full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2002/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 5
² 3	³ 19	⁴ 11	⁵ 6	⁶ 15	⁷ 2	⁸ 6
⁹ 26	¹⁰ 20	¹¹ 58	¹² 30	¹³ 15	¹⁴ 17	¹⁵ 31
¹⁶ 26	¹⁷ 50	¹⁸ 72	¹⁹ 95	²⁰ 50	²¹ 12	²² 4
²³ 21	²⁴ 14	²⁵ 27	²⁶ 31	²⁷ 14	²⁸	²⁹ 5
³⁰ 18

Messages by day:

September 1 (5 messages)

www.securityfocus.com / www.iss.net DOWN? (dufresne at winternet.com (Ron DuFresne))
HushMail from full-disclosure-admin@...ts.netsys.com. (hyp0-critic at hushmail.com (hyp0-critic@...hmail.com))
Re: [security bulletin] SSRT2275 HP Tru64 UNIX - Potential Buffer Overflows & SSRT2229 Potential Denial of Service (fwd) (len at netsys.com (Len Rose))
Administrivia: Reply-To Preferences (johnc at grok.org.uk (John Cartwright))
Things we should all be aware of. (little-brother at hushmail.com (little-brother@...hmail.com))

September 2 (3 messages)

XSS in Null HTTPd (mattmurphy at kc.rr.com (Matthew Murphy))
Happy Labor Day from Snosoft (dotslash at snosoft.com (KF))
SECNAP Security Alert: Radmin Default install options vulnerability (scheidell at secnap.net (Michael Scheidell))

September 3 (19 messages)

Compaq mount patch broken (psz at maths.usyd.edu.au (Paul Szabo))
[SECURITY] [DSA 160-1] New scrollkeeper packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@li…)
[Fwd: Legal Notification] (dave at immunitysec.com (Dave Aitel))
[Fwd: Legal Notification] (bugtraq at cgisecurity.net (zeno))
[Fwd: Legal Notification] (measl at mfn.org (J.A. Terranson))
[Fwd: Legal Notification] (mail at blazde.co.uk (Roland Postle))
[Fwd: Legal Notification] (Ken at infosec101.org (Ken Pfeil))
[Fwd: Legal Notification] (editor at infoguerra.com.br (Giordani Rodrigues))
FW: [Fwd: Legal Notification] (Ken at infosec101.org (Ken Pfeil))
[Fwd: Legal Notification] (david.kennedy at acm.org (David Kennedy CISSP))
Re: [Fwd: Legal Notification] (mbruce at insl.co.uk (Matt Bruce))
Re: [Fwd: Legal Notification] (pauls at utdallas.edu (Schmehl, Paul L))
Compaq mount patch broken (psz at maths.usyd.edu.au (psz@...hs.usyd.edu.au))
Compaq mount patch broken (psz at maths.usyd.edu.au (Paul Szabo))
Cisco Security Advisory: Cisco VPN 3000 Concentrator Multiple Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
SecuRemote usernames can be guessed or sniffed using IKE exchange (netsys-l at nta-monitor.com (Roy Hills))
Re: Compaq mount patch broken (Weimer at CERT.Uni-Stuttgart.DE (Florian Weimer))
Check Point statement on use of IKE Aggressive Mode (scott.register at us.checkpoint.com (Scott Walker Register))
Compaq mount patch broken (psz at maths.usyd.edu.au (Paul Szabo))

September 4 (11 messages)

Re: Compaq mount patch broken (psz at maths.usyd.edu.au (Paul Szabo))
GLSA: scrollkeeper (aliz at gentoo.org (Daniel Ahlberg))
[SECURITY] [DSA 161-1] New Mantis package fixes privilege escalation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
For the truly desperate... (dave at immunitysec.com (Dave Aitel))
[Fwd: Legal Notification] (defender242 at hotmail.com (crap producer))
SPIKE 2.6 Released! (dave at immunitysec.com (Dave Aitel))
TRU64 formal disclosure from Snosoft. (dotslash at snosoft.com (KF))
TRU64 formal disclosure from Snosoft. (core at bokeoa.com (Charles Stevenson))
[Fwd: Legal Notification] (gem at rellim.com (Gary E. Miller))
[Fwd: Legal Notification] (editor at infoguerra.com.br (Giordani Rodrigues))
Re: Compaq mount patch broken (psz at maths.usyd.edu.au (Paul Szabo))

September 5 (6 messages)

IE 6 XSS (fooldisclosure at hushmail.com (fooldisclosure@...hmail.com))
major vulnerability in IE 6 :-( (fooldisclosure at hushmail.com (fooldisclosure@...hmail.com))
IE 6 XSS (mail at blazde.co.uk (Roland Postle))
GLSA: amavis (aliz at gentoo.org (Daniel Ahlberg))
Server attacks stump Microsoft (admin at xenosystems.org (Xsecurity.ws))
Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities - Second Set (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))

September 6 (15 messages)

[kbelanger@...icon.ca: [VulnWatch] vuln in login under solaris] (len at netsys.com (Len Rose))
[kbelanger@...icon.ca: [VulnWatch] vuln in login under solaris] (steve at entrenchtech.com (Steve))
[kbelanger@...icon.ca: [VulnWatch] vuln in login under solaris] (len at netsys.com (Len Rose))
Fwd: Returned post for bugtraq@...urityfocus.com (fooldisclosure at hushmail.com (fooldisclosure@...hmail.com))
MDKSA-2002:054-1 - gaim update (security at linux-mandrake.com (Mandrake Linux Security Team))
Fwd: Returned post for bugtraq@...urityfocus.com (mail at blazde.co.uk (Roland Postle))
[kbelanger@...icon.ca: [VulnWatch] vuln in login under solaris] (hellnbak at nmrc.org (hellNbak))
Fwd: Returned post for bugtraq@...urityfocus.com (fenris at HammerofGod.com (Fenris The Wolf))
zero-width gif: exploit PoC for NS6.2.3 (fixed in 7.0) [Was: GIFs Good, Flash Executable Bad] (zen-parse at gmx.net (zen-parse))
Fwd: Returned post for bugtraq@...urityfocus.com (lcamtuf at dione.ids.pl (Michal Zalewski))
iDEFENSE Security Advisory 09.05.2002 - Multiple Vulnerabilities at Canada.com (msutton at iDefense.com (Michael Sutton))
[SECURITY] [DSA 162-1] New ethereal packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities - Second Set (dw at botanicus.net (Dave Wilson))
the pretend - yahoo mail facing (drorshalev at hotmail.com (Dror Shalev))
Rapid 7 Advisory R7-0005: ZMerge Insecure Default ACLs (advisory at rapid7.com (Rapid 7 Security Advisories))

September 7 (2 messages)

Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities - Second Set (raceves at cisco.com (Richard Aceves))
PHP header() CRLF Injection (mattmurphy at kc.rr.com (Matthew Murphy))

September 8 (6 messages)

remote kernel exploits? (andy_mn at hushmail.com (andy_mn@...hmail.com))
remote kernel exploits? (Azerail at supersecretninjaskills.com (Azerail))
remote kernel exploits? (isergevsky at hushmail.com (isergevsky@...hmail.com))
remote kernel exploits? (andy_mn at hushmail.com (andy_mn@...hmail.com))
remote kernel exploits? (Azerail at supersecretninjaskills.com (Azerail))
remote kernel exploits? (andy_mn at hushmail.com (andy_mn@...hmail.com))

September 9 (26 messages)

