full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2010/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 4	² 7
³ 27	⁴ 22	⁵ 11	⁶ 23	⁷ 15	⁸	⁹ 3
¹⁰ 5	¹¹ 18	¹² 26	¹³ 16	¹⁴ 7	¹⁵ 15	¹⁶ 13
¹⁷ 16	¹⁸ 33	¹⁹ 10	²⁰ 7	²¹ 13	²²	²³ 18
²⁴ 15	²⁵ 19	²⁶ 13	²⁷ 11	²⁸ 6	²⁹ 3	³⁰ 10
³¹ 20

Messages by day:

May 1 (4 messages)

Secunia Research: Internet Download Manager FTP Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
newest category of security bugs considered elite ? (Georgi Guninski <guninski@...inski.com>)
Re: newest category of security bugs considered elite ? (Dan Kaminsky <dan@...para.com>)
CORELAN-10-035 NolaPro Enterprise multiple vulnerabilities (Security <security@...elan.be>)

May 2 (7 messages)

Re: newest category of security bugs considered elite ? (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: newest category of security bugs considered elite ? ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: newest category of security bugs considered elite ? (Don Bailey <don.bailey@...il.com>)
Re: newest category of security bugs considered elite ? (Dan Kaminsky <dan@...para.com>)
Re: newest category of security bugs considered elite ? (coderman <coderman@...il.com>)
Re: newest category of security bugs considered elite ? (Nick FitzGerald <nick@...us-l.demon.co.uk>)
MDaemon Mailer Daemon Version 11.0.1 (LATEST) Remote File Disclosure (Kingcope <kcope2@...glemail.com>)

May 3 (27 messages)

Re: go public to avoid jail (PsychoBilly <zpamh0l3@...il.com>)
Re: go public to avoid jail (Ed Carp <erc@...ox.com>)
Re: go public to avoid jail (Christian Sciberras <uuf6429@...il.com>)
Re: go public to avoid jail (Ed Carp <erc@...ox.com>)
Re: go public to avoid jail (Christian Sciberras <uuf6429@...il.com>)
Re: go public to avoid jail (Dietz Pröpper <dietz@...fl.franken.de>)
[SECURITY] [DSA 2040-1] New squidguard packages fix several vulnerabilities (Sebastien Delafond <seb@...ian.org>)
Re: Impossible to Maintain Secure Session With Twitter.com Web Interface (Sam Quigley <quigley@...rose.com>)
Cross-Site Scripting vulnerability in Mango ("MustLive" <mustlive@...security.com.ua>)
Re: go public to avoid jail (T Biehn <tbiehn@...il.com>)
Re: go public to avoid jail (J Roger <securityhocus@...il.com>)
Re: go public to avoid jail (PsychoBilly <zpamh0l3@...il.com>)
Re: go public to avoid jail (Ed Carp <erc@...ox.com>)
Re: go public to avoid jail (Marsh Ray <marsh@...endedsubset.com>)
Re: go public to avoid jail (T Biehn <tbiehn@...il.com>)
Re: go public to avoid jail (J Roger <securityhocus@...il.com>)
Re: go public to avoid jail (Ed Carp <erc@...ox.com>)
Re: go public to avoid jail (Marsh Ray <marsh@...endedsubset.com>)
Re: go public to avoid jail (J Roger <securityhocus@...il.com>)
Re: go public to avoid jail (T Biehn <tbiehn@...il.com>)
Re: go public to avoid jail (Ed Carp <erc@...ox.com>)
[ MDVSA-2010:089 ] gnutls (security@...driva.com)
Re: go public to avoid jail (Christian Sciberras <uuf6429@...il.com>)
Re: go public to avoid jail (J Roger <securityhocus@...il.com>)
Re: go public to avoid jail (Valdis.Kletnieks@...edu)
Re: go public to avoid jail (J Roger <securityhocus@...il.com>)
Re: go public to avoid jail (Valdis.Kletnieks@...edu)

May 4 (22 messages)

