full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2002/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 36	² 26	³ 22	⁴ 21	⁵ 3	⁶ 3
⁷ 10	⁸ 10	⁹ 7	¹⁰ 86	¹¹ 17	¹² 3	¹³ 8
¹⁴ 7	¹⁵ 11	¹⁶ 8	¹⁷ 11	¹⁸ 8	¹⁹ 5	²⁰ 5
²¹ 6	²² 13	²³ 7	²⁴ 14	²⁵ 5	²⁶ 2	²⁷ 1
²⁸ 4	²⁹ 15	³⁰ 7	³¹ 8

Messages by day:

October 1 (36 messages)

Mostly Off Topic: Teach me how to hack etcetera. (core at bokeoa.com (Charles Stevenson))
Mostly Off Topic: Teach me how to hack etcetera. (phc at hush.com (phc@...h.com))
KILL STRINGZ/EREBUS/PROPHET/BLACKFIST WEEK (core at bokeoa.com (Charles Stevenson))
NTFS exploit (hggdh at attbi.com (HggdH))
Organization for Internet Safety (OIS) formally announced (coley at linus.mitre.org (Steven M. Christey))
Organization for Internet Safety (OIS) formally announced (ib at clusterfsck.net (Isaak Bloodlore))
GLSA: fetchmail (aliz at gentoo.org (Daniel Ahlberg))
GLSA: unzip (aliz at gentoo.org (Daniel Ahlberg))
Organization for Internet Safety (OIS) formally announced (ben at algroup.co.uk (Ben Laurie))
Organization for Internet Safety (OIS) formally announced (guninski at guninski.com (Georgi Guninski))
GLSA: tar (aliz at gentoo.org (Daniel Ahlberg))
Organization for Internet Safety (OIS) formally announced (phc at hushmail.com (phc@...hmail.com))
THREATCON HITTING DANGEROUS LEVELS! (zb0 at mail.ru (zb0))
Re: Organization for Internet Safety (OIS) formally announced (remailer at remailer.xganon.com (Anonymous))
Mostly Off Topic: Teach me how to hack etcetera. (MerharM at wra.net (Matt Merhar))
Mostly Off Topic: Teach me how to hack etcetera. (shub at hushmail.com (shub@...hmail.com))
GLSA: tar (gem at rellim.com (Gary E. Miller))
Mostly Off Topic: Teach me how to hack etcetera. (MerharM at wra.net (Matt Merhar))
Mostly Off Topic: Teach me how to hack etcetera. (theblackfist at hushmail.com (theblackfist@...hmail.com))
Organization for Internet Safety (OIS) form ally announced (ron.ogle at thomson.net (Ogle Ron (Rennes)))
Totally Off Topic: Teach me how to measure my IQ (ka at khidr.net (Ka))
Totally Off Topic: Teach me how to measure my IQ (zan at stargeek.com (zan))
Totally Off Topic: Teach me how to measure my IQ (ka at khidr.net (Ka))
Totally Off Topic: Teach me how to measure my IQ (zan at stargeek.com (zan))
iDEFENSE Security Advisory 10.01.02: Sendmail smrsh bypass vulnerabilities (dendler at idefense.com (David Endler))
Totally Off Topic: Teach me how to measure my IQ (core at bokeoa.com (Charles Stevenson))
Totally Off Topic: Teach me how to measure my IQ (zan at stargeek.com (zan))
Totally Off Topic: Teach me how to measure my IQ (ka at khidr.net (Ka))
Totally Off Topic: Teach me how to measure my IQ (core at bokeoa.com (Charles Stevenson))
Totally Off Topic: Teach me how to measure my IQ (zan at stargeek.com (zan))
Totally Off Topic: Teach me how to measure my IQ (core at bokeoa.com (Charles Stevenson))
Totally Off Topic: Teach me how to measure my IQ (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
RE:Brute Force brew-h4-h4: All your fucking base (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
Mostly Off Topic: Teach me how to hack etcetera. (ib at clusterfsck.net (Isaak Bloodlore))
Fwd: Brute Force brew-h4-h4 : All your fsking base ( free tzunami from .gov lies) (theblackfist at hushmail.com (theblackfist@...hmail.com))
Fwd: Brute Force brew-h4-h4 : All your fsking base ( free tzunami from .gov lies) (core at bokeoa.com (Charles Stevenson))

October 2 (26 messages)

