full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2002/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 71
² 5	³ 8	⁴ 15	⁵ 7	⁶ 25	⁷ 9	⁸ 5
⁹ 13	¹⁰ 9	¹¹ 10	¹² 15	¹³ 23	¹⁴	¹⁵ 5
¹⁶ 11	¹⁷ 10	¹⁸ 4	¹⁹ 10	²⁰ 21	²¹ 2	²² 6
²³ 4	²⁴ 2	²⁵	²⁶	²⁷ 3	²⁸ 4	²⁹ 7
³⁰ 10	³¹ 10

Messages by day:

December 1 (71 messages)

Fwd: Fwd: Re: Re: Re: ELECTRONICSOULS POSTS ARE FAKE !! (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - Scanner (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - Saying Sorry (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - BuRn-X SpEaKs (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: sup br0 (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: Your message to Full-Disclosure awaits moderator approval (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: ScanMail Message: To Sender Match eManager setting and take action. (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: mixter info (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: Your message to Full-Disclosure awaits moderator approval (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: go away (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: Fwd: mixter info (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Mailman results for Full-Disclosure (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: Fwd: mixter info (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: [ElectronicSouls] - Scanner (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: sup br0 (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - LPD Exploit (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - Scanner (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: ScanMail Message: To Sender Match eManager setting and take action. (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: [ElectronicSouls] - Saying Sorry (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: [ElectronicSouls] - BuRn-X SpEaKs (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - Open Invitation (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: Fwd: sup br0 (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fights (synrak at hotmail.com (SynRak))
Fights 2 (synrak at hotmail.com (SynRak))
You have HushMail! (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: [ElectronicSouls] - Saying Sorry (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - BMCW LOG (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - Holidays (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: [ElectronicSouls] - Saying Sorry (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
You have HushMail! (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - Powerful Portscanner (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - Rant (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: Fwd: Your message to Full-Disclosure awaits moderator approval (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - Teenage Pregnancy (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - Child Pornography (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Advisory: Webster HTTP Server (mattmurphy at kc.rr.com (Matthew Murphy))
Fwd: Fwd: ScanMail Message: To Sender Match eManager setting and take action. (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - Full Disclosure (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - Equal Rights (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: Fwd: Your message to Full-Disclosure awaits moderator approval (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] - brb (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
You have HushMail! (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: go away (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
[ElectronicSouls] (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: Mailman results for Full-Disclosure (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Re: Fwd: Fwd: Fwd: mixter info (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: [ElectronicSouls] - Scanner (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: Fwd: Fwd: sup br0 (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
You have HushMail! (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
HushMail from Administrator@...ist.com. (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: ScanMail Message: To Sender Match eManager setting and take action. (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Fwd: [ElectronicSouls] - LPD Exploit (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
You have HushMail! (electronicsouls at hushmail.com (electronicsouls@...hmail.com))
Administrivia (len at netsys.com (Len Rose))
Administrivia (dufresne at winternet.com (Ron DuFresne))
Awards?? (edgar_fitzgerald at yahoo.co.uk (Edgar Fitzgerald))
[ElectronicSouls] - The Packetstorm is Brewing (divineint at amnesia.co.uk (divineint@...esia.co.uk))
[ElectronicSouls] - Not Scriptkids (divineint at amnesia.co.uk (divineint@...esia.co.uk))
[ElectronicSouls] - The Packetstorm is Brewing (divineint at another.com (divineint@...ther.com))
[ElectronicSouls] - The Packetstorm Is Brewing (divineint at another.com (divineint@...ther.com))
ddos tools and more (divineint at another.com (divineint@...ther.com))
[ElectronicSouls] - The War (divineint at amnesia.co.uk (divineint@...esia.co.uk))
more ddos power (divineint at amnesia.co.uk (divineint@...esia.co.uk))
Work (divineint at amnesia.co.uk (divineint@...esia.co.uk))
FW: [ElectronicSouls] - The Packetstorm is Brewing (divineint at amnesia.co.uk (divineint@...esia.co.uk))
FW: ScanMail Message: To Sender Match eManager setting and take action. (divineint at amnesia.co.uk (divineint@...esia.co.uk))
FW: [ElectronicSouls] - Not Scriptkids (divineint at amnesia.co.uk (divineint@...esia.co.uk))
Treaty (divineint at another.com (divineint@...ther.com))
Gordano Mail Server exploit (NTmail) (geoincidents at getinfo.org (Geoincidents))
Administrivia (len at netsys.com (Len Rose))
[ElectronicSouls] - The Packetstorm is Brewing (bernz at bernztech.org (David Bernick))