Re: go public to avoid jail (mutiny <kefka@...inbeardsucks.com>)
Re: go public to avoid jail (PsychoBilly <zpamh0l3@...il.com>)
Re: go public to avoid jail (PsychoBilly <zpamh0l3@...il.com>)
[SECURITY] [DSA-2041-1] New mediawiki packages fix cross-site request forgery (Raphael Geissert <geissert@...ian.org>)
Re: go public to avoid jail (Jacqui Caren-home <jacqui.caren@...world.com>)
WTF eEye Really? (Sec News <secnewz@...il.com>)
Re: WTF eEye Really? (Christian Sciberras <uuf6429@...il.com>)
[ MDVSA-2010:090 ] samba (security@...driva.com)
Re: WTF eEye Really? (Marsh Ray <marsh@...endedsubset.com>)
Re: WTF eEye Really? ("Justin C. Klein Keane" <justin@...irish.net>)
Re: WTF eEye Really? (Marsh Ray <marsh@...endedsubset.com>)
Re: WTF eEye Really? (Georgi Guninski <guninski@...inski.com>)
[CORE-2010-0428] Microsoft Office Visio DXF File Insertion Buffer Overflow (Core Security Technologies Advisories Team <advisories@...esecurity.com>)
Re: WTF eEye Really? (Michal Zalewski <lcamtuf@...edump.cx>)
Re: newest category of security bugs considered elite ? (Marsh Ray <marsh@...endedsubset.com>)
Re: newest category of security bugs considered elite ? (Valdis.Kletnieks@...edu)
0days for sale (adidas37@...hmail.com)
Re: WTF eEye Really? (Mike Hale <eyeronic.design@...il.com>)
Re: 0days for sale (Benji <me@...ji.com>)
[ MDVSA-2010:091 ] openoffice.org (security@...driva.com)
[CORE-2010-0427] Windows SMTP Service DNS query Id vulnerabilities (Core Security Technologies Advisories <advisories@...esecurity.com>)
REC0N 2010 (MONTREAL) CFP Reminder & Preview (David Mirza Ahmad <dma@...on.cx>)

May 5 (11 messages)

Re: 0days for sale (Ed Carp <erc@...ox.com>)
Re: 0days for sale (Tom Grace <tom@...thbycomputers.co.uk>)
Re: 0days for sale (rebellis <rebellis@...il.com>)
Re: go public to avoid jail (PsychoBilly <zpamh0l3@...il.com>)
AlienTechnology ALR-9900 default root password and backdoor (alien_technology@...h.com)
Vulnerabilities in t3m_cumulus_tagcloud for TYPO3 ("MustLive" <mustlive@...security.com.ua>)
KHOBE - 8.0 earthquake for Windows desktop security software ("www.matousec.com - Research" <research@...ousec.com>)
Re: go public to avoid jail (J Roger <securityhocus@...il.com>)
Re: go public to avoid jail (J Roger <securityhocus@...il.com>)
Re: WTF eEye Really? (Sébastien Duquette <ekse.0x@...il.com>)
Re: WTF eEye Really? (J Roger <securityhocus@...il.com>)

May 6 (23 messages)

Re: 0days for sale (Chiko McCormick <chiko.mccormick@...il.com>)
JavaScript exploits via source code disclosure (Ed Carp <erc@...ox.com>)
VMSA-2010-0008 VMware View 3.1.3 addresses an important cross-site scripting vulnerability (VMware Security team <security@...are.com>)
Re: JavaScript exploits via source code disclosure (Ed Carp <erc@...ox.com>)
[SECURITY] [DSA 2042-1] New iscsitarget packages fix arbitrary code execution (Luciano Bello <luciano@...ian.org>)
Re: JavaScript exploits via source code disclosure (Marc Olive <marc.olive@...pblau.com>)
Re: JavaScript exploits via source code disclosure (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: JavaScript exploits via source code disclosure (Valdis.Kletnieks@...edu)
[USN-936-1] dvipng vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-937-1] TeX Live vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: JavaScript exploits via source code disclosure (PsychoBilly <zpamh0l3@...il.com>)
Re: JavaScript exploits via source code disclosure (Marsh Ray <marsh@...endedsubset.com>)
Re: JavaScript exploits via source code disclosure ("Jan G.B." <ro0ot.w00t@...glemail.com>)
Re: JavaScript exploits via source code disclosure (PsychoBilly <zpamh0l3@...il.com>)
Re: JavaScript exploits via source code disclosure (Marsh Ray <marsh@...endedsubset.com>)
Re: JavaScript exploits via source code disclosure (Christian Sciberras <uuf6429@...il.com>)
[USN-919-1] Emacs vulnerability (Kees Cook <kees@...ntu.com>)
Re: JavaScript exploits via source code disclosure ("Elazar Broad" <elazar@...hmail.com>)
Re: JavaScript exploits via source code disclosure (T Biehn <tbiehn@...il.com>)
Re: JavaScript exploits via source code disclosure ("Elazar Broad" <elazar@...hmail.com>)
ZDI-10-080: HP Mercury LoadRunner Agent Trusted Input Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:092 ] cacti (security@...driva.com)
Re: Bonsai Information Security - OS Command Injection in Cacti <= 0.8.7e (Alberto Trivero <a.trivero@...discover.com>)

May 7 (15 messages)