Flowchart : 7 seats to rule them all (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Guild FTPd Exploit (full-disclosure at mike-c.com (Mike C))
Flowchart : 7 seats to rule them all (gobbles at hush.com (gobbles@...h.com))
Flowchart : 7 seats to rule them all (gobbles at hush.com (gobbles@...h.com))
remote kernel exploits? (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Flowchart : 7 seats to rule them all (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Announcing Project WKPP (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Flowchart : 7 seats to rule them all (gobbles at hush.com (gobbles@...h.com))
Snowdrop: a leak tracking tool (lcamtuf at ghettot.org (Michal Zalewski))
Announcing Project WKPP (gobbles at hush.com (gobbles@...h.com))
List Charter (johnc at grok.org.uk (John Cartwright))
Flowchart : 7 seats to rule them all (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Announcing Project WKPP (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
GLSA: glibc (aliz at gentoo.org (Daniel Ahlberg))
Vulnerabilities in Microsoft's Java implementation (jouko at solutions.fi (Jouko Pynnonen))
[RHSA-2002:188-08] New wordtrans packages fix remote vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[SECURITY] [DSA 159-2] New Python packages fix problem introduced by security fix (debian-security-announce at lists.debian.org (debian-security-announce@...ts.…)
List Charter (rsw at jfet.org (Riad S. Wahby))
List Charter (johnc at grok.org.uk (John Cartwright))
[SECURITY] [DSA 159-2] New Python packages fix problem introduced by security fix (debian-security-announce at lists.debian.org (debian-security-announce@...ts.…)
Re: remote kernel exploits? (jose at monkey.org (Jose Nazario))
Unmask release (dave at immunitysec.com (Dave Aitel))
SecurityFocus.com unavailable... (securityguru at hushmail.com (securityguru@...hmail.com))
[SECURITY] [DSA 163-1] New mhonarc packages fix cross site scripting problems (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
SecurityFocus.com unavailable... (Ken at infosec101.org (Ken Pfeil))
Finding Win2k SP3 with a single packet (0xcd0x80 at hush.com (0xcd0x80@...h.com))

September 10 (20 messages)

MDKSA-2002:057 - krb5 update (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2002:058 - kdelibs update (security at linux-mandrake.com (Mandrake Linux Security Team))
Strange Attractors and TCP/IP Sequence Number Analysis - One Year Later (lcamtuf at ghettot.net (Michal Zalewski))
Re: remote kernel exploits? (sa7ori at broken.blackroses.com (Stephen))
[RHSA-2002:189-08] Updated gaim client fixes URL vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[SECURITY] [DSA 164-1] New cacti package fixes arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
SecurityFocus.com unavailable... (isergevsky at hushmail.com (isergevsky@...hmail.com))
SecurityFocus.com unavailable... (misha at cerber.no (Mikhail Iakovlev))
SecurityFocus.com unavailable... (BlueBoar at thievco.com (Blue Boar))
RE: remote kernel exploits? (Yonatan at xpert.com (Yonatan Bokovza))
IE6 SP1 Notes (thor at pivx.com (Thor Larholm))
XP security hole uplddrvinfo.htm (Paul.Tinsley at phyve.com (Paul Tinsley))
xbreaky symlink vulnerability (m.v.berkum at obit.nl (Marco van Berkum))
SecurityFocus.com unavailable... (dotslash at snosoft.com (KF))
XP security hole uplddrvinfo.htm (Paul.Tinsley at phyve.com (Paul Tinsley))
XP security hole uplddrvinfo.htm (guninski at guninski.com (Georgi Guninski))
XP security hole uplddrvinfo.htm (gobbles at hush.com (gobbles@...h.com))
XP security hole uplddrvinfo.htm (lists.netsys.com at jscript.dk (Thor Larholm))
RE: remote kernel exploits? (nectar at FreeBSD.org (Jacques A. Vidrine))
XP security hole uplddrvinfo.htm (gobbles at hush.com (gobbles@...h.com))

September 11 (58 messages)

MDKSA-2002:059 - php update (security at linux-mandrake.com (Mandrake Linux Security Team))
Off Topic (core at bokeoa.com (Charles Stevenson))
Off Topic (core at bokeoa.com (Charles Stevenson))
Off Topic (misha at cerber.no (Mikhail Iakovlev))
SecurityFocus.com unavailable... (isergevsky at hushmail.com (isergevsky@...hmail.com))
RE: remote kernel exploits? (JGommers at gfo.nl (Gommers, Joep))
SecurityFocus.com unavailable... (ontheroad at tcs.eng.br (Thiago Conde))
poetry.. (scent at mail.pt (Francisco Guerreiro))
Off Topic (dotslash at snosoft.com (KF))
Re: poetry.. (misha at cerber.no (Mikhail Iakovlev))
Off Topic (misha at cerber.no (Mikhail Iakovlev))
Off Topic (jonathan at xcorps.net (Jonathan Rickman))
Off Topic (raymond at dyn.org (Raymond Morsman))
Off Topic (lwc at vapid.ath.cx (Larry W. Cashdollar))
Off Topic (pauls at utdallas.edu (Schmehl, Paul L))
Off Topic (Ken at infosec101.org (Ken Pfeil))
Off Topic (gobbles at hush.com (gobbles@...h.com))
Off Topic (core at bokeoa.com (Charles Stevenson))
Off Topic (gobbles at hush.com (gobbles@...h.com))
Off Topic (gobbles at hush.com (gobbles@...h.com))
Off Topic (aliver at hexeris.mine.nu (Aliver))
Off Topic (dufresne at winternet.com (Ron DuFresne))
Off Topic (pauls at utdallas.edu (Schmehl, Paul L))
Off Topic (dufresne at winternet.com (Ron DuFresne))
Off Topic (raju at linux-delhi.org (Raju Mathur))
Off Topic (raymond at dyn.org (Raymond Morsman))
Full disclosure? (pauls at utdallas.edu (Schmehl, Paul L))
Off Topic (madduck at madduck.net (martin f krafft))
Off Topic (madduck at madduck.net (martin f krafft))
Full disclosure? (johnc at grok.org.uk (John Cartwright))
Re: poetry.. (madduck at madduck.net (martin f krafft))
Full disclosure? (draht at suse.de (Roman Drahtmueller))
Full disclosure? (Howard.Boggs at vigilinx.com (Boggs, Howard E. II))
Off Topic (ka at khidr.net (Ka))
Off Topic (ka at khidr.net (Ka))
IMPORTANT SECURITY ADVISORY PLEASE READ! (ashlieangel86 at hotmail.com (segfault))
Off Topic (fd at rshell.org (Guy Cohen))
Full disclosure? (fd at rshell.org (Guy Cohen))
Full disclosure? (gobbles at hush.com (gobbles@...h.com))
Full disclosure? (gobbles at hush.com (gobbles@...h.com))
Off Topic2 (misha at cerber.no (Mikhail Iakovlev))
Administrivia (johnc at grok.org.uk (John Cartwright))
IMPORTANT SECURITY ADVISORY PLEASE READ! (Ray.Percival at summit.fiserv.com (Percival, Ray))
IMPORTANT SECURITY ADVISORY PLEASE READ! (gobbles at hush.com (gobbles@...h.com))
Off Topic (danielf at supportteam.net (Daniel F. Chief Security Engineer -))
IMPORTANT SECURITY ADVISORY PLEASE READ! (mcgehrin at reverse.net (Matthew McGehrin))
IMPORTANT SECURITY ADVISORY PLEASE READ! (niels=netsys at bakker.net (Niels Bakker))
Fwd: Re: Full disclosure? (gobbles at hush.com (gobbles@...h.com))
Off Topic (gobbles at hush.com (gobbles@...h.com))
IMPORTANT SECURITY ADVISORY PLEASE READ! (gobbles at hush.com (gobbles@...h.com))
Off Topic (NTowey at iss.net (Towey, Neal (ISS Atlanta)))
Off Topic (gobbles at hush.com (gobbles@...h.com))
Fwd: Re: Full disclosure? (madduck at madduck.net (martin f krafft))
Fwd: Re: Full disclosure? (gobbles at hush.com (gobbles@...h.com))
Fwd: Re: Full disclosure? (cybrspy at comcast.net (CybrSpy))
Off Topic (ts at securityoffice.net (Tamer Sahin))
Administriviality (len at netsys.com (Len Rose))
Re: full disclosure? (aliver at hexeris.mine.nu (Aliver))

September 12 (30 messages)

