full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2003/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 25	² 11
³ 21	⁴ 33	⁵ 18	⁶ 28	⁷ 10	⁸ 2	⁹ 16
¹⁰ 17	¹¹ 6	¹² 10	¹³ 33	¹⁴ 7	¹⁵	¹⁶ 1
¹⁷ 7	¹⁸ 25	¹⁹ 18	²⁰ 13	²¹ 7	²² 6	²³ 5
²⁴ 15	²⁵ 18	²⁶ 13	²⁷ 26	²⁸ 2

Messages by day:

February 1 (25 messages)

IT IS POSSIBLE "driveby download" (smenard at nbnet.nb.ca (smenard))
The worm author finally revealed! (yossarian at planet.nl (yossarian))
The worm author finally revealed! (schoe at oicinc.com (Sung J. Choe))
The worm author finally revealed! (pauls at utdallas.edu (Schmehl, Paul L))
The worm author finally revealed! (dufresne at winternet.com (Ron DuFresne))
The worm author finally revealed! (dufresne at winternet.com (Ron DuFresne))
interesting? (batsy at vapour.net (batz))
The worm author finally revealed! (jonathan at xcorps.net (Jonathan Rickman))
locator exploit (dave at immunitysec.com (Dave Aitel))
The worm author finally revealed! (douglist at anize.org (Douglas F. Calvert))
interesting? (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
interesting? (Simon.Richter at hogyros.de (Simon Richter))
interesting? (mail at blazde.co.uk (Roland Postle))
interesting? (pingouin at rhapsodyk.net (Simon Marechal))
interesting? (ka at khidr.net (Ka))
interesting? (Simon.Richter at hogyros.de (Simon Richter))
interesting? (mail at blazde.co.uk (Roland Postle))
Denial of Service Attack in Linux !!! (keul_vrce at yahoo.com (amol wanjari))
interesting? (batsy at vapour.net (batz))
interesting? (BlueBoar at thievco.com (Blue Boar))
The worm author finally revealed! (yossarian at planet.nl (yossarian))
interesting? (pingouin at rhapsodyk.net (Simon Marechal))
CERT, Full Disclosure, and Security By Obscurity (steffen at dett.de (Steffen Dettmer))
interesting? (greg-fulldisclosure at nest.cx (Gregory Steuck))
CERT, Full Disclosure, and Security By Obsc urity (arjen.de.landgraaf at cologic.co.nz (Arjen De Landgraaf))

February 2 (11 messages)

CERT, Full Disclosure, and Security By Obscurity (yossarian at planet.nl (yossarian))
interesting? (batsy at vapour.net (batz))
locating.. searching.. (grayfrog at ijustdontcare.com (grayfrog))
interesting? (eballen1 at qwest.net (Bruce Ediger))
interesting? (geoincidents at getinfo.org (Geoincidents))
CERT, Full Disclosure, and Security By Obsc urity (arjen.de.landgraaf at cologic.co.nz (Arjen De Landgraaf))
Exploit for CVS double free() for Linux pserver (noident at mad.scientist.com (Igor Dobrovitski))
GLSA: Mail-SpamAssasin (aliz at gentoo.org (Daniel Ahlberg))
GLSA: slocate (aliz at gentoo.org (Daniel Ahlberg))
Vigilinx acquisition (sec_manager at hushmail.com (sec_manager@...hmail.com))
Kevin and Fabian (backed.up.by.2048.bit.encryption at hushmail.com (backed.up.by.2048.bit.encryption@...hmail.com))

February 3 (21 messages)

Kevin and Fabian (noret at softhome.net (Noreturn))
SQL Slammer - lessons learned (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
SQL Slammer - lessons learned (hlk at kramse.dk (Henrik Lund Kramshøj))
The worm author finally revealed! (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
The worm author finally revealed! (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
The worm author finally revealed! (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
SQL Slammer - lessons learned (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
Re: David Litchfield talks about the SQL Worm in the Washington Post (guninski at guninski.com (Georgi Guninski))
Lance Spitzner bustin some rhymes and popping some caps. (rm-rf at hushmail.com (rm-rf@...hmail.com))
Guide To Secure System Development (Sandeep-Giri at deshaw.com (Giri, Sandeep))
Global HIGH Security Risk (shadown at bariloche.com.ar (^Shadown^))
SQL Slammer - lessons learned (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
Global HIGH Security Risk (bugtraq at 780inc.com (bugtraq@...inc.com))
Global HIGH Security Risk (yossarian at planet.nl (yossarian))
Global HIGH Security Risk (jonathan at xcorps.net (Jonathan Rickman))
Global HIGH Security Risk (benjamin at conceptis.com (Benjamin Keller))
Global HIGH Security Risk (yossarian at planet.nl (yossarian))
Global HIGH Security Risk (phenethyl at hushmail.com (phenethyl@...hmail.com))
M?crosöft Secrets (ts at securityoffice.net (Tamer Sahin))
MDKSA-2003:012 - Updated vim packages fix arbitrary command execution vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:013 - Updated MySQL packages fix DoS vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))

