full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2009/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 9	² 10	³ 11	⁴ 3	⁵ 1
⁶ 14	⁷ 4	⁸ 11	⁹ 29	¹⁰ 5	¹¹ 14	¹² 18
¹³ 20	¹⁴ 14	¹⁵ 39	¹⁶ 41	¹⁷ 23	¹⁸ 5	¹⁹ 11
²⁰ 12	²¹ 35	²² 24	²³ 16	²⁴ 13	²⁵ 15	²⁶ 16
²⁷ 25	²⁸ 37	²⁹ 30	³⁰ 25	³¹ 21

Messages by day:

phion airlock Web Application Firewall: ("Kirchner Michael" <sec08003@...hagenberg.at>)
radware AppWall Web Application Firewall: Source code disclosure on management interface ("Kirchner Michael" <sec08003@...hagenberg.at>)
Artofdefence Hyperguard Web Application Firewall: Remote Denial of Service ("Kirchner Michael" <sec08003@...hagenberg.at>)
VMSA-2009-0008 ESX Service Console update for krb5 (VMware Security Team <security@...are.com>)
Re: (no subject) ("Inbox (Main)" <rokadeana@...il.com>)
Re: (no subject) (James Matthews <nytrokiss@...il.com>)
Re: (no subject) (Kevin Wilcox <kevin@....appstate.edu>)
Re: (no subject) ("Tomas L. Byrnes" <tomb@...neit.net>)
Re: (no subject) (James Rankin <kz20fl@...glemail.com>)

July 4 (3 messages)

July 5 (1 message)

Some small 0day... (Kingcope <kcope2@...glemail.com>)

July 7 (4 messages)

July 10 (5 messages)

July 11 (14 messages)

VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl (VMware Security team <security@...are.com>)
imageshack - pwned for anti-sec. (rxxayywzzr@...h.ai)
SPEcial ediTON (antisec@...hmail.com)
Re: SPEcial ediTON (Robert Smith <smith.robert342@...il.com>)
AntiAntiSec / Endgame (AntiAnti Sec <antiantisec@...il.com>)
Disturbing current state of the security industry... (Professor Micheal Chatner <mchatner@...il.com>)
Re: imageshack - pwned for anti-sec. (Philippe Ouellet <philippe@...o.ca>)
'Secure' Wyse thin clients vulnerable to remote exploit bugs ("KF (lists)" <kf_lists@...italmunition.com>)
[SECURITY] [DSA 1829-1] New sork-passwd-h3 packages fix cross-site scripting (white@...ian.org (Steffen Joeris))
AntiAntiSec / Endgame (abc abc <jhdfjdhfjdh@...il.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Fwd: Re: SPEcial ediTON (antisec@...hmail.com)
anti-sec is GAY (antisec@...hmail.com)
Re: anti-sec is GAY (Anuj Singh <anujhere@...il.com>)

July 12 (18 messages)

July 13 (20 messages)

Re: AntiAntiSec / Endgame (opt opt <opternaut@...il.com>)
Re: AntiAntiSec / Endgame (darkp@...hmail.com)
Re: AntiAntiSec / Endgame (Tamber Krain <james.penketh@...glemail.com>)
[ TOOL ] winftprecon - Windows FTP SITE STATS poller for enumeration purposes ("tom@...rae.be" <tom@...rae.be>)
DDIVRT-2009-26 LogRover SQL Injection Authentication Bypass ("DDI_Vulnerability_Alert" <DDI.VulnerabilityAlert@...frontline.com>)
AntiSec <3's nginx (antisec@...hmail.com)
Re: AntiSec <3's nginx (Benjamin Cance <cance.consulting@...il.com>)
London DEFCON DC4420 - July 16th 2009 Meeting (Major Malfunction <majormal@...ate-radio.org>)
Re: AntiSec <3's nginx (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: AntiSec <3's nginx (mrx <mrx@...pergander.org.uk>)
[Rumor] SSH 0-day + imageshack - pwned for anti-sec. (omfg_ omfg_ <wtf.omfg.diaf@...il.com>)
[USN-800-1] irssi vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-799-1] D-Bus vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-801-1] tiff vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-802-1] Apache vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ MDVSA-2009:150 ] libtiff (security@...driva.com)
[ MDVSA-2009:150 ] libtiff (security@...driva.com)
Re: [Rumor] SSH 0-day + imageshack - pwned for anti-sec. (mod-raver@...hmail.com)
Re: AntiSec <3's nginx (opt opt <opternaut@...il.com>)
Re: AntiSec <3's nginx (Stuart Dunkeld <burningcows@...il.com>)

July 14 (14 messages)

July 15 (39 messages)

July 16 (41 messages)

July 17 (23 messages)

July 18 (5 messages)

July 19 (11 messages)

July 20 (12 messages)

July 21 (35 messages)

July 22 (24 messages)

July 23 (16 messages)

