bugtraq mailing list - 2004/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2004/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 15	² 20	³ 18	⁴ 4
⁵ 12	⁶ 17	⁷ 21	⁸ 9	⁹ 20	¹⁰ 8	¹¹ 4
¹² 12	¹³ 14	¹⁴ 28	¹⁵ 25	¹⁶ 9	¹⁷ 32	¹⁸ 2
¹⁹ 15	²⁰ 12	²¹ 1	²² 14	²³ 13	²⁴ 11	²⁵ 1
²⁶ 11	²⁷ 11	²⁸ 13	²⁹ 16	³⁰ 11	³¹ 17

Messages by day:

July 1 (15 messages)

(IE/SCOB) Switching Software Because of Bugs: Some Facts About Software and Security bugs ("Drew Copley" <dcopley@...e.com>)
Re: (IE/SCOB) Switching Software Because of Bugs: Some Facts About Software and Security bugs (Ron DuFresne <dufresne@...ternet.com>)
RE: (IE/SCOB) Switching Software Because of Bugs: Some Facts About Software and Security bugs ("Drew Copley" <dcopley@...e.com>)
Misinformation on Scob/MSJect Corrected ("Drew Copley" <dcopley@...e.com>)
FW: [security bulletin] SSRT3552 HP-UX running ARPA transport local Denial of Service (DoS) ("Boren, Rich (SSRT)" <rich.boren@...com>)
RE: Microsoft technologies. By default, non-HIPAA compliant? ("Boring, Andrew" <Andrew.Boring@...lerzell.com>)
Unprevileged user can change quota on Domino (Andreas Klein <Andreas.C.Klein@...sik.uni-wuerzburg.de>)
Re: php codes injection in phpMyAdmin version 2.5.7. (Marc Delisle <DelislMa@...legeSherbrooke.qc.ca>)
Re: Misinformation on Scob/MSJect Corrected (Ron DuFresne <dufresne@...ternet.com>)
SecurityLab report: The Top 10 Most Critical Vulnerabilities in June 2004 ("Alexander" <pigrelax@...dex.ru>)
Re: php codes injection in phpMyAdmin version 2.5.7. (Marc Delisle <DelislMa@...legeSherbrooke.qc.ca>)
DoS against Domino 6.5.1 (Andreas Klein <Andreas.C.Klein@...sik.uni-wuerzburg.de>)
Re: Microsoft technologies. By default, non-HIPAA compliant? (Dave Paris <dparis@...orks.com>)
RE: ("Drew Copley" <dcopley@...e.com>)
Re: RE: (Blue Boar <BlueBoar@...evco.com>)

July 2 (20 messages)

RE: RE: ("Drew Copley" <dcopley@...e.com>)
RE: RE: SUPER SPOOF DELUXE Re: Microsoft and Security ("Thor Larholm" <thor@...x.com>)
RE: SUPER SPOOF DELUXE Re: Microsoft and Security ("Thor Larholm" <thor@...x.com>)
(no subject) ("Robin Landis" <rebl@...ramail.com>)
RE: SUPER SPOOF DELUXE Re: Microsoft and Security (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
RE: SUPER SPOOF DELUXE Re: Microsoft and Security ("Thor Larholm" <thor@...x.com>)
Announce: RSBAC v1.2.3 released (Amon Ott <ao@...ac.org>)
Re: (IE/SCOB) Switching Software Because of Bugs: Some Facts About Software and Security bugs ("Thomas C. Greene" <tcgreene@...izon.net>)
Re: SUPER SPOOF DELUXE Re: Microsoft and Security (Bob Perriero <bob.perriero@...il.com>)
Microsoft disables ADODB.Stream ("Thor Larholm" <thor-ZXHyySWV5Wg@...lic.gmane.org>)
DLINK 624, script injection vulnerability (Gregory Duchemin <c3rb3r@...patico.ca>)
RE: Microsoft technologies. By default, non-HIPAA compliant? ("bob@...is.net" <bob@...is.net>)
MD5 hash cracking service ("md5er" <info@...scracking.com>)
Re: Microsoft technologies. By default, non-HIPAA compliant? (Nicholas Weaver <nweaver@...berkeley.edu>)
Re: Microsoft technologies. By default, non-HIPAA compliant? (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Brightmail leaks other user's spam (Thomas Springer <tuevsec@....net>)
SUSE Security Announcement: kernel (SUSE-SA:2004:020) (Roman Drahtmueller <draht@...e.de>)
FreeBSD Security Advisory FreeBSD-SA-04:13.linux (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Multiple Vulnerabilities in Easy Chat Server 1.2 ("Donato Ferrante" <fdonato@...istici.org>)
XSS in SCI Photo Chat Server 3.4.9 ("Donato Ferrante" <fdonato@...istici.org>)

July 3 (18 messages)

Sanity check in Centre ("Manip" <Bug@...lostsite.co.uk>)
Registry fixes for the recent IE vulnerabilities (Mike Cheng <mcorl737@...mail.com>)
[HW-MED] XSS in Netegrity IdentityMinder (vuln@...view.com)
CYBSEC - Security Advisory: Denial of Service in IBM WebSphere Edge Server (Leandro Meiners <lmeiners@...sec.com>)
Public Review of OIS Security Vulnerability Reporting and Response Guidelines (OIS <announcements@...afety.org>)
THE INSIDER VULNERABILITY STILL WORKS AFTER TODAY'S PATCH (<liudieyu@...rella.name>)
What a difference a char makes... (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: SUSE Security Announcement: kernel (SUSE-SA:2004:020) (Florian Weimer <fw@...eb.enyo.de>)
RE: THE VULNERABILITY STILL WORKS AFTER TODAY'S PATCH (Jelmer <jkuperus@...net.nl>)
Registry Fix For Variant of Scob ("Drew Copley" <dcopley@...e.com>)
Enterasys XSR Security Routers DoS ("Frederico Queiroz" <fqueiroz@....com.br>)
RE: RE: SUPER SPOOF DELUXE Re: [Full-Disclosure] Microsoft and Security ("http-equiv@...ite.com" <1@...ware.com>)
Re: [Full-Disclosure] Fix for IE ADODB.Stream vulnerability is out ("http-equiv@...ite.com" <1@...ware.com>)
RE: THE VULNERABILITY STILL WORKS AFTER TODAY'S PATCH (<liudieyu@...rella.name>)
Cart32 Input Validation Flaw in 'GetLatestBuilds?cart32=' Permits Remote Cross-Site Scripting Attacks ("Dr Ponidi" <drponidi@...kermail.com>)
The 3 D's: Demo for the Dullards and Dunces ("http-equiv@...ite.com" <1@...ware.com>)
[SECURITY] [DSA 527-1] New pavuk packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)
Re: DLINK 614+ - SOHO routers, system DOS (Gregory Duchemin <c3rb3r@...patico.ca>)