Re: KHOBE - 8.0 earthquake for Windows desktop security software (Jeffrey Walton <noloader@...il.com>)
Re: JavaScript exploits via source code disclosure (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: JavaScript exploits via source code disclosure (Christian Sciberras <uuf6429@...il.com>)
Security contact Bluecoat (Thierry Zoller <Thierry@...ler.lu>)
Re: Security contact Bluecoat (Steve Tornio <steve@...riol.net>)
Re: Security contact Bluecoat (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Security contact Bluecoat (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
pmwiki: persistent cross site scripting (XSS), CVE-2010-1481 (Hanno Böck <hanno@...eck.de>)
CMS Made Simple: backend cross site scripting (XSS), CVE-2010-1482 (Hanno Böck <hanno@...eck.de>)
[ANN] Pink's Tracing Library (Ali Polatel <alip@...erbo.org>)
ESET Smart Security LZH archive parsing PoC exploit ("Oleksiuk Dmitry" <dmitry@...gelab.ru>)
[ MDVSA-2010:093 ] mysql (security@...driva.com)
rPSA-2010-0034-1 ntp ntp-utils (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2010-0036-1 openssl openssl-scripts (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2010-0037-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)

May 9 (3 messages)

sqlninja 0.2.5 released! (icesurfer <r00t@...thernfortress.net>)
Vulnerabilities in Sebo - webstore ("MustLive" <mustlive@...security.com.ua>)
List Charter (John Cartwright <johnc@...k.org.uk>)

May 10 (5 messages)

xitami-5.0a0-windows DOS (usman@...re.net)
Xitami-5.0a0-windows DOS (Usman Saeed <usman@...re.net>)
Drupal Context Module XSS ("Justin C. Klein Keane" <justin@...irish.net>)
Month of PHP Security - Summary - 1st May - 10th May (Stefan Esser <stefan.esser@...tioneins.de>)
[ MDVSA-2010:090-1 ] samba (security@...driva.com)

May 11 (18 messages)

Re: Drupal Context Module XSS (Andrew Farmer <andfarm@...il.com>)
Re: Month of PHP Security - Summary - 1st May - 10th May (Eren Türkay <eren@...dus.org.tr>)
[SECURITY] [DSA 2043-1] New vlc packages fix arbitrary code execution (Devin Carraway <devin@...ian.org>)
[SECURITY] [DSA 2044-1] New mplayer packages fix arbitrary code execution (Devin Carraway <devin@...ian.org>)
PGP CPU time wasta (never refer to pgp key using 32bit key-id) (halfdog <me@...fdog.net>)
Re: Drupal Context Module XSS ("Justin C. Klein Keane" <justin@...irish.net>)
Re: Drupal Context Module XSS ("Justin C. Klein Keane" <jkleinkeane@...il.com>)
[CORE-2010-0405] Adobe Director Invalid Read (Core Security Technologies Advisories Team <advisories@...esecurity.com>)
ZDI-10-081: HP OpenView NNM ovet_demandpoll sel CGI Variable Format String Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.c…)
ZDI-10-082: HP OpenView NNM netmon sel CGI Variable Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-083: HP OpenView NNM snmpviewer.exe CGI Multiple Variable Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-084: HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-085: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-086: HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-087: Adobe Shockwave Invalid Offset Memory Corruption Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
CFP for ekoparty 0x10 is now open! [ Buenos Aires, Argentina ] (ekoparty Security Conference <no-reply@...party.com.ar>)

May 12 (26 messages)

Multiple memory corruption vulnerabilities in Ghostscript (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Multiple memory corruption vulnerabilities in Ghostscript (Peter Besenbruch <prb@...a.net>)
[CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability (Code Audit Labs <vulnhunt@...il.com>)
[CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability (Code Audit Labs <vulnhunt@...il.com>)
[CAL-20100204-3]Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite (Code Audit Labs <vulnhunt@...il.com>)
iDefense Security Advisory 05.11.10: Abobe Shockwave Player Heap Memory Indexing Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Multiple memory corruption vulnerabilities in Ghostscript (Marsh Ray <marsh@...endedsubset.com>)
Re: Multiple memory corruption vulnerabilities in Ghostscript (Dan Rosenberg <dan.j.rosenberg@...il.com>)
[SECURITY] [DSA 2045-1] New libtheora packages fix arbitrary code execution (Sebastien Delafond <seb@...ian.org>)
Vulnerability in widget Cumulus for BlogEngine.NET ("MustLive" <mustlive@...security.com.ua>)
Events Manager Wordpress plugin Blind SQL Injection (Danilo Massa <danilo_m@...oo.com>)
stratsec Security Advisory SS-2010-005: Samba Multiple DoS Vulnerabilities (stratsec Advisories <advisories@...atsec.net>)
Secunia Research: Adobe Shockwave Player 3D Parsing Memory Corruption (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Adobe Shockwave Player Signedness Error Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Python fuzzing lib released (laurent gaffie <laurent.gaffie@...il.com>)
Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Adobe Shockwave Player Asset Entry Parsing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Adobe Shockwave Player Font Processing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Cisco Security Advisory: Multiple vulnerabilities in Cisco PGW Softswitch (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Secunia Research: TomatoCMS Script Insertion Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: TomatoCMS "q" SQL Injection Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: IrfanView PSD Image Parsing Sign-Extension Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: IrfanView PSD RLE Decompression Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
[ MDVSA-2010:094 ] tetex (security@...driva.com)
Drupal storm 1.32 (Black Packeteer <black.packeteer@...il.com>)