Fwd: Brute Force brew-h4-h4 : All your fsking base ( free tzunami from .gov lies) (theblackfist at hushmail.com (theblackfist@...hmail.com))
Fwd: Brute Force brew-h4-h4 : All your fsking base ( free tzunami from .gov lies) (core at bokeoa.com (Charles Stevenson))
suexec doesn't ignore links in safe_path (rcs at rshell.org (Guy Cohen))
MDKSA-2002:062 - postgresql update (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2002:063 - fetchmail update (security at linux-mandrake.com (Mandrake Linux Security Team))
suexec doesn't ignore links in safe_path (niels=netsys at bakker.net (Niels Bakker))
Fwd: Brute Force brew-h4-h4 : All your fsking base ( free tzunami from .gov lies) (core at bokeoa.com (Charles Stevenson))
suexec doesn't ignore links in safe_path (rcs at rshell.org (Guy Cohen))
suexec doesn't ignore links in safe_path (core at bokeoa.com (Charles Stevenson))
Good Bye! :] (core at bokeoa.com (Charles Stevenson))
suexec doesn't ignore links in safe_path (whitevampire at mindless.com (White Vampire))
Good Bye! :] << nice way to say " im owned" ( yes #parse. this is real) (theblackfist at hushmail.com (theblackfist@...hmail.com))
Organization for Internet Safety (OIS) formally announced (sockz at email.com (sockz loves you))
Do Terrorists Really Have More Fun? (sockz at email.com (sockz loves you))
Do Terrorists Really Have More Fun? (johnpf at atnet.net.au (John))
Do Terrorists Really Have More Fun? (memetic-engineer at australia.edu (memetic-engineer@...tralia.edu))
PHP execution vulnerability on www.neo-modus.com (direct connect homepage) (burpz at gmx.net (burpz@....net))
Do Terrorists Really Have More Fun? (silvio at big.net.au (silvio@....net.au))
Do Terrorists Really Have More Fun? (sockz at email.com (sockz loves you))
Do Terrorists Really Have More Fun? (silvio at big.net.au (silvio@....net.au))
Do Terrorists Really Have More Fun? (fred at the-debaters.com (M L Lynch [ SotG ]))
Apache 2 Cross-Site Scripting (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
Does Grandma Really Have More Fun? (steve at videogroup.com (Steve))
Do members of full-disclosure really have more fun? (ka at khidr.net (Ka))
iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability (dendler at idefense.com (David Endler))
iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability (xbud at g0thead.com (Orlando))

October 3 (22 messages)

Do Terrorists Really Have More Fun? (johnpf at atnet.net.au (John))
[PHC] FREE SECURITY BOOKS !!! [PHC] (phc at hushmail.com (phc@...hmail.com))
[PHC] FREE SECURITY BOOKS !!! [PHC] (phc at hush.com (phc@...h.com))
[PHC] FREE SECURITY BOOKS !!! [PHC] (epic at hack3r.com (EPiC))
R7-0004: Multiple Vendor Long ZIP Entry Filename Processing Issues (advisory at rapid7.com (Rapid 7 Security Advisories))
GLSA: gv (aliz at gentoo.org (Daniel Ahlberg))
[ESA-20021003-021] glibc: several security-related updates. (security at guardiandigital.com (EnGarde Secure Linux))
[ESA-20021003-022] tar: directory traversal vulnerability. (security at guardiandigital.com (EnGarde Secure Linux))
[ESA-20021003-023] fetchmail-ssl: buffer overflows and broken boundary checks. (security at guardiandigital.com (EnGarde Secure Linux))
(no subject) (scent at mail.pt (Francisco Guerreiro))
(no subject) (pauls at utdallas.edu (Schmehl, Paul L))
GLSA: python (aliz at gentoo.org (Daniel Ahlberg))
iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability (ben at algroup.co.uk (Ben Laurie))
RE: (no subject) (remailer at remailer.xganon.com (Anonymous))
iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability (mutex at hushmail.com (mutex@...hmail.com))
iDEFENSE Security Advisory 10.03.2002: Apache 1.3.x shared memory scoreboard vulnerabilities (dendler at idefense.com (David Endler))
BearShare Directory Traversal Issue Resurfaces (aviram at beyondsecurity.com (Aviram Jenik))
iDEFENSE Security Advisory: Idiots For Defense (mcgehrin at reverse.net (Matthew McGehrin))
Thor Larholm security advisory TL#004 (thor at pivx.com (Thor Larholm))
Hah now this redefines selling out. (dotslash at globalintersec.com (KF))
iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability (ib at clusterfsck.net (Isaak Bloodlore))
iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability (xbud at g0thead.com (Orlando))

