full-disclosure mailing list - 2003/01

Messages by day:

January 1 (4 messages)

• DMCA & Source Tree Abuse (anoncoder at yahoo.com (Jack Ahz))
• BlueBoar - 'Evil' Vendors Strike Back (Weimer at CERT.Uni-Stuttgart.DE (Florian Weimer))
• BlueBoar - 'Evil' Vendors Strike Back (security at updegrove.net (security@...egrove.net))
• DMCA & Source Tree Abuse (fx at phenoelit.de (FX))

• BlueBoar - 'Evil' Vendors Strike Back (cta at hcsin.net (CTA@...IN.NET))
• GLSA: xpdf (aliz at gentoo.org (Daniel Ahlberg))
• GLSA: leafnode (aliz at gentoo.org (Daniel Ahlberg))
• SuSE Security Announcement: fetchmail (SuSE-SA:2003:001) (thomas at suse.de (Thomas Biege))
• SuSE Security Announcement: cups (SuSE-SA:2003:002) (thomas at suse.de (Thomas Biege))
• SuSE Security Announcement: mysql (SuSE-SA:2003:003) (krahmer at suse.de (Sebastian Krahmer))
• [SECURITY] [DSA 220-1] New squirrelmail packages fix cross site scripting problem (debian-security-announce at lists.debian.org (debian-security-announce@...ts.…)

• HAL2001 GAY IN THE MIDDLE COCK SNARFING VULNERABILITY (anoncoder at yahoo.com (Jack Ahz))
• [SECURITY] [DSA 221-1] New mhonarc packages fix cross site scripting (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
• fam Vulnerability Update (agent99 at sgi.com (SGI Security Coordinator))
• [RHSA-2002:270-16] Updated pine packages available (bugzilla at redhat.com (bugzilla@...hat.com))

• GLSA: dhcpcd (aliz at gentoo.org (Daniel Ahlberg))
• GLSA: dhcpcd (aliz at gentoo.org (Daniel Ahlberg))
• GLSA: libmcrypt (aliz at gentoo.org (Daniel Ahlberg))
• S-plus /tmp usage (psz at maths.usyd.edu.au (Paul Szabo))

• GLSA: monopd (aliz at gentoo.org (Daniel Ahlberg))
• PDS: Integer overflow in FreeBSD kernel (joost at pine.nl (Joost Pol))
• US Copyright Office publishes comments on DMCA (coley at linus.mitre.org (Steven M. Christey))
• [SECURITY] [DSA 222-1] New xpdf packages fix arbitrary command execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)

• Multiple Vulnerabilities in Sendmail on IRIX (agent99 at sgi.com (SGI Security Coordinator))
• GLSA: http-fetcher (aliz at gentoo.org (Daniel Ahlberg))
• [RHSA-2002:283-09] Updated cyrus-sasl packages fix buffer overflows (bugzilla at redhat.com (bugzilla@...hat.com))
• [SECURITY] [DSA 223-1] New geneweb packages fix information exposure (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
• FreeBSD Security Advisory FreeBSD-SA-02:44.filedesc (security-advisories at freebsd.org (FreeBSD Security Advisories))
• GLSA: lcdproc (aliz at gentoo.org (Daniel Ahlberg))

• Netscape Browsers Vulnerabilities on IRIX (agent99 at sgi.com (SGI Security Coordinator))
• bufferoverflow in client shipped with squid-2.5.STABLE1.tar.gz (latest) and below (woot_woot_root at yahoo.co.uk (mr elite))
• [SECURITY] [DSA 224-1] New canna packages fix buffer overflow and denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...t…)
• GLSA: libpng (aliz at gentoo.org (Daniel Ahlberg))
• IMP 2.x SQL injection vulnerabilities (jouko at solutions.fi (Jouko Pynnonen))
• New Info Security Forum (packetdefense at yahoo.com (Packet Defense))
• New Info Security Forum (packetdefense at yahoo.com (Packet Defense))

• Exploit for auth2-pam for vuln linux opensshd (anoncoder at yahoo.com (Jack Ahz))
• Re: Exploit for auth2-pam for vuln linux opensshd (KF's fake HPUX exploit with fake gdb output included free!) (dotslash at snosoft.com (KF))
• Re: Exploit for auth2-pam for vuln linux opensshd (KF's fake HPUX exploit with fake gdb output included free!) (dotslash at snosoft.com (KF))
• Re: Gary Coleman Works for Globalintersec! (anoncoder at yahoo.com (Jack Ahz))
• Exploitation of Old But Critical Vulnerabilities (ie openssh, talkd, squid, etc) (anoncoder at yahoo.com (Jack Ahz))
• List Charter (johnc at grok.org.uk (John Cartwright))
• [SECURITY] [DSA 225-1] New tomcat packages fix source disclosure vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
• Exploit for auth2-pam for vuln linux opensshd (simon at snosoft.com (ATD))
• [RHSA-2002:290-07] Updated Ethereal packages are available (bugzilla at redhat.com (bugzilla@...hat.com))
• Fwd: fuck symantec & boycott bugtraq (ohnonono at hushmail.com (ohnonono@...hmail.com))
• Security Update: [CSSA-2003-001.0] Linux: fetchmail at-sign buffer overflow vulnerability (security at caldera.com (security@...dera.com))
• Fwd: fuck symantec & boycott bugtraq (BlueBoar at thievco.com (Blue Boar))
• Fwd: fuck symantec & boycott bugtraq (ohnonono at hushmail.com (ohnonono@...hmail.com))
• : Fwd: fuck symantec & boycott bugtraq (givemeabreak at hushmail.com (givemeabreak@...hmail.com))
• Fwd: fuck symantec & boycott bugtraq (BlueBoar at thievco.com (Blue Boar))
• Fwd: fuck symantec & boycott bugtraq (axel.azerty at netcourrier.com (Axel))
• : Fwd: fuck symantec & boycott bugtraq (BlueBoar at thievco.com (Blue Boar))
• Fwd: fuck symantec & boycott bugtraq (full-disclosure at botanicus.net (David M. Wilson))
• Re: Gary Coleman Works for Globalintersec! (dotslash at snosoft.com (KF))
• Re: Gary Coleman Works for Globalintersec! (SkyLined at edup.tudelft.nl (Berend-Jan Wever))

