full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2003/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 20	² 28	³	⁴ 1
⁵ 18	⁶ 20	⁷ 10	⁸ 22	⁹ 20	¹⁰ 28	¹¹ 3
¹² 19	¹³ 22	¹⁴ 23	¹⁵ 13	¹⁶ 5	¹⁷	¹⁸ 10
¹⁹ 13	²⁰ 9	²¹ 10	²² 9	²³ 21	²⁴ 16	²⁵ 20
²⁶ 19	²⁷ 21	²⁸ 7	²⁹ 11	³⁰ 11	³¹ 13

Messages by day:

May 1 (20 messages)

Latest MS SQL Server vulnerabilities revealed. (cesarc56 at yahoo.com (Cesar))
Latest MS SQL Server vulnerabilities revealed. (michael at nix.org (Michael -))
MDG Web Server 4D 3.6.0 Buffer Overflow (badpack3t at security-protocols.com (tom ferris))
@(#)Mordred Labs - web security notices ? (mordred at s-mail.com (Sir Mordred))
[RHSA-2003:133-01] Updated man packages fix minor vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Robert S Johnson is out of the office. (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
[SECURITY] [DSA 297-1] New snort packages fix remote root exploits (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Cisco Security Advisory: Cisco ONS15454, ONS15327, ONS15454SDH, and ONS15600 Nessus Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident…)
eBay Security Contact (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
eBay Security Contact (kspett at spidynamics.com (Kevin Spett))
eBay Security Contact (smcmahon at eiv.com (Shawn McMahon))
eBay Security Contact (gator at cacr.caltech.edu (Anne Carasik))
eBay Security Contact (smcmahon at eiv.com (Shawn McMahon))
eBay Security Contact (gator at cacr.caltech.edu (Anne Carasik))
eBay Security Contact (kspett at spidynamics.com (Kevin Spett))
eBay Security Contact (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
CAN-2003-0190 - OpenSSH <= 3.6.1p1 (nc at stormvault.net (Nicolas Couture))
RE: eBay Security Contact (gps at augustmail.com (Anthony Patti))
eBay Security Contact (rwineriter at netcom.utah.edu (Robert Wineriter))
eBay Security Contact (mattmurphy at kc.rr.com (mattmurphy@...rr.com))

May 2 (28 messages)

eBay Security Contact (jgrotegut at directpointe.com (Jonathan Grotegut))
eBay Security Contact (madsaxon at direcway.com (madsaxon))
eBay Security Contact (scheidell at secnap.net (Michael Scheidell))
eBay Security Contact (scheidell at secnap.net (Michael Scheidell))
eBay Security Contact (patrick at pwhsnet.com (Patrick Fish))
eBay Security Contact (madsaxon at direcway.com (madsaxon))
[SECURITY] [DSA 298-1] New EPIC4 packages fix DoS and arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
eBay Security Contact (james at ActionMessage.com (James Briggs))
GLSA: openssh (200305-01) (aliz at gentoo.org (Daniel Ahlberg))
Re: eBay Security Contact (securityinfo at sunride.net (Bernhard Trabert))
[RHSA-2003:113-01] Updated mod_auth_any packages available (bugzilla at redhat.com (bugzilla@...hat.com))
CAN-2003-0190 - OpenSSH <= 3.6.1p1 (maurizio at mediaservice.net (Agazzini Maurizio))
Re: eBay Security Contact (Brad.Bemis at airborne.com (Brad Bemis))
eBay Security Contact (jpastore at idetech.net (Jon Pastore))
(no subject) (bt at delfi.lt (bt@...fi.lt))
HP- (bt at delfi.lt (bt@...fi.lt))
HP-UX 11.0 /usr/lbin/rwrite (bt at delfi.lt (bt@...fi.lt))
GLSA: openssh (200305-01) (nc at stormvault.net (Nicolas Couture))
HP-UX 11.0 /usr/lbin/rwrite (dotslash at snosoft.com (KF))
Slow Internet? (jgrotegut at directpointe.com (Jonathan Grotegut))
Slow Internet? (erc at pobox.com (Ed Carp))
Slow Internet? (pdt at jackhammer.org (Paul Tinsley))
Slow Internet? (chris at implexantsystems.com (Chris))
Slow Internet? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Chung's Donut Shop Release: Hacking Sprint PCS Vision (d4yj4y at yahoo.com (Day Jay))
Multiple Vulnerabilities in Splatt Forum 4.0 (anthony.aykut at frame4.com (Anthony Aykut))
Code Injection Vulnerabilities in WebcamXP Chat Feature (anthony.aykut at frame4.com (Anthony Aykut))
Slow Internet? (damian at sentex.net (Damian Gerow))

May 4 (1 message)

SILLY BEHAVIOR Part III : Internet Explorer 5.5 - 6.0 (1 at malware.com (http-equiv@...ite.com))

May 5 (18 messages)