May 13 (16 messages)

[ MDVSA-2010:095 ] libxext (security@...driva.com)
Re: Full-Disclosure Digest, Vol 63, Issue 16 ("Alex Cachia" <alexca@....com>)
Re: Full-Disclosure Digest, Vol 63, Issue 16 ("Alex Cachia" <alexca@....com>)
[USN-938-1] KDENetwork vulnerability (Jamie Strandboge <jamie@...onical.com>)
Secunia Research: KDE KGet Insecure File Operation Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: KDE KGet metalink "name" Directory Traversal Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Free Download Manager Four Buffer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Free Download Manager metalink "name" Directory Traversal (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: aria2 metalink "name" Directory Traversal Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: KHOBE - 8.0 earthquake for Windows desktop security software (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: [CORE-2010-0405] Adobe Director Invalid Read (Core Security Technologies Advisories <advisories@...esecurity.com>)
Re: KHOBE - 8.0 earthquake for Windows desktop security software (Marsh Ray <marsh@...endedsubset.com>)
Re: KHOBE - 8.0 earthquake for Windows desktop security software ("Larry Seltzer" <larry@...ryseltzer.com>)
[SECURITY] [DSA-2046-1] New phpgroupware packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
Vulnerability in tagcloud for Kasseler CMS ("MustLive" <mustlive@...security.com.ua>)
GVI-2010-01 Multiple vulnerabilities in Kapitalist/capitalist (Sébastien Duquette <sduquette@...dienvirtuel.com>)

May 14 (7 messages)

Mathematica on Linux /tmp/MathLink vulnerability (paul.szabo@...ney.edu.au)
Re: Mathematica on Linux /tmp/MathLink vulnerability (Henri Salo <henri@...v.fi>)
Re: Mathematica on Linux /tmp/MathLink vulnerability (paul.szabo@...ney.edu.au)
Re: Mathematica on Linux /tmp/MathLink vulnerability (Marsh Ray <marsh@...endedsubset.com>)
Re: Mathematica on Linux /tmp/MathLink vulnerability (paul.szabo@...ney.edu.au)
Re: Mathematica on Linux /tmp/MathLink vulnerability (Leif Nixon <nixon@....liu.se>)
Re: Mathematica on Linux /tmp/MathLink vulnerability (Georgi Guninski <guninski@...inski.com>)

May 15 (15 messages)

Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)
Re: Windows' future (reprise) ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Windows' future (reprise) (Peter Besenbruch <prb@...a.net>)
Re: Windows' future (reprise) ("Thor (Hammer Of God)" <thor@...merofgod.com>)
Re: Mathematica on Linux /tmp/MathLink vulnerability (Marsh Ray <marsh@...endedsubset.com>)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)
Re: Windows' future (reprise) (Jeffrey Walton <noloader@...il.com>)
Re: Windows' future (reprise) (BMF <badmotherfsckr@...il.com>)
Re: Windows' future (reprise) ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Windows' future (reprise) (BMF <badmotherfsckr@...il.com>)
Re: Windows' future (reprise) (rdsears@....edu)
Re: Windows' future (reprise) (shawn Davison <shawn@...p.com>)
Re: Windows' future (reprise) (Peter Besenbruch <prb@...a.net>)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)

May 16 (13 messages)

Re: Windows' future (reprise) ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)
Re: Windows' future (reprise) ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Windows' future (reprise) (Sabahattin Gucukoglu <mail@...ahattin-gucukoglu.com>)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)
Re: Windows' future (reprise) (Christian Sciberras <uuf6429@...il.com>)
Re: Windows' future (reprise) ("Thor (Hammer of God)" <Thor@...merofgod.com>)
New vulnerability in bots of search engines (for security bypass) ("MustLive" <mustlive@...security.com.ua>)
Call for Papers: EC2ND 2010 (Konrad Rieck <konrad.rieck@...berlin.de>)
Vulnerability in 3D user cloud for Joomla ("MustLive" <mustlive@...security.com.ua>)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)
Re: Windows' future (reprise) (Christian Sciberras <uuf6429@...il.com>)