• Re: Gary Coleman Works for Globalintersec! (dotslash at snosoft.com (KF))
• re pubescent public rages (fscked at pacbell.net (richard childers / kg6hac))
• re pubescent public rages (yossarian at planet.nl (yossarian))
• re pubescent public rages (anoncoder at yahoo.com (Jack Ahz))
• MDKSA-2003:001 - Updated CUPS packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
• MDKSA-2003:002 - Updated xpdf packages fix integer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
• MDKSA-2003:003 - Updated dhcpcd packages fix character expansion vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
• Fwd: fuck symantec & boycott bugtraq (woot_woot_root at yahoo.co.uk (Faulty))
• Fwd: fuck symantec & boycott bugtraq (dw at botanicus.net (David M. Wilson))
• Fwd: fuck symantec & boycott bugtraq (ka at khidr.net (Ka))
• Fwd: fuck symantec & boycott bugtraq (brian at pc-radio.com (Brian McWilliams))
• [SECURITY] [DSA 226-1] New xpdf-i packages fix arbitrary command execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
• Fwd: fuck symantec & boycott bugtraq (BlueBoar at thievco.com (Blue Boar))
• Fwd: fuck symantec & boycott bugtraq (BlueBoar at thievco.com (Blue Boar))
• Security Update: [CSSA-2003-002.0] Linux: Webmin Cross-site Scripting and Session ID Spoofing Vulnerabilities (security at caldera.com (security@...dera.com))
• Security Update: [CSSA-2003-SCO.1] UnixWare 7.1.1 Open UNIX 8.0.0 : command line argument buffer overflow in ps (security at caldera.com (security@...dera.com))
• Fwd: fuck symantec & boycott bugtraq (ken_i_m at elegantinnovations.net (Ken Dyke))
• Fwd: fuck symantec & boycott bugtraq (dave at immunitysec.com (Dave Aitel))
• Fwd: fuck symantec & boycott bugtraq (ken_i_m at elegantinnovations.net (Ken Dyke))

• leaky ethernet routers (smenard at nbnet.nb.ca (Stephen Menard))
• Fwd: fuck symantec & boycott bugtraq (ka at khidr.net (Ka))
• Fwd: fuck symantec & boycott bugtraq (nick at ethicsdesign.com (Nick Jacobsen))
• Fwd: fuck symantec & boycott bugtraq (mail at blazde.co.uk (Roland Postle))
• SF archive (nicob at nicob.net (Nicob))
• Fwd: fuck symantec & boycott bugtraq (ratel at mailvault.com (ratel))
• Fwd: fuck symantec & boycott bugtraq (ken_i_m at elegantinnovations.net (Ken Dyke))

• Fwd: fuck symantec & boycott bugtraq (orochford at inet-sec.org (O.C.Rochford))
• A b0f/crash exists in the /sbin/probe on Redhat 8.0 proberly below as well. (woot_woot_root at yahoo.co.uk (Faulty))
• Re: Symantec (fscked at pacbell.net (richard childers / kg6hac))
• Fwd: fuck symantec & boycott bugtraq (ratel at mailvault.com (ratel))

• Fwd: fuck symantec & boycott bugtraq (hellnbak at nmrc.org (hellNbak))
• Re: Symantec (geoincidents at getinfo.org (Geoincidents))
• Fwd: fuck symantec & boycott bugtraq (nicob at nicob.net (Nicob))
• Fwd: fuck symantec & boycott bugtraq (hellnbak at nmrc.org (hellNbak))
• HAPPY NEW YEAR & STUFF (phc at hushmail.com (phc@...hmail.com))
• HAPPY NEW YEAR & STUFF (democowx86 at hotmail.com (democow the happy cow))
• GLSA: mod_php php (aliz at gentoo.org (Daniel Ahlberg))
• [SECURITY] [DSA 227-1] New openldap packages fix buffer overflows and remote exploit (debian-security-announce at lists.debian.org (debian-security-announce@lis…)
• [RHSA-2003:006-06] Updated libpng packages fix buffer overflow (bugzilla at redhat.com (bugzilla@...hat.com))
• [RHSA-2002:295-07] Updated CUPS packages fix various vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
• HAPPY NEW YEAR & STUFF (sockz at email.com (sockz loves you))
• *ALERT* Advisory / Exploit for mpg123 *ALERT* (gobbles at hushmail.com (gobbles@...hmail.com))

• The big $$$ (gobbles at hushmail.com (gobbles@...hmail.com))
• MDKSA-2002:073-1 - Updated krb5 packages fix incorrect initscripts (security at linux-mandrake.com (Mandrake Linux Security Team))
• MDKSA-2003:004 - Updated KDE packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
• SuSE Security Announcement: libpng (SuSE-SA:2003:0004) (thomas at suse.de (Thomas Biege))
• SF bid mirror (nicob at nicob.net (Nicob))
• [SECURITY] [DSA 228-1] New libmcrypt packages fix buffer overflows and memory leak (debian-security-announce at lists.debian.org (debian-security-announce@...ts…)
• [RHSA-2003:010-10] Updated PostgreSQL packages fix buffer overrun vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
• [RHSA-2003:001-16] Updated PostgreSQL packages fix security issues and bugs (bugzilla at redhat.com (bugzilla@...hat.com))

• MDKSA-2003:006 - Updated OpenLDAP packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
• MDKSA-2003:005 - Updated leafnode packages fix remote DoS vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
• AW: *ALERT* Advisory / Exploit for mpg123 *ALER T* (vogt at hansenet.com (vogt@...senet.com))
• [SECURITY] [DSA 229-1] New IMP packages fix SQL injection (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
• [SECURITY] [DSA 229-2] New IMP packages fix SQL injection and typo (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
• Re: Local/remote mpg123 exploit / 3APAPAPA insights (gobbles at hushmail.com (gobbles@...hmail.com))
• php-nuke again ... (appelast at bsquad.sm.pl (Karol Więsek))
• [RHSA-2002:288-22] Updated MySQL packages fix various security issues (bugzilla at redhat.com (bugzilla@...hat.com))
• Security Update: [CSSA-2003-SCO.2] UnixWare 7.1.1 : multiple vulnerabilities in BIND (CERT CA-2002-31) (security at caldera.com (security@...dera.com))
• Security Update: [CSSA-2003-SCO.2] UnixWare 7.1.1 : multiple vulnerabilities in BIND (CERT CA-2002-31) (security at caldera.com (security@...dera.com))