December 2 (5 messages)

GLSA: pine (aliz at gentoo.org (Daniel Ahlberg))
[SECURITY] [DSA 201-1] New Free/SWan packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
ShopFactory shopping cart price manipulation (richard at trust-factory.com (Richard van den Berg))
[VU#317417] Denial of Service condition in vxworks ftpd/3com nbx (Scheidell at secnap.com (Michael S. Scheidell))
[RHSA-2002:196-19] Updated xinetd packages fix denial of service vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))

December 3 (8 messages)

MDKSA-2002:084 - Updated pine packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2002:085 - Updated WindowMaker packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
ISS issues bug disclosure guidelines (rms at computerbytesman.com (Richard M. Smith))
Hacking competitions at RootWars.org (joe at rootwars.org (Joe McCray))
ISS issues bug disclosure guidelines (guninski at guninski.com (Georgi Guninski))
[SECURITY] [DSA 202-1] New IM packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
Recommended by len (len at netsys.com (Len Rose))
Len Rose wanted to share this with you. (len at netsys.com (Len Rose))

December 4 (15 messages)

0day remote root BNC exploit (poofie at gmx.net (poofie@....net))
Full disclosure war stories wanted (rms at computerbytesman.com (Richard M. Smith))
A friend has recommended this site (len at netsys.com (len@...sys.com))
A friend has recommended this site (len at netsys.com (len@...sys.com))
Administrivia (len at netsys.com (Len Rose))
[RHSA-2002:254-05] Updated Webalizer packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2002:220-40] Updated KDE packages fix security issues (bugzilla at redhat.com (bugzilla@...hat.com))
SAP database local root via symlink (dotslash at snosoft.com (KF))
[SECURITY] [DSA 203-1] New smb2www packages fix arbitrary command execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
Security Update: [CSSA-2002-054.0] Linux: exploitable memory leak in ypserv (security at caldera.com (security@...dera.com))
Security Update: [CSSA-2002-055.0] Linux: RPC XDR buffer overflow (security at caldera.com (security@...dera.com))
Multiple Vulnerabilities in BIND Name Service Daemon on IRIX (agent99 at sgi.com (SGI Security Coordinator))
ISS issues bug disclosure guidelines (synrak at hotmail.com (SynRak))
SAP database local root via symlink (dotslash at snosoft.com (KF))
Buffer Overflow Vulnerability in X Font Server on IRIX (agent99 at sgi.com (SGI Security Coordinator))

December 5 (7 messages)

Fw: Notes on MS02-068, extensive downplaying of severity (lists.netsys.com at jscript.dk (Thor Larholm))
[SECURITY] [DSA 204-1] New kdlibs packages fix arbitrary program execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
Australia becomes a police state [serious] (silvio at big.net.au (Silvio Cesare))
BIND Name Server DNS Spoofing Vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Samba Security Vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Australia becomes a police state [serious] (johnpf at atnet.net.au (John))
Security Industry Under Scrutiny: Part 3 (sockz at email.com (sockz loves you))

December 6 (25 messages)

