full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2002/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 57	² 42	³ 15	⁴ 3
⁵ 30	⁶ 24	⁷ 19	⁸ 23	⁹ 16	¹⁰ 11	¹¹ 7
¹² 23	¹³ 33	¹⁴ 45	¹⁵ 119	¹⁶ 55	¹⁷ 24	¹⁸ 25
¹⁹ 33	²⁰ 25	²¹ 6	²² 10	²³ 18	²⁴ 13	²⁵ 34
²⁶ 22	²⁷ 56	²⁸ 36	²⁹ 18	³⁰ 7	³¹ 12

Messages by day:

August 1 (57 messages)

it's all about timing (tep at SDSC.EDU (Tom Perrine))
it's all about timing (csnow at deltadentalwa.com (Snow, Corey))
for the record... (Tru64 / Compaq) (dotslash at snosoft.com (KF))
[SECURITY] [DSA-138-1] Remote execution exploit in gallery (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
it's all about timing (fulldisclose at uuuppz.com (James Martin))
for the record... (Tru64 / Compaq) (dotslash at snosoft.com (KF))
/bin/su +Tru64 (dotslash at snosoft.com (KF))
It takes two to tango Re: OT: Snosoft vs HP (dufresne at winternet.com (Ron DuFresne))
it's all about timing (ericv at cruzio.com (Eric N. Valor))
it's all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
it's all about timing (jonathan at xcorps.net (Jonathan Rickman))
OT: Snosoft vs HP (jonathan at xcorps.net (Jonathan Rickman))
Fwd: Formal Response to HP (sert at snosoft.com (John Scimone))
Fwd: Formal Response to HP (dotslash at snosoft.com (KF))
A two way street: Re: It takes two to tango Re: OT: Snosoft vs HP (dufresne at winternet.com (Ron DuFresne))
Re: it's all about timing (coley at linus.mitre.org (Steven M. Christey))
RE: It takes two to tango (dufresne at winternet.com (Ron DuFresne))
Re: it's all about timing (adam at xwt.org (Adam Megacz))
OpenSSH trojan! (len at netsys.com (Len Rose))
Additional bugs in gallery (avart at gmx.de (avart@....de))
SuSE Security Announcement: wwwoffle (SuSE-SA:2002:029) (thomas at suse.de (Thomas Biege))
administrivia...duplicate messages (len at netsys.com (Len Rose))
Additional bugs in gallery (nikee at lux.wox.org (Nicola Fankhauser))
Re: it's all about timing (guninski at guninski.com (Georgi Guninski))
administrivia...duplicate messages (raju at linux-delhi.org (Raju Mathur))
[SECURITY] [DSA 139-1] New super packages fix local root exploit (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA 140-1] New libpng packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
RE: it's all about timing (Richard.Scott at BestBuy.com (Scott, Richard))
RE: It takes two to tango (o'neil.brooke at lmco.com (Brooke, O'neil (EXP)))
Re: it's all about timing (SJames at iDefense.com (Sunil James))
OpenSSH trojan! I KNOW WHO DID IT! (evrim at core.gen.tr (evrim@...e.gen.tr))
it's all about timing (cerebus at sackheads.org (Timothy J.Miller))
RE: It takes two to tango (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
RE: It takes two to tango (bfans at yahoo.com (Bryan Fansler))
OT: Snosoft vs HP (tep at SDSC.EDU (Tom Perrine))
Sun RPC xdr_array vulnerability (agent99 at sgi.com (SGI Security Coordinator))
Re: it's all about timing (tep at SDSC.EDU (Tom Perrine))
FW: Windows 2000 Service Pack 3 now available. (lsawyer at gci.com (Leif Sawyer))
RE: it's all about timing (wasn't that a John Denver song?) (gibby at tabasco.net (Gibby McCaleb))
it's all about timing (ARouse at n2bb.com (Alan Rouse))
Re: it\'s all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
rpc.pcnfsd vulnerabilities on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Re: Additional bugs in gallery (bharat at menalto.com (Bharat Mediratta))
it's all about timing (rohnyjotton at hotmail.com (Rohny Jotton))
Re: it's all about timing (coley at linus.mitre.org (Steven M. Christey))
administrivia...duplicate messages (aleph1 at securityfocus.com (aleph1@...urityfocus.com))
Re: it's all about timing (cstefani at tideworks.com (Colin Stefani))
OpenSSH trojan! (simon at snosoft.com (ATD))
it's all about timing (Don at WeberOnTheWeb.com (Don))
OpenSSH trojan! (simon at snosoft.com (ATD))
it's all about timing (Gregory.Dunbar at CITIZENSBANK.com (Dunbar, Gregory))
it's all about timing (coley at linus.mitre.org (Steven M. Christey))
iPlanet vulnerabilities on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Re: it's all about timing (coley at linus.mitre.org (Steven M. Christey))
it's all about timing (looseduk at ductape.net (Joey Kelly))
Re: it's all about timing (coley at linus.mitre.org (Steven M. Christey))
iPlanet vulnerabilities on IRIX (agent99 at sgi.com (SGI Security Coordinator))

August 2 (42 messages)

Fw: Comment on DMCA, Security, and Vuln Reporting] (hggdh at attbi.com (HggdH))
administrivia...duplicate messages (len at netsys.com (Len Rose))
RE: Windows 2000 Service Pack 3 now available. (nick at virus-l.demon.co.uk (Nick FitzGerald))
VulnWatch.Org Release (steve at vulnwatch.org (Steve))
OT: CNET article magically re-appears (len at netsys.com (Len Rose))
administrivia...duplicate messages (measl at mfn.org (Alif The Terrible))
VulnWatch.Org Release (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
VulnWatch.Org Release (hellnbak at nmrc.org (hellNbak))
it's all about timing (dufresne at winternet.com (Ron DuFresne))
VulnWatch.Org Release (jonathan at xcorps.net (Jonathan Rickman))
OpenSSH and OpenSSL vulnerabilities (raju at linux-delhi.org (Raju Mathur))
OpenSSL Vulnerabilities (raju at linux-delhi.org (Raju Mathur))
it's all about timing (coley at linus.mitre.org (Steven M. Christey))
it's all about timing (coley at linus.mitre.org (Steven M. Christey))
OpenSSL Vulnerabilities (pb at bieringer.de (Peter Bieringer))
it's all about timing (listuser at seifried.org (Kurt Seifried))
RE: Windows 2000 Service Pack 3 now available. (guninski at guninski.com (Georgi Guninski))
More Evil from MS (fwd) (measl at mfn.org (Alif The Terrible))
[SECURITY] [DSA 141-1] New mpack packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
More Evil from MS (fwd) (lorenzo at muug.it (lorenzo))
it's all about timing (evrim at core.gen.tr (Evrim ULU))
lame vx2.dll (len at netsys.com (Len Rose))
Re: it's all about timing (guninski at guninski.com (Georgi Guninski))
lame vx2.dll (nick at virus-l.demon.co.uk (Nick FitzGerald))
VulnWatch.Org Release (pmeunier at cerias.purdue.edu (Pascal Meunier))
VulnWatch.Org Release (pmeunier at cerias.purdue.edu (Pascal Meunier))
OpenSSL problem: what about apache2 binaries? (pbieringer at aerasec.de (Dr. Peter Bieringer))
RE: Windows 2000 Service Pack 3 now available. (nick at virus-l.demon.co.uk (Nick FitzGerald))
it's all about timing (juliao.duartenn at esdata.pt (Juliao Duartenn))
More Evil from MS (fwd) (krweiske at infocentricity.com (Kurt Weiske))
lame vx2.dll (juliao.duartenn at esdata.pt (Juliao Duartenn))
it\'s all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
VulnWatch.Org Release (coastalhope at hushmail.com (coastalhope@...hmail.com))
Re: it\'s all about timing (coley at linus.mitre.org (Steven M. Christey))
Re: it\'s all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
administrivia...duplicate messages (Billt at Mahagonny.com (Bill Thompson))
For those who have to maintain Windows systems (pauls at utdallas.edu (Schmehl, Paul L))
Re: it\'s all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
Re: it\'s all about timing (coley at linus.mitre.org (Steven M. Christey))
Xitami Connection Flood Server Termination Vulnerability (mattmurphy at kc.rr.com (Matthew Murphy))
Xitami Connection Flood Server Termination Vulnerability (mattmurphy at kc.rr.com (Matthew Murphy))
[SEC-LABS] Win32 Device Drivers Communication Vulnerabilities + PoC for Symantec Norton AntiVirus '2002 (probably all v… (noreply at sec-labs.hack.pl ([SEC-LABS …)

August 3 (15 messages)

Re: it\'s all about timing (ras at slartibartfast.magrathea.com (Robert A. Seace))
Re: it\'s all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
Re: it\'s all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
Re: it\'s all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
Re: it\'s all about timing (dufresne at winternet.com (Ron DuFresne))
Kannel (WAP gateway) daemon "wapbox" segfaults (pb at bieringer.de (Peter Bieringer))
Kannel (WAP gateway) daemon "wapbox" segfaults (len at netsys.com (Len Rose))
"Free Hacker Manifest" (len at netsys.com (Len Rose))
Trivial injection and message spoof security mailing list archives (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
Trivial injection and message spoof security mailing list archives (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
Kannel (WAP gateway) daemon "wapbox" segfaults (pb at bieringer.de (Peter Bieringer))
RE: it's all about [timing] responsibility (OgleR at thmulti.com (Ogle Ron (Rennes)))
"Free Hacker Manifest" (steve at entrenchtech.com (Steve))
MSN Groups makes cross site scripting easy (obscure at eyeonsecurity.net (Obscure))
MSN Groups makes cross site scripting easy (blueboar at thievco.com (Blue Boar))