May 17 (16 messages)

Re: Windows' future (reprise) (Valdis.Kletnieks@...edu)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)
Re: Windows' future (reprise) (Valdis.Kletnieks@...edu)
iPhone data protection flaw (Bernd Marienfeldt <bernd@...x.net>)
Security Focus down? ("James Lay" <jlay@...ve-tothe-box.net>)
Re: Security Focus down? (Pradip Sharma <sharma.pradip@...il.com>)
[ MDVSA-2010:096 ] tetex (security@...driva.com)
Re: Security Focus down? ("James Lay" <jlay@...ve-tothe-box.net>)
Re: Security Focus down? ("Vipul Kumra" <vipul.kumra1@...il.com>)
Re: Security Focus down? (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Windows' future (reprise) ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Security Focus down? (Robert Portvliet <robert.portvliet@...il.com>)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)

May 18 (33 messages)

Re: iPhone data protection flaw (Gregor Schneider <rc46fi@...glemail.com>)
Re: iPhone data protection flaw (vtlists@...e.de)
Re: Windows' future (reprise) ("Cassidy MacFarlane" <Cassidy.MacFarlane@...ntmanagement.co.uk>)
Re: iPhone data protection flaw (Valdis.Kletnieks@...edu)
Re: iPhone data protection flaw (Bernd Marienfeldt <bernd@...x.net>)
GhostScript Vulnerability Clarification - CVE-2010-1869 (Rodrigo Branco <rbranco@...ckpoint.com>)
CVE-2010-1454: SpringSource tc Server unauthenticated remote access to JMX interface (s2-security <s2-security@...are.com>)
[SECURITY] [DSA 2047-1] New aria2 packages fix directory traversal (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2038-2] New pidgin packages fix regression (Thijs Kinkhorst <thijs@...ian.org>)
Re: Windows' future (reprise) (Michael Simpson <mikie.simpson@...il.com>)
Re: Windows' future (reprise) (Christian Sciberras <uuf6429@...il.com>)
Re: iPhone data protection flaw (Gregor Schneider <rc46fi@...glemail.com>)
Re: iPhone data protection flaw (Christian Sciberras <uuf6429@...il.com>)
Re: iPhone data protection flaw (Valdis.Kletnieks@...edu)
Re: iPhone data protection flaw (Valdis.Kletnieks@...edu)
Recall: Windows' future (reprise) ("Cassidy MacFarlane" <Cassidy.MacFarlane@...ntmanagement.co.uk>)
DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2010:097 ] pidgin (security@...driva.com)
Jonathan Plourde est absent(e). (jonathan.plourde@...svc.qc.ca)
Re: Windows' future (reprise) ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Windows' future (reprise) (Georgi Guninski <guninski@...inski.com>)
Re: Windows' future (reprise) (Christian Sciberras <uuf6429@...il.com>)
Re: Windows' future (reprise) (Valdis.Kletnieks@...edu)
Re: Windows' future (reprise) ("Thor (Hammer Of God)" <thor@...merofgod.com>)
[ MDVSA-2010:098 ] kdenetwork4 (security@...driva.com)
Re: iPhone data protection flaw (Michael Holstein <michael.holstein@...ohio.edu>)
Re: Windows' future (reprise) (Paul Schmehl <pschmehl_lists@...rr.com>)
[ MDVSA-2010:099 ] wireshark (security@...driva.com)
[USN-939-1] X.org vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: iPhone data protection flaw (comex <comexk@...il.com>)
Re: iPhone data protection flaw ("Zach C." <fxchip@...il.com>)
Re: iPhone data protection flaw ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: iPhone data protection flaw ("Zach C." <fxchip@...il.com>)

May 19 (10 messages)

Re: iPhone data protection flaw ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Web Browsers Leave 'Fingerprints' Behind as You Surf the Net ("Ivan ." <ivanhec@...il.com>)
D-Link DI-724P+ Router - Cross Site Scripting Vulnerability (werew01f <hack.werew01f@...il.com>)
Re: iPhone data protection flaw (Gregor Schneider <rc46fi@...glemail.com>)
[ MDVSA-2010:100 ] krb5 (security@...driva.com)
[ MDVSA-2010:101 ] mysql (security@...driva.com)
[USN-940-1] Kerberos vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Windows' future (reprise) ("lsi" <stuart@...erdelix.net>)
Re: Windows' future (reprise) ("Thor (Hammer of God)" <Thor@...merofgod.com>)
[ MDVSA-2010:102 ] ghostscript (security@...driva.com)