Australia becomes a police state [serious] (gbayley at ausmac.net (Grant Bayley))
Security Update: [CSSA-2002-056.0] Linux: apache vulnerabilities in shared memory, DNS, and ApacheBench (security at caldera.com (security@...dera.com))
[Poor-Disclosure] (batsy at vapour.net (batz))
Australia becomes a police state [serious] (sockz at email.com (sockz loves you))
Security Industry Under Scrutiny: Part 3 (steve at entrenchtech.com (Steve W. Manzuik))
Australia becomes a police state [serious] (silvio at big.net.au (Silvio Cesare))
Australia becomes a police state [serious] (knud at skodliv.dk (Knud Erik Højgaard))
Australia becomes a police state [serious] (pauls at utdallas.edu (Schmehl, Paul L))
Re: [Poor-Disclosure] (coley at linus.mitre.org (Steven M. Christey))
Australia becomes a police state [serious] (johnpf at atnet.net.au (John))
Security Industry Under Scrutiny: Part 3 (sockz at email.com (sockz loves you))
Security Industry Under Scrutiny: Part 3 (silvio at big.net.au (Silvio Cesare))
Security Alert??? (bcrocket at texas.net (Bob Crockett))
Security Industry Under Scrutiny: Part 3 (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Australia becomes a police state [serious] (alexander.bartolich at gmx.at (Alexander Bartolich))
SuSE Security Announcement: OpenLDAP2 (SuSE-SA:2002:047) (krahmer at suse.de (Sebastian Krahmer))
Australia becomes a police state [serious] (gbayley at ausmac.net (Grant Bayley))
Australia becomes a police state [serious] (peter at bank-connect.com (Peter van den Heuvel))
[SECURITY] [DSA 192-2] New html2ps packages correct fix against arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce…)
[SECURITY] [DSA 202-2] New IM packages correct hidden architecture dependency (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
RE: Full-Disclosure digest, Vol 1 #433 - 4 msgs (steve at entrenchtech.com (Steve W. Manzuik))
Australia becomes a police state [serious] (kspett at spidynamics.com (Kevin Spett))
Security Industry Under Scrutiny: Part 3 (rms at computerbytesman.com (Richard M. Smith))
Security Alert??? (pauls at utdallas.edu (Schmehl, Paul L))
Australia becomes a police state [serious] (lists at fakelabs.org (lists@...elabs.org))

December 7 (9 messages)

UN support for "security by obscurity" (rms at computerbytesman.com (Richard M. Smith))
Security Update: [CSSA-2002-057.0] Linux: groff pic buffer overflow (security at caldera.com (security@...dera.com))
UN support for "security by obscurity" (full-disclosure at ifokr.org (Brian Hatch))
a tool for windows users. (liudieyuinchina at yahoo.com.cn (Liu Die Yu))
UN support for "security by obscurity" (guninski at guninski.com (Georgi Guninski))
UN support for "security by obscurity" (lcamtuf at ghettot.org (Michal Zalewski))
Microsoft: IE hole worse than reported (rms at computerbytesman.com (Richard M. Smith))
UN support for "security by obscurity" (security at updegrove.net (Rick Updegrove))
UN support for "security by obscurity" (pauls at utdallas.edu (Schmehl, Paul L))

December 8 (5 messages)

All politics is local, even in virtual communities. (bcrocket at texas.net (Bob Crockett))
UN support for "security by obscurity" (brian at pc-radio.com (Brian McWilliams))
"security by obscurity" (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
"security by obscurity" (niels=netsys at bakker.net (Niels Bakker))
*Including* Security through obscurity measures is good. (full-disclosure at ifokr.org (Brian Hatch))

December 9 (13 messages)

VNC Man in the Middle Exploit Code (synrak at hotmail.com (SynRak))
MDKSA-2002:082-1 - Updated python packages fix local arbitrary code execution vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: Proxy vulnerability in TrendMicro InterScan-VirusWall V3.6 - and 3.7 Build 1190 (pbieringer at aerasec.de (Dr. Peter Bieringer))
List Charter (johnc at grok.org.uk (John Cartwright))
More background on the UN's information disclosure concerns (rms at computerbytesman.com (Richard M. Smith))
FW: "Scientific Openness and National Security," January 9, 2003 (rms at computerbytesman.com (Richard M. Smith))
(no subject) (geoincidents at getinfo.org (Geo))
"security by obscurity" (guninski at guninski.com (Georgi Guninski))
More background on the UN's information disclosure concerns (dufresne at winternet.com (Ron DuFresne))
[SecurityOffice] Enceladus Server Suite v3.9 Buffer Overflow Vulnerability (ts at securityoffice.net (Tamer Sahin))
VNC Man in the Middle Exploit Code (petard at hushmail.com (petard@...hmail.com))
Security Update: [CSSA-2002-SCO.43] UnixWare 7.1.1 Open UNIX 8.0.0 : closed file descriptor race vulnerability (security at caldera.com (security@...dera.com))
"security by obscurity" (mail at blazde.co.uk (Roland Postle))

December 10 (9 messages)

