full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2003/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 14
² 13	³ 20	⁴ 50	⁵ 95	⁶ 45	⁷ 24	⁸ 10
⁹ 17	¹⁰ 19	¹¹ 15	¹² 91	¹³ 52	¹⁴ 13	¹⁵ 6
¹⁶ 11	¹⁷ 28	¹⁸ 64	¹⁹ 69	²⁰ 76	²¹ 12	²² 8
²³ 37	²⁴ 13	²⁵ 16	²⁶ 31	²⁷ 21	²⁸ 4	²⁹ 9
³⁰ 8

Messages by day:

June 1 (14 messages)

true story of the hacker (democow8086 at hotmail.com (democow ....))
kak removal (nick at virus-l.demon.co.uk (Nick FitzGerald))
true sotry.. (democow8086 at hotmail.com (democow ....))
Antigen Path Disclosure (Packetninja at btinternet.com (W1ZARD))
Antigen Path Disclosure (azmodan at linux.online.no (Mads Tansø))
Antigen Path Disclosure (arjen.de.landgraaf at cologic.co.nz (Arjen De Landgraaf))
Antigen Path Disclosure (azmodan at linux.online.no (Mads Tansø))
Antigen Path Disclosure (Packetninja at btinternet.com (W1ZARD))
Antigen Path Disclosure (se_cur_ity at hotmail.com (morning_wood))
Antigen Path Disclosure (Packetninja at btinternet.com (W1ZARD))
In regards to recent crap flooding list. (perrieror1 at mail.montclair.edu (Perriero, Robert A.))
Mod_gzip Debug Mode Vulnerabilities (mattmurphy at kc.rr.com (Matthew Murphy))
Yahoo! Audio Conferencing ActiveX control buffer overflow (cesarc56 at yahoo.com (Cesar))
Antigen Path Disclosure (em16 at hushmail.com (em16@...hmail.com))

June 2 (13 messages)

Antigen Path Disclosure (se_cur_ity at hotmail.com (morning_wood))
In regards to recent crap flooding list. (mosten at bleepyou.com (Michael Osten))
In regards to recent crap flooding list. (jsa at pen.homeip.net (John Andersen))
In regards to recent crap flooding list. (nexus at patrol.i-way.co.uk (Nexus))
RE: True story (earl_keyser at wayzata.k12.mn.us (Earl Keyser))
Packit 0.6.0 Released! (full-disclosure at intrusense.com (Darren Bounds))
RE: True story (strombrg at dcs.nac.uci.edu (Dan Stromberg))
Antigen Path Disclosure (dizwak at yahoo.com (piznak))
MSN fake login website (khatib at engin.umich.edu (Elkhatib, Ahmad))
RE: True story (ssteenkamp at aosl.co.za (Stephan Steenkamp))
Re: CORE-2003-0403: Axis Network Camera HTTP Authentication Bypass (smcmahon at eiv.com (Shawn McMahon))
Re: CORE-2003-0403: Axis Network Camera HTTP Authentication Bypass (b-nordquist at bethel.edu (Brent J. Nordquist))
Some Network Drivers May Leak Data on IRIX (agent99 at sgi.com (SGI Security Coordinator))

June 3 (20 messages)

example.{com,org,net} (full-disclosure at ifokr.org (Brian Hatch))
MSN fake login website (xillwillx at yahoo.com (w g))
MSN fake login website (nick at virus-l.demon.co.uk (Nick FitzGerald))
MSN fake login website (scottp at dreamwright.com (Scott Phelps / Dreamwright Studios))
IRCXpro 1.0 - Clear local and default remote admin passwords (se_cur_ity at hotmail.com (morning_wood))
morning wood (madscientist at wyoming.com (Philip Stortz))
[RHSA-2003:187-01] Updated 2.4 kernel fixes vulnerabilities and driver bugs (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:047-01] Updated kon2 packages fix buffer overflow (bugzilla at redhat.com (bugzilla@...hat.com))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (support at ircxpro.com (IRCXpro Support))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (avalon at caligula.anu.edu.au (Darren Reed))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (support at ircxpro.com (IRCXpro Support))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (avalon at caligula.anu.edu.au (Darren Reed))
morning_wood (BrentO at wolverton.ca (BrentO@...verton.ca))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords] (dbailey27 at ameritech.net (northern snowfall))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (azmodan at linux.online.no (Mads Tansø))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (mosten at bleepyou.com (Michael Osten))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (se_cur_ity at hotmail.com (morning_wood))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (se_cur_ity at hotmail.com (morning_wood))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (vasil at ludost.net (Васил Колев))
Updated SGI Apache Version Available for IRIX (agent99 at sgi.com (SGI Security Coordinator))

June 4 (50 messages)