October 4 (21 messages)

Mostly Off Topic: Teach me how to hack etcetera. (merharm at wra.net (matt merhar))
i'm looking to start a fight... (merharm at wra.net (matt merhar))
Hah now this redefines selling out. (phantasm at textbox.net (Phantasm))
Hah now this redefines selling out. (dotslash at snosoft.com (Kevin Finisterre))
www.msnbc.com (dev-null at no-id.com (dev-null@...id.com))
Hah now this redefines selling out. (merharm at wra.net (matt merhar))
Hah now this redefines selling out. (whitevampire at mindless.com (White Vampire))
[RHSA-2002:197-06] Updated glibc packages fix vulnerabilities in resolver (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2002:175-16] Updated nss_ldap packages fix buffer overflow (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2002:212-06] Updated packages fix PostScript and PDF security issue (bugzilla at redhat.com (bugzilla@...hat.com))
iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability (ben at algroup.co.uk (Ben Laurie))
Hah now this redefines selling out. (guninski at guninski.com (Georgi Guninski))
Hah now this redefines selling out. (merharm at wra.net (matt merhar))
[SECURITY] [DSA 169-1] New tomcat packages fix unintended source code disclosure (debian-security-announce at lists.debian.org (debian-security-announce@...ts.d…)
Cisco Security Advisory: Predefined Restriction Tables Allow Calls to International Operator (psirt at cisco.com (Cisco Systems Product Security Incident Respon…)
Recent exploit disclosure & iDEFENSE (zen-parse at gmx.de (zen-parse@....de))
Recent exploit disclosure & iDEFENSE (ka at khidr.net (Ka))
Recent exploit disclosure & iDEFENSE (ib at clusterfsck.net (Isaak Bloodlore))
Recent exploit disclosure & iDEFENSE (lcamtuf at ghettot.org (mz))
Hah now this redefines selling out. (full-disclosure at botanicus.net (Dave Wilson))
Recent exploit disclosure & iDEFENSE (xbud at g0thead.com (Orlando))

October 5 (3 messages)

striking semblance between blueboar and bugbear..... (merharm at wra.net (matt merhar))
zen-parse@....de is not zen-parse@....net (zen-parse at gmx.net (zen-parse))
PHC = HFG.. same kids, different tune (hushmail_cowards at hushmail.com (hushmail_cowards@...hmail.com))

October 6 (3 messages)

Multiple vulnerabitilies in phpRank (j at pureftpd.org (Jedi/Sector One))
zen-parse@....de is not zen-parse@....net (Weimer at CERT.Uni-Stuttgart.DE (Florian Weimer))
zen-parse@....de is not zen-parse@....net (daniel_clemens at birmingham-infragard.org (daniel.clemens))

October 7 (10 messages)

re: zen-parse@....de is not zen-parse@....net (zen-parse at gmx.net (zen-parse))
zen-parse@....de is not zen-parse@....net (ben at algroup.co.uk (Ben Laurie))
zen-parse@....de is not zen-parse@....net (Weimer at CERT.Uni-Stuttgart.DE (Florian Weimer))
SuSE Security Announcement: hylafax (SuSE-SA:2002:035) (thomas at suse.de (Thomas Biege))
SuSE Security Announcement: mod_php4 (SuSE-SA:2002:036) (thomas at suse.de (Thomas Biege))
zen-parse@....de is not zen-parse@....net (ben at algroup.co.uk (Ben Laurie))
zen-parse@....de is not zen-parse@....net (Weimer at CERT.Uni-Stuttgart.DE (Florian Weimer))
SPIKE 2.7 Released: There's a party at my house, so bring the beer and follow me.... (dave at immunitysec.com (Dave Aitel))
[ESA-20021007-024] apache: potential DoS, cross-site scripting, and buffer overflow vulnerabilities. (security at guardiandigital.com (EnGarde Secure Linux))
[RHSA-2002:215-09] Updated fetchmail packages fix vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))