July 4 (4 messages)

[SECURITY] [DSA 526-1] New webmin packages fix multiple vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
RE: Registry Fix For Variant of Scob ("Thor Larholm" <thor@...x.com>)
Re: Public Review of OIS Security Vulnerability Reporting and Response Guidelines (dave <dave@...unitysec.com>)
Re: Public Review of OIS Security Vulnerability Reporting and ResponseGuidelines (Fred Mobach <fred@...ach.nl>)

July 5 (12 messages)

RE: [Dailydave] Re: Public Review of OIS Security Vulnerability Reporting and Response Guidelines ("Steve W. Manzuik" <steve@...renchtech.com>)
Linux Virtual Server/Secure Context procfs shared permissions flaw (Veit Wahlich <cru@...ia.de>)
Re: [Dailydave] Re: [Full-Disclosure] Public Review of OIS Security Vulnerability Reporting and Response Guidelines ("Halvar Flake" <HalVar@....de>)
XSS in 12Planet Chat Server 2.9 ("Donato Ferrante" <fdonato@...istici.org>)
unreal ircd ip cloaking subsystem vulnerability (bartavelle <bartavelle@...decon.com>)
Fastream NETFile FTP/Web Server Input validation Errors ("at4r" <at4r@...orcitos.com>)
MySQL Authentication Bypass (NGSSoftware Insight Security Research <nisr@...tgenss.com>)
Re: Java applet crashing with native assertion (Ronald Oussoren <ronaldoussoren@....com>)
RE: Microsoft and Security ("Alun Jones" <alun@...is.com>)
RE: Microsoft and Security ("Radoslav Dejanovic" <radoslav.dejanovic@...us.hr>)
RS-2004-2: "Content-Type" XSS vulnerability affecting other webmail systems (Roman Medina-Heigl Hernandez <roman@...labs.com>)
[sb] [ GLSA 200407-03 ] Apache 2: Remote denial of service attack ("Thierry Carrez" <koon@...too.org>)

July 6 (17 messages)

Re: Public Review of OIS Security Vulnerability Reporting and Response Guidelines (Florian Weimer <fw@...eb.enyo.de>)
Do not adopt OIS standards (Was: Public Review of OIS Security Vulnerability Reporting and Response Guidelines) ("Ferguson, Ann" <annfer@...k.wafel.com>)
Re: Microsoft and Security ("Justin Wheeler" <jwheeler@...ademons.com>)
Re: Public Review of OIS Security Vulnerability Reporting and Response Guidelines (Pete Herzog <pete@...com.org>)
Re: Public Review of OIS Security Vulnerability Reporting and ResponseGuidelines (Randy Bush <randy@....com>)
RE: Public Review of OIS Security Vulnerability Reporting and ResponseGuidelines ("Thomas48" <thomas48@...gnet.com.sg>)
Re: [ISN] E-Mail Snooping Ruled Permissible (Jason Coombs <jasonc@...ence.org>)
backdoor menu on conexant chipset dsl router (Zoom X3) (Adam Laurie <adam@...roup.co.uk>)
BENCHMARK() is not the only way to determine successfull MySQL injection ("Philip Stoev" <philip@...ev.org>)
RE: Microsoft and Security ("Alun Jones" <alun@...is.com>)
RE: Microsoft technologies. By default, non-HIPAA compliant? ("Anything But Microsoft" <abm@...thingbutmicrosoft.org>)
RE: Registry Fix For Variant of Scob ("Drew Copley" <dcopley@...e.com>)
xingtone opens server on desktop using undocumented protocol (probably http) ("Burton M. Strauss III" <BStrauss@....org>)
RE: Registry Fix For Variant of Scob (Jelmer <jkuperus@...net.nl>)
[OpenPKG-SA-2004.030] OpenPKG Security Advisory (png) (OpenPKG <openpkg@...npkg.org>)
Re: Microsoft and Security (Jason Coombs <jasonc@...ence.org>)
Eudora 6.1.2 attachment spoof (psz@...hs.usyd.edu.au (Paul Szabo))

July 7 (21 messages)

Re: Public Review of OIS Security Vulnerability Reporting and Response Guidelines (rsh@...rect.com)
RE: Microsoft technologies. By default, non-HIPAA compliant? ("Tina Bird" <tbird@...cision-guesswork.com>)
Re: Registry Fix For Variant of Scob ("http-equiv@...ite.com" <1@...ware.com>)
RE: [ISN] E-Mail Snooping Ruled Permissible ("Tom Arseneault" <TArseneault@...nterpane.com>)
RE: Microsoft and Security ("David F. Skoll" <dfs@...ringpenguin.com>)
Wendy's Drive-up Order System Information Disclosure (<mi2g-research@...hmail.com>)
RE: Wendy's Drive-up Order System Information Disclosure ("Sapheriel" <sapheriel@...p.de>)
RE: Wendy's Drive-up Order System Information D isclosure (Rob Keown <Keown@...DIRECT.COM>)
MDKSA-2004:066 - Updated kernel packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Enterasys XSR Security Router Record Route Denial Of Service Vulnerability (More information) ("Frederico Queiroz" <fqueiroz@....com.br>)
Comersus Cart Cross-Site Scripting Vulnerability ("Thomas Ryan" <tommy@...videsecurity.com>)
Npds BB HTML Injection (Benjamin Tolman <rituel@...la.fr>)
Re: (IE/SCOB) Switching Software Because of Bugs: Some Facts About Software and Security bugs ("Thomas C. Greene" <tcgreene@...izon.net>)
Can we prevent IE exploits a priori? (<security-bugtraq@...ketshark.net>)
FW: [security bulletin] SSRT4718 rev.0 HP Tru64 UNIX NTP Integer Overflow ("Boren, Rich (SSRT)" <rich.boren@...com>)
Comersus Cart Improper Request Handling ("Thomas Ryan" <tommy@...videsecurity.com>)
Re: Microsoft and Security (Adam Shostack <adam@...eport.org>)
RE: Can we prevent IE exploits a priori? ("Drew Copley" <dcopley@...e.com>)
RE: What a difference a char makes... ("joe" <mvp@...ware.net>)
Suggestion: erase data posted to the Web (Andrew Daviel <advax@...umf.ca>)
Scob variant using IIS 6.0 or just upgrades ? ("Hubbard, Dan" <dhubbard@...sense.com>)