• [RHSA-2003:011-07] Updated dhcp packages fix security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
• [RHSA-2002:297-17] Updated vim packages fix modeline vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
• [SECURITY] [DSA 230-1] New bugzilla packages fix unauthorized data modification (debian-security-announce at lists.debian.org (debian-security-announce@...ts.de…)
• IMSC Beta Testing Period (full-disclosure at immunitysec.com (Dave Aitel))

• phpBB SQL Injection vulnerability (ulfh at Update.UU.SE (Ulf Harnhammar))
• GLSA: fnord (aliz at gentoo.org (Daniel Ahlberg))
• GLSA: dhcp (aliz at gentoo.org (Daniel Ahlberg))
• [SECURITY] [DSA 231-1] New dhcp3 packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
• MDKSA-2003:007 - Updated dhcp packages fix remote code execution vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
• Court: Network Associates can't gag users (or can they?) (rms at computerbytesman.com (Richard M. Smith))

• GLSA: kde-2.2.x (aliz at gentoo.org (Daniel Ahlberg))
• CuteFTP 5.0 XP, Buffer Overflow (fitzies at hotmail.com (Lance Fitz-Herbert))

• Navian Call Home (bcrocket at texas.net (Bob Crockett))
• .: Sambar Server Cross-Site Scripting vulnerability :. (galiarept at security-corp.org (galiarept [security-corp]))

• Navian Call Home (simon at snosoft.com (ATD))
• SuSE Security Announcement: susehelp (SuSE-SA:2003:005) (krahmer at suse.de (Sebastian Krahmer))
• FW: Navian Call Home (rms at computerbytesman.com (Richard M. Smith))
• [SECURITY] [DSA 232-1] New CUPS packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
• SuSE Security Announcement: dhcp (SuSE-SA:2003:0006) (thomas at suse.de (Thomas Biege))
• Advisory 01/2003: CVS remote vulnerability (s.esser at e-matters.de (Stefan Esser))
• [RHSA-2003:012-07] Updated CVS packages available (bugzilla at redhat.com (bugzilla@...hat.com))
• format strings on HP-UX (bt at delfi.lt (bt@...fi.lt))
• format strings on HP-UX (dotslash at snosoft.com (KF))
• format strings on HP-UX (eballen1 at qwest.net (Bruce Ediger))
• Naviant call home (bcrocket at texas.net (Bob Crockett))
• CVS REMOTE VULNERABILITY + STEFAN ESSER (anoncoder at yahoo.com (Jack Ahz))
• MDKSA-2003:008 - Updated libpng packages fix potential remote compromise (security at linux-mandrake.com (Mandrake Linux Security Team))
• CVS REMOTE VULNERABILITY + STEFAN ESSER : UNSCRUPULOUS (anoncoder at yahoo.com (Jack Ahz))
• MDKSA-2003:009 - Updated cvs packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))

• Security Update: [CSSA-2003-004.0] Linux: Multiple Security Vulnerabilities in the Common Unix Printing System (CUPS) (security at caldera.com (security@...dera…)
• CVS REMOTE VULNERABILITY + STEFAN ESSER : UNSCRUPULOUS (nobody at cryptofortress.com (Anonymous))
• Drive-by download from a spam email message (rms at computerbytesman.com (Richard M. Smith))
• Drive-by download from a spam email message (smenard at nbnet.nb.ca (Stephen Menard))
• Re: php-nuke again ... (paczor at fubar.pl (Pawel Kaczor))
• Citrix Metaframe and Netware (bugtrack id 6641) (stk at ahs.hist.no (Steinar Kleven))
• GLSA: cvs (aliz at gentoo.org (Daniel Ahlberg))
• Security Industry Under Scrutiny #4 (sockz at email.com (sockz loves you))
• Drive-by download from a spam email message (nexus at patrol.i-way.co.uk (Nexus))
• Re: php-nuke again ... (msopacua at idg.nl (Melvyn Sopacua))
• Security Industry Under Scrutiny #4 (nobody at cryptofortress.com (Anonymous))
• Security Industry Under Scrutiny #4 (sockz at email.com (sockz loves you))
• New security tool: ike-scan (IPsec IKE scanner) released (netsys-l at nta-monitor.com (Roy Hills))
• [SECURITY] [DSA 233-1] New cvs packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
• Drive-by download from a spam email message (rms at computerbytesman.com (Richard M. Smith))
• Security Industry Under Scrutiny #4 (nobody at cryptofortress.com (Anonymous))
• [serg@...ql.com: Re: MySQL 3.23.54a can be crased with a exploit for 3.23.53] (len at netsys.com (Len Rose))
• Blackboard 5.x Password Retrieval (pedram at redhive.com (Pedram Amini))
• (no subject) (anonymous at anonymizer.com (Anonymous))
• Security Industry Under Scrutiny #4 (batsy at vapour.net (batz))
• iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package (labs at idefense.com (iDEFENSE Labs))
• MDKSA-2003:010 - Updated printer-drivers packages fix local vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
• Security Industry Under Scrutiny #4 (d4yj4y at yahoo.com (Day Jay))
• Corporative Electronic War Destroying an Entire Nation (interfaz at cantv.net (interfaz@...tv.net))
• [RHSA-2002:202-25] Updated python packages fix predictable temporary file (bugzilla at redhat.com (bugzilla@...hat.com))
• Corporative Electronic War Destroying an Entire Nation (interfaz at cantv.net (interfaz@...tv.net))
• Security Industry Under Scrutiny #4 (hawklord at xmission.com (The Hawklord))
• IRIX ToolTalk RPC Server Format String Vulnerability update (agent99 at sgi.com (SGI Security Coordinator))
• Security Industry Under Scrutiny #4 (silvio at big.net.au (Silvio Cesare))
• Security Industry Under Scrutiny #4 (silvio at big.net.au (Silvio Cesare))
• Security Update: [CSSA-2003-005.0] Linux: canna buffer overflow and denial of service (security at caldera.com (security@...dera.com))
• [Fwd: [ANNOUNCE] Apache 2.0.44 Released] (vimages at well.com (Jim Race))
• [RHSA-2002:202-25] Updated python packages fix predictable temporary file (bugzilla at redhat.com (bugzilla@...hat.com))
• Blackboard 5.x Password Retrieval (pedram at redhive.com (Pedram Amini))
• Re: php-nuke again ... (msopacua at idg.nl (Melvyn Sopacua))
• Drive-by download from a spam email message (rms at computerbytesman.com (Richard M. Smith))
• Security Industry Under Scrutiny #4 (batsy at vapour.net (batz))
• [SECURITY] [DSA 233-1] New cvs packages fix arb itrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))