February 4 (33 messages)

GROUP CONSIDERING SUIT AGAINST MICROSOFT OVER SLAMMER VIRUS (rms at computerbytesman.com (Richard M. Smith))
GROUP CONSIDERING SUIT AGAINST MICROSOFT OVER SLAMMER VIRUS (nutcase26 at hotmail.com (Nutty))
GROUP CONSIDERING SUIT AGAINST MICROSOFT OVER SLAMMER VIRUS (pauls at utdallas.edu (Schmehl, Paul L))
GROUP CONSIDERING SUIT AGAINST MICROSOFT OVER SLAMMER VIRUS (juraj at bednar.sk (Juraj Bednar))
AOL refuses to help AIM users (simon at snosoft.com (ATD))
AOL refuses to help AIM users (simon at snosoft.com (ATD))
GROUP CONSIDERING SUIT AGAINST MICROSOFT OVER SLAMMER VIRUS (jmayer at loplof.de (Joerg Mayer))
AOL refuses to help AIM users (rickupusa at hotmail.com (Rick Updegrove))
re: Global HIGH Security Risk (shadown at bariloche.com.ar (^Shadown^))
AOL refuses to help AIM users (simon at snosoft.com (ATD))
Global HIGH Security Risk (security at dylanic.de (Michael Renzmann))
Global HIGH Security Risk (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
AW: Global HIGH Security Risk (vogt at hansenet.com (vogt@...senet.com))
AW: GROUP CONSIDERING SUIT AGAINST MICROSOFT OV ER SLAMMER VIRUS (vogt at hansenet.com (vogt@...senet.com))
Global HIGH Security Risk (fitzies at hotmail.com (Lance Fitz-Herbert))
Global HIGH Security Risk (jeroen at netprofessional.nl (Jeroen Doorn))
AOL refuses to help AIM users (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
Global HIGH Security Risk (msopacua at idg.nl (Melvyn Sopacua))
re: Global HIGH Security Risk (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
re: Global HIGH Security Risk (jonathan at xcorps.net (Jonathan Rickman))
Global HIGH Security Risk (jonathan at xcorps.net (Jonathan Rickman))
(no subject) (bugtraq at 780inc.com (bugtraq@...inc.com))
Global HIGH Security Risk (DaveHowe at gmx.co.uk (David Howe))
GLSA: qt-dcgui (aliz at gentoo.org (Daniel Ahlberg))
AW: GROUP CONSIDERING SUIT AGAINST MICROSOFT OV ER SLAMMER VIRUS (dufresne at winternet.com (Ron DuFresne))
Global HIGH Security Risk (msopacua at idg.nl (Melvyn Sopacua))
[RHSA-2003:025-20] Updated 2.4 kernel fixes various vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
BMCW-Inside and Out - World Famous Cyber Reporter Unveiled as one of the most skilled Hackers (d4yj4y at yahoo.com (Day Jay))
FreeBSD Security Advisory FreeBSD-SA-03:01.cvs (security-advisories at freebsd.org (FreeBSD Security Advisories))
Global HIGH Security Risk (mailinglists at xebec.de (Peter))
FreeBSD Security Advisory FreeBSD-SA-03:01.cvs (security-advisories at FreeBSD.ORG (FreeBSD Security Advisories))
Majordomo info leakage, all versions (m.v.berkum at obit.nl (Marco van Berkum))
The Advantages of Block-Based Protocol Analysis for Security Testing (dave at immunitysec.com (Dave Aitel))

February 5 (18 messages)

[RHSA-2003:017-06] Updated PHP packages available (bugzilla at redhat.com (bugzilla@...hat.com))
Global HIGH Security Risk (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Global HIGH Security Risk (jeroen at netprofessional.nl (Jeroen Doorn))
GLSA: bladeenc (aliz at gentoo.org (Daniel Ahlberg))
SQL Slammer - lessons learned (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Unreal engine: results of my research (aluigi at pivx.com (Auriemma Luigi))
SQL Slammer - lessons learned (pauls at utdallas.edu (Paul Schmehl))
Global HIGH Security Risk (msopacua at idg.nl (Melvyn Sopacua))
SQL Slammer - lessons learned (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
SQL Slammer - lessons learned (delta at lug-s.org (Helmut Springer))
SQL Slammer - lessons learned (david_laporte at harvard.edu (David LaPorte))
MDKSA-2003:014 - Updated kernel packages fix a number of bugs (security at linux-mandrake.com (Mandrake Linux Security Team))
SQL Slammer - lessons learned (niels=netsys at bakker.net (Niels Bakker))
SQL Slammer - lessons learned (niels=netsys at bakker.net (Niels Bakker))
(no subject) (simon at snosoft.com (ATD))
SQL Slammer - lessons learned (David.Cushing at hitachisoftware.com (Cushing, David))
MDKSA-2003:015 - Updated slocate packages fix buffer overflow (security at linux-mandrake.com (Mandrake Linux Security Team))
SQL Slammer - lessons learned (pauls at utdallas.edu (Paul Schmehl))