August 4 (3 messages)

RE: It takes two to tango (despot at crosswinds.net (despot@...sswinds.net))
Clarification on Xitami DoS (mattmurphy at kc.rr.com (Matthew Murphy))
Clarification on Xitami DoS (mattmurphy at kc.rr.com (Matthew Murphy))

August 5 (30 messages)

Re: Clarification on Xitami DoS (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
Re: Clarification on Xitami DoS (mattmurphy at kc.rr.com (Matthew Murphy))
Re: Clarification on Xitami DoS (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
AOL Instant Messenger - Away Setting and Snoopers (mattmurphy at kc.rr.com (Matthew Murphy))
AOL Instant Messenger - Away Setting and Snoopers (pinskia at physics.uc.edu (Andrew Pinski))
AOL Instant Messenger - Away Setting and Snoopers (jonathan at xcorps.net (Jonathan Rickman))
Re: AOL Instant Messenger - Away Setting and Snoopers (mattmurphy at kc.rr.com (Matthew Murphy))
OpenSSL Vulnerabilities (dimitry at al.org.ua (Dmitry Alyabyev))
OpenSSL Vulnerabilities (raju at linux-delhi.org (Raju Mathur))
OpenSSL problem: what about apache2 binaries? (pbieringer at aerasec.de (Dr. Peter Bieringer))
Re: AOL Instant Messenger - Away Setting and Snoopers (fyreguy at rivetgeek.com (Remington Winters))
Re: AOL Instant Messenger - Away Setting and Snoopers (cyberfrog at core5.net (Mark Shirley))
[SECURITY] [DSA 140-2] New libpng packages fix potential buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)
OpenSSL Vulnerabilities (dimitry at al.org.ua (Dmitry Alyabyev))
[SECURITY] [DSA 142-1] New OpenAFS packages fix integer overflow bug (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
FW: Windows 2000 Service Pack 3 now available. (steve at videogroup.com (Steve))
Software vulnerability reporting survey (thavana at ees2.oulu.fi (Tiina Havana))
In regards to ... http://online.securityfocus.com/bid/5382 (dotslash at snosoft.com (KF))
it's all about timing (dotslash at snosoft.com (KF))
it's all about timing (simon at snosoft.com (ATD))
Re: Clarification on Xitami DoS (coley at linus.mitre.org (Steven M. Christey))
it's all about timing (simon at snosoft.com (ATD))
FW: Windows 2000 Service Pack 3 now available. (thomas at northernsecurity.net (Thomas Sjögren))
Re: it\'s all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
it's all about timing (dotslash at snosoft.com (KF))
Re: Clarification on Xitami DoS (guninski at guninski.com (Georgi Guninski))
Re: Clarification on Xitami DoS (mattmurphy at kc.rr.com (Matthew Murphy))
[SECURITY] [DSA 143-1] New krb5 packages fix integer overflow bug (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Unchecked Buffer in Jana Web Server (mattmurphy at kc.rr.com (Matthew Murphy))
Unchecked Buffer in Jana Web Server (mattmurphy at kc.rr.com (Matthew Murphy))

August 6 (24 messages)

FW: Windows 2000 Service Pack 3 now available. (briareos at otherlands.net (PJ))
Security Update: [CSSA-2002-034.0] Linux: buffer overflow in multiple DNS resolver libraries (security at caldera.com (security@...dera.com))
Re: it\'s all about timing (coley at linus.mitre.org (Steven M. Christey))
Re: Clarification on Xitami DoS (coley at linus.mitre.org (Steven M. Christey))
Re: it\'s all about timing (coley at linus.mitre.org (Steven M. Christey))
Re: it\'s all about timing (coley at linus.mitre.org (Steven M. Christey))
JanaWeb (mattmurphy at kc.rr.com (Matthew Murphy))
Re: it\'s all about timing (coley at linus.mitre.org (Steven M. Christey))
Re: it\'s all about timing (coley at linus.mitre.org (Steven M. Christey))
Re: it\'s all about timing (dufresne at winternet.com (Ron DuFresne))
Cross-Site Scripting Attacks Possible At Multiple Webspace Providers (mattmurphy at kc.rr.com (Matthew Murphy))
Cross-Site Scripting Attacks Possible At Multiple Webspace Provid ers (mattmurphy at kc.rr.com (Matthew Murphy))
JanaWeb (mattmurphy at kc.rr.com (Matthew Murphy))
Cross-Site Scripting Attacks Possible At Multiple Webspace Provid ers (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
[SECURITY] [DSA 144-1] New wwwoffle packages fix security related problems (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
FW: Windows 2000 Service Pack 3 now available. (steve at videogroup.com (Steve))
FW: Windows 2000 Service Pack 3 now available. (ARouse at n2bb.com (Alan Rouse))
FW: Windows 2000 Service Pack 3 now available. (jonathan at xcorps.net (Jonathan Rickman))
FW: Windows 2000 Service Pack 3 now available. (briareos at otherlands.net (PJ))
Cross-Site Scripting Attacks Possible At Multiple Webspace Provid ers (mattmurphy at kc.rr.com (Matthew Murphy))
FW: Windows 2000 Service Pack 3 now (listuser at gaugusch.at (Markus Gaugusch))
FW: Windows 2000 Service Pack 3 now available. (steve at videogroup.com (Steve))
FW: Windows 2000 Service Pack 3 now (ARouse at n2bb.com (Alan Rouse))
Security Update: [CSSA-2002-034.0] Linux: buffer overflow in multiple DNS resolver libraries (security at caldera.com (security@...dera.com))

August 7 (19 messages)

FW: Windows 2000 Service Pack 3 now available. (asd at suespammers.org (Anthony DeRobertis))
MDKSA-2002:046-1 - openssl update (security at linux-mandrake.com (Mandrake Linux Security Team))
FW: Windows 2000 Service Pack 3 now (herman at ofzo.nl (Herman))
FW: Windows 2000 Service Pack 3 now (mike at sentex.net (Mike Tancsa))
FW: Windows 2000 Service Pack 3 now (mike at sentex.net (Mike Tancsa))
FW: Windows 2000 Service Pack 3 now (asd at suespammers.org (Anthony DeRobertis))
FW: Windows 2000 Service Pack 3 now availab le. (csnow at deltadentalwa.com (Snow, Corey))
RE: Windows 2000 Service Pack 3 now available. (javier at msmc.com (Javier Sanchez (Information Systems)))
[SECURITY] [DSA 145-1] New tinyproxy packages fix security vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)
IDEFENSE PAYING $$$ FOR VULNS (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
Re: it\'s all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
Re: it\'s all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
Re: it\'s all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
IDEFENSE PAYING $$$ FOR VULNS (securityguru at hushmail.com (securityguru@...hmail.com))
IDEFENSE PAYING $$$ FOR VULNS (guninski at guninski.com (Georgi Guninski))
IDEFENSE PAYING $$$ FOR VULNS (bacano at esoterica.pt (bacano))
Eudora attachment spoof (psz at maths.usyd.edu.au (Paul Szabo))
BIND vulnerabilities in IRIX named (agent99 at sgi.com (SGI Security Coordinator))
Eudora attachment spoof (len at netsys.com (Len Rose))

August 8 (23 messages)

Eudora attachment spoof (psz at maths.usyd.edu.au (Paul Szabo))
Re: it\'s all about timing (choose.a.username at hushmail.com (choose.a.username@...hmail.com))
iDEFENSE Security Advisory: iSCSI Default Configuration File Settings (dendler at idefense.com (David Endler))
[SECURITY] [DSA 146-1] New dietlibc packages fix integer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
David Shiner/ITM/DCC/DCX is out of the office. (ds187 at daimlerchrysler.com (ds187@...mlerchrysler.com))
David Shiner/ITM/DCC/DCX is out of the office. (lists.netsys.com at jscript.dk (Thor Larholm))
David Shiner/ITM/DCC/DCX is out of the office. (johnc at grok.org.uk (John Cartwright))
Out of the office replies. (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
Out of the office replies. (bart.gommers at nec-computers.com (Gommers, Bart))
Out of the office replies. (lwc at vapid.ath.cx (Larry W. Cashdollar))
iDEFENSE Security Advisory: iSCSI Default Configuration File Settings (dendler at idefense.com (David Endler))
David Shiner/ITM/DCC/DCX is out of the office. (briareos at otherlands.net (PJ))
David Shiner/ITM/DCC/DCX is out of the office. (raju at linux-delhi.org (Raju Mathur))
@stake advisory: WS_FTP SITE CPWD Buffer Overflow vulnerability (a080802-1) (advisories at atstake.com (@stake advisories))
Out of the office replies. (steve at videogroup.com (Steve))
David Shiner/ITM/DCC/DCX is out of the offi ce. (JLETOUX at bouyguestelecom.fr (JLETOUX@...yguestelecom.fr))
Out of the office replies. (michaelr at cisco.com (Michael Reilly))
[SECURITY] [DSA 146-2] New dietlibc packages fix integer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
David Shiner/ITM/DCC/DCX is out of the offi ce. [so OT it's not even funny ] (SMoyer at rgare.com (Moyer, Shawn))
Re: [VulnWatch] iDEFENSE Security Advisory: iSCSI Default Configuration File Settings (mcaudill at cisco.com (Mike Caudill))
OT: date formats (full-disclosure at ifokr.org (Brian Hatch))
David Shiner/ITM/DCC/DCX is out of the offi ce. [so OT it's not even funny ] (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
OT: date formats (coley at linus.mitre.org (Steven M. Christey))

August 9 (16 messages)