SILLY BEHAVIOR Part III : Internet Explorer 5.5 - 6.0 (1 at malware.com (http-equiv@...ite.com))
Hotmal "Insta Kiss" Spoof (se_cur_ity at hotmail.com (morning_wood))
Hotmal "Insta Kiss" Spoof (fulldisclosure at klet.st (Maarten))
SILLY BEHAVIOR Part III : Internet Explorer 5.5 - 6.0 (guninski at guninski.com (Georgi Guninski))
@(#)Mordred Security Notice - exporing the hacking websites (mordred at s-mail.com (Sir Mordred))
Lawsuit filed over SQL Slammer worm in Korea (rms at computerbytesman.com (Richard M. Smith))
Microsoft Biztalk Server ISAPI HTTP Receive function buffer overflow (cesarc56 at yahoo.com (Cesar))
Microsoft Biztalk Server DTA vulnerable to SQL injection (cesarc56 at yahoo.com (Cesar))
Microsoft Biztalk Server ISAPI HTTP Receive function buffer overflow (cesarc56 at yahoo.com (Cesar))
Microsoft Biztalk Server DTA vulnerable to SQL injection (cesarc56 at yahoo.com (Cesar))
Slow Internet? (jgrotegut at directpointe.com (Jonathan Grotegut))
Slow Internet? (benjamin at seattlefenix.net (Benjamin Krueger))
Lawsuit filed over SQL Slammer worm in Korea (guninski at guninski.com (Georgi Guninski))
CORE-2003-0303: Multiple Vulnerabilities in Mirabilis ICQ client (advisories at coresecurity.com (CORE Security Technologies Advisories))
Microsoft Biztalk Server DTA vulnerable to SQL injection (cesarc56 at yahoo.com (Cesar))
Microsoft Biztalk Server ISAPI HTTP Receive function buffer overflow (cesarc56 at yahoo.com (Cesar))
Microsoft Biztalk Server ISAPI HTTP Receive function buffer overflow (cesarc56 at yahoo.com (Cesar))
Microsoft Biztalk Server DTA vulnerable to SQL injection (cesarc56 at yahoo.com (Cesar))

May 6 (20 messages)

@(#)Mordred Security Notice - exporing the hacking websites (mordred at s-mail.com (Sir Mordred))
Slow Internet? (se_cur_ity at hotmail.com (morning_wood))
Lawsuit filed over SQL Slammer worm in Korea (se_cur_ity at hotmail.com (morning_wood))
@(#)Mordred Security Notice - exporing the hacking websites (se_cur_ity at hotmail.com (morning_wood))
[SECURITY] [DSA 300-1] New Balsa packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA 300-1] New Balsa packages fix buffer overflow (s.cowan at craneware.com (s.cowan@...neware.com))
Lame patch to flawfinder for format string hunting (guninski at guninski.com (Georgi Guninski))
youbin local root exploit + advisory (address-modified-due-to-out-of-office-and-gay-antivirus-marking-perl-scripts-as-trojans---kain at ircop.dk (Knud Erik Høj…)
@(#)Mordred Security Notice - exporing the hacking websites (smcmahon at eiv.com (Shawn McMahon))
@(#)Mordred Security Notice - exporing the hacking websites (se_cur_ity at hotmail.com (morning_wood))
@(#)Mordred Security Notice - exporing the hacking websites (pauls at utdallas.edu (Schmehl, Paul L))
[SECURITY] [DSA 299-1] New leksbot packages fix improper setuid-root execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
Slow Internet? (damian at sentex.net (Damian Gerow))
Re: @(#)Mordred Security Notice - exploring the hacking websites (mordred at s-mail.com (Sir Mordred))
Re: @(#)Mordred Security Notice - exploring the hacking websites (mordred at s-mail.com (Sir Mordred))
help (javier.romeu at saint-gobain.com (javier.romeu@...nt-gobain.com))
@(#)Mordred Security Notice - exporing the hacking websites (e-smile at gmx.net (e-smile@....net))
MDKSA-2003:053 - Updated mgetty packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:054 - Updated man packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
@(#)Mordred Security Notice - exporing the hacking websites (petard at hushmail.com (petard@...hmail.com))

May 7 (10 messages)

Re: @(#)Mordred Security Notice - exploring the hacking websites (mordred at s-mail.com (Sir Mordred))
ALERT WEBDAV worm on the loose (scheidell at secnap.net (Michael Scheidell))
Re: ALERT WEBDAV worm on the loose (jullrich at sans.org (Johannes Ullrich))
@(#)Mordred Labs security notice - exploring the security companies (mordred at s-mail.com (Sir Mordred))
[SECURITY] [DSA-301-1] New libgtop packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-302-1] New fuzz packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Windows Media Player directory traversal vulnerability (jouko at solutions.fi (Jouko Pynnonen))
Re: Windows Media Player directory traversal vulnerability (jouko at solutions.fi (Jouko Pynnonen))
@(#)Mordred Security Notice - exporing the hacking websites (pauls at utdallas.edu (Schmehl, Paul L))

May 8 (22 messages)