Re: IMPORTANT SECURITY ADVISORY PLEASE READ! (coley at linus.mitre.org (Steven M. Christey))
Re: FWD: Re: Off Topic (draht at suse.de (Roman Drahtmueller))
Happy 911 America Death Day from Snosoft (dotslash at snosoft.com (KF))
Happy 911 America Death Day from Snosoft (dotslash at snosoft.com (KF))
Happy 911 America Death Day from Snosoft (dotslash at snosoft.com (KF))
Re: FWD: Re: Off Topic (niels=netsys at bakker.net (Niels Bakker))
Re: FWD: Re: Off Topic (dotslash at snosoft.com (KF))
Happy 911 America Death Day from Snosoft (simon at snosoft.com (ATD))
IMPORTANT SECURITY ADVISORY PLEASE READ! (snurfle at phreaker.net (s n u r f l e))
Off Topic (snurfle at phreaker.net (s n u r f l e))
owning /dev/[u]random (aliver at hexeris.mine.nu (Aliver))
Off Topic (gml at phrick.net (gml))
[V4GU3-Disclosure ADVISORY]: MAJOR SECURITY RISK! (ashlieangel86 at hotmail.com (segfault))
Re: owning /dev/[u]random (silvio at big.net.au (silvio@....net.au))
Off Topic + the two Chris's (snurfle at phreaker.net (s n u r f l e))
RE: remote kernel exploits? (andy_mn at hushmail.com (andy_mn@...hmail.com))
glibc 2.1.3 linuxthreads sigaction (silvio at big.net.au (silvio@....net.au))
ht://Check XSS (ulfh at update.uu.se (Ulf Harnhammar))
Administrivia: Regarding Missing Posts (johnc at grok.org.uk (John Cartwright))
Bypassing SMTP Content Protection with a Flick of a Button (aviram at beyondsecurity.com (Aviram Jenik))
Administrivia: Regarding Missing Posts (pauls at utdallas.edu (Schmehl, Paul L))
[SECURITY] [DSA 165-1] New PostgreSQL packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
Re: PHP fopen() CRLF Injection (ulfh at update.uu.se (Ulf Harnhammar))
Off Topic (full-disclosure at lists.netsys.com (Full Disclosure))
Online Crypto book (Ray.Percival at summit.fiserv.com (Percival, Ray))
Off Topic (gobbles at mail.com (Gobbles ))
Administrivia: Regarding Missing Posts (dufresne at winternet.com (Ron DuFresne))
Off Topic (nexus at patrol.i-way.co.uk (Nexus))
Off Topic (snurfle at phreaker.net (s n u r f l e))
Off Topic (snurfle at phreaker.net (s n u r f l e))

September 13 (15 messages)

Online Crypto book (admin at xenosystems.org (Xsecurity.ws))
Online Crypto book (lionel at phidani.be (Lionel Ferette))
RE: remote kernel exploits? (JGommers at gfo.nl (Gommers, Joep))
RE: remote kernel exploits? (halbasus at go.ro (HalbaSus))
RE: remote kernel exploits? (silvio at big.net.au (silvio@....net.au))
RE: remote kernel exploits? (silvio at big.net.au (silvio@....net.au))
[SECURITY] [DSA 166-1] New purity packages fix potential buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.o…)
RE: remote kernel exploits? (isergevsky at hushmail.com (isergevsky@...hmail.com))
Off Topic (gobbles at hush.com (gobbles@...h.com))
RE: remote kernel exploits? (andrew at generator.co.za (Andrew Thomas))
[RHSA-2002:036-26] Updated ethereal packages available (bugzilla at redhat.com (bugzilla@...hat.com))
RE: remote kernel exploits? (gml at phrick.net (gml))
OpenSSL Worm ? (ka at khidr.net (Ka))
RE: remote kernel exploits? (nick at virus-l.demon.co.uk (Nick FitzGerald))
win2k incident -- been hacked (harshul at ealcatraz.com (Harshul Nayak (lealcatraz)))

September 14 (17 messages)

OpenSSL Worm ? (epic at hack3r.com (EPiC))
RE: remote kernel exploits? (gml at phrick.net (gml))
OpenSSL Worm ? (len at netsys.com (Len Rose))
OpenSSL Worm ? (jonathan at xcorps.net (Jonathan Rickman))
OpenSSL Worm ? (david.kennedy at acm.org (David Kennedy CISSP))
OpenSSL Worm ? (solareclipse at phreedom.org (Solar Eclipse))
OpenSSL Worm ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
OpenSSL Worm ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
~el9.1 (bastedturkey at hushmail.com (bastedturkey@...hmail.com))
OpenSSL Worm ? (delta at FaVeVe.Uni-Stuttgart.de (Helmut Springer))
CERT..(the linux ssl issue) CA-2002-027 (len at netsys.com (Len Rose))
Fw: W3C HTML Validator XSS Hole (mattmurphy at kc.rr.com (Matthew Murphy))
W3C CSS Validator -- Proxying Attack (mattmurphy at kc.rr.com (Matthew Murphy))
CERT..(the linux ssl issue) CA-2002-027 (fd at rshell.org (Guy Cohen))
CERT..(the linux ssl issue) CA-2002-027 (len at netsys.com (Len Rose))
CERT..(the linux ssl issue) CA-2002-027 (niels=netsys at bakker.net (Niels Bakker))
Lycos HTMLGear Guestbook Script Injection Vulnerability (mattmurphy at kc.rr.com (Matthew Murphy))

September 15 (31 messages)

FWD: The journal of the black fist (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
FWD: The journal of the black fist (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
(no subject) (sockz at email.com (sockz loves you))
ALERT ALERT ALERT! google under attack ALERT ALERT ALERT! (silvio at big.net.au (silvio@....net.au))
(no subject) (silvio at big.net.au (silvio@....net.au))
ALERT ALERT ALERT! google under attack ALERT ALERT ALERT! (lists.netsys.com at jscript.dk (Thor Larholm))
ALERT ALERT ALERT! google under attack ALERT ALERT ALERT! (conrad at fringehead.org (Conrad Heiney))
ALERT ALERT ALERT! google under attack ALERT ALERT ALERT! (silvio at big.net.au (silvio@....net.au))
openbsd /bin/ls advisory (oh erm.. ALERT) (silvio at big.net.au (silvio@....net.au))
glibc pedant (silvio at big.net.au (silvio@....net.au))
ATTENTION Local Root ATTENTION (drdre at hush.com (drdre@...h.com))
ATTENTION Local Root ATTENTION (drdre at hush.com (drdre@...h.com))
ATTENTION Local Root ATTENTION (gbroiles at parrhesia.com (Greg Broiles))
C initialization of static objects (was: ALERT ALERT ALERT! google under attack ALERT ALERT ALERT!) (nectar at FreeBSD.org (Jacques A. Vidrine))
C initialization of static objects (was: ALERT ALERT ALERT! google under attack ALERT ALERT ALERT!) (nectar at celabo.org (Jacques A. Vidrine))
ATTENTION Local Root ATTENTION (draht at suse.de (Roman Drahtmueller))
ATTENTION Local Root ATTENTION (nexus at patrol.i-way.co.uk (Nexus))
Ac1d, B1tch3z, and Hype: WhiteHats Among Us: Volume I - a Black Paper (theblackfist at hushmail.com (theblackfist@...hmail.com))
ALERT ALERT plaintext passwords in linux ALERT ALERT (ppan at hushmail.com (ppan@...hmail.com))
ALERT ALERT plaintext passwords in linux ALERT ALERT (ppan at hushmail.com (ppan@...hmail.com))
(no subject) (sockz at email.com (sockz loves you))
ALERT ALERT plaintext passwords in linux ALERT ALERT (misha at cerber.no (Mikhail Iakovlev))
ALERT ALERT plaintext passwords in linux ALERT ALERT (fd at rshell.org (Guy Cohen))
ALERT ALERT plaintext passwords in linux ALERT ALERT (madduck at madduck.net (martin f krafft))
Altavista BabelFish XSS Hole (mattmurphy at kc.rr.com (Matthew Murphy))
ALERT ALERT plaintext passwords in linux ALERT ALERT (ka at khidr.net (Ka))
ALERT ALERT plaintext passwords in linux ALERT ALERT (whitevampire at mindless.com (White Vampire))
Re: C initialization of static objects (was: ALERT ALERT ALERT! google under attack ALERT ALERT ALERT!) (silvio at big.net.au (silvio@....net.au))
ALERT ALERT plaintext passwords in linux ALERT ALERT (silvio at big.net.au (silvio@....net.au))
(no subject) (silvio at big.net.au (silvio@....net.au))
sandboxing (silvio at big.net.au (silvio@....net.au))