July 8 (9 messages)

Security contact wanted (S G Masood <sgmasood@...oo.com>)
Re: backdoor menu on conexant chipset dsl router (Zoom X3) (duke_skillz@...o.pt)
Re: Public Review of OIS Security Vulnerability Reporting and ResponseGuidelines (ET LoWNOISE <et@...erspace.org>)
Re: backdoor menu on conexant chipset dsl router (Zoom X3) (Adam Laurie <adam@...roup.co.uk>)
Re: Re: Public Review of OIS Security VulnerabilityReporting and ResponseGuidelines ("Gregh" <chows@...mail.com.au>)
RE: Suggestion: erase data posted to the Web (Michael Wojcik <Michael.Wojcik@...rofocus.com>)
Re: Suggestion: erase data posted to the Web (Nick Lamb <njl98r@....soton.ac.uk>)
Re: Suggestion: erase data posted to the Web (Luciano Miguel Ferreira Rocha <strange@....no-ip.org>)
RE: Can we prevent IE exploits a priori? ("James C Slora Jr" <Jim.Slora@...a.com>)

July 9 (20 messages)

Re: Re: Public Review of OIS Security Vulnerability Reporting and ResponseGuidelines ("J.A. Terranson" <measl@....org>)
Re: Public Review of OIS Security Vulnerability Reporting and Response Guidelines (Nigel Stepp <stepp@...star.net>)
MOZILLA: SHELL can execute remote EXE program (<liudieyu@...rella.name>)
[Fwd: A FINFlash from the Freedom to Innovate Network] (Jason Coombs <jasonc@...ence.org>)
IE sucks : sun java virtual machine insecure tmp file creation (Jelmer <jkuperus@...net.nl>)
Re: MOZILLA: SHELL can execute remote EXE program (Barry Fitzgerald <bkfsec@....lonestar.org>)
Another IE trick (Re: IE sucks : sun java virtual machine insecure tmp file creation) (3APA3A <3APA3A@...URITY.NNOV.RU>)
Norton AntiVirus Denial Of Service Vulnerability [Part: !!!] (Bipin Gautam <visitbipin@...mail.com>)
[OpenPKG-SA-2004.031] OpenPKG Security Advisory (dhcpd) (OpenPKG <openpkg@...npkg.org>)
Re: Suggestion: erase data posted to the Web (devnull@...ents.Montreal.QC.CA)
Mozilla Security Advisory 2004-07-08 (dveditz@...zio.com)
Re: MOZILLA: SHELL can execute remote EXE program (<liudieyu@...rella.name>)
Re: Can we prevent IE exploits a priori? (Jason Coombs <jasonc@...ence.org>)
Re: Microsoft and Security (Valdis.Kletnieks@...edu)
Microsoft Word Email Object Data Vulnerability ("James C. Slora, Jr." <james.slora@...a.com>)
MOZILLA: execute local file and its fix (<liudieyu@...rella.name>)
CYBSEC - Security Advisory: Denial of Service in IBM WebSphere Edge Server (Leandro Meiners <lmeiners@...sec.com>)
Re: Can we prevent IE exploits a priori? ("Thor Larholm" <thor@...x.com>)
Re: Norton AntiVirus Denial Of Service Vulnerability [Part: !!!] (Tom Spencer <tom@...ohosting.com>)
Re: Microsoft Word Email Object Data Vulnerability ("http-equiv@...ite.com" <1@...ware.com>)

July 10 (8 messages)

RE: Norton AntiVirus Denial Of Service Vulnerability [Part: !!!] ("Eric McCarty" <eric@...mpd.com>)
MDKSA-2004:067 - Updated ethereal packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: Microsoft Word Email Object Data Vulnerability ("Drew Copley" <dcopley@...e.com>)
Covert Channels allow Cross-Site-Java in Microsoft VM (Marc Schoenefeld <schonef@...-muenster.de>)
current leading bots used in drone armies [June/July 2004] ("Gadi Evron" <gadie@....gov.il>)
[tool] p0f 2.0.4 is out (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Norton AntiVirus Denial Of Service Vulnerability [Part: !!!] (Bipin Gautam <visitbipin@...mail.com>)
RE: Norton AntiVirus Denial Of Service Vulnerability [Part: !!!] ("DaiTengu" <daitengu@...-ensemble.com>)

July 11 (4 messages)

[BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7 (David Miller <justdave@...zilla.org>)
I small poem in JScript ("Berend-Jan Wever" <skylined@...p.tudelft.nl>)
Re: Security contact wanted (Patrick van Zweden <patrick@...zweden.org>)
Re: I small poem in JScript ("Jordan Cole (stilist)" <stilist@...il.com>)

July 12 (12 messages)

Re: I small poem in JScript (Chris <ichrisi@...il.com>)
Re: Covert Channels allow Cross-Site-Java in Microsoft VM ("Siva Subbu" <sivasub23@...mail.com>)
MSOE Javascript Execution Vulnerability (Paul <paul@...yhats.cjb.net>)
Re: I small poem in JScript ("Jordan Cole (stilist)" <stilist@...il.com>)
MSIE Download Window Filename + Filetype Spoofing Vulnerability (Paul <paul@...yhats.cjb.net>)
Media Preview Script Execution Vulnerability (Paul <paul@...yhats.cjb.net>)
HijackClick 3 (Paul <paul@...yhats.cjb.net>)
RE: MSIE Download Window Filename + Filetype Spoofing Vulnerability ("Drew Copley" <dcopley@...e.com>)
Remote crash of Half-Life servers and clients (versions before the 07 July 2004) (Luigi Auriemma <aluigi@...istici.org>)
Re: HijackClick 3 ("http-equiv@...ite.com" <1@...ware.com>)
Re: Covert Channels allow Cross-Site-Java in Microsoft VM (Marc Schoenefeld <schonef@...-muenster.de>)
MSIE Similar Method Name Redirection Cross Site/Zone Scripting Vulnerability (Paul <paul@...yhats.cjb.net>)