Hotmail & Passport (.NET Accounts) Vulnerability (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
Hotmail & Passport (.NET Accounts) Vulnerability (cherot at appliedmessaging.com (Christopher F. Herot))
Hotmail & Passport (.NET Accounts) Vulnerability (xploit at hackermail.com (dong-h0un U))
Hotmail & Passport (.NET Accounts) Vulnerability (marcs at znep.com (Marc Slemko))
Hotmail & Passport (.NET Accounts) Vulnerability (zoer_sec at hotmail.com (Suryanto))
Hotmail & Passport (.NET Accounts) Vulnerability (mike at m5computersecurity.com (Michael J McCafferty))
No subject (anthony.aykut at frame4.com (Anthony Aykut))
Hotmail & Passport (.NET Accounts) Vulnerability (WChang at pnwsoft.com (Wayne Chang (Pacific Northwest Software)))
Multiple Vulnerabilities found in Microsoft .Net Passport Services (qa at pakcert.org (Qazi Ahmed))
Hotmail & Passport (.NET Accounts) Vulnerability (security at nscs.uk.com (Byrne Ghavalas))
SRT2003-05-08-1137 - ListProc mailing list ULISTPROC_UMASK overflow (dotslash at globalintersec.com (KF))
Fw: [NTBUGTRAQ] Win 2003 DNS requests makes replies over 512 byte PIX limit (hggdh at attbi.com (hggdh))
Hotmail & Passport (.NET Accounts) Vulnerability (WChang at pnwsoft.com (Wayne Chang (Pacific Northwest Software)))
MDKSA-2003:055 - Updated kopete packages fix vulnerability with GnuPG plugin (security at linux-mandrake.com (Mandrake Linux Security Team))
Fw: [NTBUGTRAQ] Win 2003 DNS requests makes replies over 512 byte PIX limit (mathias at intergga.ch (Mathias Gerber))
Fw: [NTBUGTRAQ] Win 2003 DNS requests makes replies over 512 byte PIX limit (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Fw: [NTBUGTRAQ] Win 2003 DNS requests makes replies over 512 byte PIX limit (hggdh at attbi.com (hggdh))
Fw: [NTBUGTRAQ] Win 2003 DNS requests makes replies over 512 byte PIX limit (derek at ihtfp.com (Derek Atkins))
Hotmail & Passport (.NET Accounts) Vulnerability (adf at code511.com (adf--at--Code511.com))
Hotmail & Passport (.NET Accounts)Vulnerability (kenneth at aloe.ulima.edu.pe (Tovar Roca Kenneth))
Re: UDP bypassing in Kerio Firewall 2.1.4 (k_aneda at yahoo.com (L. Walker))
Multiple Vulnerabilities found in Microsoft .Net Passport Services (steve at netwaynetworks.com.au (Steven Evans))

May 9 (20 messages)

ltris-and-slashem-tty possible trouble (kain at ircop.dk (Knud Erik Højgaard))
minor security problem on Mandrake Multiple Network Firewall GUI - TCP 8443 (netw3_security at hushmail.com (Curt Wilson))
Kerio firewall possible fragmentation issue (netw3_security at hushmail.com (Curt Wilson))
Fw: [NTBUGTRAQ] Win 2003 DNS requests makes replies over 512 byte PIX limit (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
SRT2003-05-08-1137 - ListProc mailing list ULISTPROC_UMASK overflow (smcmahon at eiv.com (Shawn McMahon))
Hotmail & Passport (.NET Accounts) (avalon at caligula.anu.edu.au (Darren Reed))
SRT2003-05-08-1137 - ListProc mailing list ULISTPROC_UMASK overflow (dotslash at snosoft.com (KF))
SRT2003-05-08-1137 - ListProc mailing list ULISTPROC_UMASK overflow (smcmahon at eiv.com (Shawn McMahon))
Hotmail & Passport (.NET Accounts) (dufresne at winternet.com (Ron DuFresne))
minor security problem on Mandrake Multiple Network Firewall GUI - TCP 8443 (vdanen at mandrakesoft.com (Vincent Danen))
SRT2003-05-08-1137 - ListProc mailing list ULISTPROC_UMASK overflow (lwc at vapid.ath.cx (Larry W. Cashdollar))
PowerLink™ WAN Aggregator - Vunerability (se_cur_ity at hotmail.com (morning_wood))
PGP vs. certificate from Verisign (mountainfury at hotmail.com (Kamal Habayeb))
PGP vs. certificate from Verisign (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
PGP vs. certificate from Verisign (salgatt at turtleshell.net (Scott M. Algatt))
PGP vs. certificate from Verisign (smcmahon at eiv.com (Shawn McMahon))
PGP vs. certificate from Verisign (gator at mail.cacr.caltech.edu (Anne Carasik))
Hotmail & Passport (.NET Accounts) (adf at code511.com (adf--at--Code511.com))
Firebird local root compromise (bob at dtors.net (bob))
PGP vs. certificate from Verisign (tjevans at bearingpoint.net (Evans, TJ (BearingPoint)))

May 10 (28 messages)

PGP vs. certificate from Verisign (yossarian at planet.nl (yossarian))
Hotmail & Passport (.NET Accounts) (nick at virus-l.demon.co.uk (Nick FitzGerald))
@(#)Mordred Labs security notice - exploring the honeypot(s) in the wild (mordred at s-mail.com (Sir Mordred))
@(#)Mordred Labs security notice - exploring the honeypot(s) in the wild (avalon at caligula.anu.edu.au (Darren Reed))
Multiple Vulnerabilities found in Microsoft .Net Passport Services (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Fw: [NTBUGTRAQ] Win 2003 DNS requests makes replies over 512 byte PIX limit (dbt at meat.net (David Terrell))
Hotmail & Passport (.NET Accounts) Vulnerab ility (david.vincent at mightyoaks.com (David Vincent))
@(#)Mordred Labs security notice - exploring the honeypot(s) in the wild (mordred at s-mail.com (Sir Mordred))
Hotmail & Passport (.NET Accounts) Vulnerability (fulldisclosure at aphroland.org (nate))
PGP vs. certificate from Verisign (poirotsj at gci.net (Steve Poirot))
PGP vs. certificate from Verisign (guninski at guninski.com (Georgi Guninski))
Hotmail & Passport (.NET Accounts) (guninski at guninski.com (Georgi Guninski))
PGP vs. certificate from Verisign (mountainfury at hotmail.com (Kamal Habayeb))
PGP vs. certificate from Verisign (poirotsj at gci.net (Steve Poirot))
PGP vs. certificate from Verisign (derek at ihtfp.com (Derek Atkins))
PGP vs. certificate from Verisign (security at brvenik.com (Jason))
[OFFTOPIC] PGP vs. certificate from Verisign (listuser at seifried.org (Kurt Seifried))
PGP vs. certificate from Verisign (ben at algroup.co.uk (Ben Laurie))
PGP vs. certificate from Verisign (yossarian at planet.nl (yossarian))
PGP vs. certificate from Verisign (security at brvenik.com (Jason))
PGP vs. certificate from Verisign (security at brvenik.com (Jason))
PGP vs. certificate from Verisign (security at brvenik.com (Jason))
PGP vs. certificate from Verisign (yossarian at planet.nl (yossarian))
[Resend] @(#)Mordred Labs security notice - exploring the honeypot(s) in the wild (mordred at s-mail.com (Sir Mordred))
[OFFTOPIC] PGP vs. certificate from Verisign (yossarian at planet.nl (yossarian))
PGP vs. certificate from Verisign (yossarian at planet.nl (yossarian))
[forward]Apple Safari and Konqueror Embedded Common Name Verification Vulnerability (code511 at code511.com (code511))
PGP vs. certificate from Verisign (dantams at myrealbox.com (Daniel Tams))