• Security Industry Under Scrutiny #4 (sockz at email.com (sockz loves you))
• Security Industry Under Scrutiny #4 (yossarian at planet.nl (yossarian))
• Security Industry Under Scrutiny #4 (hellnbak at nmrc.org (hellNbak))
• Security Industry Under Scrutiny #4 (nobody at cryptofortress.com (Anonymous))
• GLSA: vim vim-core gvim (aliz at gentoo.org (Daniel Ahlberg))
• Path Parsing Errata in Apache HTTP Server (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
• [SECURITY] [DSA 234-1] New kdeadmin packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)
• [SECURITY] [DSA 235-1] New kdegraphics packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
• [SECURITY] [DSA 236-1] New kdelibs packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
• Path Parsing Errata in Apache HTTP Server (gcuesta at netimedias.com (Gilles Cuesta))
• SuSE Security Announcement: cvs (SuSE-SA:2003:0007) (thomas at suse.de (Thomas Biege))
• Security Industry Under Scrutiny #4 (dufresne at winternet.com (Ron DuFresne))
• Path Parsing Errata in Apache HTTP Server (ben at algroup.co.uk (Ben Laurie))
• Security Industry Under Scrutiny #4 (ratel at mailvault.com (ratel))
• RE: TRACE used to increase the dangerous of XSS. (rms at computerbytesman.com (Richard M. Smith))
• Updated patches for SGI Advisories 20020903-02-P and 20021103-01-P (agent99 at sgi.com (SGI Security Coordinator))
• Re: New Web Vulnerability - Cross-Site Tracing (jeremiah at whitehatsec.com (Jeremiah Grossman))
• Re: New Web Vulnerability - Cross-Site Tracing (xss-is-lame at hushmail.com (xss-is-lame@...hmail.com))

• Security Industry Under Scrutiny (yossarian at planet.nl (yossarian))
• Re: New Web Vulnerability - Cross-Site Tracing (jeremiah at whitehatsec.com (Jeremiah Grossman))
• Re: New Web Vulnerability - Cross-Site Tracing (chatmaster at charter.net (Tim Greer))
• Re: New Web Vulnerability - Cross-Site Tracing (jeremiah at whitehatsec.com (Jeremiah Grossman))
• Re: New Web Vulnerability - Cross-Site Tracing (chatmaster at charter.net (Tim Greer))
• Security Industry Under Scrutiny #4 (ratel at mailvault.com (ratel))
• Fw: TRACE used to increase the dangerous of XSS. (lists.netsys.com at jscript.dk (Thor Larholm))
• RE: TRACE used to increase the dangerous of XSS. (thor at pivx.com (Thor Larholm))
• Re: New Web Vulnerability - Cross-Site Tracing (sflist at digitaloffense.net (H D Moore))
• [SECURITY] [DSA 237-1] New kdenetwork packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
• [SECURITY] [DSA 238-1] New kdepim packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
• RE: TRACE used to increase the dangerous of XSS. (rms at computerbytesman.com (Richard M. Smith))
• Re: New Web Vulnerability - Cross-Site Tracing (bugtraq at cgisecurity.net (zeno))
• Re: New Web Vulnerability - Cross-Site Tracing (thor at pivx.com (Thor Larholm))
• Lock business practices "security-by-obscurity" for 150 years (rms at computerbytesman.com (Richard M. Smith))
• SPRINT ADSL [Zyxel 645 Series Modem] (http-equiv at malware.com (http-equiv@...ite.com))
• [SECURITY] [DSA 239-1] New kdesdk packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
• RE: TRACE used to increase the dangerous of XSS. (guninski at guninski.com (Georgi Guninski))
• RE: TRACE used to increase the dangerous of XSS. (rms at computerbytesman.com (Richard M. Smith))
• Lock business practices "security-by-obscurity" for 150 years (3Dken_i_m at elegantinnovations.net (Chief Gadgeteer))
• Master-Keyed Lock Vulnerability (rms at computerbytesman.com (Richard M. Smith))
• Lock business practices "security-by-obscurity" for 150 years (guninski at guninski.com (Georgi Guninski))
• [SECURITY] [DSA 240-1] New kdegames packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)
• Lock business practices "security-by-obscurity" for 150 years (hellnbak at nmrc.org (hellNbak))
• Lock business practices "security-by-obscurity" for 150 years (eecue at eecue.com (eecue))
• Lock business practices "security-by-obscurity" for 150 years (kspett at spidynamics.com (Kevin Spett))
• Lock business practices "security-by-obscurity" for 150 years (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
• Re: New Web Vulnerability - Cross-Site Tracing (coley at linus.mitre.org (Steven M. Christey))
• Re: New Web Vulnerability - Cross-Site Tracing (rms at computerbytesman.com (Richard M. Smith))

• RE: TRACE used to increase the dangerous of XSS. (rms at computerbytesman.com (Richard M. Smith))
• Re: New Web Vulnerability - Cross-Site Tracing (coley at linus.mitre.org (Steven M. Christey))
• Master-Keyed Lock Vulnerability (sockz at email.com (sockz loves you))
• Master-Keyed Lock Vulnerability (jasonc at science.org (Jason Coombs))
• Re: New Web Vulnerability - Cross-Site Tracing (coley at linus.mitre.org (Steven M. Christey))
• Master-Keyed Lock Vulnerability (democowx86 at hotmail.com (democow the happy cow))
• Re: New Web Vulnerability - Cross-Site Tracing (lcamtuf at ghettot.org (Michal Zalewski))
• [SECURITY] [DSA 241-1] New kdeutils packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)
• RE: Full-Disclosure digest, Vol 1 #526 - 3 msgs (treese at sponsorship.com (Tim Reese))
• FW: Security in a Connected World (rms at computerbytesman.com (Richard M. Smith))
• [SECURITY] [DSA 242-1] New kdebase packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
• Test program for CVS double-free. (Joe_Testa at rapid7.com (Joe Testa))
• [SECURITY] [DSA 243-1] New kdemultimedia packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
• FW: Security in a Connected World (guninski at guninski.com (Georgi Guninski))
• FW: Security in a Connected World (cesarc56 at yahoo.com (Cesar))
• Is MS SharePoint secure? (poirotsj at gci.net (Steve Poirot))
• dDoS tool (danielf at supportteam.net (Daniel F. Chief Security Engineer -))
• Re: New Web Vulnerability - Cross-Site Tracing (xss-is-lame at hushmail.com (xss-is-lame@...hmail.com))
• Re: New Web Vulnerability - Cross-Site Tracing (xss-is-lame at hushmail.com (xss-is-lame@...hmail.com))
• DOS all platforms (mark at tweakt.net (Mark Renouf))