February 6 (28 messages)

[RHSA-2003:040-07] Updated openldap packages available (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:043-12] Updated WindowMaker packages fix vulnerability in theme-loading (bugzilla at redhat.com (bugzilla@...hat.com))
SQL Slammer - lessons learned (nicob at nicob.net (Nicob))
SQL Slammer - lessons learned (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Are the number of vulnerabilities going up? is Symantec counting wrong? (hlk at kramse.dk (Henrik Lund Kramshøj))
[RHSA-2003:037-09] Updated Xpdf packages fix security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
SQL Slammer - lessons learned (pauls at utdallas.edu (Paul Schmehl))
SQL Slammer - lessons learned (pauls at utdallas.edu (Paul Schmehl))
SQL Slammer - lessons learned (DaveHowe at gmx.co.uk (David Howe))
AbsoluteTelnet 2.00 buffer overflow. (kain at ircop.dk (Knud Erik Højgaard))
Three new anti-slammer tools from Microsoft (rms at computerbytesman.com (Richard M. Smith))
ComputerWorld yanks Slammer worm terrorist story (rms at computerbytesman.com (Richard M. Smith))
Are the number of vulnerabilities going up? is Symantec counting wrong? (hlk at kramse.dk (Henrik Lund Kramshøj))
f-prot antivirus useless buffer overflow (kain at ircop.dk (Knud Erik Højgaard))
ComputerWorld yanks Slammer worm terrorist story (kspett at spidynamics.com (Kevin Spett))
ComputerWorld yanks Slammer worm terrorist story (Ken at infosec101.org (Ken Pfeil))
ComputerWorld yanks Slammer worm terrorist story (rms at computerbytesman.com (Richard M. Smith))
ComputerWorld yanks Slammer worm terrorist story (nigel.houghton at sourcefire.com (Nigel Houghton))
SQL Slammer - lessons learned (dufresne at winternet.com (Ron DuFresne))
ComputerWorld yanks Slammer worm terrorist story (Brian.Ashcraft at dla.mil (Ashcraft, Brian S (Contractor) (DSCC)))
SQL Slammer - lessons learned (niels=netsys at bakker.net (Niels Bakker))
ComputerWorld yanks Slammer worm terrorist story (eballen1 at qwest.net (Bruce Ediger))
Re: Are the number of vulnerabilities going up? is Symantec counting wrong? (coley at linus.mitre.org (Steven M. Christey))
Re: Are the number of vulnerabilities going up? is Symantec counting wrong? (coley at linus.mitre.org (Steven M. Christey))
SQL Slammer - lessons learned (dufresne at winternet.com (Ron DuFresne))
SQL Slammer - lessons learned (dufresne at winternet.com (Ron DuFresne))
SQL Slammer - lessons learned (BlueBoar at thievco.com (Blue Boar))
How the BofA ATM network got whacked by the SQL Slammer Worm (rms at computerbytesman.com (Richard M. Smith))

February 7 (10 messages)

SQL Slammer - lessons learned (dufresne at winternet.com (Ron DuFresne))
How the BofA ATM network got whacked by the SQL Slammer Worm (nutcase26 at hotmail.com (Nut Case))
SQL Slammer - lessons learned (BlueBoar at thievco.com (Blue Boar))
Re: Global HIGH Security Risk (shadown at bariloche.com.ar (^Shadown^))
[RHSA-2003:044-20] Updated w3m packages fix cross-site scripting issues (bugzilla at redhat.com (bugzilla@...hat.com))
SQL Slammer - lessons learned (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
SQL Slammer - lessons learned (niels=netsys at bakker.net (Niels Bakker))
SQL Slammer - lessons learned (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
[RHSA-2003:056-08] Updated kernel-utils packages fix setuid vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
SQL Slammer - lessons learned (DaveHowe at gmx.co.uk (David Howe))

February 8 (2 messages)

Yet another plaintext attack to ZIP encryption scheme. (dufresne at winternet.com (dufresne@...ternet.com))
Administrivia: Instability/Emergency Maintenance (len at netsys.com (Len Rose))

February 9 (16 messages)