May 11 (3 messages)

Hotmail & Passport (.NET Accounts) (nick at virus-l.demon.co.uk (Nick FitzGerald))
eServ Memory Leak Enables Denial of Service Attacks (mattmurphy at kc.rr.com (Matthew Murphy))
PGP vs. certificate from Verisign (guninski at guninski.com (Georgi Guninski))

May 12 (19 messages)

PGP vs. certificate from Verisign (smcmahon at eiv.com (Shawn McMahon))
MSN Webcam / Chat Spoof (se_cur_ity at hotmail.com (morning_wood))
MSN Webcam / Chat Spoof (rms at computerbytesman.com (Richard M. Smith))
MSN Webcam / Chat Spoof (daniel at pooh.cz (Daniel Dočekal))
Hotmail & Passport (.NET Accounts) (mjc at redhat.com (Mark J Cox))
PGP vs. certificate from Verisign (yossarian at planet.nl (yossarian))
Secunia Research: Opera browser filename extension buffer overflows (jb at secunia.com (Jakob Balle))
MSN Webcam / Chat Spoof (rms at computerbytesman.com (Richard M. Smith))
What is better anyway? (mordred at s-mail.com (Sir Mordred))
Hotmail & Passport (.NET Accounts) (erc at pobox.com (Ed Carp))
MSN Webcam / Chat Spoof (daniel at pooh.cz (Daniel Dočekal))
PGP vs. certificate from Verisign (smcmahon at eiv.com (Shawn McMahon))
MSN Webcam / Chat Spoof (rms at computerbytesman.com (Richard M. Smith))
Paper: Spamdoors (echolation at hushmail.com (Vision Through Sound))
[RHSA-2003:002-01] Updated KDE packages fix security issues (bugzilla at redhat.com (bugzilla@...hat.com))
MSN Webcam / Chat Spoof (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
MSN Webcam / Chat Spoof (rms at computerbytesman.com (Richard M. Smith))
Paper: Spamdoors (nexus at patrol.i-way.co.uk (Nexus))
[VulnWatch] Secunia Research: Opera browser filename extension buffer overflows (jb at secunia.com (Jakob Balle))

May 13 (22 messages)

MSN Webcam / Chat Spoof (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
About spamb strange characters (Nicolas.Villatte at advalvas.be (Nicolas Villatte))
About spamb strange characters (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
About spamb strange characters (smcmahon at eiv.com (Shawn McMahon))
About spamb strange characters (dbailey27 at ameritech.net (northern snowfall))
About spamb strange characters (inouk at igt.net (Eric LeBlanc))
About spamb strange characters (nexus at patrol.i-way.co.uk (Nexus))
About spamb strange characters (jstewart at lurhq.com (Joe Stewart))
AW: About spamb strange characters (vogt at hansenet.com (vogt@...senet.com))
About spamb strange characters (pauls at utdallas.edu (Schmehl, Paul L))
About spamb strange characters (nexus at patrol.i-way.co.uk (Nexus))
eServ Memory Leak Solution (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
[RHSA-2003:160-01] Updated xinetd packages fix a denial-of-service attack and other bugs (bugzilla at redhat.com (bugzilla@...hat.com))
Fwd: this address is no longer available (echolation at hushmail.com (Vision Through Sound))
MSN Webcam / Chat Spoof (poirotsj at gci.net (Steve Poirot))
free source code audit for opensourced products (mordred at s-mail.com (Sir Mordred))
MSN Webcam / Chat Spoof (charrington at syseng.com (Christopher Harrington))
free source code audit for opensourced products (lwc at vapid.ath.cx (Larry W. Cashdollar))
*****SPAM***** Fwd: this address is no longer available (nexus at patrol.i-way.co.uk (Nexus))
Fwd: this address is no longer available (pauls at utdallas.edu (Schmehl, Paul L))
MSN Webcam / Chat Spoof (yossarian at planet.nl (yossarian))
*****SPAM***** Fwd: this address is no longer available (th at bogus.net (Tor Houghton))

May 14 (23 messages)