Security Industry Under Scrutiny: Part 3 (sockz at email.com (sockz loves you))
cracking e-gold account is simple (liudieyuinchina at yahoo.com.cn (Liu Die Yu))
Security Industry Under Scrutiny: Part 3 (DaveHowe at gmx.co.uk (David Howe))
[RHSA-2002:246-18] Updated Canna packages fix vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2002:229-10] Updated wget packages fix directory traversal bug (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2002:246-18] Updated Canna packages fix vulnerabilities (guninski at guninski.com (Georgi Guninski))
[SECURITY] [DSA-205-1] gtetrinet buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-206-1] tcpdump BGP decoding error (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
CORE-20021005: Vulnerability Report For Linksys Devices (advisories at corest.com (CORE Advisories))

December 11 (10 messages)

Security Update: [CSSA-2002-058.0] Linux: buffer overflow in nss_ldap DNS SRV (security at caldera.com (security@...dera.com))
Re: [Snort-sigs] kadmind exploit rules (anakata at anakata.hack.se (anakata))
Security Industry Under Scrutiny: Part 3 (johnpf at atnet.net.au (John))
Re: [Snort-sigs] kadmind exploit rules (knud at skodliv.dk (Knud Erik Højgaard))
[RHSA-2002:246-18] Updated Canna packages fix vulnerabilities (mjc at redhat.com (Mark Cox))
[SECURITY] [DSA 207-1] New tetex-lib packages fix arbitrary command execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
CORE-20021005: Vulnerability Report For Linksys (remailer at aarg.net (AARG! Anonymous))
Security Update: [CSSA-2002-SCO.44] UnixWare 7.1.1 Open UNIX 8.0.0 : uudecode performs inadequate checks on user-specifi… (security at caldera.com (security@...de…)
CORE-20021005: Vulnerability Report For Li (nick at virus-l.demon.co.uk (Nick FitzGerald))
Denial of Service vulnerability in VisNetic Website (kruse at krusesecurity.dk (Peter Kruse))

December 12 (15 messages)

MDKSA-2002:086 - Updated wget packages fix directory traversal vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
PNG (Portable Network Graphics) Deflate Heap Corruption Vulnerability (marc at eeye.com (Marc Maiffret))
Advisory 04/2002: Multiple MySQL vulnerabilities (s.esser at e-matters.de (Stefan Esser))
[SECURITY] [DSA 208-1] New Perl packages correct Safe handling (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[VulnWatch] Advisory 04/2002: Multiple MySQL vulnerabilities (s.esser at e-matters.de (Stefan Esser))
[RHSA-2002:222-21] Updated apache, httpd, and mod_ssl packages available (bugzilla at redhat.com (bugzilla@...hat.com))
Some vim problems, yet still vim much better than windows (guninski at guninski.com (Georgi Guninski))
How often are IE security holes exploited? (rms at computerbytesman.com (Richard M. Smith))
How often are IE security holes exploited? (pauls at utdallas.edu (Schmehl, Paul L))
[SECURITY] [DSA-209-1] two wget problems (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
How often are IE security holes exploited? (BlueBoar at thievco.com (Blue Boar))
iDefense Security Advisory (gobbles at hushmail.com (gobbles@...hmail.com))
How often are IE security holes exploited? (rms at computerbytesman.com (Richard M. Smith))
[SECURITY] [DSA-210-1] lynx CRLF injection (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Advisory 04/2002: Multiple MySQL vulnerabilities (s.esser at e-matters.de (Stefan Esser))

December 13 (23 messages)