Cross-Site Scripting Issues in Falcon Web Server (mattmurphy at kc.rr.com (Matthew Murphy))
Security Update: [CSSA-2002-035.0] Linux: local off by one in cvsd (security at caldera.com (security@...dera.com))
MDKSA-2002:047 - util-linux update (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2002:048 - mod_ssl update (security at linux-mandrake.com (Mandrake Linux Security Team))
[SECURITY] [DSA 147-1] New mailman packages fix cross-site scripting problem (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debia…)
EEYE: Macromedia Shockwave Flash Malformed Header Overflow (marc at eeye.com (Marc Maiffret))
EEYE: Sun(TM) ONE / iPlanet Web Server 4.1 and 6.0 Remote Buffer Overflow (marc at eeye.com (Marc Maiffret))
QUESTION - RE: Security Update: [CSSA-2002-035.0] Linux: local off by one in cvsd (MAlvarez at iss.net (Alvarez, Michelle (ISS Atlanta)))
Recall: QUESTION - RE: Security Update: [CSSA-2002-035.0] Linux: local off by one in cvsd (MAlvarez at iss.net (Alvarez, Michelle (ISS Atlanta)))
Recall: QUESTION - RE: Security Update: [CSSA-2002-035.0] Linux: local off by one in cvsd (hellnbak at nmrc.org (hellNbak))
Recall: QUESTION - RE: Security Update: [CSSA-2002-035.0] Linux: local off by one in cvsd (jluster at clusterfsck.net (Jonas M Luster))
Recall: QUESTION - RE: Security Update: [CSSA-2002-035.0] Linux: local off by one in cvsd (hellnbak at nmrc.org (hellNbak))
Recall: QUESTION - RE: Security Update: [C (nick at virus-l.demon.co.uk (Nick FitzGerald))
Apache 2.0 vulnerability affects non-Unix platforms (mjc at apache.org (Mark J Cox))
IE SSL Vulnerability (Bill.Clark at umb.com (Clark, Bill W.))
Local Root Exploit (gobbles at hushmail.com (gobbles@...hmail.com))

August 10 (11 messages)

Abcnews.com - XSS in Stories by ZIP Code Feature (mattmurphy at kc.rr.com (Matthew Murphy))
List Charter (johnc at grok.org.uk (John Cartwright))
Local Root Exploit (simon at snosoft.com (ATD))
Local Root Exploit (johns at tampabay.rr.com (John))
Local Root Exploit (lupe at lupe-christoph.de (Lupe Christoph))
Local Root Exploit (pauls at utdallas.edu (Schmehl, Paul L))
Local Root Exploit (dotslash at snosoft.com (KF))
Local Root Exploit (draht at suse.de (Roman Drahtmueller))
IMAP4rev1 2000.283 allows access to system files (fd at rshell.org (Guy Cohen))
more about IMAP (fd at rshell.org (Guy Cohen))
IMAP4rev1 2000.283 allows access to system files (tharbad at kaotik.org (Joao Gouveia))

August 11 (7 messages)

#PHRACK HIGH COUNCIL SPEAKS (phrackbitch at bloodbath.co.uk (phrackbitch@...odbath.co.uk))
Re: IMAP4rev1 2000.283 allows access to system files (fd at rshell.org (Guy Cohen))
#PHRACK HIGH COUNCIL SPEAKS (ulfh at Update.UU.SE (Ulf H{rnhammar))
FYA: [phrackbitch@...odbath.co.uk: #PHRACK HIGH COUNCIL SPEAKS] (lupe at lupe-christoph.de (Lupe Christoph))
Re: IMAP4rev1 2000.283 allows access to system files (listuser at seifried.org (Kurt Seifried))
OpenBSD Security Advisory: Select Boundary Condition (provos at citi.umich.edu (Niels Provos))
Re: IMAP4rev1 2000.283 allows access to system files (dufresne at winternet.com (Ron DuFresne))

August 12 (23 messages)

#PHRACK HIGH COUNCIL SPEAKS (phrackbitch at bloodbath.co.uk (phrackbitch@...odbath.co.uk))
Exploits Contributor Program (ecp at imoolah.hotusa.org (iMoolah))
[#phrack] commercial sshd remote root (beating ISS) (phrackbitch at bloodbath.co.uk (phrackbitch@...odbath.co.uk))
[SECURITY] [DSA 148-1] New hylafax packages fix security related problems (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.o…)
#PHRACK HIGH COUNCIL SPEAKS (fd at rshell.org (Guy Cohen))
#PHRACK HIGH COUNCIL SPEAKS (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
#PHRACK HIGH COUNCIL SPEAKS (benfell at greybeard95a.com (David Benfell))
#PHRACK HIGH COUNCIL SPEAKS (raymond at dyn.org (Raymond Morsman))
#PHRACK HIGH COUNCIL SPEAKS (raymond at dyn.org (Raymond Morsman))
#PHRACK HIGH COUNCIL SPEAKS (lists.netsys.com at jscript.dk (Thor Larholm))
Local Root Exploit (steve at videogroup.com (Steve))
Local Root Exploit (ARouse at n2bb.com (Alan Rouse))
Exploits Contributor Program (jonathan at xcorps.net (Jonathan Rickman))
[#phrack] commercial sshd remote root (beating ISS) (jonathan at xcorps.net (Jonathan Rickman))
Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
#PHRACK HIGH COUNCIL SPEAKS (dotslash at snosoft.com (KF))
Exploits Contributor Program (johns at tampabay.rr.com (John))
Exploits Contributor Program (shawn at tooterfish.com (Shawn))
SuSE Security Announcement: i4l (SuSE-SA:2002:030) (draht at suse.de (Roman Drahtmueller))
Exploits Contributor Program (hggdh at attbi.com (HggdH))
Fw: Exploits Contributor Program (shawn at tooterfish.com (Shawn))
Bulk Data Services (BDS) vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Fw: Exploits Contributor Program (jonathan at xcorps.net (Jonathan Rickman))

August 13 (33 messages)

FW: bay area security professional, $6.75/hr... Please read below ! (SMoyer at rgare.com (Moyer, Shawn))
Exploits Contributor Program (asd at suespammers.org (Anthony DeRobertis))
#PHRACK HIGH COUNCIL PROPHILE (nobody at remailer.privacy.at (Anonymous))
SAME LADY, DIFFERENT DRESS: Internet Explorer 6 (http-equiv at malware.com (http-equiv@...ite.com))
Exploits Contributor Program (ecp at imoolah.hotusa.org (iMoolah))
[SECURITY] [DSA 149-1] New glibc packages fix security related problems (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
mantisbt security flaw (tharbad at kaotik.org (Joao Gouveia))
#PHRACK HIGH COUNCIL PROPHILE (remailer at aarg.net (AARG! Anonymous))
Security Documentation (esecurityspecialist at hotmail.com (Monima Abrams))
Re: The Large-Scale Threat of Bad Data in DNS (guninski at guninski.com (Georgi Guninski))
Security Documentation (nigel.hardy at e-peopleserve.com (Hardy, Nigel))
Security Documentation (Ray.Percival at summit.fiserv.com (Percival, Ray))
Security Documentation (steve at videogroup.com (Steve))
HTML Email and stuff (nexus at patrol.i-way.co.uk (Nexus))
Security Documentation (josh.denvox at gmx.net (Joshua Denvox))
[SECURITY] [DSA 150-1] New interchange packages fix illegal file exposition (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
Multiple Vulnerabilities in CafeLog Weblog Package (mattmurphy at kc.rr.com (Matthew Murphy))
HTML Email and stuff (steve at videogroup.com (Steve))
(no subject) (capzlock at hushmail.com (capzlock@...hmail.com))
Security Documentation (esecurityspecialist at hotmail.com (Monima Abrams))
[SECURITY] [DSA 151-1] New xinetd packages fix local denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
HTML email (esecurityspecialist at hotmail.com (Monima Abrams))
[SECURITY] [DSA 152-1] New l2tpd packages adds better randomization (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
MEME156 + MS SQL BRUTE FORCE TEKNEEQ (memetic-engineer at hushmail.com (memetic-engineer@...hmail.com))
Local Root Exploit (ulfh at Update.UU.SE (Ulf H{rnhammar))
L-Forum XSS and upload spoofing (ulfh at update.uu.se (Ulf Harnhammar))
Pure-FTPd (contact at bia-security.com (Anthony LaMantia))
Oops (contact at bia-security.com (Anthony LaMantia))
PureFTP Mistake (contact at bia-security.com (Anthony LaMantia))
PureFTP Mistake (contact at bia-security.com (Anthony LaMantia))
Multiple Vulnerabilities in CafeLog Weblog Package (mattmurphy at kc.rr.com (Matthew Murphy))
mantisbt security flaw (tharbad at kaotik.org (Joao Gouveia))
Multiple Vulnerabilities in CafeLog Weblog Package (mattmurphy at kc.rr.com (Matthew Murphy))

August 14 (45 messages)