Fwd: this address is no longer available (nexus at patrol.i-way.co.uk (Nexus))
Fwd: this address is no longer available (dlhane at sbcglobal.net (David Hane))
Memory leak in 3COM 812 DSL routers (conde0 at telefonica.net (David F. Madrid))
Fwd: this address is no longer available (dimitry at al.org.ua (Dmitry Alyabyev))
AW: About spamb strange characters (vogt at hansenet.com (vogt@...senet.com))
AW: About spamb strange characters (vogt at hansenet.com (vogt@...senet.com))
Fwd: this address is no longer available (nexus at patrol.i-way.co.uk (Nexus))
FW: BUSINESS PROPOSITION (mountainfury at hotmail.com (Kamal Habayeb))
About spamb strange characters (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
FW: BUSINESS PROPOSITION (scheidell at secnap.net (Michael Scheidell))
Fwd: this address is no longer available (pauls at utdallas.edu (Schmehl, Paul L))
FW: BUSINESS PROPOSITION (pauls at utdallas.edu (Schmehl, Paul L))
FW: BUSINESS PROPOSITION (se_cur_ity at hotmail.com (morning_wood))
FW: BUSINESS PROPOSITION (nexus at patrol.i-way.co.uk (Nexus))
Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! - UPDATED (mb at systemintegra.com (Marek Bialoglowy))
Buffer overflows in multiple IMAP clients (tss at iki.fi (Timo Sirainen))
[RHSA-2003:172-00] Updated 2.4 kernel fixes security vulnerabilities and various bugs (bugzilla at redhat.com (bugzilla@...hat.com))
FW: BUSINESS PROPOSITION (smcmahon at eiv.com (Shawn McMahon))
MSN Webcam / Chat Spoof (charrington at syseng.com (Christopher Harrington))
FW: BUSINESS PROPOSITION (kspett at spidynamics.com (Kevin Spett))
Fwd: Re: Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! [CRITICAL] (1 at malware.com (http-equiv@...ite.com))
Fwd: Re: Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! [CRITICAL] (1 at malware.com (http-equiv@...ite.com))
Multiple Security Vulnerabilities in OpenSSL on IRIX 6.5.19 (agent99 at sgi.com (SGI Security Coordinator))

May 15 (13 messages)

FW: BUSINESS PROPOSITION (nexus at patrol.i-way.co.uk (Nexus))
Re : Memory Leak in 3COM DSL routers (conde0 at telefonica.net (David F. Madrid))
MDKSA-2003:056 - Updated xinetd packages fix DoS vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:057 - Updated MySQL packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
[ESA-20030515-015] 'sudo' heap corruption vulnerability (security at guardiandigital.com (EnGarde Secure Linux))
[ESA-20030515-016] 'gnupg' key validation bug. (security at guardiandigital.com (EnGarde Secure Linux))
[ESA-20030515-017] 'kernel' several bug and security-related fixes. (security at guardiandigital.com (EnGarde Secure Linux))
[RHSA-2003:174-01] Updated tcpdump packages fix privilege dropping error (bugzilla at redhat.com (bugzilla@...hat.com))
FW: BUSINESS PROPOSITION (smcmahon at eiv.com (Shawn McMahon))
Cisco Security Advisory: Cisco IOS Software Processing of SAA Packets (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
An expired domain name equals identity theft via email (rms at computerbytesman.com (Richard M. Smith))
Re: Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! - UPDATED (1 at malware.com (http-equiv@...ite.com))
MDKSA-2003:058 - Updated cdrecord packages fix local root compromise (security at linux-mandrake.com (Mandrake Linux Security Team))

May 16 (5 messages)

RE: IIS Security and Programming Countermeasures e-book (jasonc at science.org (Jason Coombs))
[SECURITY] [DSA-304-1] New lv packages fix local privilege escalation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-303-1] New mysql packages fix multiple vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-305-1] New sendmail packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.…)
[RHSA-2003:169-01] Updated lv packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))

May 18 (10 messages)

Viral hoax (se_cur_ity at hotmail.com (morning_wood))
Re: Viral hoax (madduck at madduck.net (martin f krafft))
Viral hoax (daniel at pooh.cz (Daniel Dočekal))
Re: Viral hoax (se_cur_ity at hotmail.com (morning_wood))
Re: Viral hoax (madduck at madduck.net (martin f krafft))
Viral hoax (erc at pobox.com (Ed Carp))
Editing Info (se_cur_ity at hotmail.com (morning_wood))
Editing Info (se_cur_ity at hotmail.com (morning_wood))
Re: Viral hoax (BlueBoar at thievco.com (Blue Boar))
Re: Viral hoax (madduck at madduck.net (martin f krafft))

May 19 (13 messages)

Re: Viral hoax (dotslash at snosoft.com (KF))
Re: Viral hoax (madduck at madduck.net (martin f krafft))
OT: seeking VicodinES Macro.Poppy Construction Kit (madduck at madduck.net (martin f krafft))
Re: Viral hoax (Alexandru.Balan at iNES.RO (Alexandru Balan))
Re: Viral hoax (volker.tanger at discon.de (Volker Tanger))
Re: Viral hoax (Alexandru.Balan at iNES.RO (Alexandru Balan))
Re: Viral hoax (volker.tanger at discon.de (Volker Tanger))
Re: Viral hoax (smcmahon at eiv.com (Shawn McMahon))
[SECURITY] [DSA 306-1] New BitchX packages fix DoS and arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.de…)
OT: seeking VicodinES Macro.Poppy Construction Kit (dotslash at snosoft.com (KF))
emacs 21.3 fixes security bugs (guninski at guninski.com (Georgi Guninski))
Re: Viral hoax (list at rachinsky.de (Nicolas Rachinsky))
Security Vulnerabilities in MediaBase Apache and PHP on IRIX (agent99 at sgi.com (SGI Security Coordinator))

May 20 (9 messages)