September 16 (26 messages)

Re: C initialization of static objects (was: ALERT ALERT ALERT! google under attack ALERT ALERT ALERT!) (lcamtuf at ghettot.org (Michal Zalewski))
ALERT ALERT plaintext passwords in linux ALERT ALERT (lcamtuf at ghettot.org (Michal Zalewski))
ALERT ALERT plaintext passwords in linux ALERT ALERT (silvio at big.net.au (silvio@....net.au))
Re: C initialization of static objects (was: ALERT ALERT ALERT! google under attack ALERT ALERT ALERT!) (silvio at big.net.au (silvio@....net.au))
1 advantage for implicit static storage init (silvio at big.net.au (silvio@....net.au))
sandboxing (lcamtuf at ghettot.org (Michal Zalewski))
sandboxing (silvio at big.net.au (silvio@....net.au))
Re: C initialization of static objects (was: ALERT ALERT ALERT! google under attack ALERT ALERT ALERT!) (lcamtuf at ghettot.org (Michal Zalewski))
Re: C initialization of static objects (was: ALERT ALERT ALERT! google under attack ALERT ALERT ALERT!) (dotho at mordikyn.dynu.com (Dotho))
[SECURITY] [DSA-136-2] Multiple OpenSSL problems (update) (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Re: qmail exploits (fooldisclosure at hushmail.com (fooldisclosure@...hmail.com))
re: rant by fooldisclosure (farkle at hushmail.com (farkle@...hmail.com))
Are PHC going to ultimately secure more work for "Security Consultants"? (fulldisclose at uuuppz.com (James Martin))
Are PHC going to ultimately secure more work for "Security Consultants"? (fulldisclose at uuuppz.com (James Martin))
[SECURITY] [DSA 167-1] New kdelibs fix cross site scripting bug (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Are PHC going to ultimately secure more work for "Security Consultants"? (steve at entrenchtech.com (Steve Manzuik))
Are PHC going to ultimately secure more work for "Security Consultants"? (hellnbak at nmrc.org (hellNbak))
iDEFENSE Security Advisory 09.16.2002: FreeBSD Ports libkvm Security Vulnerabilities (dendler at idefense.com (David Endler))
FreeBSD Security Advisory FreeBSD-SA-02:39.libkvm (security-advisories at FreeBSD.ORG (FreeBSD Security Advisories))
Re: qmail exploits (nfernandes at securitytimes.com (Nuno Fernandes))
Re: qmail exploits (jacob.winther at irmplc.com (Jacob Winther))
Linux Slapper Worm code (sert at snosoft.com (John Scimone))
Re: Linux Slapper Worm code (dotslash at snosoft.com (KF))
openssl exploit code (solareclipse at phreedom.org (Solar Eclipse))
openssl exploit code (hellnbak at nmrc.org (hellNbak))
openssl exploit code (core at bokeoa.com (Charles Stevenson))

September 17 (50 messages)

openssl exploit code (arjen.de.landgraaf at cologic.co.nz (Arjen De Landgraaf))
Re: qmail exploits (shiftee at manifestation.org (shiftee))
openssl exploit code (solareclipse at phreedom.org (Solar Eclipse))
ALERT ALERT plaintext passwords in linux ALERT ALERT (johnpf at atnet.net.au (John))
openssl exploit code (hellnbak at nmrc.org (hellNbak))
Re: qmail exploits (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Re: qmail exploits (nfernandes at securitytimes.com (Nuno Fernandes))
Multiple NetBSD Security Advisories Released/Updated (security-officer at netbsd.org (NetBSD Security Officer))
openssl exploit code (hellnbak at nmrc.org (hellNbak))
NetBSD Security Advisory 2002-006: buffer overrun in libc/libresolv DNS resolver (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-007: Repeated TIOCSCTTY ioctl can corrupt session hold counts (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-009: (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-010: symlink race in pppd (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-013: Bug in NFS server code allows remote denial of service (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-011: Sun RPC XDR decoder contains buffer overflow (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-014: fd_set overrun in mbone tools and pppd (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-012: buffer overrun in setlocale (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-017: shutdown(s, SHUT_RD) on TCP socket does not work as intended (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-018: Multiple security isses with kfd daemon (security-officer at netbsd.org (NetBSD Security Officer))
Re: qmail exploits (silvio at big.net.au (silvio@....net.au))
openssl exploit code (solareclipse at phreedom.org (Solar Eclipse))
openssl exploit code (BlueBoar at thievco.com (Blue Boar))
Trillian .74 and below, ident flaw. (fitzies at hotmail.com (Lance Fitz-Herbert))
unsubscribe 1wingara1 (alex at rnsinternational.com.au (Alexander Romanov))
http://security.tombom.co.uk/moreshatter.html (guninski at guninski.com (Georgi Guninski))
ALERT ALERT plaintext passwords in linux ALERT ALERT (ppan at hushmail.com (ppan@...hmail.com))
openssl exploit code (Weimer at CERT.Uni-Stuttgart.DE (Florian Weimer))
[SECURITY] [DSA-136-3] Multiple OpenSSL problems (update) (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
http://security.tombom.co.uk/moreshatter.html (pauls at utdallas.edu (Schmehl, Paul L))
openssl exploit code (hellnbak at nmrc.org (hellNbak))
openssl exploit code (ib at clusterfsck.net (Isaak Bloodlore))
openssl exploit code (Weimer at CERT.Uni-Stuttgart.DE (Florian Weimer))
http://security.tombom.co.uk/moreshatter.html (guninski at guninski.com (Georgi Guninski))
openssl exploit code (jonathan at xcorps.net (Jonathan Rickman))
what's to come (zan at stargeek.com (zan))
http://security.tombom.co.uk/moreshatter.html (hellnbak at nmrc.org (hellNbak))
openssl exploit code (hellnbak at nmrc.org (hellNbak))
Remote detection of vulnerable OpenSSL versions (Weimer at CERT.Uni-Stuttgart.DE (Florian Weimer))
OMG OMG BlueBoar OMG OMG Read all about it (ppan at hushmail.com (ppan@...hmail.com))
openssl exploit code (ib at clusterfsck.net (Isaak Bloodlore))
openssl exploit code (guninski at guninski.com (Georgi Guninski))
openssl exploit code (Ken at infosec101.org (Ken Pfeil))
unsubscribe 1wingara1 (gobbles at hush.com (gobbles@...h.com))
bugtraq-byebye.c (mmiller at hick.org (Matt Miller))
Remote exploit and vulnerability scanner for the OpenSSL KEY_ARG buffer overflow (solareclipse at phreedom.org (Solar Eclipse))
PHC? (AnyonegotCoke at aol.com (AnyonegotCoke@....com))
Remote exploit and vulnerability scanner for the OpenSSL KEY_ARG buffer overflow (core at bokeoa.com (Charles Stevenson))
PHC? (epic at hack3r.com (EPiC))
openssl exploit code (arjen.de.landgraaf at cologic.co.nz (Arjen De Landgraaf))
Re: Linux Slapper Worm code (removal) (dotslash at snosoft.com (KF))