IRIX ftpd minor vulnerabilities (agent99 at sgi.com (SGI Security Coordinator))
MDKSA-2002:049 - libpng update (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2002:050 - glibc update (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: anonymous doesn't want to be rm-d by Phrack High Council (memetic-engineer at hushmail.com (memetic-engineer@...hmail.com))
Pure-FTPd (draht at suse.de (Roman Drahtmueller))
L-Forum Vulnerability - SQL Injection (mattmurphy at kc.rr.com (Matthew Murphy))
PureFTP Mistake (razvan.cosma at catv.telemach.ro (Razvan Cosma))
PureFTP Mistake (dufresne at winternet.com (Ron DuFresne))
Re: anonymous doesn't want to be rm-d by Phrack High Council (Ken at infosec101.org (Ken Pfeil))
Re: anonymous doesn't want to be rm-d by Ph rack High Council (nigel.hardy at e-peopleserve.com (Hardy, Nigel))
Re: anonymous doesn't want to be rm-d by Ph rack High Council (sockz at email.com (sockz loves you))
Local Root Exploit (ARouse at n2bb.com (Alan Rouse))
Re: anonymous doesn't want to be rm-d by Ph rack High Council (raymond at dyn.org (Raymond Morsman))
Re: anonymous doesn't want to be rm-d by Phrack High Council (ARouse at n2bb.com (Alan Rouse))
[SECURITY] [DSA 153-1] New mantis package fixes cross site code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.o…)
Re: anonymous doesn't want to be rm-d by Ph rack High Council (nigel.hardy at e-peopleserve.com (Hardy, Nigel))
OT SOLUTION (steve at videogroup.com (Steve))
OT SOLUTION (Ken at infosec101.org (Ken Pfeil))
Local Root Exploit (nc at stormvault.net (Nicolas Couture))
Cisco Security Advisory: Cisco Content Service Switch 11000 Series Web Management Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Res…)
#PHRACK HIGH COUNCIL SPEAKS (lists_full-disclosure at darkuncle.net (lists_full-disclosure@...kuncle.net))
Release : ComLog 1.0, a WIN32 command prompt logger (floydian_99 at yahoo.com (Floydman))
Re: anonymous doesn't want to be rm-d by Ph rack High Council (benfell at greybeard95a.com (David Benfell))
MAC address change on SGI Origin 3000 (agent99 at sgi.com (SGI Security Coordinator))
Acrobat Reader symlink vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Security Documentation (bacano at esoterica.pt (bacano))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (gobbles at hush.com (gobbles@...h.com))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (core at bokeoa.com (Charles Stevenson))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (dave at immunitysec.com (Dave Aitel))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (gobbles at hush.com (gobbles@...h.com))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (gobbles at hush.com (gobbles@...h.com))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (dave at immunitysec.com (Dave Aitel))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (core at bokeoa.com (Charles Stevenson))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (gobbles at hush.com (gobbles@...h.com))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (gem at rellim.com (Gary E. Miller))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (gem at rellim.com (Gary E. Miller))
this list should be renamed full-spammage (david.vincent at mightyoaks.com (David Vincent))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (security-protocols at hushmail.com (security-protocols@...hmail.com))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (core at bokeoa.com (Charles Stevenson))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (bugtrak at iquebec.com (Bugtraq storage account))
MDKSA-2002:051 - xchat update (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2002:052 - sharutils update (security at linux-mandrake.com (Mandrake Linux Security Team))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (contact at bia-security.com (Anthony LaMantia))
Anyone buy this? (contact at bia-security.com (Anthony LaMantia))
Commented DCOM Scource (carlos.gratz at terra.com.br (Carlos Fernando Avila Gratz))

August 15 (119 messages)

Anyone buy this? (fenris at HammerofGod.com (Fenris The Wolf))
SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0 (http-equiv at malware.com (http-equiv@...ite.com))
Spam LIst... MOD THE LIST.. .END THE LIST (revocomms at yahoo.com (Anthony LaMantia))
Spam LIst... MOD THE LIST.. .END THE LIST (johnpf at atnet.net.au (John))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (measl at mfn.org (J.A. Terranson))
Memetic-Solaris imprint : added agent.solstice (memetic-engineer at hushmail.com (memetic-engineer@...hmail.com))
Spam LIst... MOD THE LIST.. .END THE LIST (fenris at HammerofGod.com (Fenris The Wolf))
Spam LIst... MOD THE LIST.. .END THE LIST (hellnbak at nmrc.org (hellNbak))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (jonathan at xcorps.net (Jonathan Rickman))
Anyone buy this? (cerebus at sackheads.org (Timothy J.Miller))
SPIKE v2.5 (nc at stormvault.net (Nicolas Couture))
RE: SPIKE v2.5 (nc at stormvault.net (Nicolas Couture))
Mod/Close list (addy distribution) (ericv at cruzio.com (Eric N. Valor))
#PHRACK HIGH COUNCIL (chemical_perfection at hotmail.com (drag net))
lo0k 4t wh4t 1 g3t 1n th3 m41l (chemical_perfection at hotmail.com (drag net))
(no subject) (revocomms at yahoo.com (Democow))
HA! (revocomms at yahoo.com (Democow))
HI! (revocomms at yahoo.com (Democow))
HI! (revocomms at yahoo.com (Democow))
HI! (revocomms at yahoo.com (Democow))
HI! (revocomms at yahoo.com (Democow))
HI! (revocomms at yahoo.com (Democow))
HI! (revocomms at yahoo.com (Democow))
not1c3: th1s t3xt pr0v3s 1 4m m0r3 31337 th4n 4ny 0f j00 w1ll 3v3r b3 (chemical_perfection at hotmail.com (drag net))
CHAT (revocomms at yahoo.com (Democow))
(no subject) (revocomms at yahoo.com (Democow))
An urgent warning to all concerning ~el8 / project mayhem (dev-null at no-id.com (dev-null@...id.com))
bug found in mIRC 6.02, for Windows 95, 98, 2000, ME, XP, NT (AnyonegotCoke at aol.com (AnyonegotCoke@....com))
White-Hats make me sick. (chemical_perfection at hotmail.com (drag net))
all whos base? (moj0j0j02002 at yahoo.com (daewon soung))
New FAQ on how to be a wh1teh4t (AnyonegotCoke at aol.com (AnyonegotCoke@....com))
Capital Idea Old Chap (chemical_perfection at hotmail.com (drag net))
please stop this nonsense (m.v.berkum at obit.nl (Marco van Berkum))
Re: IE 6.x embedded command execution vulnerability #1033 (ghb at drug.org (gh b))
please stop this nonsense (knight at blkbox.com (Matt Richards))
TUPAC SHAKUR LOVES JAMBA JUICE (tupac.shakur at hushmail.com (tupac.shakur@...hmail.com))
please stop this nonsense (ulfh at Update.UU.SE (Ulf H{rnhammar))
An urgent warning to all concerning ~el8 / project mayhem (fwd) (dufresne at winternet.com (Ron DuFresne))
so much for an un-moderated board (moj0j0j02002 at yahoo.com (daewon soung))
How ironic... (dev-null at no-id.com (dev-null@...id.com))
New FAQ on how to be a wh1teh4t (dev-null at no-id.com (dev-null@...id.com))
please stop this nonsense (m.v.berkum at obit.nl (Marco van Berkum))
PHC Haiku (anodyne68040 at yahoo.com (Anodyne Perspective))
SPAM Solution (knight at blkbox.com (Matt Richards))
please stop this nonsense (sockz at email.com (sockz loves you))
TOOL - NO (revocomms at yahoo.com (Democow))
please stop this nonsense (nexus at patrol.i-way.co.uk (Nexus))
Administrivia (len at netsys.com (Len Rose))
TOOL - NO (anodyne68040 at yahoo.com (Anodyne Perspective))
SPAM Solution (nexus at patrol.i-way.co.uk (Nexus))
Death of a Whitehat - Image I (sockz at email.com (sockz loves you))
overflow in redhat 7.x (raymond at dyn.org (raymond@....org))
weird feature of Solaris 2.x (gobbles at hushmail.com (gobbles@...hmail.com))
Cisco Security Advisory: OpenSSH 3.x (evrim at core.gen.tr (evrim@...e.gen.tr))
Re: patches now available for rpc.statd (ras at slartibartfast.magrathea.com (ras@...rtibartfast.magrathea.com))
weird feature of many Trend Micro products (florin at sgi.com (florin@....com))
stupid bug in many Trend Micro products (tep at SDSC.EDU (tep@...C.EDU))
weird feature of Solaris 2.x (anodyne68040 at yahoo.com (Anodyne Perspective))
[ISS Xforce Alert] buffer overflow in sendmail 8.11.x (psirt at cisco.com (psirt@...co.com))
local egid=news exploit for apache 1.x (gem at rellim.com (gem@...lim.com))
problems with jpgs in mozilla client (sockz at email.com (sockz loves you))
Cisco Security Advisory: netkit telnetd (tep at SDSC.EDU (tep@...C.EDU))
New packages available for HPUX /bin/su (ecp at imoolah.hotusa.org (ecp@...olah.hotusa.org))
i think ive found a bug in OpenSSH (thomas at suse.de (thomas@...e.de))
ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (Azerail at supersecretninjaskills.com (Azerail))
overflow in rpc.ttdbserverd (phrackbitch at bloodbath.co.uk (phrackbitch@...odbath.co.uk))
i think ive found a bug in Mandrake 8.x (thomas at suse.de (thomas@...e.de))
local root exploit for IE 5.x (raju at linux-delhi.org (raju@...ux-delhi.org))
New packages available for Notes SMTP (raju at linux-delhi.org (raju@...ux-delhi.org))
weird feature of Windows 2000/XP (tep at SDSC.EDU (tep@...C.EDU))
Re: bug in rpc.statd (ulfh at update.uu.se (ulfh@...ate.uu.se))
i think ive found a bug in OpenSSH (stuart.thomas at uk.easynet.net (Stuart Thomas))
Administrivia (m.v.berkum at obit.nl (Marco van Berkum))
impersonation (ARouse at n2bb.com (Alan Rouse))
MDKSA-2002:038-1 - bind update (security at linux-mandrake.com (Mandrake Linux Security Team))
Fwd: Your e-mail message was stopped (anodyne68040 at yahoo.com (Anodyne Perspective))
Administrivia (sockz at email.com (sockz loves you))
An urgent warning to all concerning ~el8 / project mayhem (fwd) (hellnbak at nmrc.org (hellNbak))
Fighting Full-Disclosure spam (ARouse at n2bb.com (Alan Rouse))
so much for an un-moderated board (bugtrak at iquebec.com (Bugtraq storage account))
Re: patches now available for rpc.statd (anodyne68040 at yahoo.com (Anodyne Perspective))
Administrivia (jmayer at loplof.de (Joerg Mayer))
weird feature of Solaris 2.x (nexus at patrol.i-way.co.uk (Nexus))
impersonation (raymond at dyn.org (Raymond Morsman))
Administrivia (Azerail at supersecretninjaskills.com (Azerail))
please stop this nonsense (Azerail at supersecretninjaskills.com (Azerail))
Unsubscribe (Howard.Boggs at vigilinx.com (Boggs, Howard E. II))
impersonation (jonathan at xcorps.net (Jonathan Rickman))
el8 in Washington (anodyne68040 at yahoo.com (Anodyne Perspective))
overflow in rpc.ttdbserverd (kweiske at kataan.org (Kurt Weiske))
please stop this nonsense (dave at immunitysec.com (Dave Aitel))
new patch fixes vulnerability in IE 5.x (raymond at dyn.org (raymond@....org))
new patch fixes vulnerability in IE 5.x (raymond at dyn.org (raymond@....org))
new patch fixes vulnerability in IE 5.x (raymond at dyn.org (raymond@....org))
new patch fixes vulnerability in IE 5.x (raymond at dyn.org (raymond@....org))
new patch fixes vulnerability in IE 5.x (raymond at dyn.org (raymond@....org))
new patch fixes vulnerability in IE 5.x (raymond at dyn.org (raymond@....org))
FWD: bind 9.x (psirt at cisco.com (psirt@...co.com))
el8 in Washington (dave at immunitysec.com (Dave Aitel))
20 more messages