Odd logs (salgatt at turtleshell.net (Scott M. Algatt))
Odd logs (this_is_kris at hotmail.com (Kristian Hermansen))
Odd logs (Dkillion at netscreen.com (Dave Killion))
Odd logs (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
Odd logs (salgatt at turtleshell.net (Scott M. Algatt))
Odd logs (rlanguy at hotmail.com (Lan Guy))
public comment period for the Draft Security Vulnerability Reporting and Responding Process (OISAFETY) (cozancin at symantec.com (Craig Ozancin))
Zone Alarm (ben at twowaytv.co.uk (Ben Tyson-Norrman))
Odd logs (gerd-fd-list at cerb.de (Gerd Feiner))
Odd logs (salgatt at turtleshell.net (Scott M. Algatt))
AdSubtract Proxy ACL Bypass Vulnerability (advisories at lurhq.com (advisories@...hq.com))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (David.Cushing at hitachisoftware.com (Cushing, David))
Odd logs (hans at guardianangel.nl (Hans Brederode))
Odd logs (mark at vulndev.org (Mark))
In regards to recent crap flooding list. (smcmahon at eiv.com (Shawn McMahon))
Re: CORE-2003-0403: Axis Network Camera HTTP Authentication Bypass (smcmahon at eiv.com (Shawn McMahon))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (smcmahon at eiv.com (Shawn McMahon))
Odd logs (se_cur_ity at hotmail.com (morning_wood))
Zone Alarm (se_cur_ity at hotmail.com (morning_wood))
(Another) Microsoft Internet Explorer FTP Security Hole (mattmurphy at kc.rr.com (Matthew Murphy))
Odd logs (se_cur_ity at hotmail.com (morning_wood))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (se_cur_ity at hotmail.com (morning_wood))
Re: Odd logs (jeff at cqasys.com (Jeffrey H. Johnson))
SNMP read-only opens up... what? (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
Zone Alarm (pauls at utdallas.edu (Schmehl, Paul L))
Odd logs (peter at ucsc.edu (peter moody))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (pablo_sole at myp.net.ar (Pablo Sol…)
Zone Alarm (joe at jthnet.com (Joe Hummel))
Zone Alarm (security at brvenik.com (Jason))
Odd logs (ml at intract.org (Michael Linke))
Zone Alarm (daniel_clemens at autism.birmingham-infragard.org (daniel.clemens))
SNMP read-only opens up... what? (jasonstout at ringzerosecurity.com (Jason Stout))
SNMP read-only opens up... what? (peter at ucsc.edu (peter moody))
Zone Alarm (sven at timegate.de (Sven Hoexter))
Re: Odd logs (salgatt at turtleshell.net (Scott M. Algatt))
Zone Alarm (michaelr at cisco.com (Michael Reilly))
SNMP read-only opens up... what? (tcannon at noops.org (Thomas Cannon))
Zone Alarm (blancher at cartel-securite.fr (Cedric Blancher))
In regards to recent crap flooding list. (steve.wray at paradise.net.nz (Steve Wray))
Zone Alarm (rliebsch at stoneyamashita.com (Robert J. Liebsch))
public comment period for the Draft Security Vulnerability Reporting and Responding Process (OISAFETY) (cesarc56 at yahoo.com (Cesar))
Zone Alarm (smcmahon at eiv.com (Shawn McMahon))
AW: Zone Alarm (ml at intract.org (Michael Linke))
Zone Alarm (pauls at utdallas.edu (Schmehl, Paul L))
Re: Odd logs (gem at rellim.com (Gary E. Miller))
SNMP read-only opens up... what? (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
Zone Alarm (lwc at vapid.ath.cx (Larry W. Cashdollar))
Zone Alarm (ericv at cruzio.com (Eric N. Valor))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (tido at hushmail.com (tido@...hmail.com))
TiVo , msn TV & Big Brother (meme-boi at nothotmail.org (meme-boi))

June 5 (95 messages)

