publists@...blesecurity.com>)
• [ MDVSA-2008:122 ] - Updated clamav packages fix vulnerability (security@...driva.com)

• [ GLSA 200806-11 ] IBM JDK/JRE: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
• [BMSA 2008-07] Format string vulnerability in 5th street (Nam Nguyen <namn@...emoon.com.vn>)
• ERRATA - n.runs-SA-2008.001 - Jscape Secure FTP Applet (<security@...ns.com>)
• ERRATA - n.runs-SA-2008.001 - Jscape Secure FTP Applet (<security@...ns.com>)
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilit… (Cisco Systems Product Security Incident…)
• [ MDVSA-2008:123 ] - Updated imlib2 packages fix vulnerabilities (security@...driva.com)

• What the UK government care about in a hacker (n3td3v <xploitable@...il.com>)
• [USN-620-1] OpenSSL vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• Commtouch Anti-Spam Enterprise Gateway Cross Site Scripting (allowing domain credential theft) ("Erez Metula" <erezmetula@...ecure.co.il>)
• Re: What the UK government care about in a hacker (wac <waldoalvarez00@...il.com>)
• rPSA-2008-0206-1 ruby (rPath Update Announcements <announce-noreply@...th.com>)
• Re: What the UK government care about in a hacker (scott <redhowlingwolves@...rr.com>)
• [SECURITY] [DSA 1599-1] New dbus packages fix privilege escalation (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: What the UK government care about in a hacker (n3td3v <xploitable@...il.com>)
• [USN-621-1] Ruby vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• [ MDVSA-2008:124 ] - Updated xine-lib packages fix vulnerability in Speex decoder (security@...driva.com)

• Re: What the UK government care about in a hacker (rawket <r4wk3t@...il.com>)
• Re: What the UK government care about in a hacker (rawket <r4wk3t@...il.com>)
• Re: What the UK government care about in a hacker ("James Rankin" <kz20fl@...glemail.com>)
• ICANN and IANA’s domains hijacked by Turkish hacking group ("Dancho Danchev" <dancho.danchev@...il.com>)
• so this is FD... (Lucio Crusca <lucio@...web.org>)
• Re: ICANN and IANA’s domains hijacked by Turkish hacking group (Eren Türkay <turkay.eren@...il.com>)
• Re: so this is FD... ("Garrett M. Groff" <groffg@...design.com>)
• Re: so this is FD... ("Stack Smasher" <stacksmasher@...il.com>)
• Re: so this is FD... ("Peter Dawson" <slash.pd@...il.com>)
• Re: ICANN and IANA's domains hijacked by Turkish hacking group ("Arne de Bree" <arne@...kie.nl>)
• Re: so this is FD... (Paul Schmehl <pschmehl_lists@...rr.com>)
• BA-Con 2008 CFP - Buenos Aires, Sept. 30 / Oct. 1 (closes July 11 2008) (Dragos Ruiu <dr@....net>)
• Re: BA-Con 2008 CFP - Buenos Aires, Sept. 30 / Oct. 1 (closes July 11 2008) ("Arturo 'Buanzo' Busleiman" <buanzo@...nzo.com.ar>)
• Fwd: NYC - possible power/utility outages on the horizon (n3td3v <xploitable@...il.com>)
• [USN-621-1] Ruby vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• [USN-621-1] Ruby vulnerabilities ("Jamie Strandboge" <jamie@...onical.com>)

• Re: What the UK government care about in a hacker (Ureleet <ureleet@...il.com>)
• Re: What the UK government care about in a hacker (n3td3v <xploitable@...il.com>)
• rPSA-2008-0207-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
• Re: What the UK government care about in a hacker (Neil McGovern <maulkin@...on.org.uk>)
• Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006 (Luigi Auriemma <aluigi@...istici.org>)
• Re: Double Denial of Service in Call of Duty 4 1.6 (Luigi Auriemma <aluigi@...istici.org>)

• Gadi Evron is a troll (n3td3v <xploitable@...il.com>)
• Fwd: 'Hospital risk' from radio tags (n3td3v <xploitable@...il.com>)
• Mobile phone agenda time for security community (n3td3v <xploitable@...il.com>)
• Let's make a spy-proof communications infrastructure (Mary and Glenn Everhart <Everhart@....com>)
• Let's design a spy-proof communications infrastructure (Glenn Everhart <Everhart@....com>)
• Re: What the UK government care about in a hacker (Ureleet <ureleet@...il.com>)
• Re: Gadi Evron is a troll (Ureleet <ureleet@...il.com>)
• Re: Mobile phone agenda time for security community (Ureleet <ureleet@...il.com>)
• Re: Gadi Evron is a troll (n3td3v <xploitable@...il.com>)
• Endless loop in Halo 1.07 (Luigi Auriemma <aluigi@...istici.org>)
• Re: Let's make a spy-proof communications infrastructure (n3td3v <xploitable@...il.com>)
• Fwd: Security Conference Spam, Should we put up with it? (n3td3v <xploitable@...il.com>)
• Fwd: what problem are we solving? (was Re: ICANN opens up Pandora'sBox of (n3td3v <xploitable@...il.com>)
• Re: Gadi Evron is a troll ("Th3 M0ths" <th3.m0ths@...il.com>)

• Save Gary Mckinnon (n3td3v <xploitable@...il.com>)
• Re: Let's make a spy-proof communications infrastructure ("Jubei Trippataka" <vpn.1.fanatic@...il.com>)
• Re: Let's make a spy-proof communications infrastructure (Valdis.Kletnieks@...edu)
• myBloggie version 2.1.6 Multiple SQL Injection Vulnerability (securityresearch <securityresearch@...vigilance.com>)
• myBloggie version 2.1.6 Multiple Path Disclosure Vulnerabilities (securityresearch <securityresearch@...vigilance.com>)
• Fa Name version 1.0 Path Disclosure Vulnerability (securityresearch <securityresearch@...vigilance.com>)
• Fa Name version 1.0 SQL Injection Vulnerability (securityresearch <securityresearch@...vigilance.com>)
• Fa Name version 1.0 Multiple XSS Attack Vulnerabilities (securityresearch <securityresearch@...vigilance.com>)
• [USN-617-2] Samba regression (Jamie Strandboge <jamie@...onical.com>)
• Recent SSH Scan IP's (James Lay <jlay@...ve-tothe-box.net>)
• Endless loop in Soldner 33724 (Luigi Auriemma <aluigi@...istici.org>)

400 messages

Powered by blists - more mailing lists