Administrivia: Maintenance Completed. (len at NETSYS.COM (Len Rose))
Administrivia: Maintenance Completed. (ka at khidr.net (Ka))
Administrivia: Maintenance Completed. (jasonc at science.org (Jason Coombs))
SQL Slammer - lessons learned (steffen at dett.de (Steffen Dettmer))
#!ICadv-02.09.03: nethack 3.4.0 local buffer overflow (tsao_4sh0 at hushmail.com (tsao_4sh0@...hmail.com))
SQL Slammer - lessons learned (yossarian at planet.nl (yossarian))
SQL Slammer - lessons learned (pauls at utdallas.edu (Schmehl, Paul L))
SQL Slammer - lessons learned (delta at FaVeVe.Uni-Stuttgart.de (Helmut Springer))
SQL Slammer - lessons learned (pauls at utdallas.edu (Schmehl, Paul L))
SQL Slammer - lessons learned (delta at FaVeVe.Uni-Stuttgart.de (Helmut Springer))
SQL Slammer - lessons learned (yossarian at planet.nl (yossarian))
SQL Slammer - lessons learned (guninski at guninski.com (Georgi Guninski))
SQL Slammer - lessons learned (steve.wray at paradise.net.nz (Steve Wray))
List Charter (johnc at grok.org.uk (John Cartwright))
SQL Slammer - lessons learned (steve.wray at paradise.net.nz (Steve Wray))
SQL Slammer - lessons learned (fwd) (steffen at dett.de (Steffen Dettmer))

February 10 (17 messages)

SQL Slammer - lessons learned (fwd) (steve.wray at paradise.net.nz (Steve Wray))
SQL Slammer - lessons learned (fwd) (yossarian at planet.nl (yossarian))
SQL Slammer - lessons learned (fwd) (steve.wray at paradise.net.nz (Steve Wray))
SQL Slammer - lessons learned (fwd) (eballen1 at qwest.net (Bruce Ediger))
SQL Slammer - lessons learned (fwd) (steve.wray at paradise.net.nz (Steve Wray))
SQL Slammer - lessons learned (fwd) (fwd) (steffen at dett.de (Steffen Dettmer))
SQL Slammer - lessons learned (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
SQL Slammer - lessons learned (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
SQL Slammer - lessons learned (pauls at utdallas.edu (Schmehl, Paul L))
SQL Slammer - lessons learned (DaveHowe at gmx.co.uk (David Howe))
SQL Slammer - lessons learned (petard at hushmail.com (petard@...hmail.com))
SQL Slammer - lessons learned (vdongen at hetisw.nl (I.R. van Dongen))
SQL Slammer - lessons learned (david_laporte at harvard.edu (David LaPorte))
SQL Slammer - lessons learned (kdebisschop at alert.infoplease.com (Karl DeBisschop))
(no subject) (futureshoks at hushmail.com (futureshoks@...hmail.com))
SQL Slammer - lessons learned (fwd) (yossarian at planet.nl (yossarian))
iDEFENSE Security Advisory 02.10.03: Buffer Overflow In NOD32 Antivirus Software for Unix (labs at idefense.com (iDEFENSE Labs))

February 11 (6 messages)

[SECURITY] [DSA 249-1] New w3mmee packages fix cookie information leak (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Epic Games threatens to sue security researchers (thor at pivx.com (Thor Larholm))
Epic Games threatens to sue security researchers (guninski at guninski.com (Georgi Guninski))
Epic Games threatens to sue security researchers (security at updegrove.net (Rick Updegrove (security)))
Re: OPENSSH REMOTE ROOT COMPROMISE ALL VERSIONS (ddhs at hushmail.com (ddhs@...hmail.com))
Fw: Epic Games threatens to sue security researchers (thor at pivx.com (Thor Larholm))

February 12 (10 messages)

Re: OPENSSH REMOTE ROOT COMPROMISE ALL VERSIONS (d4yj4y at yahoo.com (Day Jay))
MDKSA-2002:062-1 - Updated postgresql packages fix various buffer overflows (security at linux-mandrake.com (Mandrake Linux Security Team))
Cross Site Scripting Advisory. (full at oakey.no-ip.com (full@...ey.no-ip.com))
iDEFENSE Security Advisory 02.12.03: Buffer Overflow in AIX libIM.a (labs at idefense.com (iDEFENSE Labs))
libIM.a buffer overflow vulnerability. (shivapd at us.ibm.com (Shiva Persaud))
unsubscribe (MRMyers at anteon.com (Myers, Marvin))
IRIX IP denial-of-service fixes and tunings (agent99 at sgi.com (SGI Security Coordinator))
[RHSA-2003:029-06] Updated lynx packages fix CRLF injection vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Unusual request (pauls at utdallas.edu (Paul Schmehl))
Unusual request (schoe at oicinc.com (Sung J. Choe))

February 13 (33 messages)