Re: [Mailing list Vulnerability] Troll exploit of mailing lists and newsgroups (Stephen Menard <smenard@...et.nb.ca>)
Akamai Technologies Security Advisory 2009-0001 (Download Manager) (Akamai Security Team <security@...mai.com>)
Re: [Mailing list Vulnerability] Troll exploit of mailing lists and newsgroups (mrx <mrx@...pergander.org.uk>)
[SECURITY] [DSA 1840-1] New xulrunner packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
[GSEC-TZO-45-2009] iPhone remote code execution (Thierry Zoller <Thierry@...ler.lu>)
Re: [GSEC-TZO-45-2009] iPhone remote code execution (Rob Fuller <jd.mubix@...il.com>)
[USN-806-1] Python vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Slashdot hacked? (Compsec Guy <compsecguy@...mail.com>)
Re: Slashdot hacked? (Jeremy Brown <0xjbrown41@...il.com>)
Re: Slashdot hacked? ("Randal T. Rioux" <randy@...cyonlabs.com>)
Re: Slashdot hacked? (Compsec Guy <compsecguy@...mail.com>)
Re: Slashdot hacked? (Danila Wartho <compsecguy@...mail.com>)
(no subject) (YEHG Group <lists@...g.net>)
Slashdot defacement screenshot (Danila Wartho <compsecguy@...mail.com>)
Re: Slashdot hacked? (Danila Wartho <compsecguy@...mail.com>)
Re: Slashdot defacement screenshot ("frank^2" <frank2@...49.org>)

July 24 (13 messages)

[ MDVA-2009:158 ] pango (security@...driva.com)
memory required for a PNG file ("Murthy N Srinivas-B22237" <ssmurthy.nittala@...escale.com>)
Re: memory required for a PNG file (A.L.M.Buxey@...ro.ac.uk)
Re: Slashdot defacement screenshot (sunjester <tripmonster@...il.com>)
Re: Slashdot defacement screenshot (Cance Consulting <cance.consulting@...il.com>)
Former British cop 'has bank details of 40 million people' ("Ivan ." <ivanhec@...il.com>)
Stored XSS on Communigate Pro 5.2.14 and prior versions (Andrea Purificato - bunker <andrea.purificato@...il.com>)
[ISecAuditors Security Advisories] Joomla! < 1.5.12 Multiple Full Path Disclosure vulnerabilities (ISecAuditors Security Advisories <advisories@...cauditors.co…)
Hacking Nuclear Command and Control (stcloud@...hmail.com)
Re: Slashdot hacked? (Ulisses Reina Montenegro de Albuquerque <ulisses.montenegro@...ar.org.br>)
Drupal 6 Date/Calendar XSS Vulnerability (Justin Klein Keane <justin@...irish.net>)
Re: Slashdot defacement screenshot (Paul Schmehl <pauls@...allas.edu>)
Oracle CPUjul2009 (Dennis Yurichev <dennis@...us.info>)

July 25 (15 messages)

Re: Slashdot hacked? (Valdis.Kletnieks@...edu)
GIF89A - Maximum expected value of LZW Minimum Code Size ("Murthy N Srinivas-B22237" <ssmurthy.nittala@...escale.com>)
rPSA-2009-0111-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
AntiSec is DEAD (antisec@...hmail.com)
Matasano celebrates the opening of BLACKHAT USA by getting owned (martin@...utah.edu (Tobias Martin))
Matasano celebrates the opening of BLACKHAT USA by getting owned (adam@...asano.com)
IXXO Cart! Standalone and Joomla Component SQL Injection (SmOk3 <smok3f00@...il.com>)
Matasano celebrates the opening of BLACKHAT USA by getting owned (asiegel@...uchicago.edu (Andrew Siegel))
Matasano celebrates the opening of BLACKHAT USA by getting owned (asiegel@...uchicago.edu (Andrew Siegel))
Matasano Creampie (martin@...utah.edu (Tobias Martin))
Re: Matasano Creampie ("Matthew 10:34" <gluttony@...il.com>)
Re: AntiSec is DEAD (srshaxsir@...hmail.com)
Re: AntiSec is DEAD (Edouardo Sanchez <edouard0.s4nchez@...il.com>)
Re: Matasano Creampie (Edouardo Sanchez <edouard0.s4nchez@...il.com>)
Re: AntiSec is DEAD (antisec@...hmail.com)

July 26 (16 messages)