Internic XSS issue (se_cur_ity at hotmail.com (morning_wood))
127 Research and Development: 127 Day! (dbailey27 at ameritech.net (northern snowfall))
Blue screen in W2000 Server (idoru at videosoft.net.uy (David F. Madrid))
Remote bzflag 1.7g0 server DoS (rcm at hush.com (rcm@...h.com))
Blue screen in W2000 Server (fabio.moraes at eds.com (Moraes, Fabio))
Re : Blue screen in W2000 Server (idoru at videosoft.net.uy (David F. Madrid))
Maelstrom Local Buffer Overflow Exploit (akcss at linuxmail.org (akcess .))
Maelstrom Local Buffer Overflow Exploit, FreeBSD 4.8 edition (kain at ircop.dk (Knud Erik Højgaard))
BadBlue Remote Administrative Interface Access Vulnerability (mattmurphy at kc.rr.com (mattmurphy@...rr.com))

May 21 (10 messages)

[RHSA-2003:175-01] Updated gnupg packages fix validation bug (bugzilla at redhat.com (bugzilla@...hat.com))
Verity/Search'97 ObjectStoreSearch (se_cur_ity at hotmail.com (morning_wood))
(no subject) (trippz at overflow.org (huw))
Restricted Zone: the OUTLOOK EXPRESS (1 at malware.com (http-equiv@...ite.com))
[INetCop Security Advisory] WsMP3d Directory Traversing Vulnerability. (xploit at hackermail.com (dong-h0un U))
(no subject) (cepacolmax at hushmail.com (cepacolmax@...hmail.com))
[INetCop Security Advisory] Remote Heap Corruption Overflow vulnerability in WsMp3d. (xploit at hackermail.com (dong-h0un U))
MDKSA-2003:058-1 - Updated cdrecord packages fix local root compromise (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:059 - Updated lpr packages fix local root vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
[RHSA-2003:175-01] Updated gnupg packages fix validation bug (bugzilla at redhat.com (bugzilla@...hat.com))

May 22 (9 messages)

MDKSA-2003:060 - Updated LPRng packages fix insecure temporary file vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: Viral hoax (sockz at email.com (sockz loves you))
Eudora 5.2.1 attachment spoof (psz at maths.usyd.edu.au (Paul Szabo))
WsMp3d remote exploit. (xploit at hackermail.com (dong-h0un U))
QuickTime/Darwin Streaming Server security issues (mordred at s-mail.com (Sir Mordred))
XMB 1.8 Partagium cross site scripting vulnerability (marc.ruef at computec.ch (Marc Ruef))
iDEFENSE Security Advisory 05.22.03: Authentication Bypass in iisPROTECT (labs at idefense.com (iDEFENSE Labs))
MDKSA-2003:061 - Updated gnupg packages fix validation bug (security at linux-mandrake.com (Mandrake Linux Security Team))
iDEFENSE Security Advisory 05.22.03: Authentication Bypass in iisPROTECT (secvar72 at hotmail.com (raj var))

May 23 (21 messages)

iDEFENSE Security Advisory 05.22.03: Authentication Bypass in iisPROTECT (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
Eudora 5.2.1 buffer overflow DoS (psz at maths.usyd.edu.au (Paul Szabo))
nessus NASL scripting engine security issues (mordred at s-mail.com (Sir Mordred))
iisPROTECT SQL injection in admin interface (frohn at superbruger.dk (Gyrniff))
nessus NASL scripting engine security issues (mordred at s-mail.com (Sir Mordred))
iisPROTECT SQL injection in admin interface (bugtraq at cgisecurity.net (bugtraq@...security.net))
Re: QuickTime/Darwin Streaming Server security issues (Joe_Testa at rapid7.com (Joe Testa))
iisPROTECT SQL injection in admin interface (cdw at mylinuxguy.com (C. David Wilde))
Eudora 5.2.1 buffer overflow DoS (psz at maths.usyd.edu.au (Paul Szabo))
iisPROTECT SQL injection in admin interface (smcmahon at eiv.com (Shawn McMahon))
help please unsubscribe... (James_Dewaker at rsausa.com (James_Dewaker@...usa.com))
iDEFENSE Security Advisory 05.22.03: Authentication Bypass in iisPROTECT (coley at mitre.org (Steven M. Christey))
help please unsubscribe... (david.vincent at mightyoaks.com (David Vincent))
help please unsubscribe... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: A question for the list... (se_cur_ity at hotmail.com (morning_wood))
Re: QuickTime/Darwin Streaming Server security issues (Joe_Testa at rapid7.com (Joe Testa))
Fw: bug in uml_net (galiarept at phreaker.net (GaLiaRePt))
nessus NASL scripting engine security issues (mordred at s-mail.com (Sir Mordred))
nessus NASL scripting engine security issues (mordred at s-mail.com (Sir Mordred))
Eudora 5.2.1 buffer overflow DoS (psz at maths.usyd.edu.au (Paul Szabo))
Re: QuickTime/Darwin Streaming Server security issues (Joe_Testa at rapid7.com (Joe Testa))