August 16 (55 messages)

ALERT! ALERT! Confessions of a turkey ALERT! ALERT! ;p;p;p;p;p;p;p (ssinct at tpg.com.au (ssinct))
An urgent warning to all concerning ~el8 / project mayhem (fwd) (hellnbak at nmrc.org (hellNbak))
more than idle threats I'm afraid (security at australia.edu (security@...tralia.edu))
Re: SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0 (http-equiv at malware.com (http-equiv@...ite.com))
An urgent warning to all concerning ~el8 / project mayhem (fwd) (tupac.shakur at hushmail.com (tupac.shakur@...hmail.com))
How ironic... (tupac.shakur at hushmail.com (tupac.shakur@...hmail.com))
more than idle threats I'm afraid (anodyne68040 at yahoo.com (Anodyne Perspective))
more than idle threats I'm afraid (security at australia.edu (security@...tralia.edu))
impersonation (benfell at greybeard95a.com (David Benfell))
Administrivia (sockz at email.com (sockz loves you))
Ron D. is so cool. (aliver at xexil.com (aliver@...il.com))
player hating (aliver at xexil.com (aliver@...il.com))
more than idle threats I'm afraid (anodyne68040 at yahoo.com (Anodyne Perspective))
1. Think 2. Post (write it down) (aliver at xexil.com (aliver@...il.com))
1. Think 2. Post (write it down) (anodyne68040 at yahoo.com (Anodyne Perspective))
Okay so there's not much death... #3 (sockz at email.com (sockz loves you))
true hacker apostasy (aliver at xexil.com (aliver@...il.com))
new patch fixes vulnerability in Solaris /bin/login (raju at linux-delhi.org (raju@...ux-delhi.org))
small question about Mandrake 8.x (Ken.Williams at ey.com (Ken.Williams@...com))
overflow in Domino 5.0.x (ras at slartibartfast.magrathea.com (ras@...rtibartfast.magrathea.com))
strange output from all Cisco Routers and Switches (SMoyer at rgare.com (SMoyer@...re.com))
new patch fixes vulnerability in .NET (psz at maths.usyd.edu.au (psz@...hs.usyd.edu.au))
Yes, very creative. (anodyne68040 at yahoo.com (Anodyne Perspective))
strange output from rpc.statd (BillT at Mahagonny.com (BillT@...agonny.com))
strange output from rpc.statd (BillT at Mahagonny.com (BillT@...agonny.com))
re: major hole in apache 1.x (ras at slartibartfast.magrathea.com (ras@...rtibartfast.magrathea.com))
Sabotage (was: major hole in apache 1.x) (draht at suse.de (Roman Drahtmueller))
WHO NEEDS PHRACK WHEN THE LIST IS JUST AS BAD (steve at videogroup.com (Steve))
Administrivia (len at netsys.com (Len Rose))
(no subject) (t34cup at yahoo.com (T34cup))
Exploits Contributor Program (lwc at vapid.ath.cx (Larry W. Cashdollar))
Sabotage (was: major hole in apache 1.x) (ras at slartibartfast.magrathea.com (Robert A. Seace))
A PHC PRODUCTION: THE REAL SCRIPTKIDDIES (auto461723 at hushmail.com (auto461723@...hmail.com))
Covering that baldspot...or...hat ethics (shameinfame at hushmail.com (shameinfame@...hmail.com))
A PHC PRODUCTION: THE REAL SCRIPTKIDDIES (anodyne68040 at yahoo.com (Anodyne Perspective))
A PHC PRODUCTION: THE REAL SCRIPTKIDDIES (chaos_magician at hushmail.com (chaos_magician@...hmail.com))
A PHC PRODUCTION: THE REAL SCRIPTKIDDIES (auto461723 at hushmail.com (auto461723@...hmail.com))
(no subject) (mattmurphy at kc.rr.com (Matthew Murphy))
Blackhat Apocalypse Haiku (anodyne68040 at yahoo.com (Anodyne Perspective))
A PHC PRODUCTION: THE REAL SCRIPTKIDDIES (chaos_magician at hushmail.com (chaos_magician@...hmail.com))
new patch fixes vulnerability in Solaris /bin/login (raju at linux-delhi.org (Raju Mathur))
Administrivia (pauls at utdallas.edu (Schmehl, Paul L))
(no subject) (chaos_magician at hushmail.com (chaos_magician@...hmail.com))
Sun RPC xdr_array vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
(no subject) (cerebus at sackheads.org (Timothy J.Miller))
[SECURITY] [DSA 154-1] New fam packages fix privilege escalation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
(no subject) (mattmurphy at kc.rr.com (Matthew Murphy))
(no subject) (cerebus at sackheads.org (Timothy J.Miller))
(no subject) (mattmurphy at kc.rr.com (Matthew Murphy))
A PHC PRODUCTION: THE REAL SCRIPTKIDDIES (benfell at greybeard95a.com (David Benfell))
Administrivia (lists_full-disclosure at darkuncle.net (Scott Francis))
(no subject) (chaos_magician at hushmail.com (chaos_magician@...hmail.com))
=;-> (aliver at xexil.com (aliver@...il.com))
Good old conformity. (aliver at xexil.com (aliver@...il.com))
Gateway.com Store Locator Cross-Site Scripting Vulnerability (mattmurphy at kc.rr.com (Matthew Murphy))

August 17 (24 messages)

Re: thoughts on hacking, life and the future of the Net (aliver at xexil.com (aliver@...il.com))
Re: thoughts on hacking, life and the future of the Net (anodyne68040 at yahoo.com (Anodyne Perspective))
Think about me the next time you watch MTV..[Earth shaking advisory, paper + POC coming VERY soon] (memetic-engineer at australia.edu (memetic-engineer@...trali…)
Think about me the next time you watch MTV..[Earth shaking advisory, paper + POC coming VERY soon] (aliver at xexil.com (aliver@...il.com))
Think about me the next time you watch MTV..[Earth shaking advisory, paper + POC coming VERY soon] (incominglists at flyster.com (Flyster))
(no subject) (sockz at email.com (sockz loves you))
TUPAC UPDATES WITH BLUEBOAR HACKING AL "GAY" HUGER (tupac.shakur at hushmail.com (tupac.shakur@...hmail.com))
More from MemeLand [next generation of multi-media file mischief] (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
More of nothing from meme-land [POC for your mtv from PHC}] (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Administrivia (sockz at email.com (sockz loves you))
Next generation mutli-media based attacks.POC. Not just for spooks anymore. (censored-meme at australia.edu (censored-meme@...tralia.edu))
IP'less bridging firewall (evrim at core.gen.tr (Evrim ULU))
More of nothing from meme-land [POC for your mtv from PHC}] (incominglists at flyster.com (Flyster))
The Ten Important Points About #PHRACK "High Council", el8, and Misc You Should Know (fuk at hushmail.com (fuk@...hmail.com))
local root exploit for Windows 2000/XP (flur at flurnet.org (flur))
Good old conformity. (benfell at greybeard95a.com (David Benfell))
Administrivia (len at netsys.com (Len Rose))
Yes? (peter at bank-connect.com (Peter van den Heuvel))
Good old conformity. (t34cup at yahoo.com (T34cup))
Good old conformity. (aliver at xexil.com (aliver@...il.com))
Winstrol boy (aliver at xexil.com (aliver@...il.com))
(no subject) (mattmurphy at kc.rr.com (Matthew Murphy))
Good old conformity. (benfell at greybeard95a.com (David Benfell))
WashingtonPost.com XSS Vulnerability (mattmurphy at kc.rr.com (Matthew Murphy))

August 18 (25 messages)