July 13 (14 messages)

RE: MSIE Download Window Filename + Filetype Spoofing Vulnerability ("Polazzo Justin" <Justin.Polazzo@...ilities.gatech.edu>)
RE: MSIE Download Window Filename + Filetype Spoofing Vulnerability ("Drew Copley" <dcopley@...e.com>)
IE Shell URI Download and Execute, POC ("Ferruh Mavituna" <ferruh@...ituna.com>)
Two Vulnerabilities in Mozilla may lead to remote compromise (Mind Warper <mindwarper@...uxmail.org>)
IE Shell URI Download and Execute, POC ("Ferruh Mavituna" <ferruh@...ituna.com>)
Moodle XSS Vulnerability (Thomas Waldegger <morpheus@...a.info>)
Re: Two Vulnerabilities in Mozilla may lead to remote compromise (Philliph <bugtraq@...edit.sk>)
Microsoft Window Utility Manager Local Elevation of Privileges ("Vivek Rathod (Application Security, Inc.)" <vrathod@...secinc.com>)
@stake advisory: WebSTAR (5.3.2 and below) Multiple Vulnerabilities ("Advisories" <advisories@...take.com>)
Re: Two Vulnerabilities in Mozilla may lead to remote compromise (Daniel Veditz <dveditz@...zio.com>)
RE: Two Vulnerabilities in Mozilla may lead to remote compromise (Jelmer <jkuperus@...net.nl>)
RE: Norton AntiVirus Denial Of Service Vulnerability [Part: !!!] (Sym Security <secure@...antec.com>)
Re: MSIE Similar Method Name Redirection Cross Site/Zone Scripting Vulnerability ("http-equiv@...ite.com" <1@...ware.com>)
IE Shell URI Download and Execute, POC ("Ferruh Mavituna" <ferruh@...ituna.com>)

July 14 (28 messages)

phrack #62 has been released (phrack staff <rm@...fault.net>)
aterm 0.4.2 tty permission weakness (Maarten Tielemans <TTIelu_DaInfraCrew@...mail.com>)
Advisory 11/2004: PHP memory_limit remote vulnerability (Stefan Esser <s.esser@...atters.de>)
Advisory 12/2004: PHP strip_tags() bypass vulnerability (Stefan Esser <s.esser@...atters.de>)
RE: Re: HijackClick 3 ("Drew Copley" <dcopley@...e.com>)
Re: Two Vulnerabilities in Mozilla may lead to remote compromise (Mind Warper <mindwarper@...uxmail.org>)
RE: Two Vulnerabilities in Mozilla may lead to remote compromise ("Darren Pilgrim" <dmp@...freak.org>)
RE: Norton AntiVirus Denial Of Service Vulnerability [Part: !!!] (Sym Security <secure@...antec.com>)
Find the tag continued ("James C. Slora, Jr." <james.slora@...a.com>)
HtmlHelp - .CHM File Heap Overflow ("Brett Moore" <brett.moore@...urity-assessment.com>)
Microsoft Windows Task Scheduler '.job' Stack Overflow (NGSSoftware Insight Security Research <nisr@...tgenss.com>)
Unchecked buffer in mstask.dll ("Brett Moore" <brett.moore@...urity-assessment.com>)
Ref: http://www.securityfocus.com/archive/1/367866, Jul 1 2004 1:19PM, Subj: Brightmail leaks other user's spam (Sym Security <secure@...antec.com>)
Re: IE Shell URI Download and Execute, POC (L33tPrincess <l33tprincess@...oo.com>)
Re: Microsoft Window Utility Manager Local Elevation of Privileges (Chris Paget <ivegotta@...bom.co.uk>)
RE: Re: IE Shell URI Download and Execute, POC ("Todd Towles" <toddtowles@...okshires.com>)
RE: Re: IE Shell URI Download and Execute, POC ("Ferruh Mavituna" <ferruh@...ituna.com>)
RE: [Full-Disclosure] Re: IE Shell URI Download and Execute, POC ("Ferruh Mavituna" <ferruh@...ituna.com>)
[security bulletin] SSRT4741 rev.1 DCE for HP OpenVMS Potential RPC Buffer Overflow Attack VU#259796, VU#568148, VU#326… ("Boren, Rich (SSRT)" <rich.boren@...com…)
RE: HijackClick 3 ("http-equiv@...ite.com" <1@...ware.com>)
TSSA-2004-013 - php (tinysofa Security Team <security@...ysofa.org>)
RE: Re: IE Shell URI Download and Execute, POC ("Todd Towles" <toddtowles@...okshires.com>)
PHP BB bug (sasan hezarkhani <gootiker@...il.com>)
RE: Unchecked buffer in mstask.dll ("Thor Larholm" <tlarholm@...x.com>)
RE: Re: IE Shell URI Download and Execute, POC ("Ferruh Mavituna" <ferruh@...ituna.com>)
[HV-MED] DoS in Microsoft SMS Client (vuln@...view.com)
RE: [Full-Disclosure] Re: IE Shell URI Download and Execute, POC ("Drew Copley" <dcopley@...e.com>)
RE: Unchecked buffer in mstask.dll (<vesselen.mironov@...h.ai>)

July 15 (25 messages)