May 20 (7 messages)

[HITB-Announce] HITBSecConf2010 - Malaysia Call for Papers (Hafez Kamal <aphesz@...kinthebox.org>)
Secunia Research: Orbit Downloader metalink "name" Directory Traversal (Secunia Research <remove-vuln@...unia.com>)
Drupal Chaos Tools Suite (Ctools) Module Multiple Vulns ("Justin C. Klein Keane" <justin@...irish.net>)
[USN-941-1] MoinMoin vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ MDVSA-2010:082-1 ] clamav (security@...driva.com)
Multiple vulnerabilities within 3Com* iMC (Intelligent Management Center) (research <research@...checkup.com>)
[ MDVSA-2010:103 ] postgresql (security@...driva.com)

May 21 (13 messages)

Month of PHP Security - Summary - 11st May - 21th (Stefan Esser <stefan.esser@...tioneins.de>)
[ MDVSA-2010:104 ] dovecot (security@...driva.com)
GVI 2010-02 Multiple vulnerabilities in Open-AudIT (Sébastien Duquette <sduquette@...dienvirtuel.com>)
Vulnerability in widget Flash Tag Cloud for Blogsa and other ASP.NET engines ("MustLive" <mustlive@...security.com.ua>)
HP-UX, IBM AIX, SGI IRIX Remote Vulnerability - CVE-2010-1039 (Rodrigo Branco <rbranco@...ckpoint.com>)
Sun Solaris 10 ftpd Cross-site request forgery (Maksymilian Arciemowicz <cxib@...urityreason.com>)
Sun Solaris 10 filesystem rm(1), find(1), etc, Denial-of-service (Maksymilian Arciemowicz <cxib@...urityreason.com>)
Sun Solaris 10 libc/*convert (*cvt) buffer overflow (Maksymilian Arciemowicz <cxib@...urityreason.com>)
SDS Parent Connect SQL Injection ("epixoip" <epixoip@...h.com>)
PR10-03: Authenticated Cross-Site Scripting (XSS) within the Apache Axis2 administration console (research <research@...checkup.com>)
[USN-942-1] PostgreSQL vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: Windows' future (reprise) (Georgi Guninski <guninski@...inski.com>)
[ MDVSA-2010:105 ] openoffice.org (security@...driva.com)

May 23 (18 messages)

Vulnerabilities in DS-Syndicate for Joomla ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2049-1] New barnowl packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
Re: Vulnerabilities in DS-Syndicate for Joomla (Benji <me@...ji.com>)
Global Redirect 6.x-1.2 Arbitrary Redirection ("Justin C. Klein Keane" <justin@...irish.net>)
denial-of-service vulnerability in the Microsoft Malicious Software Removal Tool ("lsi" <stuart@...erdelix.net>)
Re: denial-of-service vulnerability in the Microsoft Malicious Software Removal Tool ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Sample videos for ENG++ (Nelson Brito <nbrito@...ure.org>)
Re: denial-of-service vulnerability in the Microsoft Malicious Software Removal Tool ("lsi" <stuart@...erdelix.net>)
Re: Global Redirect 6.x-1.2 Arbitrary Redirection ("Justin C. Klein Keane" <justin@...irish.net>)
Re: denial-of-service vulnerability in the Microsoft Malicious Software Removal Tool (webDEViL <w3bd3vil@...il.com>)
Re: denial-of-service vulnerability in the Microsoft Malicious Software Removal Tool ("Thor (Hammer Of God)" <thor@...merofgod.com>)
Re: denial-of-service vulnerability in the Microsoft Malicious Software Removal Tool ("lsi" <stuart@...erdelix.net>)
Re: denial-of-service vulnerability in the Microsoft Malicious Software Removal Tool ("lsi" <stuart@...erdelix.net>)
Re: denial-of-service vulnerability in the Microsoft Malicious Software Removal Tool (Christian Sciberras <uuf6429@...il.com>)
e107 Code Execution Exploit (discovered by mopb) (mcfly@...h.com)
[SECURITY] [DSA 2048-1] New dvipng packages fix arbitrary code execution (Sebastien Delafond <seb@...ian.org>)
Testing of systems for searching of viruses at web sites ("MustLive" <mustlive@...security.com.ua>)
New vulnerabilities in plugin DS-Syndicate for Joomla ("MustLive" <mustlive@...security.com.ua>)

May 24 (15 messages)