FWD: netkit telnetd (ecp at imoolah.hotusa.org (ecp@...olah.hotusa.org))
remote ROOT EXPLOIT for Mandrake 8.x (hellNbak at nmrc.org (hellNbak@...c.org))
anyone knows where to get updated sendmail 8.11.x (guninski at guninski.com (guninski@...inski.com))
Re: RE: NetBSD (thomas at suse.de (thomas@...e.de))
local root exploit for Windows 2000/XP (pb at bieringer.de (pb@...ringer.de))
These Guys Are So Grey Hats Re: Ten Things (fuk at hushmail.com (fuk@...hmail.com))
FUD from #phack "High Council" and el8 (fuk at hushmail.com (fuk@...hmail.com))
FUD from #phack "High Council" and el8 (aliver at xexil.com (aliver@...il.com))
LOL! Errand Boy for "dickhitler" Espouses Intelligence???!!! PHC MISSION #6 "Destroy Netsys Mailing list" "Aliver" States… (fuk at hushmail.com (fuk@...hmail.com))
My Name Is Todd Willey, I am Looking for Work -- Heeeelp Meeee Pleeease! (fuk at hushmail.com (fuk@...hmail.com))
My Lame Posts to Bugtraq, I Billy Willey (fuk at hushmail.com (fuk@...hmail.com))
Double Free() Issue In Apache (fuk at hushmail.com (fuk@...hmail.com))
A post to ruin the PHC "strategy" (phc_exterminator at hushmail.com (phc_exterminator@...hmail.com))
Hey man, This System password Doesn't work (fuk at hushmail.com (fuk@...hmail.com))
phc dox collected so far (ghb at drug.org (gh b))
More Strategies Overheard on #Phrack (fuk at hushmail.com (fuk@...hmail.com))
More Strategies Overheard on #Phrack (phc_exterminator at hushmail.com (phc_exterminator@...hmail.com))
A post to ruin the PHC "strategy" (benfell at greybeard95a.com (David Benfell))
A post to ruin the PHC "strategy" (fuk at hushmail.com (fuk@...hmail.com))
More Strategies Overheard on #Phrack (fuk at hushmail.com (fuk@...hmail.com))
More Strategies Overheard on #Phrack (aliver at xexil.com (aliver@...il.com))
Arguing on this list (phrackhc at email.com (Phrack High Council))
(no subject) (sockz at email.com (sockz loves you))
(no subject) (pauls at utdallas.edu (Schmehl, Paul L))
(no subject) (mattmurphy at kc.rr.com (Matthew Murphy))

August 19 (33 messages)

(no subject) (sockz at email.com (sockz loves you))
(no subject) (fred at the-debaters.com (M L Lynch [ SotG ]))
(no subject) (fred at the-debaters.com (M L Lynch [ SotG ]))
(no subject) (sockz at email.com (sockz loves you))
(no subject) (agent99 at sgi.com (5uddenly g0n3 in73l))
(no subject) (fred at the-debaters.com (Fred))
avarice (ghb at drug.org (gh b))
(no subject) (sockz at email.com (sockz loves you))
local root exploit for Windows 2000/XP (admin at xenosystems.org (Xsecurity.ws))
Shiver me timbers. (aliver at xexil.com (aliver@...il.com))
just wondering. (aliver at xexil.com (aliver@...il.com))
consumer "rights" vs real innocents (aliver at xexil.com (aliver@...il.com))
iDEFENSE Security Advisory: Cross-Site Scripting Vulnerabilities in Popular Web Applications (dendler at idefense.com (David Endler))
Shiver me timbers. (cerebus at sackheads.org (Timothy J.Miller))
FreeBSD Security Advisory FreeBSD-SA-02:38.signed-error (security-advisories at FreeBSD.ORG (FreeBSD Security Advisories))
Shiver me timbers. (aliver at xexil.com (aliver@...il.com))
Shiver me timbers. (sockz at email.com (sockz loves you))
Shiver me timbers. (cerebus at sackheads.org (Timothy J.Miller))
Shiver me timbers. (ka at khidr.net (Ka))
unsubscribe ecchien@...oo.com (ecchien at yahoo.com (Eric Chien))
Shiver me timbers. (aliver at xexil.com (aliver@...il.com))
Shiver me timbers. (aliver at xexil.com (aliver@...il.com))
Shiver me timbers. (cerebus at sackheads.org (Timothy J.Miller))
(no subject) (coley at linus.mitre.org (Steven M. Christey))
Re: Shiver me timbers. (coley at linus.mitre.org (Steven M. Christey))
Shiver me timbers. (ka at khidr.net (Ka))
Security Update: [CSSA-2002-SCO.28.1] UnixWare 7.1.1 Open UNIX 8.0.0 : REVISED: rpc.ttdbserverd file creation/deletion a… (security at caldera.com (security@...de…)
Shiver me timbers. (peter at bank-connect.com (Peter van den Heuvel))
Shiver me timbers. (ka at khidr.net (Ka))
Security Update: [CSSA-2002-SCO.28.1] UnixWare 7.1.1 Open UNIX 8.0.0 : REVISED: rpc.ttdbserverd file creation/deletion a… (security at caldera.com (security@...de…)
Security Update: [CSSA-2002-SCO.28.1] UnixWare 7.1.1 Open UNIX 8.0.0 : REVISED: rpc.ttdbserverd file creation/deletion a… (security at caldera.com (security@...de…)
Security Update: [CSSA-2002-SCO.28.1] UnixWare 7.1.1 Open UNIX 8.0.0 : REVISED: rpc.ttdbserverd file creation/deletion a… (security at caldera.com (security@...de…)
Security Update: [CSSA-2002-SCO.28.1] UnixWare 7.1.1 Open UNIX 8.0.0 : REVISED: rpc.ttdbserverd file creation/deletion a… (security at caldera.com (security@...de…)

August 20 (25 messages)

Watching or playing? ( flyster) (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Watching or playing? ( flyster) (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Hypocrisy (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Profiteers... (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
FW: ex-Administrivia - Blue Boar "leaving" SecurityFocus (arjen.de.landgraaf at cologic.co.nz (Arjen De Landgraaf))
straight outta #phrack (ghb at drug.org (gh b))
FW: ex-Administrivia - Blue Boar "leaving" SecurityFocus (core at bokeoa.com (Charles Stevenson))
Ka's msg re: Bugtraq delay/censorship (hagbard-celine at hushmail.com (hagbard-celine@...hmail.com))
Kerio Mail Server Multiple Security Vulnerabilities (sunninja at scientist.com (Abraham Lincoln))
killer k00kie [was Re: SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0] (http-equiv at malware.com (http-equiv@...ite.com))
Ka's msg re: Bugtraq delay/censorship (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
NY State of Mind ;) (ohnonono at hushmail.com (ohnonono@...hmail.com))
NY State of Mind ;) (ohnonono at hushmail.com (ohnonono@...hmail.com))
[SECURITY] [DSA 153-2] New mantis package fixes several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
NY State of Mind ;) (sockz at email.com (sockz loves you))
Shiver me timbers. (lists_full-disclosure at darkuncle.net (lists_full-disclosure@...kuncle.net))
Ka's msg re: Bugtraq delay/censorship (lists_full-disclosure at darkuncle.net (lists_full-disclosure@...kuncle.net))
NY State of Mind ;) (aliver at xexil.com (aliver@...il.com))
PHC Updates -- Straight To Your Inbox! (phrackhc at email.com (Phrack High Council))
Shiver me timbers. (tupac.shakur at hushmail.com (tupac.shakur@...hmail.com))
Shiver me timbers. (lists_full-disclosure at darkuncle.net (Scott Francis))
Cobalt Linux Apache Local Root Exploit (core at bokeoa.com (Charles Stevenson))
Shiver me timbers. (tupac.shakur at hushmail.com (tupac.shakur@...hmail.com))
Cobalt Linux Apache Local Root Exploit (ka at khidr.net (Ka))
Cobalt Linux Apache Local Root Exploit (core at bokeoa.com (Charles Stevenson))

August 21 (6 messages)

Hushmail PGP keys without java ? (ka at khidr.net (Ka))
Re: Ka's msg re: Bugtraq delay/censorship (hagbard-celine at hushmail.com (hagbard-celine@...hmail.com))
[SECURITY] [DSA 155-1] New kdelibs packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
hypo-crazy ;) (hyp0-critic at hushmail.com (hyp0-critic@...hmail.com))
WorldView vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Win32 Device Drivers Communication Vulnerabilities + PoC for Symantec Norton AntiVirus '2002 (probably all versions) Device Driv… (yup at tlen.pl (SEC-LABS TEAM))

August 22 (10 messages)

Terrible: Windows Media Player (http-equiv at malware.com (http-equiv@...ite.com))
Shawn A Null/OR2/AEPIN is out of the office. (sanull at aep.com (sanull@....com))
Fw: Re: NY State of Mind ;) (sockz at email.com (sockz loves you))
hypo-crazy ;) (sockz at email.com (sockz loves you))
hypo-crazy ;) (johnpf at atnet.net.au (John))
hypo-crazy ;) (sockz at email.com (sockz loves you))
FW: ex-Administrivia - Blue Boar "leaving" SecurityFocus (BlueBoar at thievco.com (Blue Boar))
FW: ex-Administrivia - Blue Boar "leaving" SecurityFocus (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Security Update: [CSSA-2002-SCO.36] UnixWare 7.1.1 Open UNIX 8.0.0 : command line buffer overflow in ndcfg (security at caldera.com (security@...dera.com))
[SECURITY] [DSA 156-1] New Light package fixes arbitrary script execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.o…)