September 18 (72 messages)

win2k incident (harshul at ealcatraz.com (Harshul Nayak (ealcatraz)))
Important Information Regarding Suspected Al Quaida Member (ashlieangel86 at hotmail.com (segfault))
Important Information Regarding Suspected Al Quaida Member (whitevampire at mindless.com (White Vampire))
[Fwd: Copyright abuse on online.securityfocus.com] (guninski at guninski.com (Georgi Guninski))
SuSE Security Announcement: xf86 (SuSE-SA:2002:032) (krahmer at suse.de (Sebastian Krahmer))
Are PHC going to ultimately secure more work for (sockz at email.com (sockz loves you))
[SECURITY] [DSA 168-1] New PHP packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
what's to come chapter 1. (zan at stargeek.com (zan))
remote kernel exploits? (blake at mc.net (Blake Frantz))
[Fwd: Copyright abuse on online.securityfocus.com] (gobbles at hush.com (gobbles@...h.com))
openssl exploit code (e-secure-it owned) (andrew at generator.co.za (Andrew Thomas))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
openssl exploit code (e-secure-it owned) (hellnbak at nmrc.org (hellNbak))
Cisco Security Advisory: Cisco VPN 5000 Client Multiple Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
IRIX IGMP multicast report Denial of Service vulnerability (agent99 at sgi.com (SGI Security Coordinator))
IRIX default root umask and coredumps (agent99 at sgi.com (SGI Security Coordinator))
openssl exploit code (e-secure-it owned) (core at bokeoa.com (Charles Stevenson))
what's to come chapter 1. (zan at stargeek.com (zan))
Re: what's to come chapter 1. (zan at stargeek.com (zan))
Are PHC going to ultimately secure more work for (nfernandes at securitytimes.com (Nuno Fernandes))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
Re: what's to come chapter 1. (zan at stargeek.com (zan))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
Cisco Security Advisory: Microsoft Windows SMB Denial of Service Vulnerabilities in Cisco Products - MS02-045 (psirt at cisco.com (Cisco Systems Product Securit…)
Re: what's to come chapter 1. (nfernandes at securitytimes.com (Nuno Fernandes))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
FW: [Customerconnect] Important Information re: Internet Scanner 6.2.1 (fwd) (hellnbak at nmrc.org (hellNbak))
hushmail morons (mcgehrin at reverse.net (Matthew McGehrin))
Re: what's to come chapter 1. (nfernandes at securitytimes.com (Nuno Fernandes))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
Gobbles=Blow me (mcgehrin at reverse.net (Matthew McGehrin))
Re: what's to come chapter 1. (zan at stargeek.com (zan))
Re: what's to come chapter 1. (nfernandes at securitytimes.com (Nuno Fernandes))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
Re: what's to come chapter 1. (nfernandes at securitytimes.com (Nuno Fernandes))
hushmail morons (gobbles at hush.com (gobbles@...h.com))
Re: what's to come chapter 1. (crypto-boy at llnl.gov (David Youd))
Re: what's to come chapter 1. (naked_turkey at hushmail.com (naked_turkey@...hmail.com))
Re: what's to come chapter 1. (nfernandes at securitytimes.com (Nuno Fernandes))
hushmail morons (nfernandes at securitytimes.com (Nuno Fernandes))
hushmail morons (gobbles at hush.com (gobbles@...h.com))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
hushmail morons (nfernandes at securitytimes.com (Nuno Fernandes))
Re: what's to come chapter 1. (nfernandes at securitytimes.com (Nuno Fernandes))
blackfist(posted on request from prophet) (zan at stargeek.com (zan))
Re: what's to come chapter 1. (nfernandes at securitytimes.com (Nuno Fernandes))
Gobbles=Blow me (gobbles at hush.com (gobbles@...h.com))
hushmail morons (gobbles at hush.com (gobbles@...h.com))
Re: what's to come chapter 1. (pseud0 at hush.com (pseud0@...h.com))
Re: what's to come chapter 1. (johnc at grok.org.uk (John Cartwright))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (gobbles at hush.com (gobbles@...h.com))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
hushmail morons (gobbles at hush.com (gobbles@...h.com))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
Re: what's to come chapter 1. (nfernandes at securitytimes.com (Nuno Fernandes))
iDEFENSE Security Advisory 09.18.2002: Security Vulnerabilities in OSF1/Tru64 3. (dendler at idefense.com (David Endler))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
Gobble = Moron (mcgehrin at reverse.net (Matthew McGehrin))
Re: what's to come chapter 1. (gobbles at hush.com (gobbles@...h.com))
Re: what's to come chapter 1. (jonathan at xcorps.net (Jonathan Rickman))
all explained (gobbles at hush.com (gobbles@...h.com))
openssl exploit code (e-secure-it owned) (andrew at generator.co.za (Andrew Thomas))
Gobbles=Blow me (mcgehrin at reverse.net (Matthew McGehrin))
Gobble = Moron (gobbles at hush.com (gobbles@...h.com))
Gobbles=Blow me (gobbles at hush.com (gobbles@...h.com))
iDEFENSE Security Advisory 09.18.2002: Security Vulnerabilities in OSF1/Tru64 3. (dotslash at snosoft.com (KF))
Re: Rants, flames etc. (was Re: what's to come chapter 1.) (engelbert.tristram at succurit.com (Engelbert J. R. Tristram))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (dmca at hackmania.net (dmca))
[Fwd: Copyright abuse on online.securityfocus.com] (guninski at guninski.com (Georgi Guninski))

September 19 (95 messages)