Re: denial-of-service vulnerability in theMicrosoft Malicious Software Removal Tool ("Larry Seltzer" <larry@...ryseltzer.com>)
Re: denial-of-service vulnerability in theMicrosoft Malicious Software Removal Tool ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: denial-of-service vulnerability in theMicrosoft Malicious Software Removal Tool (Christian Sciberras <uuf6429@...il.com>)
fcc.gov XSS (Marshall Whittaker <marshallwhittaker@...il.com>)
Re: fcc.gov XSS ("Zach C." <fxchip@...il.com>)
rPSA-2010-0039-1 openssl openssl-scripts (rPath Update Announcements <announce-noreply@...th.com>)
Secunia Research: Ziproxy Two Integer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Anybody know about "hack0wn" website please let me know (rajendra prasad <rajendra.palnaty@...il.com>)
Re: Anybody know about 'hack0wn' website please let me know (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
WhatWeb version 0.4.3 released (Andrew Horton <andrew@...ningstarsecurity.com>)
[SECURITY] [DSA 2050-1] New kdegraphics packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2051-1] New postgresql-8.3 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2010:106 ] aria2 (security@...driva.com)
Scientific Atlanta DPC2100 WebSTAR Cable Modem vulnerabilities (Dan Rosenberg <dan.j.rosenberg@...il.com>)
SQL injection vulnerability in Zabbix <= 1.8.1 (David Guimaraes <skysbsb@...il.com>)

May 25 (19 messages)

Re: Anybody know about "hack0wn" website please let me know (sunjester <tripmonster@...il.com>)
London DEFCON May meet - DC4420 - Wed 26th May 2010 (Major Malfunction <majormal@...ate-radio.org>)
[SECURITY] [DSA 2052-1] New krb5 packages fix denial of service (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 2052-1] New krb5 packages fix denial of service (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2053-1] New Linux 2.6.26 packages fix several issues (dann frazier <dannf@...ian.org>)
Re: Sun Solaris 10 libc/*convert (*cvt) buffer overflow (jai <jaikumar.shinde@...il.com>)
Re: Windows' future (reprise) ("M.B.Jr." <marcio.barbado@...il.com>)
Re: Windows' future (reprise) (Christian Sciberras <uuf6429@...il.com>)
Stealthier Internet access (Bipin Gautam <bipin.gautam@...il.com>)
Re: Stealthier Internet access (Valdis.Kletnieks@...edu)
Re: Stealthier Internet access (Christian Sciberras <uuf6429@...il.com>)
Re: Stealthier Internet access (Christian Sciberras <uuf6429@...il.com>)
Re: Stealthier Internet access (Bipin Gautam <bipin.gautam@...il.com>)
[ MDVSA-2010:107 ] mysql (security@...driva.com)
[USN-944-1] GNU C Library vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Stealthier Internet access (Tracy Reed <treed@...raviolet.org>)
Re: Stealthier Internet access (Valdis.Kletnieks@...edu)
Re: Stealthier Internet access (BMF <badmotherfsckr@...il.com>)
Re: Stealthier Internet access (Marsh Ray <marsh@...endedsubset.com>)

May 26 (13 messages)

Re: Stealthier Internet access (Bipin Gautam <bipin.gautam@...il.com>)
Re: Stealthier Internet access ("Elazar Broad" <elazar@...hmail.com>)
Re: Stealthier Internet access (Valdis.Kletnieks@...edu)
[NPA] CFP: International Journal of Network Protocols and Algorithms (Sandra Sendra<sandra.sendra.upv@...il.com>)
Bypassing Google Chrome 4 Javascript Filter (Manuel Fernández Fernández <mfernandez@...ormatica64.com>)
To the police who torment, harass and stalk me. (n3ptun3@...don.com)
[ MDVSA-2010:108 ] kolab-horde-framework (security@...driva.com)
[ MDVSA-2010:108 ] kolab-horde-framework (security@...driva.com)
[ MDVSA-2010:108 ] kolab-horde-framework (security@...driva.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Network Building Mediator (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
C&S Smart Security Score Card ("Debasis Mohanty" <dm.mailinglists@...il.com>)
Comcast / Scientific Atlanta DPC2100 WebSTAR Cable Modem vulnerabilities (Siddhartha Jain <sjain@...verspringnet.com>)
Re: Vulnerabilities in DS-Syndicate for Joomla (Benji <me@...ji.com>)

May 27 (11 messages)