RE: Re: IE Shell URI Download and Execute, POC ("Edward Ray" <support@...cman.com>)
RE: Unchecked buffer in mstask.dll (psz@...hs.usyd.edu.au (Paul Szabo))
Re: RE: Unchecked buffer in mstask.dll ("Jordan Cole (stilist)" <stilist@...il.com>)
Re: RE: Unchecked buffer in mstask.dll (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: RE: Unchecked buffer in mstask.dll ("Jordan Cole (stilist)" <stilist@...il.com>)
Re: RE: Unchecked buffer in mstask.dll (Tim <tim-security@...tinelchicken.org>)
RE: Unchecked buffer in mstask.dll ("Thor Larholm" <tlarholm@...x.com>)
MDKSA-2004:070 - Updated freeswan and super-freeswan packages fix certificate chain authentication vulnerability (Mandrake Linux Security Team <security@...ux-m…)
MDKSA-2004:068 - Updated php packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: RE: HijackClick 3 ("Thor Larholm" <tlarholm@...x.com>)
[CLA-2004:846] Conectiva Security Announcement - kernel (Conectiva Updates <secure@...ectiva.com.br>)
Re: current leading bots used in drone armies [June/July 2004] (Jan Knutar <jknutar@....fi>)
Re: Mac OS X stores login/Keychain/FileVault passwords on disk (Adi Kriegisch <adi@...tuwien.ac.at>)
The Impact of RFC Guidelines on DNS Spoofing Attacks (have2Banonymous <a637831@...oo.com>)
RE: MSIE Similar Method Name Redirection Cross Site/Zone Scripting Vulnerability ("Thor Larholm" <tlarholm@...x.com>)
White Paper: 0x00 vs ASP file upload scripts ("Brett Moore" <brett.moore@...urity-assessment.com>)
Re: aterm 0.4.2 tty permission weakness (Armin Wolfermann <aw@....de>)
Trend Micro Officescan for Win2k strange behaviour (Marco Monicelli <marco.monicelli@...cegaglia.com>)
Re: aterm 0.4.2 tty permission weakness (Coleman Kane <cokane@...ane.org>)
RE: Two Vulnerabilities in Mozilla may lead to remote compromise (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: aterm 0.4.2 tty permission weakness (Sebastian Hans <hanss@...tum.de>)
Re: [security] aterm 0.4.2 tty permission weakness (lorenzo <lagrespan@...il.com>)
RE: phrack #62 has been released (<Glenn_Everhart@...kone.com>)
RE: Unchecked buffer in mstask.dll ("Thor Larholm" <tlarholm@...x.com>)
Re: RE: Unchecked buffer in mstask.dll ("Curt Purdy" <purdy@...man.com>)

July 16 (9 messages)

MDKSA-2004:069 - Updated ipsec-tools packages fix multiple vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: Microsoft Window Utility Manager Local Elevation of Privileges ("KF (lists)" <kf_lists@...netops.com>)
RE: Unchecked buffer in mstask.dll ("Dmitry Yu. Bolkhovityanov" <D.Yu.Bolkhovityanov@....nsk.su>)
Re: Unchecked buffer in mstask.dll ("Mark Litchfield" <mark@...software.com>)
SUSE Security Announcement: php4 (SUSE-SA:2004:021) (krahmer@...e.de (Sebastian Krahmer))
[waraxe-2004-SA#034 - XSS and path full path disclosure in PhpBB 2.0.8] (Janek Vind <come2waraxe@...oo.com>)
[security bulletin] SSRT4704 rev.0 HP-UX wu-ftpd local unauthorized access ("Boren, Rich (SSRT)" <rich.boren@...com>)
RE: [ok] RE: Unchecked buffer in mstask.dll ("Curt Purdy" <purdy@...man.com>)
Re: PHP BB bug (Rich Lafferty <rich@...ferty.ca>)

July 17 (32 messages)

RE: [Full-Disclosure] Re: IE Shell URI Download and Execute, POC ("Ferruh Mavituna" <ferruh@...ituna.com>)
[waraxe-2004-SA#035 - Multiple security holes in PhpNuke - part 2] (Janek Vind <come2waraxe@...oo.com>)
Re: PHP BB bug ("micheal@...healcottingham.com" <micheal@...healcottingham.com>)
Re: Microsoft and Security (Charles Otstot <charles.otstot@...ail.net>)
Re: Re: HijackClick 3 (Paul <paul@...yhats.cjb.net>)
Re: Can we prevent IE exploits a priori? (<bugtraq223344@...linator.com>)
RE: Trend Micro Officescan for Win2k strange behaviour ("Seth Hall" <seth@...aengineering.com>)
[OpenPKG-SA-2004.032] OpenPKG Security Advisory (apache) (OpenPKG <openpkg@...npkg.org>)
Re: Microsoft Window Utility Manager Local Elevation of Privileges (Cesar <cesarc56@...oo.com>)
[tool] webstretch 0.1.6 http inspection proxy (Simon Shanks <javawebexam@...mail.com>)
Re: Mac OS X stores login/Keychain/FileVault passwords on disk (Theo Van Dinter <felicity@...ge.net>)
[FMADV] Format String Bug in OllyDbg 1.10 (ned <nd@...inemenace.org>)
RE: MSIE Download Window Filename + Filetype Spoofing Vulnerability ("Eric McCarty" <eric@...mpd.com>)
Hotmail Cross Site Scripting Vulnerability (Paul <paul@...yhats.cjb.net>)
[CLA-2004:847] Conectiva Security Announcement - php4 (Conectiva Updates <secure@...ectiva.com.br>)
[CLA-2004:848] Conectiva Security Announcement - webmin (Conectiva Updates <secure@...ectiva.com.br>)
Re: Re: IE Shell URI Download and Execute, POC ("Fabricio A. Angeletti" <hellmind@...ten.daemon.sh>)
Medal of Honor remote buffer-overflow (Luigi Auriemma <aluigi@...istici.org>)
RE: Re: IE Shell URI Download and Execute, POC ("Ferruh Mavituna" <ferruh@...ituna.com>)
MSIE Overly Trusted Location Variant Method Cache Vulnerability (Paul <paul@...yhats.cjb.net>)
Re: Hotmail Cross Site Scripting Vulnerability ("GreyMagic Security" <security@...ymagic.com>)
Web_Store.cgi allows Command Execution (Zero_X www.lobnan.de Team <zero-x@...uxmail.org>)
utilman.exe exploit (Iván Rodriguez Almuiña <kralor@...omputer.net>)
Re: Moodle XSS Vulnerability (Martin Dougiamas <martin@...dle.com>)
Re: MSOE Javascript Execution Vulnerability ("Fabricio A. Angeletti" <hellmind@...ten.daemon.sh>)
Re: MSOE Javascript Execution Vulnerability (Monu <monu@...tshell.be>)
Re: Trend Micro Officescan for Win2k strange behaviour (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Mac OS X stores login/Keychain/FileVault passwords on disk (Ray Slakinski <ray.slakinski@...il.com>)
[Tool] HardTCP "Hardening TCP/IP" + SOURCE ("D'Amato Luigi" <admin@...uritywireless.info>)
Re: Mac OS X stores login/Keychain/FileVault passwords on disk (<johnny@...ckstuff.com>)
Re: White Paper: 0x00 vs ASP file upload scripts (Martin Eiszner <martin@...sec.org>)
Re: Norton AntiVirus Denial Of Service Vulnerability [Part: !!!] (Bipin Gautam <visitbipin@...mail.com>)