October 8 (10 messages)

erm. new+improved www content (silvio at big.net.au (silvio@....net.au))
NetBSD Security Advisory 2002-015: (another) buffer overrun in libc/libresolv DNS resolver (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-019: Buffer overrun in talkd (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-021: rogue vulnerability (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-022: buffer overrun in pic(1) (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-023: sendmail smrsh bypass vulnerability (security-officer at netbsd.org (NetBSD Security Officer))
[SECURITY] [DSA 172-1] New tkmail packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.de…)
erm. new+improved www content (merharm at wra.net (matt merhar))
[SECURITY] [DSA 169-1] New ht://Check packages fix cross site scripting problem (debian-security-announce at lists.debian.org (debian-security-announce@...ts.de…)
[SECURITY] [DSA 171-1] New fetchmail packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))

October 9 (7 messages)

List Charter (johnc at grok.org.uk (John Cartwright))
I like to make charters (johnc at grok.org.uk (johnc@...k.org.uk))
I like to make charters (johnc at grok.org.uk (John Cartwright))
I like to make charters (nexus at patrol.i-way.co.uk (Nexus))
[SECURITY] [DSA 173-1] New bugzilla packages fix privilege escalation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
MDKSA-2002:064 - kdelibs update (security at linux-mandrake.com (Mandrake Linux Security Team))
R7-0006: Oracle 8i/9i Listener SERVICE_CURLOAD Denial of Service (advisory at rapid7.com (Rapid 7 Security Advisories))

October 10 (86 messages)

Unix-Virus Mailing List (silvio at big.net.au (silvio@....net.au))
FreeBSD Security Notice FreeBSD-SN-02:06 (security-advisories at FreeBSD.ORG (FreeBSD Security Advisories))
Multiple XSS vulnerabilites in PHPNuke (morisson at genhex.org (Bruno Morisson))
9 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
4 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
7 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
2 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
6 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
5 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
3 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
8 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
12 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
3 Poot ze-a cheekee in de-a oofee! (zan at stargeek.com (zan))
10 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
1 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
13 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
22 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
21 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
24 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
39 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
25 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
30 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
19 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
33 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
57 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
35 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
47 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
48 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
72 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
60 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
59 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
65 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
82 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
60 Poot ze-a cheekee in de-a oofee! (david.vincent at mightyoaks.com (David Vincent))
86 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
96 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
74 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
130 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
Outlook Express Remote Code Execution in Preview Pane (S/MIME) (aviram at beyondsecurity.com (Aviram Jenik))
MDKSA-2002:066 - tar update (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2002:065 - unzip update (security at linux-mandrake.com (Mandrake Linux Security Team))
17 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
125 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
131 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
119 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
95 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
151 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
112 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
136 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
150 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
14 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
146 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
180 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
173 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
185 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
187 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
166 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
179 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
20 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
196 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
204 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
214 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
212 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
217 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
221 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
233 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
243 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
227 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
239 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
41 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
265 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
250 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
251 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
276 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
267 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
256 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
261 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
280 Poot ze-a cheekee in de-a oofee! (gobbles at hushmail.com (gobbles@...hmail.com))
8 Poot ze-a cheekee in de-a oofee! (zan at stargeek.com (zan))
12 Poot ze-a cheekee in de-a oofee! (zan at stargeek.com (zan))
3 Poot ze-a cheekee in de-a oofee! (madduck at madduck.net (martin f krafft))
10 Poot ze-a cheekee in de-a oofee! (zan at stargeek.com (zan))
[RHSA-2002:207-14] Updated packages fix PostScript and PDF security issue (bugzilla at redhat.com (bugzilla@...hat.com))
60 yada yada *yawn* (nexus at patrol.i-way.co.uk (Nexus))
60 Poot ze-a cheekee in de-a oofee! (damian at sentex.net (Damian Gerow))
Security Update: [CSSA-2002-SCO.40] OpenServer 5.0.5 OpenServer 5.0.6 : ypxfrd remote file access vulnerability (security at caldera.com (security@...dera.com))

October 11 (17 messages)