Re: To the police who torment, harass and stalk me. (Mercury Vapour <n3twar3z@...il.com>)
Re: To the police who torment, harass and stalk me. (☣frank^2 <frank2@...49.org>)
Re: To the police who torment, harass and stalk me. (Michal <michal@...ic.co.uk>)
Re: Vulnerabilities in DS-Syndicate for Joomla ("MustLive" <mustlive@...security.com.ua>)
libopie __readrec() off-by one (FreeBSD ftpd remote PoC) (Adam Zabrocki <pi3@...ec.pl>)
EUSecWest 2010 MiniCFP (conf Jun 16/17) and PacSec 2010 CFP (conf Nov 10/11, deadline July 30) (Dragos Ruiu <dr@....net>)
[ MDVSA-2010:109 ] gtk+2.0 (security@...driva.com)
Re: To the police who torment, harass and stalk me. (sunjester <tripmonster@...il.com>)
[ MDVSA-2010:110 ] clamav (security@...driva.com)
ftp-libopie.nse in response to CVE-2010-1938 (Henri Salo <henri@...v.fi>)
[USN-945-1] ClamAV vulnerabilities (Jamie Strandboge <jamie@...onical.com>)

May 28 (6 messages)

VMSA-2010-0009 ESXi ntp and ESX Service Console third party updates (VMware Security team <security@...are.com>)
Re: ftp-libopie.nse in response to CVE-2010-1938 (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera ("MustLive" <mustlive@...security.com.ua>)
What do you guys think about it? (Rafael Moraes <rafael@....com.br>)
Re: What do you guys think about it? (Marsh Ray <marsh@...endedsubset.com>)
Re: What do you guys think about it? ("Thor (Hammer of God)" <Thor@...merofgod.com>)

May 29 (3 messages)

blackboard (Justin Chang <ktriv3di@....com>)
Re: What do you guys think about it? (Christian Sciberras <uuf6429@...il.com>)
Re: blackboard ("Zach C." <fxchip@...il.com>)

May 30 (10 messages)

Websense Enterprise 6.3.3 Policy Bypass (<dink@...inkydink.com>)
Re: Websense Enterprise 6.3.3 Policy Bypass ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Websense Enterprise 6.3.3 Policy Bypass (Christian Sciberras <uuf6429@...il.com>)
Re: Websense Enterprise 6.3.3 Policy Bypass (<dink@...inkydink.com>)
Re: Websense Enterprise 6.3.3 Policy Bypass (<dink@...inkydink.com>)
Re: Websense Enterprise 6.3.3 Policy Bypass ("Thor (Hammer of God)" <Thor@...merofgod.com>)
, (Jeannette Jarvis <jjarvis@...rosoft.com>)
IS-2010-001 - Netgear WG602v4 Saved Pass Stack Overflow (Cristofaro Mune <pulsoid@...silence.org>)
Re: Websense Enterprise 6.3.3 Policy Bypass (<dink@...inkydink.com>)
Re: Websense Enterprise 6.3.3 Policy Bypass ("Thor (Hammer of God)" <Thor@...merofgod.com>)

May 31 (20 messages)

Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera (MustDie <mustdieplease@...il.com>)
Re: To the police who torment, harass and stalk me. (Geoff Plourde <geoff.plourde@...il.com>)
smp Capture The Flag (CTF) 2010 Hacker Olympics (<magik@...ctf.com>)
Re: blackboard (ben@...owel.com)
Vulnerability in ArtDesign CMS ("MustLive" <mustlive@...security.com.ua>)
Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera ("Jan G.B." <ro0ot.w00t@...glemail.com>)
Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera ("Jan G.B." <ro0ot.w00t@...glemail.com>)
Re: smp Capture The Flag (CTF) 2010 Hacker Olympics (Geoff Plourde <geoff.plourde@...il.com>)
What are the basic vulnerabilities of a software? (rajendra prasad <rajendra.palnaty@...il.com>)
adobe pdf file format (rajendra prasad <rajendra.palnaty@...il.com>)
Re: What are the basic vulnerabilities of a software? (Christian Sciberras <uuf6429@...il.com>)
Re: Stealthier Internet access (T Biehn <tbiehn@...il.com>)
Re: What do you guys think about it? (Georgi Guninski <guninski@...inski.com>)
Re: What are the basic vulnerabilities of a software? (T Biehn <tbiehn@...il.com>)
Re: What do you guys think about it? (T Biehn <tbiehn@...il.com>)
Re: What are the basic vulnerabilities of a software? (Jeffrey Walton <noloader@...il.com>)
Re: adobe pdf file format (Jeffrey Walton <noloader@...il.com>)
Re: What do you guys think about it? (Christian Sciberras <uuf6429@...il.com>)
Re: What do you guys think about it? (T Biehn <tbiehn@...il.com>)
Re: adobe pdf file format (Nick FitzGerald <nick@...us-l.demon.co.uk>)

406 messages