RE: iDefense Security Advisory (dendler at idefense.com (David Endler))
Some vim problems, yet still vim much better than windows (full-disclosure at botanicus.net (David M. Wilson))
How often are IE security holes exploited? (bugtraq at cgisecurity.net (zeno))
How often are IE security holes exploited? (nick at virus-l.demon.co.uk (Nick FitzGerald))
How often are IE security holes exploited? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Some vim problems, yet still vim much better than windows (Weimer at CERT.Uni-Stuttgart.DE (Florian Weimer))
Some vim problems, yet still vim much better than windows (guninski at guninski.com (Georgi Guninski))
Advisory 05/2002: Another Fetchmail Remote Vulnerability (s.esser at e-matters.de (Stefan Esser))
Re: How often are IE security holes exploited? (gobbbles at hushmail.com (gobbbles@...hmail.com))
Re: iDefense (Immunity Sec) Advisory (dave at immunitysec.com (Dave Aitel))
[VulnWatch] Advisory 05/2002: Another Fetchmail Remote Vulnerability (s.esser at e-matters.de (Stefan Esser))
How often are IE security holes exploited? (pauls at utdallas.edu (Schmehl, Paul L))
[SECURITY] [DSA 211-1] New mICQ packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[ESA-20021213-033] Several MySQL vulnerabilities. (security at guardiandigital.com (EnGarde Secure Linux))
How often are IE security holes exploited? (BlueBoar at thievco.com (Blue Boar))
Directory Traversal Vulnerability in FTP Client on IRIX (agent99 at sgi.com (SGI Security Coordinator))
RE: iDefense Security Advisory (dendler at idefense.com (David Endler))
Advisory 05/2002: Another Fetchmail Remote Vulnerability (s.esser at e-matters.de (Stefan Esser))
[ESA-20021213-033] Several MySQL vulnerabilities. (security at guardiandigital.com (EnGarde Secure Linux))
RE: iDefense Security Advisory (dendler at idefense.com (David Endler))
Advisory 05/2002: Another Fetchmail Remote Vulnerability (s.esser at e-matters.de (Stefan Esser))
RE: Security Industry Under Scrutiny #3 (algernon at hackmania.net (algernon))
RE: Security Industry Under Scrutiny #3( addendum) (algernon at hackmania.net (algernon))

December 15 (5 messages)

sometimes i wonder about people (contact at bia-security.com (Anthony LaMantia))
GLSA: mysql (aliz at gentoo.org (Daniel Ahlberg))
GLSA: fetchmail (aliz at gentoo.org (Daniel Ahlberg))
GLSA: squirrelmail (aliz at gentoo.org (Daniel Ahlberg))
GLSA: mysql (aliz at gentoo.org (Daniel Ahlberg))

December 16 (11 messages)

Password Disclosure in Cryptainer (cto at nii.co.in (K. K. Mookhey))
R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors (advisory at rapid7.com (Rapid 7 Security Advisories))
PHP-Nuke code execution and XSS vulnerabilities (ulfh at update.uu.se (Ulf Harnhammar))
GLSA: exim (aliz at gentoo.org (Daniel Ahlberg))
R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors (lcamtuf at ghettot.org (Michal Zalewski))
R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors (cloder at loder.us (Chad Loder))
R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors (lcamtuf at ghettot.org (Michal Zalewski))
R7-0009: Vulnerabilities in SSH2 .Implementations (coley at linus.mitre.org (Steven M. Christey))
Trustworthy Computing Mini-Poll (smcalearney at infosecuritymag.com (smcalearney@...osecuritymag.com))
Re: Multiple vendors XML parser (and SOAP/WebServices server) Denial of Service attack using DTD (greg-fulldisclosure at nest.cx (Gregory Steuck))
Captaris (Infinite) WebMail XSS (pedram at redhive.com (Pedram Amini))

December 17 (10 messages)

R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors (merharm at wra.net (matt merhar))
R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors (knud at skodliv.dk (Knud Erik Højgaard))
[RHSA-2002:293-09] Updated Fetchmail packages fix security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
OT Reporting possible abuse without actual proof? (security at updegrove.net (Rick Updegrove))
[RHSA-2002:228-11] Updated Net-SNMP packages fix security and other bugs (bugzilla at redhat.com (bugzilla@...hat.com))
Re: [VulnWatch] Password Disclosure in Cryptainer (kurt at seifried.org (Kurt Seifried))
RE: Multiple vendors XML parser (and SOAP/WebServices server) Den ial of Service attack using DTD (amit.klein at sanctuminc.com (Amit Klein))
[SECURITY] [DSA-212-1] Multiple MySQL vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
RAZOR advisory: Linux 2.2.xx /proc/<pid>/mem mmap() vulnerability (lcamtuf at ghettot.org (Michal Zalewski))
Re: Multiple vendors XML parser (and SOAP/WebServices server) Denial of Service attack using DTD (greg-fulldisclosure at nest.cx (Gregory Steuck))