Fw: Outlook Express Remote Code Execution in Preview Pane (S/MIME) (hggdh at attbi.com (HggdH))
Outlook Express Remote Code Execution in Preview Pane (S/MIME) (editor at infoguerra.com.br (Giordani Rodrigues))
Outlook Express Remote Code Execution in Preview Pane (S/MIME) (nexus at patrol.i-way.co.uk (Nexus))
QRe: Outlook Express Remote Code Execution in Preview Pane (S/MIME) (hggdh at attbi.com (HggdH))
Outlook Express Remote Code Execution in Pr eview Pane (S/MIME) (david.vincent at mightyoaks.com (David Vincent))
[RHSA-2002:204-10] Updated squirrelmail packages close cross-site scripting vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
Outlook Express Remote Code Execution in Pr eview Pane (S/MIME) (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
60 Poot ze-a cheekee in de-a oofee! (lists.netsys.com at jscript.dk (Thor Larholm))
60 Poot ze-a cheekee in de-a oofee! (dufresne at winternet.com (Ron DuFresne))
Administrivia - Regarding bulk mail (johnc at grok.org.uk (John Cartwright))
unsubscribe (mchaaban at umich.edu (mchaaban@...ch.edu))
(no subject) (blake at mc.net (blake@...net))
60 Poot ze-a cheekee in de-a oofee! (david.vincent at mightyoaks.com (David Vincent))
Administrivia - (Un)subscription requests (johnc at grok.org.uk (John Cartwright))
60 Poot ze-a cheekee in de-a oofee! (eballen1 at qwest.net (Bruce Ediger))
help (lm_garcia at yahoo.com (Luis GARCIA))
hushmail spam/abuse/mailbombing vulnerability demonstrated by Mr. Gobbles (auto461767 at hushmail.com (auto461767@...hmail.com))

October 12 (3 messages)

Security Update: [CSSA-2002-SCO.39] OpenServer 5.0.5 OpenServer 5.0.6 : Buffer Overflow in Multiple DNS Resolver Librari… (security at caldera.com (security@...de…)
How to reproduce the IIS Host Header DOS (Joe_Testa at rapid7.com (Joe Testa))
How to reproduce the IIS Host Header DOS (full-disclosure at lists.netsys.com (Full Disclosure))

October 13 (8 messages)

Pyramid Research Project - atphttpd security adivisorie (pyramid-rp at hushmail.com (pyramid-rp@...hmail.com))
Pyramid Research Project - ghttpd security advisorie (pyramid-rp at hushmail.com (pyramid-rp@...hmail.com))
Pyramid Research Project - atphttpd security advisorie (pyramid-rp at hushmail.com (pyramid-rp@...hmail.com))
PHP Information Functions May Allow Cross-Site Scripting (mattmurphy at kc.rr.com (Matthew Murphy))
PHP Information Functions May Allow Cross-Site Scripting (s.esser at e-matters.de (Stefan Esser))
GLSA: nss_ldap (aliz at gentoo.org (Daniel Ahlberg))
PHP Information Functions May Allow Cross-Site Scripting (mattmurphy at kc.rr.com (Matthew Murphy))
GLSA: sendmail (aliz at gentoo.org (Daniel Ahlberg))

October 14 (7 messages)

GLSA: net-snmp (aliz at gentoo.org (Daniel Ahlberg))
CALL FOR PAPERS - SANTA DIED LAST YEAR (phrackstaff at phrack.org (staff))
cypherpunk wargames (jsyn at nthought.com (jsyn))
[SECURITY] [DSA 174-1] New heartbeat packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
GLSA: heimdal (aliz at gentoo.org (Daniel Ahlberg))
bombings in bali (silvio at big.net.au (silvio@....net.au))
bombings in bali (dufresne at winternet.com (Ron DuFresne))

October 15 (11 messages)

Gl1bC L1nuxThreadz ADV1SORY, was Re: bombings in bali (silvio at big.net.au (silvio@....net.au))
Andrew.Wolhuter/Sandton/RMB is out of the office. (Andrew.Wolhuter at ebucks.com (Andrew.Wolhuter@...cks.com))
Andrew.Wolhuter/Sandton/RMB is out of the office. (lcamtuf at ghettot.org (m))
unsuscribe (lcamtuf at ghettot.org (lcamtuf@...ttot.org))
unsuscribe (lcamtuf at ghettot.org (lcamtuf@...ttot.org))
irc (yarddog at yarddog.org (yarddog))
GLSA: tomcat (aliz at gentoo.org (Daniel Ahlberg))
GLSA: apache (aliz at gentoo.org (Daniel Ahlberg))
[SECURITY] [DSA 175-1] New syslog-ng packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[RHSA-2002:196-09] Updated xinetd packages fix denial of service vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
iDEFENSE Security Advisory 10.15.02: DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone (dendler at idefense.com (David Endler))