July 18 (2 messages)

Re: Hotmail Cross Site Scripting Vulnerability ("Andrew Hunter" <andiroohunter@....com>)
What A Drag ("http-equiv@...ite.com" <1@...ware.com>)

July 19 (15 messages)

Mozilla Bug Isn't So Bad (Paul <paul@...yhats.cjb.net>)
Re: Mac OS X stores login/Keychain/FileVault passwords on disk ("Kurt Seifried" <bt@...fried.org>)
Re: Microsoft and Security (Lucas Holt <luke@...lishgames.com>)
RE: [Full-Disclosure] Re: IE Shell URI Download and Execute, POC ("Ferruh Mavituna" <ferruh@...ituna.com>)
[SECURITY] [DSA 529-1] New netkit-telnet-ssl package fixes format string vulnerability (Matt Zimmerman <mdz@...ian.org>)
[SECURITY] [DSA 528-1] New ethereal packages fix denial of service (Matt Zimmerman <mdz@...ian.org>)
RE: The Impact of RFC Guidelines on DNS Spoofing Attacks (have2Banonymous <a637831@...oo.com>)
[SECURITY] [DSA 530-1] New l2tpd packages fix buffer overflow (Matt Zimmerman <mdz@...ian.org>)
new utilman.exe exploit (allinone remote exploitation) (Iván Rodriguez Almuiña <kralor@...omputer.net>)
[waraxe-2004-SA#036 - Multiple security holes in PhpNuke - part 3] (Janek Vind <come2waraxe@...oo.com>)
Re: Mac OS X stores login/Keychain/FileVault passwords on disk (Chris Boyd <cboyd@...mopartners.com>)
Re: Mac OS X stores login/Keychain/FileVault passwords on disk (James Goodlet <J.S.Goodlet@...sex.ac.uk>)
Re: Mozilla Bug Isn't So Bad (Bill <bill@...tracon.com>)
Re: PHP BB bug (Micheal Cottingham <webmaster@...healcottingham.com>)
Buffer overflow in Whisper FTP Surfer 1.0.7 (Komrade <giocasati@...erfree.it>)

July 20 (12 messages)

Artmedic kleinanzeigen include vulnerability (Francisco Alisson <dominusvis@...ck21.com.br>)
OpenServer 5.0.6 OpenServer 5.0.7 : MMDF Various buffer overflows and other security issues (please_reply_to_security@....com)
RE: Mac OS X stores login/Keychain/FileVault passwords on disk ("Michael Shirk" <shirkdog_linux@...mail.com>)
[FLSA-2004:1324] Updated libxml2 resolves security vulnerabilities (fedora-legacy-announce@...hat.com)
[FLSA-2004:1734] Updated mailman resolves security vulnerability (fedora-legacy-announce@...hat.com)
[FLSA-2004:1734] Updated mailman resolves security vulnerability -reissue to fix url- (fedora-legacy-announce@...hat.com)
More Webserver / IE Exploits ("Hubbard, Dan" <dhubbard@...sense.com>)
PhpBB HTTP Response Splitting & Cross Site Scripting vulnerabilities (Ory Segal <ory.segal@...ctuminc.com>)
Re: More Webserver / IE Exploits (Benjamin Franz <snowhare@...ongo.org>)
Inappropriate methods exposed in XML -what's the essence? (<portsmut@...igator.lv>)
Denial of Service vulnerability in several Lexmark HTTP servers ("Peter Kruse" <pkr@...s.dk>)
dos_in_file_share_2.6 (nekd0 <nekd0@...bler.ru>)

July 21 (1 message)

mi2g - fud, lies and libel (<not-mi2g@...hmail.com>)

July 22 (14 messages)

Re: Denial of Service vulnerability in several Lexmark HTTP servers (Eric Sesterhenn / snakebyte <snakebyte@....de>)
Bug@...shFTPd ("CoolICE" <CoolICE@...na.com>)
Denial of Service in Conceptronic CADSLR1 Router (Administrador de 'Shell Security' <admin@...llsec.net>)
DOS@...amiHTTPd ("CoolICE" <CoolICE@...na.com>)
Physical access exploit: Apple iTunes Visualiser disables screen lock (Adam Q <aqsalter@...tnet.com.au>)
Samba 3.x swat preauthentication buffer overflow ("Evgeny Demidov" <demidov@...g.net>)
Security Release - Samba 3.0.5 and 2.2.10 ("Gerald (Jerry) Carter" <jerry@...ba.org>)
[OpenPKG-SA-2004.033] OpenPKG Security Advisory (samba) (OpenPKG <openpkg@...npkg.org>)
[OpenPKG-SA-2004.034] OpenPKG Security Advisory (php) (OpenPKG <openpkg@...npkg.org>)
Comcast(tm) Email Manager allows arbitrary java and activex code execution ("Michael Scheidell" <scheidell@...nap.net>)
[CLA-2004:851] Conectiva Security Announcement - samba (Conectiva Updates <secure@...ectiva.com.br>)
SWAT PreAuthorization PoC (bugtraq@...ondsecurity.com)
@stake advisory: HP dced Remote Command Execution Multiple OSes ("Advisories" <advisories@...take.com>)
TSSA-2004-014 - samba (tinysofa Security Team <security@...ysofa.org>)

July 23 (13 messages)