Unusual request (yossarian at planet.nl (yossarian))
Unusual request (steve.wray at paradise.net.nz (Steve Wray))
Unusual request (nexus at patrol.i-way.co.uk (Nexus))
Unusual request (schoe at oicinc.com (Sung J. Choe))
Unusual request (yossarian at planet.nl (yossarian))
Unusual request (aeonflux at aeonflux.no-ip.com (aeonflux))
[RHSA-2003:035-10] Updated PAM packages fix bug in pam_xauth module (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:015-05] Updated fileutils package fixes race condition in recursive operations (bugzilla at redhat.com (bugzilla@...hat.com))
Unusual request (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Unusual request (ivan at susanin.org (Ivan Susanin))
Unusual request (llevier at argosnet.com (Laurent LEVIER))
Unusual request (pauls at utdallas.edu (Schmehl, Paul L))
Unusual request (Max.Rapaille at nbb.be (Rapaille Max))
[SECURITY] [DSA 250-1] New w3mmee-ssl packages fix cookie information leak (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
Unusual request (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
Feds say: Don't hack Iraq (rms at computerbytesman.com (Richard M. Smith))
Unusual request (TimmK at netsolve.net (Timm, Kevin))
Feds say: Don't hack Iraq (kspett at spidynamics.com (Kevin Spett))
Unusual request (pauls at utdallas.edu (Paul Schmehl))
Unusual request (badpack3t at security-protocols.com (badpack3t))
[sean@...elan.com: Symantec detected Slammer worm "hours" before] (len at netsys.com (Len Rose))
More Unusual request (voyacondios at hotmail.com (Eric Wright))
[sean@...elan.com: Symantec detected Slammer worm "hours" before] (scheidell at secnap.net (Michael Scheidell))
[sean@...elan.com: Symantec detected Slammer worm "hours" before] (security at updegrove.net (Rick Updegrove (security)))
[sean@...elan.com: Symantec detected Slamme r worm "hours" before] (arjen.de.landgraaf at cologic.co.nz (Arjen De Landgraaf))
[sean@...elan.com: Symantec detected Slammer worm "hours" before] (jasonc at science.org (Jason Coombs))
[sean@...elan.com: Symantec detected Slammer worm "hours" before] (tecky at thedigitalrealities.com (tecky@...digitalrealities.com))
[sean@...elan.com: Symantec detected Slammer worm "hours" before] (dufresne at winternet.com (Ron DuFresne))
A Report on SPAM Blackholes, Blocking/Filtering, and AOL (jasonc at science.org (Jason Coombs))
Unusual request (d4yj4y at yahoo.com (Day Jay))
More Unusual request (schoe at oicinc.com (Sung J. Choe))
Unusual request (schoe at oicinc.com (Sung J. Choe))
[sean@...elan.com: Symantec detected Slamme r worm "hours" before] (schoe at oicinc.com (Sung J. Choe))

February 14 (7 messages)

MDKSA-2003:016 - Updated util-linux packages provide stronger randomness in mcookie (security at linux-mandrake.com (Mandrake Linux Security Team))
More Unusual request (Max.Rapaille at nbb.be (Rapaille Max))
A Report on SPAM Blackholes, Blocking/Filte ring, and AOL (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
More Unusual request (shrdlu at deaddrop.org (Etaoin Shrdlu))
More Unusual request (pauls at utdallas.edu (Paul Schmehl))
[SECURITY] [DSA 251-1] New w3m packages fix cookie information leak (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Fw: Bash Blues. (SkyLined at edup.tudelft.nl (Berend-Jan Wever))

February 16 (1 message)

Unusual request (hlk at kramse.dk (Henrik Lund Kramshøj))

February 17 (7 messages)

[argv] BitchX-353 Vulnerability (argv at hushmail.com (argv@...hmail.com))
GLSA: mailman (aliz at gentoo.org (Daniel Ahlberg))
[SECURITY] [DSA 232-2] New CUPS packages fix wrong libPNG dependency (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
GLSA: syslinux (aliz at gentoo.org (Daniel Ahlberg))
GLSA: w3m (aliz at gentoo.org (Daniel Ahlberg))
PHP Security Advisory: CGI vulnerability in PHP version 4.3.0 (sniper at php.net (Jani Taskinen))
Security Update: [CSSA-2003-007.0] Linux: Apache mod_dav module format string vulnerability (security at caldera.com (security@...dera.com))

February 18 (25 messages)