October 16 (8 messages)

unsuscribe (mark at tweakt.net (Mark Renouf))
MDKSA-2002:068 - apache update (security at linux-mandrake.com (Mandrake Linux Security Team))
Fw: [VulnWatch] Internet Explorer : The D-Day (lists.netsys.com at jscript.dk (Thor Larholm))
iDEFENSE Security Advisory 10.16.02: Denial of Service in Sabre Desktop Reservation Client for Windows (dendler at idefense.com (David Endler))
[SECURITY] [DSA 176-1] New gv packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
CALL FOR PAPERS - SANTA DIED LAST YEAR (sockz at email.com (sockz loves you))
bombings in bali (sockz at email.com (sockz loves you))
Cisco Security Advisory: Cisco CatOS Embedded HTTP Server Buffer Overflow (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))

October 17 (11 messages)

ABfrag / linux kernel vulns (simpletone at mbox.com.au (Mike Tone))
GLSA: ggv (aliz at gentoo.org (Daniel Ahlberg))
[RHSA-2002:205-15] New kernel fixes local security issues (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2002:210-06] New kernel 2.2 packages fix local vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2002:206-12] New kernel fixes local security issues (bugzilla at redhat.com (bugzilla@...hat.com))
CALL FOR PAPERS - SANTA DIED LAST YEAR (phc at hushmail.com (phc@...hmail.com))
ABfrag / linux kernel vulns ??? (ka at khidr.net (Ka))
[ESA-20021016-025] syslog-ng buffer overflow in macro handling code (security at guardiandigital.com (EnGarde Secure Linux))
[SECURITY] [DSA 178-1] New Heimdal packages fix remote command execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)
ABfrag / linux kernel vulns (dotslash at snosoft.com (KF))
[SECURITY] [DSA 177-1] New PAM packages fix serious security violation in Debian/unstable (debian-security-announce at lists.debian.org (debian-security-announc…)

October 18 (8 messages)

[RHSA-2002:192-13] Updated Mozilla packages fix security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
SCAN Associates Advisory: perlbot 1.9.2 - Remote Command Execution (guejez at scan-associates.net (guejez))
SCAN Associates Advisory: Molly 0.5 - Remote Command Execution (guejez at scan-associates.net (guejez))
SCAN Associates Advisory: madhater perlbot 1.0 beta - Remote Command Execution (guejez at scan-associates.net (guejez))
[SECURITY] [DSA 179-1] New gnome-gv packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Re: Linux Kernel Exploits / ABFrag (enigmatic-arcanum at zero-imagination.com (enigmatic-arcanum@...o-imagination.com))
[Immunity, Inc.]Vulnerability: RPC Service DoS (port 135/tcp) on Windows 2000 SP3 (dave at immunitysec.com (Dave Aitel))
GLSA: tetex (aliz at gentoo.org (Daniel Ahlberg))

October 19 (5 messages)

ABfrag - *yawn* (sockz at email.com (sockz loves you))
ABfrag - *yawn* (silvio at big.net.au (silvio@....net.au))
ABfrag - *yawn* (silvio at big.net.au (silvio@....net.au))
Microsoft Secrets (ts at securityoffice.net (Tamer Sahin))
GLSA: groff (aliz at gentoo.org (Daniel Ahlberg))

October 20 (5 messages)

NOCC: XSS (ulfh at update.uu.se (Ulf Harnhammar))
Re: [VulnWatch] NOCC: XSS (ulfh at update.uu.se (Ulf Harnhammar))
Re: [VulnWatch] NOCC: XSS (security at ppp-design.de (ppp-design))
Reproducing the MS DCE-RPC DOS. (Joe_Testa at rapid7.com (Joe Testa))
kmMail XSS (ulfh at update.uu.se (Ulf Harnhammar))

October 21 (6 messages)

iDEFENSE Security Advisory 10.21.02: Cross-Site Scripting Holes present in virtually all websites (dendler at idefense.com (David Endler))
iDEFENSE Security Advisory 10.21.02: Cross-Site Scripting Holes present in virtually all websites (dendler at idefense.com (David Endler))
[SECURITY] [DSA 180-1] New NIS packages fix information leak (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
SuSE Security Announcement: postgresql (SuSE-SA:2002:038) (thomas at suse.de (Thomas Biege))
Security Update: [CSSA-2002-SCO.41] UnixWare 7.1.1 Open UNIX 8.0.0 : rcp of /proc causes denial-of-service (security at caldera.com (security@...dera.com))
MDKSA-2002:069 - gv update (security at linux-mandrake.com (Mandrake Linux Security Team))

October 22 (13 messages)