[OFFTOPIC] Zone Alarm (listuser at seifried.org (Kurt Seifried))
Re: Odd logs (se_cur_ity at hotmail.com (morning_wood))
public comment period for the Draft Security Vulnerability Reporting and Responding Process (OISAFETY) (se_cur_ity at hotmail.com (morning_wood))
Solaris syslogd overflow (lx at redundancy.redundancy.org (David Thiel))
AW: Zone Alarm (mosten at bleepyou.com (Michael Osten))
AW: Zone Alarm (nick at virus-l.demon.co.uk (Nick FitzGerald))
[OFFTOPIC] Zone Alarm (rliebsch at stoneyamashita.com (Robert J. Liebsch))
Zone Alarm (pauls at utdallas.edu (Schmehl, Paul L))
[OFFTOPIC] Zone Alarm (pauls at utdallas.edu (Schmehl, Paul L))
[OFFTOPIC] Zone Alarm (rliebsch at stoneyamashita.com (Robert J. Liebsch))
Zone Alarm (michaelr at cisco.com (Michael Reilly))
AW: Zone Alarm (security at brvenik.com (Jason))
AW: Zone Alarm (ptourvi1 at twcny.rr.com (JT))
[OFFTOPIC] Zone Alarm (pauls at utdallas.edu (Schmehl, Paul L))
AW: Zone Alarm (michaelr at cisco.com (Michael Reilly))
AW: Zone Alarm (mosten at bleepyou.com (Michael Osten))
[OFFTOPIC] Zone Alarm (se_cur_ity at hotmail.com (morning_wood))
AW: Zone Alarm (se_cur_ity at hotmail.com (morning_wood))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (avalon at caligula.anu.edu.au (Darren Reed))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (avalon at caligula.anu.edu.au (Darren Reed))
YABBT [1] - Re: Zone Alarm (security at brvenik.com (Jason))
Re: IRCXpro 1.0 - Clear local and default remote admin passwords (avalon at caligula.anu.edu.au (Darren Reed))
[OFFTOPIC] Zone Alarm (ptourvi1 at twcny.rr.com (JT))
Re: YABBT [1] - Re: Zone Alarm (mosten at bleepyou.com (Michael Osten))
Zone Alarm (ben at twowaytv.co.uk (Ben Tyson-Norrman))
[RHSA-2003:192-01] Updated KDE packages fix security issue (bugzilla at redhat.com (bugzilla@...hat.com))
[OFFTOPIC] Zone Alarm (ld at stud.fh-muenchen.de (Lars Duesing))
What will happen to bugtraq, hosted by Symantec... (lists at nolog.org (Martin Peikert))
[OFFTOPIC] Zone Alarm (fh at fh.net (Frank J. Hoffmann))
what a waste? (se_cur_ity at hotmail.com (morning_wood))
[OFFTOPIC] Zone Alarm (blancher at cartel-securite.fr (Cedric Blancher))
public comment period for the Draft Security Vulnerability Reporting and Responding Process (OISAFETY) (guninski at guninski.com (Georgi Guninski))
[OFFTOPIC] Zone Alarm (lee.x.james at gsk.com (lee.x.james@....com))
public comment period for the Draft Security Vulnerability Reporting and Responding Process (OISAFETY) (dhtml at hush.com (dhtml@...h.com))
What will happen to bugtraq, hosted by Symantec... (lists at nolog.org (Martin Peikert))
Zone Alarm (MRMyers at anteon.com (Myers, Marvin))
Re: What will happen to bugtraq, hosted by Symantec... (madduck at madduck.net (martin f krafft))
[OFFTOPIC] Zone Alarm (smcmahon at eiv.com (Shawn McMahon))
[OFFTOPIC] Zone Alarm (smcmahon at eiv.com (Shawn McMahon))
AW: Zone Alarm (smcmahon at eiv.com (Shawn McMahon))
AW: Zone Alarm (smcmahon at eiv.com (Shawn McMahon))
Zone Alarm (smcmahon at eiv.com (Shawn McMahon))
[OFFTOPIC] Zone Alarm (ssteenkamp at aosl.co.za (Stephan Steenkamp))
[OFFTOPIC] Zone Alarm (likewhoa_666 at hotmail.com (John Ruppert))
[OFFTOPIC] Zone Alarm (likewhoa_666 at hotmail.com (John Ruppert))
[OFFTOPIC] Zone Alarm (ptourvi1 at twcny.rr.com (JT))
Zone Alarm (ptourvi1 at twcny.rr.com (JT))
[OFFTOPIC] Zone Alarm (pauls at utdallas.edu (Schmehl, Paul L))
Wood - language (earl_keyser at wayzata.k12.mn.us (Earl Keyser))
[OFFTOPIC] Zone Alarm (se_cur_ity at hotmail.com (morning_wood))
[OFFTOPIC] Zone Alarm (smcmahon at eiv.com (Shawn McMahon))
AW: Zone Alarm (se_cur_ity at hotmail.com (morning_wood))
RE: [OT] Zone Alarm $$NOSIG$$ (David.Sentelle at cnbcbank.com (David Sentelle))
[OFFTOPIC] Zone Alarm (rliebsch at stoneyamashita.com (Robert J. Liebsch))
SRT2003-06-05-0935 - HPUX ftpd remote issue via REST (dotslash at snosoft.com (KF))
AW: Zone Alarm (ml at intract.org (Michael Linke))
Wood - language (dizwak at yahoo.com (piznak))
Blackhats of the World Unite! (b1u3s_c1u3s at yahoo.com (Blue Blue))
[OFFTOPIC] Zone Alarm (se_cur_ity at hotmail.com (morning_wood))
[OFFTOPIC] Zone Alarm (ben at twowaytv.co.uk (Ben Tyson-Norrman))
[len@...sys.com: pseudo-authoritative disclosure guidelines] (len at netsys.com (Len Rose))
[OFFTOPIC] Zone Alarm (ptourvi1 at twcny.rr.com (JT))
[OFFTOPIC] Zone Alarm (likewhoa_666 at hotmail.com (John Ruppert))
Blackhats of the World Unite! (jgrotegut at directpointe.com (Jonathan Grotegut))
Wood - language (xillwillx at yahoo.com (w g))
[OFFTOPIC] Zone Alarm (rliebsch at stoneyamashita.com (Robert J. Liebsch))
[len@...sys.com: pseudo-authoritative disclosure guidelines] (rms at computerbytesman.com (Richard M. Smith))
[OFFTOPIC] Zone Alarm (pauls at utdallas.edu (Schmehl, Paul L))
RE: [OFFTOPIC] Zone Alarm (tstowell at igc.com (tstowell@....com))
Blackhats of the World Unite! (se_cur_ity at hotmail.com (morning_wood))
RE: [OFFTOPIC] Zone Alarm (tstowell at igc.com (tstowell@....com))
impending 0day (se_cur_ity at hotmail.com (morning_wood))
[OFFTOPIC] Zone Alarm (smcmahon at eiv.com (Shawn McMahon))
impending 0day (erc at pobox.com (Ed Carp))
[OFFTOPIC] Zone Alarm (ptourvi1 at twcny.rr.com (JT))
impending 0day (se_cur_ity at hotmail.com (morning_wood))
Blackhats of the World Unite! (andreq at infolink.com.br (André Luís Quintaes Guimarães))
[OFFTOPIC] Zone Alarm (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[OFFTOPIC] Zone Alarm (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
impending 0day (erc at pobox.com (Ed Carp))
[OFFTOPIC] Zone Alarm (pauls at utdallas.edu (Schmehl, Paul L))
Blackhats of the World Unite! (b1u3s_c1u3s at yahoo.com (Blue Blue))
Blackhats of the World Unite! (doug at transformer.qpalzm.com (Doug Stewart))
impending 0day (adf at code511.com (adf--at--Code511.com))
MDKSA-2003:064 - Updated kon2 packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
[OFFTOPIC] Zone Alarm (nick at virus-l.demon.co.uk (Nick FitzGerald))
[OFFTOPIC] Zone Alarm (Brad.Bemis at airborne.com (Brad Bemis))
impending 0day (ben at twowaytv.co.uk (Ben Tyson-Norrman))
impending 0day (gator at mail.cacr.caltech.edu (Anne Carasik))
Zone Alarm (dufresne at winternet.com (Ron DuFresne))
[OFFTOPIC] Zone Alarm (yossarian at planet.nl (yossarian))
[OFFTOPIC] Zone Alarm (david.vincent at mightyoaks.com (David Vincent))
impending 0day (madsaxon at direcway.com (madsaxon))
AW: Zone Alarm (adam.lydick at verizon.net (Adam Lydick))
weather.com contact (codec at rpg-ring.com (codec))