August 23 (18 messages)

hypo-crazy ;) (johnpf at atnet.net.au (John))
hypo-crazy ;) (aliver at xexil.com (aliver@...il.com))
hypo-crazy ;) (johnpf at atnet.net.au (John))
xxt encryption util (aliver at xexil.com (aliver@...il.com))
HP Full Disclosure Story (ts at securityoffice.net (Tamer Sahin))
HP Full Disclosure Story (dotslash at snosoft.com (KF))
HP Full Disclosure Story (aliver at xexil.com (aliver@...il.com))
[SECURITY] [DSA 157-1] New irssi-text packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
HP Full Disclosure Story (hellnbak at nmrc.org (hellNbak))
#PHRACK PROPHILE ON AMBIENT EMPIRE (nwonknu at fastmail.fm (nwonknu))
FW: HP Full Disclosure Story (fwd) (hellnbak at nmrc.org (hellNbak))
HP Full Disclosure Story (guninski at guninski.com (Georgi Guninski))
HP Full Disclosure Story (steve at entrenchtech.com (Steve Manzuik))
knowfx in da house (knowfx at hushmail.com (knowfx@...hmail.com))
Lotus Sametime issues? (dotslash at snosoft.com (KF))
Lotus Sametime issues? (steve at entrenchtech.com (Steve Manzuik))
Re: HP Full Disclosure Story (coley at linus.mitre.org (Steven M. Christey))
Re: HP Full Disclosure Story (dotslash at snosoft.com (KF))

August 24 (13 messages)

Security Update: [CSSA-2002-SCO.37] UnixWare 7.1.1 : buffer overflow in DNS resolver (security at caldera.com (security@...dera.com))
hypo-crazy ;) (sockz at email.com (sockz loves you))
hypo-crazy ;) (fred at the-debaters.com (M L Lynch [ SotG ]))
Re: HP Full Disclosure Story (guninski at guninski.com (Georgi Guninski))
Re: HP Full Disclosure Story (kweiske at kataan.org (Kurt Weiske))
Re: HP Full Disclosure Story (ib at clusterfsck.net (Isaak Bloodlore))
Re: HP Full Disclosure Story (choose.a.lusername at hushmail.com (choose.a.lusername@...hmail.com))
phpReactor - Cross-Site Scripting via STYLE (mattmurphy at kc.rr.com (Matthew Murphy))
Re: HP Full Disclosure Story (hellnbak at nmrc.org (hellNbak))
Re: HP Full Disclosure Story (defender242 at hotmail.com (Defender Defender))
Re: HP Full Disclosure Story (defender242 at hotmail.com (Defender Defender))
Valid disclosure analogy (defender242 at hotmail.com (Defender Defender))
Security Update: [CSSA-2002-SCO.37] UnixWare 7.1.1 : buffer overflow in DNS resolver (security at caldera.com (security@...dera.com))

August 25 (34 messages)

Re: Valid disclosure analogy (poohpooh000 at hotmail.com (pooh pooh))
Of course you guys support full-disclosure (phc_exterminator at hushmail.com (phc_exterminator@...hmail.com))
David Ahmad (securityfocus/symantec) exposed (rfp_the_ripper at hushmail.com (rfp_the_ripper@...hmail.com))
Of course you guys support full-disclosure (hellnbak at nmrc.org (hellNbak))
David Ahmad (securityfocus/symantec) exposed (madduck at madduck.net (martin f krafft))
Re: Valid disclosure analogy (defender242 at hotmail.com (Defender Defender))
Of course you guys support full-disclosure (defender242 at hotmail.com (Defender Defender))
David Ahmad (securityfocus/symantec) exposed (defender242 at hotmail.com (Defender Defender))
More OmniHTTPd Problems (mattmurphy at kc.rr.com (Matthew Murphy))
OmniHTTPd test.shtml Cross-Site Scripting Issue (mattmurphy at kc.rr.com (Matthew Murphy))
OmniHTTPd test.php Cross-Site Scripting Issue (mattmurphy at kc.rr.com (Matthew Murphy))
Re: Valid disclosure analogy (poohpooh000 at hotmail.com (pooh pooh))
Re: Valid disclosure analogy (hellnbak at nmrc.org (hellNbak))
Re: HP Full Disclosure Story (asd at suespammers.org (Anthony DeRobertis))
Of course you guys support full-disclosure (hellnbak at nmrc.org (hellNbak))
David Ahmad (securityfocus/symantec) exposed (hellnbak at nmrc.org (hellNbak))
HP Full Disclosure Story (ts at securityoffice.net (Tamer Sahin))
Re: Valid disclosure analogy (ib at clusterfsck.net (Isaak Bloodlore))
David Ahmad (securityfocus/symantec) exposed (rfp_the_ripper at hushmail.com (rfp_the_ripper@...hmail.com))
Of course you guys support full-disclosure (cerebus at sackheads.org (Timothy J.Miller))
Of course you guys support full-disclosure (rfp_the_ripper at hushmail.com (rfp_the_ripper@...hmail.com))
HP Full Disclosure Story (ts at securityoffice.net (Tamer Sahin))
David Ahmad (securityfocus/symantec) exposed (hellnbak at nmrc.org (hellNbak))
Of course you guys support full-disclosure (hellnbak at nmrc.org (hellNbak))
Re: Valid disclosure analogy (defender242 at hotmail.com (Defender Defender))
Re: Valid disclosure analogy (defender242 at hotmail.com (Defender Defender))
Re: Valid disclosure analogy (defender242 at hotmail.com (Defender Defender))
Of course you guys support full-disclosure (gobbles at hush.com (gobbles@...h.com))
David Ahmad (securityfocus/symantec) exposed (rfp_the_ripper at hushmail.com (rfp_the_ripper@...hmail.com))
Reason for full disclosure (geo. at hushmail.com (geo.@...hmail.com))
Re: Valid disclosure analogy (defender242 at hotmail.com (Defender Defender))
Of course you guys support full-disclosure (rfp_the_ripper at hushmail.com (rfp_the_ripper@...hmail.com))
Of course you guys support full-disclosure (aliver at xexil.com (aliver@...il.com))
Of course you guys support full-disclosure (steve at entrenchtech.com (Steve))

August 26 (22 messages)

Re: Valid disclosure analogy (poohpooh000 at hotmail.com (pooh pooh))
Re: [VulnDiscuss] HP Full Disclosure Story (jonathan at xcorps.net (Jonathan Rickman))
Re: [VulnDiscuss] HP Full Disclosure Story (dufresne at winternet.com (Ron DuFresne))
Re: HP Full Disclosure Story (aliver at xexil.com (aliver@...il.com))
Re: Valid disclosure analogy (defender242 at hotmail.com (Defender Defender))
Of course you guys support full-disclosure (nwonknu at fastmail.fm (nwonknu))
David Ahmad (securityfocus/symantec) exposed (benfell at greybeard95a.com (David Benfell))
Viruses sought (madduck at madduck.net (martin f krafft))
Re: Valid disclosure analogy (poohpooh000 at hotmail.com (pooh pooh))
Viruses sought (bolo at lupa.de (Boris Lorenz))
GLSA: PostgreSQL (aliz at gentoo.org (Daniel Ahlberg))
Re: Valid disclosure analogy (defender242 at hotmail.com (Defender Defender))
Of course you guys support full-disclosure (rfp_the_ripper at hushmail.com (rfp_the_ripper@...hmail.com))
Of course you guys support full-disclosure (hellnbak at nmrc.org (hellNbak))
[SECURITY] [DSA 147-2] New mailman packages fix cross-site scripting problem (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debia…)
Of course you guys support full-disclosure (rfp_the_ripper at hushmail.com (rfp_the_ripper@...hmail.com))
SMB overflow attacks (dotslash at snosoft.com (KF))
Viruses sought (nexus at patrol.i-way.co.uk (Nexus))
Viruses sought (stf at xtra.co.nz (nonme))
Of course you guys support full-disclosure (ib at clusterfsck.net (Isaak Bloodlore))
Re: [VulnDiscuss] HP Full Disclosure Story (kspett at spidynamics.com (Kevin Spett))
SMB overflow attacks (dotslash at snosoft.com (KF))

August 27 (56 messages)