X-Force claims 5 years old COMP128 crack? (yossarian at planet.nl (yossarian))
Pt.2 of the X-Force claims 5 years old COMP128 crack? (yossarian at planet.nl (yossarian))
GLSA: nethack (aliz at gentoo.org (Daniel Ahlberg))
Hackers View Visa/MasterCard Accounts (jasonc at science.org (Jason Coombs))
Hackers View Visa/MasterCard Accounts (futureshoks at hushmail.com (futureshoks@...hmail.com))
Hackers View Visa/MasterCard Accounts (remember-handsworth at hushmail.com (remember-handsworth@...hmail.com))
Hackers View Visa/MasterCard Accounts (rms at computerbytesman.com (Richard M. Smith))
Hackers View Visa/MasterCard Accounts (dotslash at snosoft.com (KF))
Hackers View Visa/MasterCard Accounts (kspett at spidynamics.com (Kevin Spett))
Hackers View Visa/MasterCard Accounts (kspett at spidynamics.com (Kevin Spett))
SuSE Security Announcement: imp (SuSE-SA:2003:0008) (thomas at suse.de (Thomas Biege))
SuSE Security Announcement: mod_php4 (SuSE-SA:2003:0009) (thomas at suse.de (Thomas Biege))
Hackers View Visa/MasterCard Accounts (jasonc at science.org (Jason Coombs))
SuSE Security Announcement: mod_php4 (SuSE-SA:2003:0009) (s.esser at e-matters.de (Stefan Esser))
CSSA-2003-007.0 Advisory withdrawn. Re: Security Update: [CSSA-2003-007.0] Linux: Apache mod_dav module format string v… (security at caldera.com (security@...de…)
anonymizer.com doesn't use ssl on target website (ka at khidr.net (Ka))
Hackers View Visa/MasterCard Accounts (cta at hcsin.net (Bernie, CTA))
Re: CSSA-2003-007.0 Advisory withdrawn. (mjc at apache.org (Mark J Cox))
Re: CSSA-2003-007.0 Advisory withdrawn. Re: Security Update: [CSSA-2003-007.0] Linux: Apache mod_dav module format str… (wrowe at rowe-clan.net (William A. Rowe…)
Hackers View Visa/MasterCard Accounts (kspett at spidynamics.com (Kevin Spett))
Hackers View Visa/MasterCard Accounts (jasonc at science.org (Jason Coombs))
Hackers View Visa/MasterCard Accounts (rms at computerbytesman.com (Richard M. Smith))
Hackers View Visa/MasterCard Accounts (cta at hcsin.net (Bernie, CTA))
MDKSA-2003:017 - Updated pam packages fix root authorization handling in pam_xauth module (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:018 - Updated apcupsd packages fix buffer overflow and remove vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))

February 19 (18 messages)

Hackers View Visa/MasterCard Accounts (jasonc at science.org (Jason Coombs))
Hackers View Visa/MasterCard Accounts (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
GLSA: mod_php php (aliz at gentoo.org (Daniel Ahlberg))
GLSA: mod_php php (s.esser at e-matters.de (Stefan Esser))
GLSA: mod_php (200302-09.1) (aliz at gentoo.org (Daniel Ahlberg))
Hackers View Visa/MasterCard Accounts (cta at hcsin.net (Bernie, CTA))
GLSA: mod_php (200302-09.1) (fabio.moraes at eds.com (Moraes, Fabio))
[ESA-20030219-003] Several PHP vulnerabilities (security at guardiandigital.com (EnGarde Secure Linux))
OT: ms don't want to go on CNN with Bruce Schneier (guninski at guninski.com (Georgi Guninski))
OT: ms don't want to go on CNN with Bruce Schneier (rms at computerbytesman.com (Richard M. Smith))
Hackers View Visa/MasterCard Accounts (dbarn064 at earthlink.net (David Barnett))
Hackers View Visa/MasterCard Accounts (jasonc at science.org (Jason Coombs))
Vigilinx acquisition (quakeroats at hushmail.com (Quaker Oats))
[SCSA-005] Proxomitron Naoko Long Path Buffer Overflow/DoS (gregory.lebras at security-corp.org (Grégory Le Bras | Security Corporation))
[SCSA-004] Vulnerability in Microsoft Windows XP (gregory.lebras at security-corp.org (Grégory Le Bras | Security Corporation))
[ANNOUNCE] OpenSSL 0.9.7a and 0.9.6i released (mark at openssl.org (Mark J Cox))
Hackers View Visa/MasterCard Accounts (guninski at guninski.com (Georgi Guninski))
Hackers View Visa/MasterCard Accounts (cta at hcsin.net (Bernie, CTA))

February 20 (13 messages)

Data Processors International was broken into (rms at computerbytesman.com (Richard M. Smith))
MDKSA-2003:019 - Updated php packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
RE: Vigilinx acquisition (dendler at idefense.com (David Endler))
New version of ike-scan (IPsec IKE scanner) available - v1.1 (Roy.Hills at nta-monitor.com (Roy Hills))
[ESA-20030220-004] MySQL double free vulnerability (security at guardiandigital.com (EnGarde Secure Linux))
[ESA-20030220-005] OpenSSL timing-based attack vulnerability (security at guardiandigital.com (EnGarde Secure Linux))
GLSA: openssl (200302-10) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: bitchx (200302-11) (aliz at gentoo.org (Daniel Ahlberg))
[RHSA-2003:057-06] Updated shadow-utils packages fix exposure (bugzilla at redhat.com (bugzilla@...hat.com))
Diskless Bastions & NFS; How secure is NFS (on Linux) rated? (steve.wray at paradise.net.nz (Steve Wray))
FW: Citibank tries to gag crypto bug disclosure (rms at computerbytesman.com (Richard M. Smith))
[ESA-20030220-005] OpenSSL timing-based attack vulnerability (security at guardiandigital.com (EnGarde Secure Linux))
[ESA-20030220-004] MySQL double free vulnerability (security at guardiandigital.com (EnGarde Secure Linux))