Re: IXXO Cart! Standalone and Joomla Component SQL Injection (YEHG Group <lists@...g.net>)
Gerix Wifi Cracker NG (Emanuele Gentili <emgent@...ntu.com>)
Re: Gerix Wifi Cracker NG (Cance Consulting <cance.consulting@...il.com>)
[SECURITY] [DSA 1841-1] New git-core packages fix denial of service (Nico Golde <nion@...ian.org>)
[Tool] sqlmap 0.7 released ("Bernardo Damele A. G." <bernardo.damele@...il.com>)
Re: Gerix Wifi Cracker NG (Emanuele Gentili <emgent@...ntu.com>)
Re: Gerix Wifi Cracker NG (Emanuele Gentili <emgent@...ntu.com>)
Re: Gerix Wifi Cracker NG (Cance Consulting <cance.consulting@...il.com>)
Re: Gerix Wifi Cracker NG (Emanuele Gentili <emgent@...ntu.com>)
Re: Gerix Wifi Cracker NG (Emanuele Gentili <emgent@...ntu.com>)
Re: Gerix Wifi Cracker NG (Emanuele Gentili <emgent@...ntu.com>)
Breaking: antisec and n3td3v responsible for Matasano hacking (antisecav@...hmail.com)
Claude Mercier/CLSC-CHSLD BVLV/Reg03/SSSS est absent(e). (claude.mercier@...svc.qc.ca)
Cisco WLC 4402 Denial-of-Service vulnerability (SySS security advisories -- Christoph Bott <advisories@...t.syss.de>)
n3td3v honored at blackhat 2009 USA - best security intrusion specialist (antisecav@...hmail.com)
Re: Cisco WLC 4402 Denial-of-Service vulnerability (antisecav@...hmail.com)

July 27 (25 messages)

July 28 (37 messages)

July 29 (30 messages)

July 30 (25 messages)

rPSA-2009-0113-1 bind bind-utils (rPath Update Announcements <announce-noreply@...th.com>)
Re: ZF05 released (NAHieu <nahieu@...il.com>)
Re: ZF05 released (taha <tahacalypse@...il.com>)
Re: ZF05 released ("Elazar Broad" <elazar@...hmail.com>)
Pwnie Award Acceptance (Professor Micheal Chatner <mchatner@...il.com>)
DNA epaper Hacked ("Anonymous email" <root@...mail.com>)
Re: ZF05 released (Trancer <mtrancer@...il.com>)
THISISNOTMYEXPLOIT (Kingcope <kcope2@...glemail.com>)
Re: THISISNOTMYEXPLOIT (Kingcope <kcope2@...glemail.com>)
nmap (Sándor Levente <zerkys@...il.com>)
Re: nmap (James Matthews <nytrokiss@...il.com>)
Re: nmap (Buherátor <buherator@...il.com>)
Re: nmap (Vinodh <vinodh.t@...il.com>)
Re: nmap (Sándor Levente <zerkys@...il.com>)
Re: THISISNOTMYEXPLOIT (Kingcope <kcope2@...glemail.com>)
Re: nmap (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: nmap (Valdis.Kletnieks@...edu)
Chinese Firm Writes First SMS Worm (Leandro Malaquias <lm.net.security@...il.com>)
Re: nmap (Jeremy Brown <0xjbrown41@...il.com>)
Re: nmap (Andrew T <cybergibbons@...il.com>)
[SECURITY] [DSA 1834-2] New apache/apache2-mpm-itk fix regression (Stefan Fritsch <sf@...ian.org>)
Re: nmap (Peter Bruderer <peter.bruderer@....ch>)
Re: nmap (mezgani ali <handrix@...il.com>)
Re: THISISNOTMYEXPLOIT (yersinia <yersinia.spiros@...il.com>)
Re: THISISNOTMYEXPLOIT (yersinia <yersinia.spiros@...il.com>)

July 31 (21 messages)

[ MDVSA-2009:182 ] firefox (security@...driva.com)
XOOPS Multiple Cross-Site Scripting Vulnerabilities - Security Advisory - SOS-09-005 ("Lists" <lists@...seofsecurity.com.au>)
Nova Spyfactory: who financed that crap? ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
metasploit help (Pablo Roberto <pabloroberto@...il.com>)
Re: nmap (Henri Salo <fgeek@...k.fi>)
DNA (Daily News & Analysis) epaper Server Hacked (Sky <whitematrix@...il.com>)
Re: THISISNOTMYEXPLOIT (advisories@...ern0t.net)
Re: (no subject) ("Anonymous email" <root@...mail.com>)
Re: metasploit help (taha <tahacalypse@...il.com>)
IACR (T Biehn <tbiehn@...il.com>)
Re: IACR (T Biehn <tbiehn@...il.com>)
RFB standard for ultra VNC Applications ("Murthy N Srinivas-B22237" <ssmurthy.nittala@...escale.com>)
Re: RFB standard for ultra VNC Applications (The Security Community <thesecuritycommunity@...il.com>)
[ MDVSA-2009:183 ] apache-mod_security (security@...driva.com)
Re: RFB standard for ultra VNC Applications (Jon Oberheide <jon@...rheide.org>)
spam machine ("Anonymous email" <root@...mail.com>)
[ MDVSA-2009:184 ] apache-mod_security (security@...driva.com)
OpenDNSSEC Project (Leandro Malaquias <lm.net.security@...il.com>)
Re: THISISNOTMYEXPLOIT (Kingcope <kcope2@...glemail.com>)
Re: spam machine ("Michal" <michal@...rescope.co.uk>)
[ MDVSA-2009:185 ] firefox (security@...driva.com)

551 messages