MDKSA-2004:071 - Updated samba packages fix vulnerability in SWAT, samba-server. (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Forward:FullDisclosure/IE - Possible Address Spoofing (Liu Die Yu <liudieyu@...rella.name>)
[SECURITY] [DSA 533-1] New courier packages fix cross-site scripting vulnerability (Matt Zimmerman <mdz@...ian.org>)
SUSE Security Announcement: samba (SUSE-SA:2004:022) (Thomas Biege <thomas@...e.de>)
[SECURITY] [DSA 534-1] New mailreader packages fix directory traversal vulnerability (Matt Zimmerman <mdz@...ian.org>)
mi2g attacks "so-called" security sites ("Rob Rosenberger" <Rob@...ths.com>)
OpenServer 5.0.7 : Mozilla Multiple issues (please_reply_to_security@....com)
Apache 1.3.x mod_userdir Exploit (wgetusr.c) (John Bissell <monkey321_1@...mail.com>)
eSafe: Could this be exploited? (Hugo van der Kooij <hvdkooij@...derkooij.org>)
LNSA-#2004-0015: buffer overflow in samba (Jul, 23 2004) (Vincenzo Ciaglia <ciaglia@...wosix.org>)
APC Security Advisory � Denial of Service Vulnerability with PowerChuteBusinessEdition (<security.advisory@...c.com>)
FW: [Full-Disclosure] Progress and Challenges ("{tonyFelice}" <tony@...ckcomm.com>)
[security bulletin] SSRT4773 HP-UX xfs and stmkfont remote unauthorized access ("Boren, Rich (SSRT)" <rich.boren@...com>)

July 24 (11 messages)

LNSA-#2004-0016: Multiple problems in Ethereal 0.10.4 (Jul, 23 2004) (Vincenzo Ciaglia <ciaglia@...wosix.org>)
EasyWeb FileManager Directory Traversal (sullo@...t.net)
Re: Comcast(tm) Email Manager allows arbitrary java and activex code execution (Marc Schoenefeld <schonef@...-muenster.de>)
eSeSIX Thintune thin client multiple vulnerabilities ("Loss, Dirk" <Dirk.Loss@...consult.net>)
Re: eSafe: Could this be exploited? (Nick FitzGerald <nick@...us-l.demon.co.uk>)
MS SMS DOS Proof-of-concept code and Snort sig (<wang@...dyresponse.org>)
Re: eSafe: Could this be exploited? ("Oliver@...yhat.de" <Oliver@...yhat.de>)
Re: DoS against Domino 6.5.1 (Andreas Klein <Andreas.C.Klein@...sik.uni-wuerzburg.de>)
Re: Mac OS X stores login/Keychain/FileVault passwords on disk (Adi Kriegisch <adi@...tuwien.ac.at>)
Re: eSafe: Could this be exploited? (3APA3A <3APA3A@...URITY.NNOV.RU>)
Easyins Stadtportal (Francisco Alisson <dominusvis@...ck21.com.br>)

July 25 (1 message)

RE: RE: Unchecked buffer in mstask.dll ("Polazzo Justin" <Justin.Polazzo@...ilities.gatech.edu>)

July 26 (11 messages)

Mozilla Firefox Certificate Spoofing ("E.Kellinis" <me@...her.org.uk>)
ASPRunner Multiple Vulnerabilities ("Ferruh Mavituna" <ferruh@...ituna.com>)
TSL-2004-0039 - multi (Trustix Security Advisor <tsl@...stix.org>)
Linux Netwosix Bugzilla - Bugtracking System (Vincenzo Ciaglia <ciaglia@...wosix.org>)
QUESTION ("Alex Mega" <korund@...mail.com>)
Re: EasyWeb FileManager Directory Traversal (Noam Rathaus <noamr@...ondsecurity.com>)
Re: eSafe: Could this be exploited? ("Andreas Constantinides (MegaHz)" <megahz@...ahz.org>)
ASPRunner Multiple Vulnerabilities ("Ferruh Mavituna" <ferruh@...ituna.com>)
Re: eSafe: Could this be exploited? (MegaHz <megahz@...il.com>)
NucleusCMS 3.01 SQL Injection Vulnerability (<acidbits@...mail.com>)
CVS woes: .cvspass (Chiaki <ishikawa@...rim.or.jp>)

July 27 (11 messages)

OSX Panther Internet Connect - Local root (<br00t@...eyonder.co.uk>)
ASPRunner Multiple Vulnerabilities ("Ferruh Mavituna" <ferruh@...ituna.com>)
[security bulletin] SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access ("Boren, Rich (SSRT)" <rich.boren@...com>)
IRM 009: RiSearch and RiSearch ProPro are vulnerable to open FTP/HTTP proxy, directory listings and file disclosure vuln… ("IRM Advisories" <advisories@...plc.com…)
Re: Mozilla Firefox Certificate Spoofing (Chris Brown <chris@...etex.com>)
[SECURITY] [DSA 532-2] New libapache-mod-ssl packages fix multiple vulnerabilities (Matt Zimmerman <mdz@...ian.org>)
Re: CVS woes: .cvspass (Valdis.Kletnieks@...edu)
Re: QUESTION (Viktor Larionov <viktor@...net.ee>)
RE: Forward:FullDisclosure/IE - Possible Address Spoofing (Chenghuai Lu <luchenghuai@...oo.com>)
Re: eSafe: Could this be exploited? (Hugo van der Kooij <hvdkooij@...derkooij.org>)
Re: CVS woes: .cvspass ("Greg A. Woods" <woods@...rd.com>)

July 28 (13 messages)

Re: [ GLSA 200407-20 ] Subversion: Vulnerability in mod_authz_svn (Jack Repenning <jrepenning@...lab.net>)
Pavuk Digest Authentication Buffer Overflow ("mattmurphy@...rr.com" <mattmurphy@...rr.com>)
[Paper] Small XSS Paper ("Ferruh Mavituna" <ferruh@...ituna.com>)
Re: Crash IE with 11 bytes ;) ("Berend-Jan Wever" <skylined@...p.tudelft.nl>)
[CLA-2004:852] Conectiva Security Announcement - kernel (Conectiva Updates <secure@...ectiva.com.br>)
[Paper] Small XSS Paper ("Ferruh Mavituna" <ferruh@...ituna.com>)
WASC Releases Web Security Threat Classification (Jeremiah Grossman <jeremiah@...tehatsec.com>)
MDKSA-2004:075 - Updated mod_ssl packages fix potential vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Aladdin response regarding eSafe (Ofer Elzam <ofere@...mail.com>)
Re: Internet Explorer Remote Null Pointer Crash(mshtml.dll) ("Berend-Jan Wever" <skylined@...p.tudelft.nl>)
MDKSA-2004:072 - Updated postgresql packages fix buffer overflow in odbc driver (Mandrake Linux Security Team <security@...ux-mandrake.com>)
MDKSA-2004:074 - Updated webmin packages correct remote attacker vulnerabilities (Mandrake Linux Security Team <security@...ux-mandrake.com>)
SoX buffer overflows when handling .WAV files (Ulf Härnhammar <Ulf.Harnhammar.9485@...dent.uu.se>)