February 21 (7 messages)

[RHSA-2003:041-12] Updated VNC packages fix replay and cookie vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[SECURITY] [DSA 252-1] New slocate packages fix local root exploit (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
MDKSA-2003:020 - Updated openssl packages fix timing-based attack vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:021 - Updated krb5 packages fix vulnerability in FTP client (security at linux-mandrake.com (Mandrake Linux Security Team))
multiple vulnerabilities in glftpd (appelast at bsquad.sm.pl (Karol Więsek))
Cisco Security Advisory: Multiple Product Vulnerabilities found by PROTOS SIP Test Suite (psirt at cisco.com (Cisco Systems Product Security Incident Response T…)
Rogue buffer overflow (ulfh at update.uu.se (Ulf Harnhammar))

February 22 (6 messages)

[SCSA-006] XSS & Function Execution Vulnerabilities in Nuked-Klan (gregory.lebras at security-corp.org (Grégory Le Bras | Security Corporation))
multiple vulnerabilities in glftpd (appelast at bsquad.sm.pl (Karol Więsek))
O UTLO OK EXP RE SS 6 .00 : broken (http-equiv at malware.com (http-equiv@...ite.com))
O UTLO OK EXP RE SS 6 .00 : broken (pauls at utdallas.edu (Schmehl, Paul L))
DoS Downplay? (dotslash at snosoft.com (KF))
GLSA: (200302-12) (aliz at gentoo.org (Daniel Ahlberg))

February 23 (5 messages)

[SCSA-007] Cross Site Scripting Vulnerabilities in WWWBoard (gregory.lebras at security-corp.org (Grégory Le Bras | Security Corporation))
sircd proof-of-concept / advisory (kain at ircop.dk (Knud Erik Højgaard))
moxftp arbitrary code execution poc/advisory (kain at ircop.dk (Knud Erik Højgaard))
GOnicus System Administrator php injection (appelast at bsquad.sm.pl (Karol Więsek))
GOnicus System Administrator php injection (msopacua at idg.nl (Melvyn Sopacua))

February 24 (15 messages)

MX of securityfocus.com lost? (pb at bieringer.de (Peter Bieringer))
GOnicus System Administrator php injection (dimitry at al.org.ua (Dmitry Alyabyev))
GLSA: apcupsd (200302-13) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: usermin (200302-14) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: tightvnc (200302-15) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: vnc (200302-16) (aliz at gentoo.org (Daniel Ahlberg))
O UTLO OK EXP RE SS 6 .00 : broken (thor at pivx.com (Thor Larholm))
[SECURITY] [DSA 253-1] New OpenSSL packages fix timing-based attack vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.…)
FreeBSD Security Advisory FreeBSD-SA-03:03.syncookies (security-advisories at FreeBSD.ORG (FreeBSD Security Advisories))
FreeBSD Security Advisory FreeBSD-SA-03:02.openssl (security-advisories at FreeBSD.ORG (FreeBSD Security Advisories))
Re: MX of securityfocus.com lost? (needsecjob at hushmail.com (needsecjob@...hmail.com))
Terminal Emulator Security Issues (termulation at digitaloffense.net (H D Moore))
Nobody is suppose to learn from DPI's mistake (rms at computerbytesman.com (Richard M. Smith))
MDKSA-2003:022 - Updated vnc packages fix cookie vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:023 - Updated lynx packages fix CRLF injection vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))

February 25 (18 messages)

[RHSA-2003:053-10] Updated vte packages fix gnome-terminal vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
clarkconnect(d) information disclosure (kain at ircop.dk (Knud Erik Højgaard))
Re: Terminal Emulator Security Issues (mej at eterm.org (Michael Jennings))
Security Advisory MA-2003-01 - CISSP Trojan (mungfu at hush.com (mung fu))
Re: MX of securityfocus.com lost? (purdy at tecman.com (Curt Purdy))
Nobody is suppose to learn from DPI's mistake (guninski at guninski.com (Georgi Guninski))
Re: Terminal Emulator Security Issues (termulation at digitaloffense.net (H D Moore))
[ESA-20030225-006] WebTool session ID spoofing vulnerability. (security at guardiandigital.com (EnGarde Secure Linux))
Re: Securing Windows 2000 Server Documentation (guninski at guninski.com (Georgi Guninski))
Re: Terminal Emulator Security Issues (mej at eterm.org (Michael Jennings))
FreeBSD Security Advisory FreeBSD-SA-03:02.openssl [REVISED] (security-advisories at FreeBSD.ORG (FreeBSD Security Advisories))
Re: Terminal Emulator Security Issues (steve.wray at paradise.net.nz (Steve Wray))
Security Advisory MA-2003-01 - CISSP Trojan (steve.wray at paradise.net.nz (Steve Wray))
Re: Securing Windows 2000 Server Documentat ion (schoe at oicinc.com (Sung J. Choe))
Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II (http-equiv at malware.com (http-equiv@...ite.com))
RE: Multiple Vendor FTP pipe Vulnerability (schoe at oicinc.com (SChoe))
RE: Multiple Vendor FTP pipe Vulnerability (schoe at oicinc.com (SChoe))
Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II (steve.wray at paradise.net.nz (Steve Wray))