NetBSD Security Advisory 2002-026: Buffer overflow in kadmind daemon (security-officer at netbsd.org (NetBSD Security Officer))
NetBSD Security Advisory 2002-016: Insufficient length check in ESP authentication data (security-officer at netbsd.org (NetBSD Security Officer))
Administrivia - Regarding bulk mail (gobbles at hush.com (gobbles@...h.com))
PHC = HFG.. same kids, different tune (gobbles at hush.com (gobbles@...h.com))
7350reass - alleged *BSD remote kernel exploit (rfclover at datadriven.co.uk (rfclover@...adriven.co.uk))
PHC = HFG.. same kids, different tune (sockz at email.com (sockz loves you))
[ESA-20021022-026] local kernel vulnerabilities (security at guardiandigital.com (EnGarde Secure Linux))
[SECURITY] [DSA 181-1] New mod_ssl packages fix cross site scripting (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
7350reass - alleged *BSD remote kernel expl oit (david.vincent at mightyoaks.com (David Vincent))
Fw: [VulnWatch] Vulnerable cached objects in IE (9 advisories in 1) (lists.netsys.com at jscript.dk (Thor Larholm))
RE: 7350reass - alleged *BSD remote kernel exploit (funkysh at isec.pl (Janusz Niewiadomski))
RE: 7350reass - alleged *BSD remote kernel exploit (full-disclosure at botanicus.net (Dave M. Wilson))
RE: 7350reass - alleged *BSD remote kernel exploit (dotslash at snosoft.com (KF))

October 23 (7 messages)

RE: 7350reass (who's responsible) (dev-null at no-id.com (dev-null@...id.com))
RE: 7350reass (who's responsible) (skyper at segfault.net (skyper))
[SecurityOffice] Web Server 4 Everyone v1.28 Host Field Denial of Service Vulnerability (ts at securityoffice.net (Tamer Sahin))
MDKSA-2002:070 - tetex update (security at linux-mandrake.com (Mandrake Linux Security Team))
Security Update: [CSSA-2002-036.0] Linux: remote buffer overflow in webalizer reverse lookup code (security at caldera.com (security@...dera.com))
R7-0007: IBM WebSphere Edge Server Caching Proxy Denial of Service (advisory at rapid7.com (Rapid 7 Security Advisories))
R7-0008: IBM WebSphere Edge Server Caching Proxy Cross-Site Scripting Issues (advisory at rapid7.com (Rapid 7 Security Advisories))

October 24 (14 messages)

found with ABFrag.. (davidreign at hotmail.com (david evlis reign))
NetBSD Security Advisory 2002-025: trek(6) buffer overrun (security-officer at netbsd.org (NetBSD Security Officer))
GLSA: xfree (aliz at gentoo.org (Daniel Ahlberg))
[RHSA-2002:223-07] Updated ypserv packages fixes memory leak (bugzilla at redhat.com (bugzilla@...hat.com))
GLSA: zope (aliz at gentoo.org (Daniel Ahlberg))
[SecurityOffice] BadBlue Web Server v1.7 Protected File Access Vulnerability (ts at securityoffice.net (Tamer Sahin))
[SecurityOffice] Liteserve Web Server v2.0 Authorization Bypass Vulnerability (ts at securityoffice.net (Tamer Sahin))
[SecurityOffice] BRS WebWeaver Web Server v1.01 Protected File Access Vulnerability (ts at securityoffice.net (Tamer Sahin))
found with ABFrag.. (jbarbo1 at gl.umbc.edu (Jason Barbour))
Eweek OpenHack Challenge (cesarc56 at yahoo.com (Cesar))
Security Update: [CSSA-2002-037.0] Linux: various packet handling vunerabilities in ethereal (security at caldera.com (security@...dera.com))
MDKSA-2002:071 - kdegraphics update (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2002:072 - mod_ssl update (security at linux-mandrake.com (Mandrake Linux Security Team))
iDEFENSE Security Advisory 10.24.02: Directory Traversal in SolarWinds TFTP Server (dendler at idefense.com (David Endler))

October 25 (5 messages)

Security Update: [CSSA-2002-038.0] Linux: inn format string and insecure open vulnerabilities (security at caldera.com (security@...dera.com))
Re: ABfrag followup / WITHOUT ATTACHMENT (enigmatic-arcanum at another.com (enigmatic-arcanum@...ther.com))
RHL's xinetd-2.3.9 do no longer close TCP on internal daytime service (pb at bieringer.de (Peter Bieringer))
found with ABFrag.. (rcs at rshell.org (Guy Cohen))
IPSwitch, Inc. WS_FTP Server (dev-null at no-id.com (dev-null@...id.com))