December 18 (4 messages)

TCP/UDP Data Streams - Packet Reassembly (susan.lee at securityassoc.com (Susan Chan Lee))
Trustworthy Computing Mini-Poll (Simon.Richter at hogyros.de (Simon Richter))
MDKSA-2002:068-1 - Updated apache packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2002:087 - Updated MySQL packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))

December 19 (10 messages)

A WiFi security tool I would like to see developed (rms at computerbytesman.com (Richard M. Smith))
A WiFi security tool I would like to see developed (merharm at wra.net (matt merhar))
Trustworthy Computing Mini-Poll (andrewt at nmh.co.za (Andrew Thomas))
[SECURITY] [DSA 213-1] New libpng packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS) (labs at idefense.com (iDEFENSE Labs))
A WiFi security tool I would like to see developed (merharm at wra.net (matt merhar))
A WiFi security tool I would like to see developed (merharm at wra.net (matt merhar))
Trust vs Spoof in Advisories (david.kennedy at acm.org (David Kennedy CISSP))
[SecurityOffice] Polycom Video Conference System Management Server Authentication Bypass Vulnerability (ts at securityoffice.net (Tamer Sahin))
A WiFi security tool I would like to see developed (scheidell at secnap.net (Michael Scheidell))

December 20 (21 messages)

A WiFi security tool I would like to see developed (xbud at g0thead.com (xbud))
Security Update: [CSSA-2002-059.0] Linux: multiple vulnerabilities in BIND (CERT CA-2002-31) (security at caldera.com (security@...dera.com))
Trustworthy Computing Mini-Poll (Simon.Richter at hogyros.de (Simon Richter))
Trustworthy Computing Mini-Poll (yossarian at planet.nl (yossarian))
Format string and other vulnerabilities on win32 (andrew at generator.co.za (Andrew Thomas))
Cisco Security Advisory: Cisco Security Advisory: SSH Malformed Packet Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Tea…)
PHP-Nuke mail CRLF Injection vulnerabilities (ulfh at update.uu.se (Ulf Harnhammar))
GLSA: perl (aliz at gentoo.org (Daniel Ahlberg))
[SECURITY] [DSA 214-1] New kdentwork packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
GLSA: wget (aliz at gentoo.org (Daniel Ahlberg))
GLSA: canna (aliz at gentoo.org (Daniel Ahlberg))
[RAZOR] Problems with mkstemp() (lcamtuf at ghettot.org (Michal Zalewski))
Trustworthy Computing Mini-Poll (Simon.Richter at hogyros.de (Simon Richter))
SuSE Security Announcement: cyrus-imapd (SuSE-SA:2002:048) (krahmer at suse.de (Sebastian Krahmer))
Trustworthy Computing Mini-Poll (dufresne at winternet.com (Ron DuFresne))
Trustworthy Computing Mini-Poll (eballen1 at qwest.net (Bruce Ediger))
Trustworthy Computing Mini-Poll (yossarian at planet.nl (yossarian))
Trustworthy Computing Mini-Poll (Simon.Richter at hogyros.de (Simon Richter))
[RAZOR] Problems with mkstemp() (lcamtuf at ghettot.org (Michal Zalewski))
PHP-Nuke mail CRLF Injection vulnerabilities (ulfh at update.uu.se (Ulf Harnhammar))
Security Update: [CSSA-2002-059.0] Linux: multiple vulnerabilities in BIND (CERT CA-2002-31) (security at caldera.com (security@...dera.com))

December 21 (2 messages)

Re: iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS) (Joe_Testa at rapid7.com (Joe Testa))
Trustworthy Computing Mini-Poll (thomas at northernsecurity.net (Thomas Sjögren))

December 22 (6 messages)

Re: iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS) (zen-parse at gmx.net (zen-parse))
Trustworthy Computing Mini-Poll (guninski at guninski.com (Georgi Guninski))
GLSA: kde-3.0.x (aliz at gentoo.org (Daniel Ahlberg))
Trustworthy Computing Mini-Poll (Simon.Richter at hogyros.de (Simon Richter))
Trustworthy Computing Mini-Poll (peter at bank-connect.com (Peter van den Heuvel))
Matlab /tmp usage (psz at maths.usyd.edu.au (Paul Szabo))