February 26 (13 messages)

Re: Netscape 6/7 crashes by a simple stylesheet... (raju at linux-delhi.org (Raj Mathur))
Secunia Research: Opera browser Cross Site Scripting (jb at secunia.com (Jakob Balle))
Snosoft Terrorists (dvdman at hush.com (dvdman@...h.com))
Re: Terminal Emulator Security Issues (horms at verge.net.au (Horms))
SuSE Security Announcement: libmcrypt (SuSE-SA:2003:0010) (thomas at suse.de (Thomas Biege))
SuSE Security Announcement: openssl (SuSE-SA:2003:011) (draht at suse.de (Roman Drahtmueller))
Snosoft Terrorists (d4yj4y at yahoo.com (Day Jay))
./makeunicode2.py release announcement (daveaitel at hotmail.com (0 0))
Cryptome Hacked! (schoe at oicinc.com (Sung J. Choe))
FW: Citibank tries to gag crypto bug disclo sure (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
MDKSA-2003:025 - Updated webmin packages fix session ID spoofing vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Buffer Overrun Vulnerability in /sbin/ps on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Cryptome Hacked! (steve.wray at paradise.net.nz (Steve Wray))

February 27 (26 messages)

Cryptome Hacked! (yossarian at planet.nl (yossarian))
Cryptome Hacked! (kspett at spidynamics.com (Kevin Spett))
MDKSA-2003:026 - Updated shadow-utils packages fix improper mailspool ownership (security at linux-mandrake.com (Mandrake Linux Security Team))
Cryptome Hacked! (morganm at datacom.co.nz (Morgan Marquis-Boire))
Cryptome Hacked! (batsy at vapour.net (batz))
Cryptome Hacked! (schoe at oicinc.com (Sung J. Choe))
Cryptome Hacked! (schoe at oicinc.com (Sung J. Choe))
Cryptome Hacked! (schoe at oicinc.com (Sung J. Choe))
Cryptome Hacked! (batsy at vapour.net (batz))
Cryptome Hacked! (eyberg at umr.edu (Ian Eyberg))
Cryptome Hacked! (yossarian at planet.nl (yossarian))
Cryptome Hacked! (steve.wray at paradise.net.nz (Steve Wray))
Cryptome Hacked! (kspett at spidynamics.com (Kevin Spett))
Cryptome Hacked! (steve.wray at paradise.net.nz (Steve Wray))
Cryptome Hacked! (shrdlu at deaddrop.org (Etaoin Shrdlu))
./makeunicode2.py release announcement (guninski at guninski.com (Georgi Guninski))
[SECURITY] [DSA 254-1] New NANOG traceroute packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)
./makeunicode2.py release announcement (kspett at spidynamics.com (Kevin Spett))
MS-Windows ME IE/Outlook/HelpCenter critical vulnerability (fozzy at dmpfrance.com (Fozzy [Hackademy Audit]))
./makeunicode2.py release announcement (hellnbak at nmrc.org (hellNbak))
SuSE Security Announcement: hypermail (SuSE-SA:2003:0012) (thomas at suse.de (Thomas Biege))
MS-Windows ME IE/Outlook/HelpCenter critical vulnerability (quakeroats at hushmail.com (Quaker Oats))
MS-Windows ME IE/Outlook/HelpCenter critical vulnerability (fozzy at dmpfrance.com (Fozzy [Hackademy Audit]))
iDEFENSE Security Advisory 02.27.03: TCPDUMP Denial of Service Vulnerability in ISAKMP Packet Parsing (labs at idefense.com (iDEFENSE Labs))
[SECURITY] [DSA 255-1] New tcpdump packages fix denial of service vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.de…)
Homeland Defense - Bio Terrorism - Grants Workshop - LA, San Fran, Phila - April (market.access at verizon.net (David Dickson))

February 28 (2 messages)

[SECURITY] [DSA 256-1] New mhc-utils packages fix predictable temporary file (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debia…)
Re: QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities (Joe_Testa at rapid7.com (Joe Testa))

393 messages