May 24 (16 messages)

help please unsubscribe... (xlopkov at eml.cc (xlopkov@....cc))
Fwd: Delivery Status: User mailbox full: devnull@....com (xlopkov at eml.cc (xlopkov@....cc))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (se_cur_ity at hotmail.com (morning_wood))
Suspicious Attachment (jgarcia at choiceoneonline.com (jgarcia@...iceoneonline.com))
HEADS UP VIRUS BEING SPREAD one of our readers infected? (scheidell at secnap.net (scheidell@...nap.net))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (se_cur_ity at hotmail.com (morning_wood))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (hescominsoon at adelphia.net (William Warren))
HEADS UP VIRUS BEING SPREAD one of our readers infected? (se_cur_ity at hotmail.com (morning_wood))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (se_cur_ity at hotmail.com (morning_wood))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (hescominsoon at adelphia.net (William Warren))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (se_cur_ity at hotmail.com (morning_wood))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (hescominsoon at adelphia.net (William Warren))
SV: Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (kruse at krusesecurity.dk (Peter Kruse))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (ptourvi1 at twcny.rr.com (JT))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (xillwillx at yahoo.com (w g))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (se_cur_ity at hotmail.com (morning_wood))

May 25 (20 messages)

HEADS UP VIRUS BEING SPREAD one of our readers infected? (rms at computerbytesman.com (Richard M. Smith))
HEADS UP VIRUS BEING SPREAD one of our readers infected? (steve at entrenchtech.com (Steve Manzuik))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (se_cur_ity at hotmail.com (morning_wood))
HEADS UP VIRUS BEING SPREAD one of our readers infected? (yossarian at planet.nl (yossarian))
HEADS UP VIRUS BEING SPREAD one of our readers infected? (se_cur_ity at hotmail.com (morning_wood))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (dbailey27 at ameritech.net (northern snowfall))
HEADS UP VIRUS BEING SPREAD one of our readers infected? (se_cur_ity at hotmail.com (morning_wood))
HEADS UP VIRUS BEING SPREAD one of our readers infected? (azmodan at linux.online.no (Mads Tansø))
HEADS UP VIRUS BEING SPREAD one of our readers infected? (se_cur_ity at hotmail.com (morning_wood))
Ms Update Spoof - W32.gibe - NOTE:VIRUS AT (nick at virus-l.demon.co.uk (Nick FitzGerald))
HEADS UP VIRUS BEING SPREAD one of our readers infected? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
HEADS UP VIRUS BEING SPREAD one of our rea (nick at virus-l.demon.co.uk (Nick FitzGerald))
Religion. Was HEADS UP... (security at brvenik.com (Jason))
HEADS UP VIRUS BEING SPREAD one of our readers infected? (erc at pobox.com (Ed Carp))
HEADS UP VIRUS BEING SPREAD one of our rea (erc at pobox.com (Ed Carp))
Religion. Was HEADS UP... (nick at virus-l.demon.co.uk (Nick FitzGerald))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (nexus at patrol.i-way.co.uk (Nexus))
HEADS UP VIRUS BEING SPREAD one of our readers infected? (shrdlu at deaddrop.org (Etaoin Shrdlu))
Religion. Was HEADS UP... (erc at pobox.com (Ed Carp))
HEADS UP VIRUS BEING SPREAD one of our rea (nick at virus-l.demon.co.uk (Nick FitzGerald))

May 26 (19 messages)

HEADS UP VIRUS BEING SPREAD one of our rea (se_cur_ity at hotmail.com (morning_wood))
Fw: A question for the list... (se_cur_ity at hotmail.com (morning_wood))
Fw: A question for the list... (ptourvi1 at twcny.rr.com (JT))
Fw: A question for the list... (se_cur_ity at hotmail.com (morning_wood))
Fw: A question for the list... (nick at ethicsdesign.com (Nick Jacobsen))
Fw: A question for the list... (nick at virus-l.demon.co.uk (Nick FitzGerald))
HEADS UP VIRUS BEING SPREAD one of our rea (nick at virus-l.demon.co.uk (Nick FitzGerald))
Fw: A question for the list... (se_cur_ity at hotmail.com (morning_wood))
Fw: A question for the list... (dotslash at snosoft.com (KF))
The PACKET 0' DEATH FastTrack network vulnerability (random_nut at yahoo.com (random nut))
Fw: A question for the list... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Fw: A question for the list... (azmodan at linux.online.no (Mads Tansø))
The PACKET 0' DEATH FastTrack network vulnerability (random_nut at yahoo.com (random nut))
Ms Update Spoof - W32.gibe - NOTE:VIRUS ATACHED (A.J.Caines at halplant.com (Andrew J Caines))
Fw: A question for the list... (xlopkov at eml.cc (xlopkov@....cc))
No subject (anthony.aykut at frame4.com (Anthony Aykut))
NII Advisory - Buffer Overflow in Analogx Proxy (cto at nii.co.in (K. K. Mookhey))
Fw: A question for the list... (se_cur_ity at hotmail.com (morning_wood))
Fw: A question for the list... (erc at pobox.com (Ed Carp))

May 27 (21 messages)