July 29 (16 messages)

MDKSA-2004:073 - Updated XFree86 packages fix issue with xdm opening random sockets (Mandrake Linux Security Team <security@...ux-mandrake.com>)
UnixWare 7.1.3up : tcpdump several vulnerabilities in tcpdump. (please_reply_to_security@....com)
AntiBoard <= 0.7.2 XSS/SQL Injection (Josh Gilmour <gilmourj@...il.com>)
Re: eSafe: Could this be exploited? (Kev Ford <kev@...d.co.uk>)
Re: CVS woes: .cvspass (Andreas Beck <becka-list-bugtraq@...atec.de>)
OpenServer 5.0.6 OpenServer 5.0.7 : Multiple Vulnerabilities in Sendmail (please_reply_to_security@....com)
Comersus Shopping Cart Undisclosed Functionality (evol@...ner.halo.nu)
Linpha 0.9.4: authentication bypass (Rubén Molina <ruben@...a.edu.co>)
lostBook v1.1 Javascript Execution (Joseph Moniz <r3d_5pik3@...oo.com>)
RE: Forward:FullDisclosure/IE - Possible Address Spoofing ("Michael Silk" <michaels@....com.au>)
Shaft DDOS (<phrack@....net>)
Re: [gentoo-announce] [ GLSA 200407-21 ] Samba: Multiple buffer overflows (Radu Filip <radu@...ips.ro>)
MDKSA-2004:076 - Updated sox packages fix buffer overflows with malicious .wav files (Mandrake Linux Security Team <security@...ux-mandrake.com>)
RE: Forward:FullDisclosure/IE - Possible Address Spoofing (Chenghuai Lu <luchenghuai@...oo.com>)
DansGuardian Hex Encoding URL Banned Extension Filter Bypass Vulnerability (Rubén Molina <ruben@...a.edu.co>)
File downloads in Opera at known locations ("Rohit Dube" <rohit@...tikalsolutions.com>)

July 30 (11 messages)

Re: OpenServer 5.0.6 OpenServer 5.0.7 : Multiple Vulnerabilities in Sendmail (George Capehart <gwc@....org>)
Re: Re: OpenServer 5.0.6 OpenServer 5.0.7 : Multiple Vulnerabilities in Sendmail (Frank Knobbe <frank@...bbe.us>)
Jaws 0.4: authentication bypass (Rubén Molina <ruben@...a.edu.co>)
Re: Aladdin response regarding eSafe (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Re: OpenServer 5.0.6 OpenServer 5.0.7 : Multiple Vulnerabilities in Sendmail (Barry Fitzgerald <bkfsec@....lonestar.org>)
[CLA-2004:854] Conectiva Security Announcement - samba (Conectiva Updates <secure@...ectiva.com.br>)
MDKSA-2004:077 - Updated wv packages fix vulnerability (Mandrake Linux Security Team <security@...ux-mandrake.com>)
Re: Aladdin response regarding eSafe (Aleksandar Milivojevic <amilivojevic@....ca>)
Citadel/UX Remote DoS Vulnerability (CoKi <coki@...ystem.com.ar>)
Re: File downloads in Opera at known locations (Josh Tolley <josh@...ntreeinc.com>)
WpQuiz Gain Admin Rightd Exploit found (jonathan tough <j@...impressions.com>)

July 31 (17 messages)

[CLA-2004:855] Conectiva Security Announcement - sox (Conectiva Updates <secure@...ectiva.com.br>)
Fusion News Yet Another Unauthorized Account Addition Vulnerability (Joseph Moniz <r3d_5pik3@...oo.com>)
UnixWare 7.1.3 Open UNIX 8.0.0 : Xsco contains a buffer overflow that could be exploited to gain root privileges. (please_reply_to_security@....com)
OpenServer 5.0.6 OpenServer 5.0.7 : Xsco contains a buffer overflow that could be exploited to gain root privileges. (please_reply_to_security@....com)
OpenServer 5.0.6 OpenServer 5.0.7 : OpenSSL Multiple Vulnerabilities (please_reply_to_security@....com)
OpenServer 5.0.6 OpenServer 5.0.7 : uudecode does not check for symlink or pipe (please_reply_to_security@....com)
Re: CVS woes: .cvspass (Delian Krustev <krustev@...stev.net>)
Fwd: New possible scam method : forged websites using XUL (Firefox) (David Ahmad <da@...urityfocus.com>)
Re: eSafe: Could this be exploited? (Nick FitzGerald <nick@...us-l.demon.co.uk>)
[VSA0402] OpenFTPD format string vulnerability ("VOID.AT Security" <crew@...d.at>)
Re: Mozilla Firefox Certificate Spoofing (Stephen Samuel <samuel@...reen.com>)
Re: Shaft DDOS (mohr@...erity.net)
Re: Re: Mozilla Firefox Certificate Spoofing (Juan Carlos Navea <loconet@...il.com>)
Re: Re: Mozilla Firefox Certificate Spoofing (Will Beers <whbeers@...o.ncsu.edu>)
Re: New possible scam method : forged websites using XUL (Firefox) ("Marc" <md@...ensa.com>)
Sonicwall diag tool includes VPN credentlials (Milton Lopez <mlopez@...tc.org>)
[EXPL] (MS04-022) Microsoft Windows XP Task Scheduler (.job) Universal Exploit (houseofdabus HOD <houseofdabus@...ox.ru>)

416 messages

Powered by blists - more mailing lists