December 23 (4 messages)

[SECURITY] [DSA 215-1] New cyrus-imapd packages fix remote command execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debia…)
Trustworthy Computing Mini-Poll (eballen1 at qwest.net (Bruce Ediger))
Trustworthy Computing Mini-Poll (guninski at guninski.com (Georgi Guninski))
iDEFENSE Security Advisory 12.23.02: Integer Overflow in pdftops (labs at idefense.com (iDEFENSE Labs))

December 24 (2 messages)

[SECURITY] [DSA 216-1] New fetchmail packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Free Flashn! (gobbles at hushmail.com (gobbles@...hmail.com))

December 27 (3 messages)

[SECURITY] [DSA 217-1] New typespeed packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
GLSA: cyrus-sasl (aliz at gentoo.org (Daniel Ahlberg))
GLSA: cyrus-imapd (aliz at gentoo.org (Daniel Ahlberg))

December 28 (4 messages)

GLSA: openldap (aliz at gentoo.org (Daniel Ahlberg))
Free Flashn! (david.vincent at mightyoaks.com (David Vincent))
Trustworthy Computing Mini-Poll (yossarian at planet.nl (yossarian))
PHRACK #60 HAS BEEN RELEASED (rm at segfault.net (PHRACK Staff))

December 29 (7 messages)

Trustworthy Computing Mini-Poll (thomas at northernsecurity.net (Thomas Sjögren))
GLSA: cups (aliz at gentoo.org (Daniel Ahlberg))
OT: Scott Culp (guninski at guninski.com (Georgi Guninski))
Software Company Files Suit Over Vulnerability Disclosure (rms at computerbytesman.com (Richard M. Smith))
OT: Scott Culp (tbird at precision-guesswork.com (Tina Bird))
Software Company Files Suit Over Vulnerability Disclosure (backed.up.by.2048.bit.encryption at hushmail.com (backed.up.by.2048.bit.encryption@...hmail.com))
OT: Scott Gulp (backed.up.by.2048.bit.encryption at hushmail.com (backed.up.by.2048.bit.encryption@...hmail.com))

December 30 (10 messages)

PHRACK #60 HAS BEEN RELEASED (sockz at email.com (sockz loves you))
Potential DOS attack with Web-CyrAdm. (tonus at dsinet.org (Casper Aleva))
RE: Full-Disclosure] Software Company Files Suit Over Vulnerability Disclosure (steve at entrenchtech.com (Steve W. Manzuik))
Potential DOS attack with Web-CyrAdm. (ka at khidr.net (Ka))
[SECURITY] [DSA 218-1] New bugzilla packages fix cross site scripting problem (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
Wired.com: So Many Holes, So Few Hacks (rms at computerbytesman.com (Richard M. Smith))
Free Flashn! (david.vincent at mightyoaks.com (David Vincent))
Wired.com: So Many Holes, So Few Hacks (batsy at vapour.net (batz))
[PHC] anti-dmca.org news [PHC] (phc at hushmail.com (phc@...hmail.com))
Wired.com: So Many Holes, So Few Hacks (ken_i_m at elegantinnovations.net (Ken Dyke))

December 31 (10 messages)

BlueBoar - 'Evil' Vendors Strike Back (sockz at email.com (sockz loves you))
[SECURITY] [DSA 219-1] New dhcpcd packages fix remote command execution vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@li…)
BlueBoar - 'Evil' Vendors Strike Back (Btd at valmont.com (Dehner, Benjamin T.))
BlueBoar - 'Evil' Vendors Strike Back (ka at khidr.net (Ka))
OT: Scott Culp (guninski at guninski.com (Georgi Guninski))
BlueBoar - 'Evil' Vendors Strike Back (BlueBoar at thievco.com (Blue Boar))
BlueBoar - 'Evil' Vendors Strike Back (sockz at email.com (sockz loves you))
BlueBoar - 'Evil' Vendors Strike Back (security at updegrove.net (Rick Updegrove (security)))
BlueBoar - 'Evil' Vendors Strike Back (BlueBoar at thievco.com (Blue Boar))
Wired.com: So Many Holes, So Few Hacks (batsy at vapour.net (batz))

324 messages