• SQL Sapphire Worm Analysis (marc at eeye.com (Marc Maiffret))
• A few quick questions about the SQL Sapphire Worm (rms at computerbytesman.com (Richard M. Smith))
• A few quick questions about the SQL Sapphire Worm (marc at eeye.com (Marc Maiffret))
• Is Sapphire the world's smallest computer worm? (rms at computerbytesman.com (Richard M. Smith))
• Is Sapphire the world's smallest computer worm? (mail at blazde.co.uk (Roland Postle))
• Is Sapphire the world's smallest computer worm? (munge at attrition.org (Small Grey))
• Is Sapphire the world's smallest computer worm? (madsaxon at direcway.com (madsaxon))
• Is Sapphire the world's smallest computer worm? (kspett at spidynamics.com (Kevin Spett))
• Cisco Security Advisory: MS SQL "Sapphire" Worm Mitigation Recommendations (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (rms at computerbytesman.com (Richard M. Smith))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (jasonc at science.org (Jason Coombs))
• Sapphire SQL Worm Analysis Complete (mattmurphy at kc.rr.com (Matthew Murphy))
• Is Sapphire the world's smallest computer worm? (bugtraq at cgisecurity.net (zeno))
• Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (rmk at toad.rmkhome.com (Rick Kelly))
• Sapphire worm POC that fulldisclosure policies hurt everyone (methylketone at hushmail.com (methylketone@...hmail.com))

• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (dufresne at winternet.com (Ron DuFresne))
• [SCSA-003] Multiple Cross Site Scripting Vulnerabilities in Nuked-Klan (gregory.lebras at security-corp.org (Grégory Le Bras | Security Corporation))
• Administriviality (len at netsys.com (Len Rose))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (benjamin at seattlefenix.net (Benjamin Krueger))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (ratman6 at earthlink.net (Matt Smith))
• Is Sapphire the world's smallest computer worm? (rms at computerbytesman.com (Richard M. Smith))
• Tool: Sapphire SQL Worm Scanner (marc at eeye.com (Marc Maiffret))
• G0BBL3S R3V34L3D!#^!@ (javaman at elite.mod.net (javaman@...te.mod.net))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (woods at weird.com (Greg A. Woods))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (jsklein at mindspring.com (Joe Klein))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (madsaxon at direcway.com (madsaxon))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (douglist at anize.org (Douglas F. Calvert))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (pauls at utdallas.edu (Schmehl, Paul L))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (nick at ethicsdesign.com (Nick Jacobsen))
• format strings vulns in /bin/login and /usr/bin/passwd (woot_woot_root at yahoo.co.uk (Faulty))
• Cisco Security Advisory: Cisco Security Advisory: Microsoft SQL Server 2000 Vulnerabilities in Cisco Products - MS02-061 (psirt at cisco.com (Cisco Systems Produ…)
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (hlk at kramse.dk (Henrik Lund Kramshøj))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (BlueBoar at thievco.com (Blue Boar))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (jmcguire at sbcs.com (jmcguire@...s.com))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (purdy at tecman.com (Curt Purdy))
• format strings vulns in /bin/login and /usr/bin/passwd (qobaiashi at gmx.net (qobaiashi))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (ka at khidr.net (Ka))
• FW: Other Microsoft Programs Said at Risk for Web Worm (rms at computerbytesman.com (Richard M. Smith))
• Sapphire worm POC that fulldisclosure policies hurt everyone (dotslash at snosoft.com (KF))
• 100 Worms per Second, Courtesy of Telstra (kkrueger at outbox.whoi.edu (Karl A. Krueger))
• Sapphire worm POC that fulldisclosure policies hurt everyone (jasonc at science.org (Jason Coombs))
• Sapphire worm POC that fulldisclosure policies hurt everyone (jasonc at science.org (Jason Coombs))
• Sapphire worm POC that fulldisclosure policies hurt everyone (Simon.Richter at hogyros.de (Simon Richter))
• Sapphire worm POC that fulldisclosure policies hurt everyone (yossarian at planet.nl (yossarian))
• 100 Worms per Second, Courtesy of Telstra (mattmurphy at kc.rr.com (Matthew Murphy))
• format strings vulns in /bin/login and /usr/bin/passwd (flatline at blackhat.nl (flatline))
• 100 Worms per Second, Courtesy of Telstra (mike at sentex.net (Mike Tancsa))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (dufresne at winternet.com (Ron DuFresne))
• format strings vulns in /bin/login and /usr/bin/passwd (madsaxon at direcway.com (madsaxon))
• SOPHISTICATION OF THE WORM (backed.up.by.2048.bit.encryption at hushmail.com (backed.up.by.2048.bit.encryption@...hmail.com))

• 100 Worms per Second, Courtesy of Telstra (kkrueger at outbox.whoi.edu (Karl A. Krueger))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (pauls at utdallas.edu (Schmehl, Paul L))
• Hypermail buffer overflows (ulfh at Update.UU.SE (Ulf Harnhammar))
• 100 Worms per Second, Courtesy of Telstra (mail at blazde.co.uk (Roland Postle))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (hellnbak at nmrc.org (hellNbak))
• Lock business practices "security-by-obscurity" for 150 years (brian at pc-radio.com (Brian McWilliams))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (pauls at utdallas.edu (Schmehl, Paul L))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (pauls at utdallas.edu (Schmehl, Paul L))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (jasonc at science.org (Jason Coombs))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (hellnbak at nmrc.org (hellNbak))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (madsaxon at direcway.com (madsaxon))
• format strings vulns in /bin/login and /usr/bin/passwd (flatline at blackhat.nl (flatline))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (recon at snosoft.com (Strategic Reconnaissance Team))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (dufresne at winternet.com (Ron DuFresne))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (admin at mokshafaced.com (moksha faced))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (nick at ethicsdesign.com (Nick Jacobsen))
• [yusufg@...blaze.com: Re: Possible source of worm..] (len at netsys.com (Len Rose))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (madduck at madduck.net (martin f krafft))
• SOPHISTICATION OF THE WORM (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
• RE: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (kkrueger at outbox.whoi.edu (Karl A. Krueger))
• [SECURITY] [DSA 244-1] New noffle packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (pauls at utdallas.edu (Schmehl, Paul L))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (pauls at utdallas.edu (Schmehl, Paul L))
• [ESA-20030127-001] MySQL vulnerabilities (security at guardiandigital.com (EnGarde Secure Linux))
• [ESA-20030127-002] fetchmail-ssl: heap overflow vulnerability (security at guardiandigital.com (EnGarde Secure Linux))
• RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (dufresne at winternet.com (Ron DuFresne))
• RE: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (pauls at utdallas.edu (Schmehl, Paul L))
• MDKSA-2003:011 - Updated fetchmail packages fix remote exploit vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))

• Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (sunseri at abpi.net (Albert Sunseri))
• Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (brett at softwarecreations.co.nz (Brett Moore))
• Oops, Microsoft forgot the SQL patch! (rms at computerbytesman.com (Richard M. Smith))
• MSDE contained in... (tbird at precision-guesswork.com (Tina Bird))
• LAFFING MY SOCKZ OFF (sockz at email.com (sockz loves you))
• Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
• [SECURITY] [DSA 245-1] New dhcp3 packages fix potential network flood (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
• Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! (eenge at prium.net (Erik Enge))
• MSDE contained in... (pauls at utdallas.edu (Paul Schmehl))
• Re: Black Hat Announcements (guninski at guninski.com (Georgi Guninski))
• FW: Security in a Connected World (steve at videogroup.com (Steve))
• MSDE contained in... (nutcase26 at hotmail.com (nutcase26))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (Nicolas.Villatte at advalvas.be (Nicolas Villatte))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (d4yj4y at yahoo.com (Day Jay))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (simon at snosoft.com (ATD))
• LAFFING MY SOCKZ OFF (qobaiashi at gmx.net (qobaiashi))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (recon at snosoft.com (Strategic Reconnaissance Team))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (d4yj4y at yahoo.com (Day Jay))
• [Secure Network Operations, Inc.] FullDisclosure != Exploit Release (Nicolas.Villatte at advalvas.be (Nicolas Villatte))
• SNOSOFT (d4yj4y at yahoo.com (Day Jay))
• FW: VERITAS Software Technical Advisory (rms at computerbytesman.com (Richard M. Smith))
• FW: VERITAS Software Technical Advisory (smenard at nbnet.nb.ca (Stephen Menard))
• Internal Microsoft email messages on their SQL worm problems (rms at computerbytesman.com (Richard M. Smith))
• MSDE contained in... (pauls at utdallas.edu (Paul Schmehl))
• FW: VERITAS Software Technical Advisory (rms at computerbytesman.com (Richard M. Smith))
• MIT Kerberos FTP client remote shell commands execution (fozzy at dmpfrance.com (Fozzy [Hackademy Audit]))

• FW: VERITAS Software Technical Advisory (tbird at precision-guesswork.com (Tina Bird))
• FW: VERITAS Software Technical Advisory (smenard at nbnet.nb.ca (Stephen Menard))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (dotslash at snosoft.com (KF))
• [Secure Network Operations, Inc.] FullDisclosure != Exploit Release (recon at snosoft.com (Strategic Reconnaissance Team))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (d4yj4y at yahoo.com (Day Jay))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (dotslash at snosoft.com (KF))
• The worm author finally revealed! (solareclipse at phreedom.org (Solar Eclipse))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (poirotsj at gci.net (Steve Poirot))
• The worm author finally revealed! (smenard at nbnet.nb.ca (Stephen Menard))
• [Secure Network Operations, Inc.] FullDisclosure != Exploit Release (hellnbak at nmrc.org (hellNbak))
• [Secure Network Operations, Inc.]FullDisclosure != Exploit Release (Nicolas.Villatte at advalvas.be (Nicolas Villatte))
• The worm author finally revealed! (madduck at madduck.net (martin f krafft))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
• The worm author finally revealed! (Sandeep-Giri at deshaw.com (Giri, Sandeep))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
• The worm author finally revealed! (pch at isec.pl (pch@...c.pl))
• [Secure Network Operations, Inc.] FullDisclosure != Exploit Release (dufresne at winternet.com (Ron DuFresne))
• [SECURITY] [DSA 246-1] New tomcat packages fix information exposure and cross site scripting (debian-security-announce at lists.debian.org (debian-security-anno…)
• David Litchfield talks about the SQL Worm in the Washington Post (rms at computerbytesman.com (Richard M. Smith))
• Re: Full Disclosure != Exploit Release (pauls at utdallas.edu (Paul Schmehl))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (guninski at guninski.com (Georgi Guninski))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (Weimer at CERT.Uni-Stuttgart.DE (Florian Weimer))
• The worm author finally revealed! (solareclipse at phreedom.org (solareclipse@...eedom.org))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (BlueBoar at thievco.com (Blue Boar))
• Re: Full Disclosure != Exploit Release (http-equiv at malware.com (http-equiv@...ite.com))
• David Litchfield talks about the SQL Worm in the Washington Post (guninski at guninski.com (Georgi Guninski))
• David Litchfield talks about the SQL Worm in the Washington Post (rms at computerbytesman.com (Richard M. Smith))
• The worm author finally revealed! (security at dylanic.de (Michael Renzmann))
• [Secure Network Operations, Inc.] FullDisclosure != Exploit Release (hellnbak at nmrc.org (hellNbak))
• The worm author finally revealed! (BlueBoar at thievco.com (Blue Boar))
• Re: Full Disclosure != Exploit Release (hellnbak at nmrc.org (hellNbak))
• iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords (labs at idefense.com (iDEFENSE Labs))
• R: [Secure Network Operations, Inc.]FullDisclosure != Exploit Release (andrea.vecchio at bsc.it (Andrea Vecchio))
• David Litchfield talks about the SQL Worm in the Washington Post (geoincidents at getinfo.org (Geo))
• iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords (security at dylanic.de (Michael Renzmann))
• Re: Full Disclosure != Exploit Release (guninski at guninski.com (Georgi Guninski))
• (no subject) (backed.up.by.2048.bit.encryption at hushmail.com (backed.up.by.2048.bit.encryption@...hmail.com))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (simon at snosoft.com (ATD))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (simon at snosoft.com (ATD))
• Re: Full Disclosure != Exploit Release (rms at computerbytesman.com (Richard M. Smith))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (recon at snosoft.com (Strategic Reconnaissance Team))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (recon at snosoft.com (Strategic Reconnaissance Team))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (recon at snosoft.com (Strategic Reconnaissance Team))
• [Secure Network Operations, Inc.] FullDisclosure != Exploit Release (recon at snosoft.com (Strategic Reconnaissance Team))
• R: [Secure Network Operations, Inc.]FullDisclosure != Exploit Release (recon at snosoft.com (Strategic Reconnaissance Team))
• Re: Full Disclosure != Exploit Release (dotslash at snosoft.com (KF))
• The worm author finally revealed! (xbud at g0thead.com (xbud))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (BlueBoar at thievco.com (Blue Boar))
• [Secure Network Operations, Inc.] FullDisclosure != Exploit Release (Sandeep-Giri at deshaw.com (Giri, Sandeep))
• David Litchfield talks about the SQL Worm in the Washington Post (coley at linus.mitre.org (Steven M. Christey))
• [Secure Network Operations, Inc.] FullDisclosure != Exploit Release (geoincidents at getinfo.org (Geo))
• Re: Full Disclosure != Exploit Release (BlueBoar at thievco.com (Blue Boar))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (rms at computerbytesman.com (Richard M. Smith))
• [Secure Network Operations, Inc.] FullDisclosure != Exploit Release (Ken at infosec101.org (Ken Pfeil))
• [Secure Network Operations, Inc.] FullDisclosure != Exploit Release (recon at snosoft.com (Strategic Reconnaissance Team))
• [Secure Network Operations, Inc.] FullDisclosure != Exploit Release (recon at snosoft.com (Strategic Reconnaissance Team))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (d4yj4y at yahoo.com (Day Jay))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (BlueBoar at thievco.com (Blue Boar))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (backed.up.by.2048.bit.encryption at hushmail.com (backed.up.by.2048.bit.encryption@...hmai…)
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (backed.up.by.2048.bit.encryption at hushmail.com (backed.up.by.2048.bit.encryption@...hmai…)
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (rms at computerbytesman.com (Richard M. Smith))
• Fw: Full Disclosure != Exploit Release - No disclosure No Fix (yossarian at planet.nl (yossarian))
• FW: Response to David Litchfield on Responsible Disclosure and Infosec Research (jasonc at science.org (Jason Coombs))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (rms at computerbytesman.com (Richard M. Smith))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (simon at snosoft.com (ATD))
• SPIKE Proxy 1.4.7 is now available (dave at immunitysec.com (Dave Aitel))
• Fw: Full Disclosure != Exploit Release - No disclosure No Fix (BlueBoar at thievco.com (Blue Boar))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (security at updegrove.net (Rick Updegrove (security)))