The PACKET 0' DEATH FastTrack network vulnerability (kponds at the-pentagon.com (Kevin W Ponds))
Fw: A question for the list... (se_cur_ity at hotmail.com (morning_wood))
Internet Explorer crash bugs (rms at computerbytesman.com (Richard M. Smith))
Re: Eudora 5.2.1 attachment spoof (psz at maths.usyd.edu.au (Paul Szabo))
Fw: A question for the list... (blancher at cartel-securite.fr (Cedric Blancher))
Fw: A question for the list... (nick at ethicsdesign.com (Nick Jacobsen))
Fw: A question for the list... (ulysse at madchat.org (Ulysse))
Fw: A question for the list... (blancher at cartel-securite.fr (Cedric Blancher))
Fw: A question for the list... (se_cur_ity at hotmail.com (morning_wood))
Fw: A question for the list... (kutz at netcologne.de (Rolf Kutz))
[RHSA-2003:171-01] Updated CUPS packages fix denial of service attack (bugzilla at redhat.com (bugzilla@...hat.com))
Fw: A question for the list... (chris at go-net.com (Henry, Christopher))
[TOOL] thcrut released (network stuff) (dontreply at thc.org (dontreply@....org))
Fw: A question for the list... (random_nut at yahoo.com (random nut))
SuSE Security Announcement: glibc (SuSE-SA:2003:027) (thomas at suse.de (Thomas Biege))
HEADS UP VIRUS BEING SPREAD one of our readers infected? (dufresne at winternet.com (Ron DuFresne))
Fw: A question for the list... (dufresne at winternet.com (Ron DuFresne))
Massive denial-of-service attack from microsoft.com (rms at computerbytesman.com (Richard M. Smith))
CORE-2003-0403: Axis Network Camera HTTP Authentication Bypass (advisories at coresecurity.com (CORE Security Technologies Advisories))
Multiple Vulnerabilities in Sun-One Application Server (spilabs at spidynamics.com (SPI Labs))
Exploit: Quake 3 engine, con\con and heartbeats (just for fun) (aluigi at pivx.com (Auriemma Luigi))

May 28 (7 messages)

Massive denial-of-service attack from microsoft.com (justin-fulldisclosure at soze.net (Justin))
Re: CORE-2003-0403: Axis Network Camera HTTP Authentication Bypass (nazgul at somewhere.com (Kee Hinckley))
[RHSA-2003:177-01] Updated up2date and rhn_register clients available (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:145-01] Updated kernel fixes security vulnerabilities and updates drivers (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:186-01] Updated httpd packages fix Apache security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[SECURITY] [ANNOUNCE] Apache 2.0.46 released (jwoolley at apache.org (Apache HTTP Server Project))
Internet Information Services 5.0 Denial of service (spilabs at spidynamics.com (SPI Labs))

May 29 (11 messages)

[SECURITY] [DSA-307-1] New gps packages fix multiple vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
SECNAP Security Advisory: Invalid HTML processing in GoldMine(tm) (scheidell at secnap.net (scheidell@...nap.net))
/bin/mail & glibc (uk2sec at oakey.no-ip.com (uk2sec@...ey.no-ip.com))
Re: /bin/mail & glibc (mark at vulndev.org (Mark))
PHRACK MAGAZINE Call for Papers (#61) (rm at ingsoc.org (phrack staff))
PopToP vuln return addresses (shuck at hush.com (shuck@...h.com))
PopToP vuln return addresses (dotslash at snosoft.com (KF))
Proxy - Cookie - PhP - .htaccess Questions (se_cur_ity at hotmail.com (morning_wood))
Proxy - Cookie - PhP - .htaccess Questions (ptourvi1 at twcny.rr.com (JT))
MDKSA-2003:062 - Updated cups packages fix Denial of Service vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Buffer overflow in Shell32.dll . Net monitor (idoru at videosoft.net.uy (David F. Madrid))

May 30 (11 messages)

C99 Security Alert-Old-New-Who-Cares :) - (: (democow8086 at hotmail.com (democow ....))
[RHSA-2003:181-01] Updated ghostscript packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
NSFOCUS SA2003-05: Microsoft IIS ssinc.dll Over-long Filename Buffer Overflow Vulnerability (security at nsfocus.com (NSFOCUS Security Team))
List Charter (johnc at grok.org.uk (John Cartwright))
gcc (v3.x, < v3.2.3) implicit struct copy exploit (lukehlistemail at email.byu.edu (Luke Hutchison))
C99 Security Alert-Old-New-Who-Cares :) - (: (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
C99 Security Alert-Old-New-Who-Cares :) - (: (pauls at utdallas.edu (Schmehl, Paul L))
NSFOCUS SA2003-05: Microsoft IIS ssinc.dll Over-long Filename Buffer Overflow Vulnerability (guninski at guninski.com (Georgi Guninski))
NSFOCUS SA2003-05: Microsoft IIS ssinc.dllOver-long Filename Buffer Overflow Vulnerability (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
iDEFENSE Security Advisory 05.30.03: Apache Portable Runtime Denial of Service and Arbitrary Code Execution Vulnerability (labs at idefense.com (iDEFENSE Labs))
MSN search spoof (se_cur_ity at hotmail.com (morning_wood))

May 31 (13 messages)

Msn Search Spoof - NOT KAK (se_cur_ity at hotmail.com (morning_wood))
MDKSA-2003:063 - Updated apache2 packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Antigen Path Disclosure (se_cur_ity at hotmail.com (morning_wood))
Bogus Viral Test - NO HARMFULL CONTENT (se_cur_ity at hotmail.com (morning_wood))
Bogus Viral Test - NO HARMFULL CONTENT (neeko at haackey.com (Neeko Oni))
Bogus Viral Test - NO HARMFULL CONTENT (democow8086 at hotmail.com (democow ....))
Bogus Viral Test - NO HARMFULL CONTENT (se_cur_ity at hotmail.com (morning_wood))
Additional Details of Apache 2.x Security Flaw (Attack Vectors) (mattmurphy at kc.rr.com (Matthew Murphy))
Antigen Path Disclosure (nick at virus-l.demon.co.uk (Nick FitzGerald))
Antigen Path Disclosure (se_cur_ity at hotmail.com (morning_wood))
kak removal (se_cur_ity at hotmail.com (morning_wood))
Antigen Path Disclosure (xillwillx at yahoo.com (w g))
Antigen Path Disclosure (nick at virus-l.demon.co.uk (Nick FitzGerald))

442 messages