October 26 (2 messages)

GLSA: kth-krb (aliz at gentoo.org (Daniel Ahlberg))
Explanations about the NASA security issues and confused people (MichaelBoord at yahoo.co.uk (Michael Boord))

October 27 (1 message)

GLSA: mod_ssl (aliz at gentoo.org (Daniel Ahlberg))

October 28 (4 messages)

GLSA: ypserv (aliz at gentoo.org (Daniel Ahlberg))
GLSA: krb5 (aliz at gentoo.org (Daniel Ahlberg))
[SECURITY] [DSA 182-1] New kghostview packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Security Update: [CSSA-2002-040.0] Linux: uudecode performs inadequate checks on user-specified output files (security at caldera.com (security@...dera.com))

October 29 (15 messages)

Security Update: [CSSA-2002-041.0] Linux: pam_ldap format string vulnerability (security at caldera.com (security@...dera.com))
"more" segfaults on Redhat 6.x (d4yj4y at yahoo.com (Day Jay))
more segfaults on Redhat 6.x when passing "/proc/misc" as a parameter (d4yj4y at yahoo.com (Day Jay))
more segfaults on Redhat 6.x when passing "/proc/misc" as a parameter (pekkas at netcore.fi (Pekka Savola))
more segfaults on Redhat 6.x when passing "/proc/misc" as a parameter (pbieringer at aerasec.de (Dr. Peter Bieringer))
more segfaults on Redhat 6.x when passing "/proc/misc" as a parameter (pekkas at netcore.fi (Pekka Savola))
[ESA-20021029-027] mod_ssl cross-site scripting vulnerability. (security at guardiandigital.com (EnGarde Secure Linux))
[ESA-20021029-028] syslog-ng: buffer overflow in macro handling code (UPDATED) (security at guardiandigital.com (EnGarde Secure Linux))
[SECURITY] [DSA 183-1] New krb5 packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Security Update: [CSSA-2002-039.0] Linux: bzip2 file creation and symbolic link vulnerabilities (security at caldera.com (security@...dera.com))
MDKSA-2002:073 - krb5 update (security at linux-mandrake.com (Mandrake Linux Security Team))
sympatico.ca uses weak encryption on their billing server (staikos at 0wned.org (George Staikos))
[ESA-20021029-028] syslog-ng: buffer overflow in macro handling code (UPDATED) (security at guardiandigital.com (EnGarde Secure Linux))
Security Update: [CSSA-2002-039.0] Linux: bzip2 file creation and symbolic link vulnerabilities (security at caldera.com (security@...dera.com))
Security Update: [CSSA-2002-041.0] Linux: pam_ldap format string vulnerability (security at caldera.com (security@...dera.com))

October 30 (7 messages)

Security Update: [CSSA-2002-043.0] Linux: chfn (util-linux) temp file race vulnerability (security at caldera.com (security@...dera.com))
XXE (Xml eXternal Entity) attack (greg-fulldisclosure at nest.cx (Gregory Steuck))
GLSA: sharutils (aliz at gentoo.org (Daniel Ahlberg))
[SECURITY] [DSA 184-1] New krb4 packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
GLSA: pam_ldap (aliz at gentoo.org (Daniel Ahlberg))
Security Update: [CSSA-2002-043.0] Linux: chfn (util-linux) temp file race vulnerability (security at caldera.com (security@...dera.com))
Security Update: [CSSA-2002-043.0] Linux: chfn (util-linux) temp file race vulnerability (security at caldera.com (security@...dera.com))

October 31 (8 messages)

Response from CERT regarding Linux Slapper worm (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Response from CERT regarding Linux Slapper worm (delta at faveve.uni-stuttgart.de (Helmut Springer))
SuSE Security Announcement: syslog-ng (SuSE-SA:2002:039) (krahmer at suse.de (Sebastian Krahmer))
SuSE Security Announcement: lprng/html2ps (SuSE-SA:2002:040) (krahmer at suse.de (Sebastian Krahmer))
[SECURITY] [DSA 185-1] New heimdal packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Cisco Security Advisory: Cisco ONS15454 and Cisco ONS15327 Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
CERIAS CISSP Preparation Workshop (mrose at cerias.purdue.edu (Matt Rose))
MDKSA-2002:074 - mozilla update (security at linux-mandrake.com (Mandrake Linux Security Team))

389 messages