blackfist(posted on request from prophet) (sockz at email.com (sockz loves you))
Are PHC going to ultimately secure more work for (sockz at email.com (sockz loves you))
blackfist(posted on request from prophet) (sockz at email.com (sockz loves you))
Fwd: BigtitsXXXMag Password Confirmation (gobbles at hush.com (gobbles@...h.com))
blackfist(posted on request from prophet) (gobbles at hush.com (gobbles@...h.com))
Mozilla vulnerabilities, an update (lists.netsys.com at jscript.dk (Thor Larholm))
Friends....... (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
KPMG-2002035: IBM Websphere Large Header DoS (pgrundl at kpmg.dk (Peter Gründl))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (misha at cerber.no (Mikhail Iakovlev))
openssl exploit code (e-secure-it owned) (arjen.de.landgraaf at cologic.co.nz (Arjen De Landgraaf))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (GKornblum at guesswho.com (Gregory Kornblum))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (GKornblum at guesswho.com (Gregory Kornblum))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (misha at cerber.no (Mikhail Iakovlev))
blackfist(posted on request from prophet) (sockz at email.com (sockz loves you))
iDEFENSE Security Advisory (euan_briggs at btinternet.com (Euan))
Re: MS-02-052 (dev-null at no-id.com (dev-null@...id.com))
openssl exploit code (e-secure-it owned) (hellnbak at nmrc.org (hellNbak))
blackfist(posted on request from prophet) (gobbles at hush.com (gobbles@...h.com))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (gobbles at hush.com (gobbles@...h.com))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (gobbles at hush.com (gobbles@...h.com))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (gobbles at hush.com (gobbles@...h.com))
Fwd: Fwd: Stop that (gobbles at hush.com (gobbles@...h.com))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (gobbles at hush.com (gobbles@...h.com))
Fwd: Goodbye from R.A.P.E.-Traq (gobbles at hush.com (gobbles@...h.com))
Fwd: Welcome to thenakedpc (gobbles at hush.com (gobbles@...h.com))
blackfist(posted on request from prophet) (gobbles at hush.com (gobbles@...h.com))
Fwd: Confirmation e-mail (gobbles at hush.com (gobbles@...h.com))
Re: Perplexed (gobbles at hush.com (gobbles@...h.com))
Trillian .73 & .74 "PRIVMSG" Overflow. (fitzies at hotmail.com (Lance Fitz-Herbert))
openssl exploit code (e-secure-it owned) (nexus at patrol.i-way.co.uk (Nexus))
Fwd: Goodbye from R.A.P.E.-Traq (naked_turkey at hushmail.com (naked_turkey@...hmail.com))
openssl exploit code (e-secure-it owned) (ib at clusterfsck.net (Isaak Bloodlore))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (gobbles at hush.com (gobbles@...h.com))
Fwd: [TNPC] Car Shopping, Fisher Musings, Busses, WinXP SP1 (gobbles at hush.com (gobbles@...h.com))
blackfist(posted on request from prophet) (gobbles at hush.com (gobbles@...h.com))
Fwd: Welcome to thenakedpc (asi at whitey.org (asi))
Fwd: Goodbye from R.A.P.E.-Traq (gobbles at hush.com (gobbles@...h.com))
Fwd: Welcome to thenakedpc (gobbles at hush.com (gobbles@...h.com))
Re: Perplexed (gobbles at hush.com (gobbles@...h.com))
Re: LOL (gobbles at hush.com (gobbles@...h.com))
Re: LOL (gobbles at hush.com (gobbles@...h.com))
Re: LOL (gobbles at hush.com (gobbles@...h.com))
Re: LOL (gobbles at hush.com (gobbles@...h.com))
Re: LOL (gobbles at hush.com (gobbles@...h.com))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (Azerail at supersecretninjaskills.com (Azerail))
Save a bug, jail a blackhat (gobbles at hush.com (Goobles))
Fwd: Welcome to thenakedpc (Azerail at supersecretninjaskills.com (Azerail))
Save a bug, jail a blackhat (gobbles at hush.com (Goobles))
Save a bug, jail a blackhat (gobbles at hush.com (Goobles))
Save a bug, jail a blackhat (gobbles at hush.com (Goobles))
Save a bug, jail a blackhat (gobbles at hush.com (Goobles))
Save a bug, jail a blackhat (gobbles at hush.com (Goobles))
Re: Save a bug, jail a blackhat (gobbles at hush.com (gobbles@...h.com))
Save a bug, jail a blackhat (gobbles at hush.com (Goobles))
Save a bug, jail a blackhat (gobbles at hush.com (Goobles))
Save a bug, jail a blackhat (gobbles at hush.com (Goobles))
Fwd: Save a bug, jail a blackhat (gobbles at hush.com (gobbles@...h.com))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (gobbles at hush.com (gobbles@...h.com))
Save a bug, jail a blackhat (gobbles at hush.com (Goobles))
Fwd: Save a bug, jail a blackhat (gobbles at hush.com (gobbles@...h.com))
Fwd: Save a bug, jail a blackhat (gobbles at hush.com (gobbles@...h.com))
Fwd: Welcome to thenakedpc (gobbles at hush.com (gobbles@...h.com))
Save a bug, jail a blackhat (gobbles at hush.com (gobbles@...h.com))
Fwd: Save a bug, jail a blackhat (zan at stargeek.com (zan))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (zan at stargeek.com (zan))
Fwd: Save a bug, jail a blackhat (zan at stargeek.com (zan))
Save a bug, jail a blackhat (zan at stargeek.com (zan))
Fwd: Save a bug, jail a blackhat (zan at stargeek.com (zan))
Save a bug, jail a blackhat (gobbles at hush.com (gobbles@...h.com))
Administrivia (len at netsys.com (Len Rose))
Administrivia (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Fwd: Save a bug, jail a blackhat (gobbles at hush.com (gobbles@...h.com))
Administrivia (dotslash at snosoft.com (KF))
Fwd: iM 313373 gIvE mE wArEz d00d! (gobbles at hush.com (gobbles@...h.com))
Empircal Security Advisory: Otis Elevator Vulnerability (empirical at hushmail.com (empirical@...hmail.com))
Re: MS-02-052 (nick at virus-l.demon.co.uk (Nick FitzGerald))
Fwd: iM 313373 gIvE mE wArEz d00d! (gobbles at hush.com (gobbles@...h.com))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (misha at cerber.no (Mikhail Iakovlev))
Fwd: iM 313373 gIvE mE wArEz d00d! (gobbles at hush.com (gobbles@...h.com))
blackfist(posted on request from prophet) (misha at cerber.no (Mikhail Iakovlev))
iDEFENSE Security Advisory 09.18.2002: Security Vulnerabilities in OSF1/Tru64 3. (coley at linus.mitre.org (Steven M. Christey))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (misha at cerber.no (Mikhail Iakovlev))
Re: [+] DESTROY FAKE RESEARCH LABS NOW... (misha at cerber.no (Mikhail Iakovlev))
Save a bug, jail a blackhat (misha at cerber.no (Mikhail Iakovlev))
Fwd: Welcome to thenakedpc (misha at cerber.no (Mikhail Iakovlev))
Fwd: iM 313373 gIvE mE wArEz d00d! (misha at cerber.no (Mikhail Iakovlev))
iDEFENSE Security Advisory 09.18.2002: Security Vulnerabilities in OSF1/Tru64 3. (coley at linus.mitre.org (Steven M. Christey))
RE: Administrivia (chickenshitter at hushmail.com (chickenshitter@...hmail.com))
iDEFENSE OSF1/Tru64 3.x vuln clarification (dotslash at snosoft.com (KF))
iDEFENSE Security Advisory 09.18.2002: Security Vulnerabilities in OSF1/Tru64 3. (coley at linus.mitre.org (Steven M. Christey))
Storage limit exceeded. Please delete some mail. (fwd) (misha at cerber.no (Mikhail Iakovlev))
Fwd: iM 313373 gIvE mE wArEz d00d! (ts at securityoffice.net (Tamer Sahin))
RE: Administrivia (winterslip at hushmail.com (winterslip@...hmail.com))
Re: MS-02-052 (jouko at solutions.fi (Jouko Pynnonen))
another topic, was Re: RE: Administrivia (silvio at big.net.au (silvio@....net.au))

September 20 (50 messages)

Empirical Security Advisory: New Otis Elevator Vulnerability (empirical at hushmail.com (empirical@...hmail.com))
RE: Administrivia (empirical at hushmail.com (empirical@...hmail.com))
another topic, was Re: RE: Administrivia (phc at hush.com (phc@...h.com))
[Fwd: Copyright abuse on online.securityfocus.com] (lcamtuf at ghettot.org (Michal Zalewski))
ltrace, was Re: RE: Administrivia (silvio at big.net.au (silvio@....net.au))
Empirical Security Advisory: New Otis Elevator Vulnerability (gml at phrick.net (gml))
[Fwd: Copyright abuse on online.securityfocus.com] (silvio at big.net.au (silvio@....net.au))
simple ltrace trick, was Re: blackfist(posted on request from prophet) (silvio at big.net.au (silvio@....net.au))
Serious Problem in OSF1 spe175 V5.1 1885 alpha ( Thanks KF) (theblackfist at hushmail.com (theblackfist@...hmail.com))
Serious Problem in OSF1 spe175 V5.1 1885 alpha ( Thanks KF) (phc at hush.com (phc@...h.com))
Empirical Security Advisory: New Otis Elevator Vulnerability (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Serious Problem in OSF1 spe175 V5.1 1885 alpha ( Thanks KF) (dotslash at snosoft.com (elguapo))
greyhat-IS-whitehat? (core at bokeoa.com (Charles Stevenson))
RE: EMPIRICAL SECURITY ADVISORY 0x02 (hellnbak at nmrc.org (hellNbak))
greyhat-IS-whitehat? (phc at hush.com (phc@...h.com))
we should block: hushmail.com, hush.com (mcgehrin at reverse.net (Matthew McGehrin))
we should block: hushmail.com, hush.com (measl at mfn.org (Alif The Terrible))
gated 3.6 ripquery, was Re: we should block: hushmail.com, hush.com (silvio at big.net.au (silvio@....net.au))
we should block: hushmail.com, hush.com (delta at faveve.uni-stuttgart.de (Helmut Springer))
greyhat-IS-whitehat? (phc at hushmail.com (phc@...hmail.com))
RE: Administrivia (geier at psi5.com (Simon Richter))
greyhat-IS-whitehat? (dotslash at snosoft.com (KF))
RE: Administrivia (ka at khidr.net (Ka))
we should block: hushmail.com, hush.com (pauls at utdallas.edu (Schmehl, Paul L))
greyhat-IS-whitehat? (core at bokeoa.com (Charles Stevenson))
Alsasound local b0f (not an issue if not setuid root) (dotslash at snosoft.com (KF))
RE: Administrivia (steve at videogroup.com (Steve))
Re: MS-02-052 (steve at videogroup.com (Steve))
Re: MS-02-052 (nexus at patrol.i-way.co.uk (Nexus))
Re: MS-02-052 (naked_turkey at hushmail.com (naked_turkey@...hmail.com))
Re: MS-02-052 (gobbles at hush.com (gobbles@...h.com))
RE: EMPIRICAL SECURITY ADVISORY 0x02 (empirical at hushmail.com (empirical@...hmail.com))
greyhat-IS-whitehat? (phc at hush.com (phc@...h.com))
Re: MS-02-052 (phc at hush.com (phc@...h.com))
we should block: hushmail.com, hush.com (patrick.oonk at pine.nl (Patrick Oonk))
iDEFENSE OSF1/Tru64 3.x vuln clarification (iaf at cert.org (Ian A. Finlay))
Re: MS-02-052 (jlauro at michonline.net (John))
Re: MS-02-052 (steve at videogroup.com (Steve))
Yet Another. Trillian 'JOIN' Overflow. (fitzies at hotmail.com (Lance Fitz-Herbert))
Empirical Security Advisory 0x02 update (empirical at hushmail.com (empirical@...hmail.com))
Re: (empirical at hushmail.com (empirical@...hmail.com))
we should block: hushmail.com, hush.com (mcgehrin at reverse.net (Matthew McGehrin))
Re: MS-02-052 (nexus at patrol.i-way.co.uk (Nexus))
Re: (gobbles at mail.com (Gobbles ))
Re: (rossd at me.berkeley.edu (rossd@...berkeley.edu))
Referrer log show some details about internal network (pb at bieringer.de (Peter Bieringer))
we should block: hushmail.com, hush.com (madduck at madduck.net (martin f krafft))
this list (madduck at madduck.net (martin f krafft))
we should block: hushmail.com, hush.com (david.vincent at mightyoaks.com (David Vincent))
Re: MS-02-052 (dev-null at no-id.com (dev-null@...id.com))