• [Secure Network Operations, Inc.] Full Disclosure Conclusion? (simon at snosoft.com (ATD))
• [Secure Network Operations, Inc.] Full Disclosure Conclusion? (yossarian at planet.nl (yossarian))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (dufresne at winternet.com (Ron DuFresne))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (backed.up.by.2048.bit.encryption at hushmail.com (backed.up.by.2048.bit.encryption@...hmai…)
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (kspett at spidynamics.com (Kevin Spett))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (d4yj4y at yahoo.com (Day Jay))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (hellnbak at nmrc.org (hellNbak))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (hellnbak at nmrc.org (hellNbak))
• [Secure Network Operations, Inc.] Full Disclosure != Exploit Release (kspett at spidynamics.com (Kevin Spett))
• Apache Jakarta Tomcat 3 URL parsing vulnerability (jouko at solutions.fi (Jouko Pynnonen))
• Re: Full Disclosure != Exploit Release (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
• Apache Jakarta Tomcat 3 URL parsing vulnerability (jouko at solutions.fi (Jouko Pynnonen))
• The worm author finally revealed! (sockz at email.com (sockz loves you))
• CERT, Full Disclosure, and Security By Obscurity (len at netsys.com (Len Rose))
• LAFFING MY SOCKZ OFF (sockz at email.com (sockz loves you))
• Re: Full Disclosure != Exploit Release (hellnbak at nmrc.org (hellNbak))
• [SECURITY] [DSA 247-1] New courier packages fix SQL injection (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
• The worm author finally revealed! (security at dylanic.de (Michael Renzmann))
• The worm author finally revealed! (sockz at email.com (sockz loves you))
• Re: David Litchfield talks about the SQL Worm in the Washington Post (auto68182 at hushmail.com (auto68182@...hmail.com))
• CERT, Full Disclosure, and Security By Obscurity (jasonc at science.org (Jason Coombs))
• The worm author finally revealed! (pauls at utdallas.edu (Paul Schmehl))
• Re: iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords (auto68182 at hushmail.com (auto68182@...hmail.com))
• SQL Server patch - why doesn't Windows update help? (avalon at coombs.anu.edu.au (Darren Reed))
• The worm author finally revealed! (futureshoks at hushmail.com (futureshoks@...hmail.com))
• iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords (dendler at idefense.com (David Endler))
• SQL Server patch - why doesn't Windows update help? (jasonc at science.org (Jason Coombs))
• SQL Server patch - why doesn't Windows upda te help? (david.vincent at mightyoaks.com (David Vincent))
• Question about the new Xupiter toolbar (rms at computerbytesman.com (Richard M. Smith))
• LAFFING MY SOCKZ OFF (qobaiashi at gmx.net (qobaiashi))
• CERT, Full Disclosure, and Security By Obscurity (ben at algroup.co.uk (Ben Laurie))
• SQL Server patch - why doesn't Windows update help? (netw3_security at hushmail.com (Curt Wilson))
• The worm author finally revealed! (pipes at mutilation.org (Pipes Cuchifrito))
• Question about the new Xupiter toolbar (xss-is-lame at hushmail.com (xss-is-lame@...hmail.com))
• The worm author finally revealed! (pauls at utdallas.edu (Paul Schmehl))
• Question about the new Xupiter toolbar (brian at pc-radio.com (Brian McWilliams))
• Was: Full Disclosure = Exploit Release - No disclosure No Fix (yossarian at planet.nl (yossarian))
• CERT, Full Disclosure, and Security By Obscurity (guninski at guninski.com (Georgi Guninski))
• CERT, Full Disclosure, and Security By Obscurity (BlueBoar at thievco.com (Blue Boar))
• CERT, Full Disclosure, and Security By Obscurity (gbayley at ausmac.net (Grant Bayley))
• The worm author finally revealed! (kr0n0graffik at sasktel.net (kr0nograffik))
• SQL Server patch - why doesn't Windows update help? (avalon at coombs.anu.edu.au (Darren Reed))
• Was: Full Disclosure = Exploit Release - No disclosure No Fix (BlueBoar at thievco.com (Blue Boar))