Re: HP Full Disclosure Story (core at bokeoa.com (Charles Stevenson))
Re: HP Full Disclosure Story (dotslash at snosoft.com (KF))
Re: HP Full Disclosure Story (dotslash at snosoft.com (KF))
All Your ABAP Are Belong To Us (was: SAP R/3 default password vulnerability) (loki_ at softhome.net (loki_@...thome.net))
Security Update: [CSSA-2002-SCO.38] Open UNIX 8.0.0 UnixWare 7.1.1 : X server insecure popen and buffer overflow (security at caldera.com (security@...dera.com))
Re: Returned post for bugtraq@...urityfocus.com (loki_ at softhome.net (loki_@...thome.net))
MDKSA-2002:053 - xinetd update (security at linux-mandrake.com (Mandrake Linux Security Team))
Of course you guys support full-disclosure (rfp_the_ripper at hushmail.com (rfp_the_ripper@...hmail.com))
411 [ sneak previews ] - #1 (slackwh0re at hotmail.com (Slack wh0re))
411 [ sneak previews ] - #1 (core at bokeoa.com (Charles Stevenson))
411 [ sneak previews ] - #1 (aliver at xexil.com (aliver@...il.com))
411 [ sneak previews ] - #1 (ib at clusterfsck.net (Isaak Bloodlore))
tradecraft and subversion (aliver at xexil.com (aliver@...il.com))
411 [ sneak previews ] - #1 (aliver at xexil.com (aliver@...il.com))
tradecraft and subversion (sockz at email.com (sockz loves you))
RE: SMB overflow attacks (pgut001 at cs.auckland.ac.nz (Peter Gutmann))
RE: SMB overflow attacks (jasonc at science.org (Jason Coombs))
411 [ sneak previews ] - #1 (rfp_the_ripper at hushmail.com (rfp_the_ripper@...hmail.com))
tradecraft and subversion (defender242 at hotmail.com (crap producer))
administrivia (len at netsys.com (Len Rose))
shameless plug (len at netsys.com (Len Rose))
tradecraft and subversion (aliver at xexil.com (aliver@...il.com))
tradecraft and subversion (aliver at xexil.com (aliver@...il.com))
Take the trash-talker challenge! (aliver at xexil.com (aliver@...il.com))
[SECURITY] [DSA 158-1] New gaim packages fix arbitrary program execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)
Of course you guys support full-disclosure (rfp at vulnwatch.org (Rain Forest Puppy))
GLSA: gaim (aliz at gentoo.org (Daniel Ahlberg))
oops (zen-parse at gmx.net (zen-parse))
Re: Take the trash-talker challenge! (zen-parse at gmx.net (zen-parse))
Take the trash-talker challenge! (nexus at patrol.i-way.co.uk (Nexus))
uuuppz.com - Advisory 002 - mIRC $asctime overflow (fulldisclose at uuuppz.com (James Martin))
oops (dotslash at snosoft.com (KF))
Re: oops (zen-parse at gmx.net (zen-parse))
0 to 60 (dev-null at no-id.com (dev-null@...id.com))
uuuppz.com - Advisory 002 - mIRC $asctime overflow (brian at pc-radio.com (Brian McWilliams))
Re: Take the trash-talker challenge! (daniel at benzedrine.cx (Daniel Hartmeier))
Re: Take the trash-talker challenge! (mail at blazde.co.uk (Roland Postle))
RE: SMB overflow attacks (john at csr.utexas.edu (John Schutz))
Re: Take the trash-talker challenge! (Paul.Tinsley at phyve.com (Paul Tinsley))
tradecraft and subversion (defender242 at hotmail.com (crap producer))
Re: oops (aliver at xexil.com (aliver@...il.com))
can anyone confrim this link? (ohnonono at hushmail.com (ohnonono@...hmail.com))
Re: oops (fr at hush.com (fr@...h.com))
tradecraft and subversion (gem at rellim.com (Gary E. Miller))
PR0V1NG RFP WR0NG (auto461723 at hushmail.com (auto461723@...hmail.com))
Re: oops (core at bokeoa.com (Charles Stevenson))
tradecraft and subversion (lists_full-disclosure at darkuncle.net (lists_full-disclosure@...kuncle.net))
RE: SMB overflow attacks (nick at virus-l.demon.co.uk (Nick FitzGerald))
tradecraft and subversion (Ray.Percival at summit.fiserv.com (Percival, Ray))
Re: oops (aliver at xexil.com (aliver@...il.com))
Re: oops (gdd at siliconinc.net (gdd@...iconinc.net))
Re: Take the trash-talker challenge! (coley at linus.mitre.org (Steven M. Christey))
Re: HP Full Disclosure Story (coley at linus.mitre.org (Steven M. Christey))
tradecraft and subversion (darkuncle at darkuncle.net (Scott Francis))
Take the trash-talker challenge! (sert at snosoft.com (John Scimone))
Security Update: [CSSA-2002-SCO.38] Open UNIX 8.0.0 UnixWare 7.1.1 : X server insecure popen and buffer overflow (security at caldera.com (security@...dera.com))

August 28 (36 messages)

cran + vodka = unf (dotslash at snosoft.com (KF))
Take the trash-talker challenge! (nc at stormvault.net (Nicolas Couture))
PR0V1NG RFP WR0NG (rfp at vulnwatch.org (Rain Forest Puppy))
Re: Take the trash-talker challenge! (aliver at xexil.com (aliver@...il.com))
PR0V1NG RFP WR0NG (rfp at vulnwatch.org (Rain Forest Puppy))
PR0V1NG RFP WR0NG (roesch at sourcefire.com (Martin Roesch))
PR0V1NG RFP WR0NG (jonathan at xcorps.net (Jonathan Rickman))
cran + vodka = unf (sockz at email.com (sockz loves you))
[SECURITY] [DSA 159-1] New Python packages fix insecure temporary file use (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
XXT version 2 - Trash talking challege version ;-) (aliver at xexil.com (aliver@...il.com))
PR0V1NG RFP WR0NG (roesch at sourcefire.com (Martin Roesch))
cran + vodka = unf (simon at snosoft.com (ATD))
Re: oops (simon at snosoft.com (ATD))
Administrivia (simon at snosoft.com (ATD))
Administrivia (dotslash at snosoft.com (KF))
Administrivia (simon at snosoft.com (ATD))
(unsigned)-1 and large VM (guninski at guninski.com (Georgi Guninski))
Just a suggestion (pauls at utdallas.edu (Schmehl, Paul L))
PR0V1NG RFP WR0NG (ib at clusterfsck.net (Isaak Bloodlore))
Just a suggestion (ka at khidr.net (Ka))
Re: HP Full Disclosure Story (choose.a.lusername at hushmail.com (choose.a.lusername@...hmail.com))
Just a suggestion (steve at entrenchtech.com (Steve Manzuik))
iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow (dendler at idefense.com (David Endler))
Just a suggestion (ka at khidr.net (Ka))
Just a suggestion (pinskia at physics.uc.edu (Andrew Thomas Pinski))
Just a suggestion (csnow at deltadentalwa.com (Snow, Corey))
Just a suggestion (hellnbak at nmrc.org (hellNbak))
FreeBSD Security Notice FreeBSD-SN-02:05 (security-advisories at FreeBSD.ORG (FreeBSD Security Advisories))
Just a suggestion (benfell at greybeard95a.com (David Benfell))
Webmin Vulnerability Leads to Remote Compromise (RPC CGI) (aviram at beyondsecurity.com (Aviram Jenik))
Just a suggestion (steve at videogroup.com (Steve))
Just a suggestion (csnow at deltadentalwa.com (Snow, Corey))
YAWHT ? (ka at khidr.net (Ka))
Administrivia: Reply-To Preferences (johnc at grok.org.uk (John Cartwright))
Payment verified from aliver (zen-parse at gmx.net (zen-parse))
Re: Administrivia: Reply-To Preferences (odin at svartalfheim.net (Dan Brosemer))

August 29 (18 messages)

Re: Administrivia: Reply-To Preferences (dotslash at snosoft.com (KF))
Re: Administrivia: Reply-To Preferences (stf at xtra.co.nz (nonme))
Just a suggestion (dufresne at winternet.com (Ron DuFresne))
iName/Mail.com security holes opens door to millions of e-mail accounts (secure.bugtraq at tag.odessa.ua (Andrew G. Tereschenko))
Just a suggestion (tupac.shakur at hushmail.com (tupac.shakur@...hmail.com))
iName/Mail.com security holes opens door to millions of e-mail accounts (colt45 at sdf.lonestar.org (Colt Peacemaker))
Re: Administrivia: Reply-To Preferences (johnc at grok.org.uk (John Cartwright))
RPM verification (andrewg at d2.net.au (Andrew Griffiths))
iName/Mail.com security holes opens door to millions of e-mail accounts (secure.bugtraq at tag.odessa.ua (Andrew G. Tereschenko))
RPM verification (andrewg at d2.net.au (Andrew Griffiths))
Just a suggestion (steve at videogroup.com (Steve))
RPM verification (ag at pre-secure.de (Axel Grossklaus))
[RHSA-2002:169-13] Updated ethereal packages are available (bugzilla at redhat.com (bugzilla@...hat.com))
Re: Administrivia: Reply-To Preferences (odin at cleannorth.org (Dan Brosemer))
Working Resolver Overflow? (nicklange at wi.rr.com (Nick Lange))
Netscape JRE vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
MDKSA-2002:054 - gaim update (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2002:055 - hylafax update (security at linux-mandrake.com (Mandrake Linux Security Team))

August 30 (7 messages)

iName/Mail.com security holes opens door to millions of e-mail accounts (colt45 at sdf.lonestar.org (Colt Peacemaker))
RPM verification (andrewg at d2.net.au (Andrew Griffiths))
GLSA: ethereal (aliz at gentoo.org (Daniel Ahlberg))
iName/Mail.com security holes opens door to millions of e-mail accounts (secure.bugtraq at tag.odessa.ua (Andrew G. Tereschenko))
Administrivia: Reply-To Preferences (jurjen at quadpro.stupendous.org (jurjen@...dpro.stupendous.org))
SecurityFocus Website (Ken at infosec101.org (Ken Pfeil))
SuSE Security Announcement: glibc (SuSE-SA:2002:031) (draht at suse.de (Roman Drahtmueller))

August 31 (12 messages)

FactoSystem CMS Contains Multiple Vulnerabilities (mattmurphy at kc.rr.com (Matthew Murphy))
www.securityfocus.com / www.iss.net DOWN? (mr_charming at hushmail.com (mr_charming@...hmail.com))
iName/Mail.com security holes opens door to millions of e-mail accounts (skylined at edup.tudelft.nl (Berend-Jan Wever))
Fwd: add www.cert.org to that list (mr_charming at hushmail.com (mr_charming@...hmail.com))
Fwd: add www.cert.org to that list (j at pureftpd.org (Jedi/Sector One))
Fwd: add www.cert.org to that list (lupe at lupe-christoph.de (Lupe Christoph))
www.securityfocus.com / www.iss.net DOWN? (geo. at hushmail.com (geo.@...hmail.com))
www.securityfocus.com / www.iss.net DOWN? (junkmail at barnowl.com (Rob Rosenberger))
www.securityfocus.com / www.iss.net DOWN? (hggdh at attbi.com (HggdH))
Out of office from 30-08-02 indefinetly [RE: www.securityfocus.com / www.iss.net DOWN?] (mail at blazde.co.uk (Roland Postle))
Fwd: add www.cert.org to that list (nick at virus-l.demon.co.uk (Nick FitzGerald))
www.securityfocus.com / www.iss.net DOWN? (nick at virus-l.demon.co.uk (Nick FitzGerald))

861 messages