September 21 (12 messages)

quick and ugly DoS with php (rcs at rshell.org (Guy Cohen))
Re: MS-02-052 + blackholing MS (SMoyer at rgare.com (Moyer, Shawn))
we should block: hushmail.com, hush.com (SMoyer at rgare.com (Moyer, Shawn))
quick and ugly DoS with php (lcamtuf at ghettot.org (Michal Zalewski))
Re: MS-02-052 (SMoyer at rgare.com (Moyer, Shawn))
RE: EMPIRICAL SECURITY ADVISORY 0x02 (SMoyer at rgare.com (Moyer, Shawn))
we should block: hushmail.com, hush.com (SMoyer at rgare.com (Moyer, Shawn))
MS Updates, Was : MS-02-052 (nexus at patrol.i-way.co.uk (Nexus))
we should block: hushmail.com, hush.com (misha at cerber.no (Mikhail Iakovlev))
[Fwd: Copyright abuse on online.securityfocus.com] (guninski at guninski.com (Georgi Guninski))
Saturday Zine to Read . (theblackfist at hushmail.com (theblackfist@...hmail.com))
And Again. Trillian 'raw 221' Overflow. (fitzies at hotmail.com (Lance Fitz-Herbert))

September 22 (4 messages)

*sigh* Trillian multiple DoS's flaws. (fitzies at hotmail.com (Lance Fitz-Herbert))
Blackfist Sunday Sermon, Prayer Meeting & 10k wizard funnypages (theblackfist at hushmail.com (theblackfist@...hmail.com))
Interesting email trick (nexus at patrol.i-way.co.uk (Nexus))
OT: M$ Proxy Server (madduck at madduck.net (martin f krafft))

September 23 (21 messages)

JAWmail XSS (ulfh at update.uu.se (Ulf Harnhammar))
OT: M$ Proxy Server (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Blackfist Sunday Sermon, Prayer Meeting & 1 0k wizard funnypages (SMoyer at rgare.com (Moyer, Shawn))
NetBSD Security Advisory YYYY-NNN: {brief description of SA} (security-officer at netbsd.org (NetBSD Security Officer))
OT: M$ Proxy Server (nicob at nicob.net (Nicob))
Technical information about the vulnerabilities fixed by MS-02-52 (jouko at solutions.fi (Jouko Pynnonen))
The last word on the Linux Slapper worm (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
The last word on the Linux Slapper worm (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Technical information about the vulnerabilities fixed by MS-02-52 (guninski at guninski.com (Georgi Guninski))
The last word on the Linux Slapper worm (dufresne at winternet.com (Ron DuFresne))
Technical information about the vulnerabilities fixed by MS-02-52 (jouko at solutions.fi (Jouko Pynnonen))
Technical information about the vulnerabilities fixed by MS-02-52 (guninski at guninski.com (Georgi Guninski))
Shawn Moyer is a spook ( and not a very good one) (theblackfist at hushmail.com (theblackfist@...hmail.com))
Re: PHP source injection in phpWebSite (avart at gmx.de (avart@....de))
(no subject) (mutex at hushmail.com (mutex@...hmail.com))
Shawn Moyer is a spook ( and not a very good one) (misha at cerber.no (Mikhail Iakovlev))
OT: M$ Proxy Server (madduck at madduck.net (martin f krafft))
OT: M$ Proxy Server (madduck at madduck.net (martin f krafft))
Re: MS-02-052 + blackholing MS (lists_full-disclosure at darkuncle.net (lists_full-disclosure@...kuncle.net))
iDEFENSE Security Advisory 09.23.2002: Directory Traversal in Dino's Webserver (dendler at idefense.com (David Endler))
Shawn Moyer is a spook ( and not a very good one) (gobbles at hush.com (gobbles@...h.com))

September 24 (14 messages)

MDKSA-2002:060 - tcltk update (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2002:061 - glibc update (security at linux-mandrake.com (Mandrake Linux Security Team))
RE: MS-02-052 + blackholing MS (junkmail at barnowl.com (Rob Rosenberger))
Administrivia (SMoyer at rgare.com (Moyer, Shawn))
Administrivia (core at bokeoa.com (Charles Stevenson))
AW: Re: MS-02-052 + blackholing MS (vogt at hansenet.com (vogt@...senet.com))
Slapper worm redux; (dufresne at winternet.com (Ron DuFresne))
OT this list (thomas at 88.net (thomas lakofski))
Re: MS-02-052 + blackholing MS (steve at videogroup.com (Steve))
Re: Apache 2.0.(39|40) DOS (PHP!) (ulfh at Update.UU.SE (Ulf H{rnhammar))
Slapper worm redux; (mark at tweakt.net (Mark Renouf))
Information Disclosure with Invision Board installation (fwd) (gossi at lab6.com (Gossi The Dog))
Information Disclosure with Invision Board installation (fwd) (gossi at lab6.com (Gossi The Dog))
Information Disclosure with Invision Board installation (fwd) (gossi at lab6.com (Gossi The Dog))

September 25 (27 messages)