• CERT, Full Disclosure, and Security By Obscurity (avalon at coombs.anu.edu.au (Darren Reed))
• CERT, Full Disclosure, and Security By Obscurity (gbayley at ausmac.net (Grant Bayley))
• CERT, Full Disclosure, and Security By Obscurity (dotslash at snosoft.com (KF))
• The worm author finally revealed! (gotcha at mymail.co.za (gotcha))
• Question about the new Xupiter toolbar (lists.netsys.com at jscript.dk (Thor Larholm))
• [RHSA-2003:020-09] Updated kerberos packages fix vulnerability in ftp client (bugzilla at redhat.com (bugzilla@...hat.com))
• SQL Server patch - why doesn't Windows upda te help? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
• SQL Server patch - why doesn't Windows upda te help? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
• Mirror of the SecurityFocus BID (nicob at nicob.net (Nicob))
• Origin of the term "driveby download" (rms at computerbytesman.com (Richard M. Smith))
• RE: [tFull-Disclosure] SQL Server patch - why doesn't Windows update help? (nicob at nicob.net (Nicob))
• The worm author finally revealed! (futureshoks at hushmail.com (futureshoks@...hmail.com))
• Mirror of the SecurityFocus BID (nick at ethicsdesign.com (Nick Jacobsen))
• The worm author finally revealed! (hggdh at attbi.com (HggdH))
• The worm author finally revealed! (mark at tweakt.net (Mark Renouf))
• Re: Origin of the term "driveby download" (brian at pc-radio.com (Brian McWilliams))
• Origin of the term "driveby download" (lists.netsys.com at jscript.dk (Thor Larholm))
• RE: [tFull-Disclosure] SQL Server patch - why doesn't Windows update help? (pauls at utdallas.edu (Paul Schmehl))
• RE: [tFull-Disclosure] SQL Server patch - why doesn't Windows update help? (dotslash at snosoft.com (KF))
• The worm author finally revealed! (pauls at utdallas.edu (Paul Schmehl))
• RE: [tFull-Disclosure] SQL Server patch - why doesn't Windows update help? (pauls at utdallas.edu (Paul Schmehl))
• Re: Origin of the term "driveby download" (geoincidents at getinfo.org (Geo))
• CERT, Full Disclosure, and Security By Obscurity (guninski at guninski.com (Georgi Guninski))
• Question about the new Xupiter toolbar (guninski at guninski.com (Georgi Guninski))
• Origin of the term "driveby download" (madsaxon at direcway.com (madsaxon))
• RE: Origin of the term "driveby download" (rms at computerbytesman.com (Richard M. Smith))
• Origin of the term "driveby download" (rms at computerbytesman.com (Richard M. Smith))
• The worm author finally revealed! (dufresne at winternet.com (Ron DuFresne))
• RE: [tFull-Disclosure] SQL Server patch - why doesn't Windows update help? (sven at telelev.net (Sven Hoexter))
• The worm author finally revealed! (futureshoks at hushmail.com (futureshoks@...hmail.com))
• The worm author finally revealed! (hlk at kramse.dk (Henrik Lund Kramshøj))
• Question about the new Xupiter toolbar (rms at computerbytesman.com (Richard M. Smith))
• The worm author finally revealed! (dufresne at winternet.com (Ron DuFresne))
• The worm author finally revealed! (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
• Lance Spitzner bustin some rhymes and popping some caps. (rm-rf at hushmail.com (rm-rf@...hmail.com))
• The worm author finally revealed! (pauls at utdallas.edu (Paul Schmehl))
• The worm author finally revealed! (pauls at utdallas.edu (Paul Schmehl))
• Re: Origin of the term "driveby download" (brian at pc-radio.com (Brian McWilliams))
• The worm author finally revealed! (pauls at utdallas.edu (Paul Schmehl))
• Security Update: [CSSA-2003-006.0] Linux: CVS double free vulnerability (security at caldera.com (security@...dera.com))
• CERT, Full Disclosure, and Security By O (hellnbak at nmrc.org (hellNbak))
• The worm author finally revealed! (madsaxon at direcway.com (madsaxon))
• The worm author finally revealed! (dufresne at winternet.com (Ron DuFresne))
• Lance Spitzner bustin some rhymes and popping some caps. (d4yj4y at yahoo.com (Day Jay))
• The worm author finally revealed! (yossarian at planet.nl (yossarian))
• NGS Software Admits to Having Written the Saphire Worm (d4yj4y at yahoo.com (Day Jay))
• The worm author finally revealed! (Simon.Richter at hogyros.de (Simon Richter))
• Lance Spitzner bustin some rhymes and popping some caps. (xbud at g0thead.com (xbud))
• CERT, Full Disclosure, and Security By Obscurity (coley at linus.mitre.org (Steven M. Christey))
• Question about the new Xupiter toolbar (coley at linus.mitre.org (Steven M. Christey))
• The worm author finally revealed! (pauls at utdallas.edu (Paul Schmehl))
• The worm author finally revealed! (pauls at utdallas.edu (Paul Schmehl))
• The worm author finally revealed! (yossarian at planet.nl (yossarian))
• CERT, Full Disclosure, and Security By O (dotslash at snosoft.com (KF))
• Security Update: [CSSA-2003-006.0] Linux: CVS double free vulnerability (security at caldera.com (security@...dera.com))
• Security Update: [CSSA-2003-006.0] Linux: CVS double free vulnerability (security at caldera.com (security@...dera.com))
• Security Update: [CSSA-2003-006.0] Linux: CVS double free vulnerability (security at caldera.com (security@...dera.com))
• Security Update: [CSSA-2003-006.0] Linux: CVS double free vulnerability (security at caldera.com (security@...dera.com))
• [SECURITY] [DSA 248-1] New hypermail packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)

524 messages

Powered by blists - more mailing lists