PHP-Nuke x.x SQL Injection (pedro.inacio at netropolis.pt (Pedro Inacio))
Re: Information Disclosure with Invision Board installation (fwd) (rossen at pcmania.bg (Rossen))
Re: Information Disclosure with Invision Board installation (fwd) (ka at khidr.net (Ka))
Slapper worm redux; (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Information Disclosure with Invision Board installation (fwd) (gossi at lab6.com (Gossi The Dog))
KILL STRINGZ/EREBUS/PROPHET/BLACKFIST WEEK (phc at hushmail.com (phc@...hmail.com))
Re: Information Disclosure with Invision Board installation (fwd) (gossi at lab6.com (Gossi The Dog))
Re: Information Disclosure with Invision Board installation (fwd) (ka at khidr.net (Ka))
GLSA: tomcat (aliz at gentoo.org (Daniel Ahlberg))
[RHSA-2002:060-17] Updated Zope packages are available (bugzilla at redhat.com (bugzilla@...hat.com))
Re: Information Disclosure with Invision Board installation (fwd) (gossi at lab6.com (Gossi The Dog))
KILL STRINGZ/EREBUS/PROPHET/BLACKFIST WEEK (gobbles at hush.com (gobbles@...h.com))
KILL STRINGZ/EREBUS/PROPHET/BLACKFIST WEEK (nfernandes at securitytimes.com (Nuno Fernandes))
KILL STRINGZ/EREBUS/PROPHET/BLACKFIST WEEK (gobbles at hush.com (gobbles@...h.com))
KILL STRINGZ/EREBUS/PROPHET/BLACKFIST WEEK (gobbles at hush.com (gobbles@...h.com))
KILL STRINGZ/EREBUS/PROPHET/BLACKFIST WEEK (gobbles at hush.com (gobbles@...h.com))
KILL STRINGZ/EREBUS/PROPHET/BLACKFIST WEEK (gobbles at hush.com (gobbles@...h.com))
[SecurityOffice] Webserver 4D v3.6 Weak Password Preservation Vulnerability (ts at securityoffice.net (Tamer Sahin))
Fwd: (gobbles at hush.com (gobbles@...h.com))
KILL STRINGZ/EREBUS/PROPHET/BLACKFIST WEEK (gobbles at hush.com (gobbles@...h.com))
Fwd: PHC@...suck.com (gobbles at hush.com (gobbles@...h.com))
Attention PHC: on the subject of stringz and other miscellaneous items. (revelation at hush.com (revelation@...h.com))
Re: Information Disclosure with Invision Board installation (fwd) (ka at khidr.net (Ka))
KILL STRINGZ/EREBUS/PROPHET/BLACKFIST WEEK (core at bokeoa.com (Charles Stevenson))
The last word on the Linux Slapper worm (pauls at utdallas.edu (Schmehl, Paul L))
Re: Information Disclosure with Invision Board installation (fwd) (pauls at utdallas.edu (Schmehl, Paul L))
[RHSA-2002:060-17] Updated Zope packages are available (redhat-announce-list-admin at redhat.com (redhat-announce-list-admin@...hat.com))

September 26 (31 messages)

The last word on the Linux Slapper worm (misha at cerber.no (Mikhail Iakovlev))
(no subject) (leseulfrog at hush.com (leseulfrog@...h.com))
(no subject) (gobbles at hush.com (gobbles@...h.com))
The last word on the Linux Slapper worm (pauls at utdallas.edu (Schmehl, Paul L))
Re: Information Disclosure with Invision Board installation (fwd) (bonemach at sdf.lonestar.org (Bonemach))
The last word on the Linux Slapper worm (ben at algroup.co.uk (Ben Laurie))
Attention PHC: on the subject of stringz and other miscellaneous items. (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
The last word on the Linux Slapper worm (misha at cerber.no (Mikhail Iakovlev))
The last word on the Linux Slapper worm (misha at cerber.no (Mikhail Iakovlev))
Attention PHC: on the subject of stringz and other miscellaneous items. (nfernandes at securitytimes.com (Nuno Fernandes))
The last word on the Linux Slapper worm (vdongen at hetisw.nl (vdongen))
PHC Official Statement (phc at hushmail.com (phc@...hmail.com))
(no subject) (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
PHC Official Statement (nfernandes at securitytimes.com (Nuno Fernandes))
PHC Official Statement (ppan at hushmail.com (ppan@...hmail.com))
iDEFENSE Security Advisory 09.26.2002: Exploitable Buffer Overflow in gv (dendler at idefense.com (David Endler))
Errata: iDEFENSE Security Advisory 09.26.2002: Exploitable Buffer Overflow in gv (dendler at idefense.com (David Endler))
Bugtraq postings from non-members may disclose some list-member's addresses (ka at khidr.net (Ka))
PHC Official Statement (nfernandes at securitytimes.com (Nuno Fernandes))
[SECURITY] [DSA 149-2] New glibc packages fix (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
SPIKE Proxy 1.3 Release Announcement~ (dave at immunitysec.com (Dave Aitel))
PHC Official Statement (ppan at hushmail.com (ppan@...hmail.com))
PHP-Nuke x.x AND PostNuke x.x SQL Injection (pedro.inacio at netropolis.pt (Pedro Inacio))
Bugtraq postings from non-members may disclose some list-member's addresses (nexus at patrol.i-way.co.uk (Nexus))
The last word on the Linux Slapper worm (ben at algroup.co.uk (Ben Laurie))
Re Windows Update (nexus at patrol.i-way.co.uk (Nexus))
The last word on the Linux Slapper worm (pauls at utdallas.edu (Schmehl, Paul L))
The last word on the Linux Slapper worm (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
The last word on the Linux Slapper worm (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
The last word on the Linux Slapper worm (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Re: Microsoft PPTP Server and Client remote vulnerability (dave at immunitysec.com (Dave Aitel))

September 27 (14 messages)

The last word on the Linux Slapper worm (simpletone at mbox.com.au (Mike Tone))
Re Windows Update (pauls at utdallas.edu (Schmehl, Paul L))
Watchguard firewall appliances remote vulnerabilities (tharbad at kaotik.org (Joao Gouveia))
scriptkids on this list (gobbles at hushmail.com (gobbles@...hmail.com))
GLSA: dietlibc (aliz at gentoo.org (Daniel Ahlberg))
GLSA: glibc (update) (aliz at gentoo.org (Daniel Ahlberg))
scriptkids on this list (misha at cerber.no (Mikhail Iakovlev))
Buffer Overrun in SmartHTML Interpreter Could Allow Code Executio n (Q324096) (maninder.bharadwaj at digital.com (Bharadwaj, Maninder))
My previous mail on "gobbles" issue (misha at cerber.no (Mikhail Iakovlev))
THREATCON --> Re: scriptkids on this list (silvio at big.net.au (silvio@....net.au))
THREATCON --> Re: scriptkids on this list (misha at cerber.no (Mikhail Iakovlev))
Listen To My Mouse (contact at bia-security.com (Anthony LaMantia))
THREATCON --> Re: scriptkids on this list (silvio at big.net.au (silvio@....net.au))
THREATCON --> Re: scriptkids on this list (misha at cerber.no (Mikhail Iakovlev))

September 29 (5 messages)

[RHSA-2002:096-24] Updated unzip and tar packages fix vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
Advisory 03/2002: Fetchmail remote vulnerabilities (s.esser at e-matters.de (Stefan Esser))
Ever cought BitchX listening on a port ? (nc at stormvault.net (Nicolas Couture))
KILL STRINGZ/EREBUS/PROPHET/BLACKFIST WEEK (core at bokeoa.com (Charles Stevenson))
Ever cought BitchX listening on a port ? (full-disclosure at botanicus.net (Dave Wilson))

September 30 (18 messages)

MyNewsGroups :) XSS patch (ulfh at update.uu.se (Ulf Harnhammar))
THREATCON HITTING DANGEROUS LEVELS! (silvio at big.net.au (silvio@....net.au))
THREATCON segv until scripts are fixed (silvio at big.net.au (silvio@....net.au))
THREATCON HITTING DANGEROUS LEVELS! (full-disclosure at botanicus.net (Dave Wilson))
THREATCON back up! (silvio at big.net.au (silvio@....net.au))
THREATCON HITTING DANGEROUS LEVELS! (ka at khidr.net (Ka))
THREATCON back up! (ka at khidr.net (Ka))
THREATCON back up!::Critical (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
THREATCON HITTING DANGEROUS LEVELS! (zen-parse at gmx.net (zen-parse))
Do Terrorists Really Have More Fun? (gobbles at mail.com (Gobbles ))
iDEFENSE Security Advisory 09.30.2002: Buffer Overflow in WN Server (dendler at idefense.com (David Endler))
[VulnWatch] MyNewsGroups :) XSS patch (ulfh at update.uu.se (Ulf Harnhammar))
SuSE Security Announcement: heimdal (SuSE-SA:2002:034) (krahmer at suse.de (Sebastian Krahmer))
NTFS exploit (geoincidents at getinfo.org (Geo))
We have zero skiils (phc at hush.com (phc@...h.com))
THREATCON HITTING DANGEROUS LEVELS! (core at bokeoa.com (Charles Stevenson))
We are way to kool for all yah (phc at hush.com (phc@...h.com))
THREATCON HITTING DANGEROUS LEVELS! (silvio at big.net.au (silvio@....net.au))

703 messages