June 6 (45 messages)

SNMP read-only opens up... what? (Full-Disclosure at SecurityVolition.com (Full-Disclosure))
AW: Zone Alarm (dufresne at winternet.com (Ron DuFresne))
YABBT [1] - Re: Zone Alarm (dufresne at winternet.com (Ron DuFresne))
[OFFTOPIC] Zone Alarm (eddie at lucifuge.freeserve.co.uk (eddie))
Blackhats of the World Unite! (se_cur_ity at hotmail.com (morning_wood))
newsphp - Persistant XSS JavaScript Flaws (se_cur_ity at hotmail.com (morning_wood))
impending 0day (eddie at lucifuge.freeserve.co.uk (eddie))
[OFFTOPIC] Zone Alarm (eddie at lucifuge.freeserve.co.uk (eddie))
Re: Cracking preshared keys (se_cur_ity at hotmail.com (morning_wood))
[OFFTOPIC] Zone Alarm (eddie at lucifuge.freeserve.co.uk (eddie))
YABBT [1] - Re: Zone Alarm (security at brvenik.com (Jason))
[OFFTOPIC] Zone Alarm (se_cur_ity at hotmail.com (morning_wood))
Blackhats of the World Unite! (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
Another list or this list in moderation. (somatose at cox.net (Chris Garrett))
0 day morning wood style (meme-boi at nothotmail.org (meme-boi))
Wood - language (reticence13 at yahoo.com (tronix))
Another list or this list in moderation. (reticence13 at yahoo.com (tronix))
List Direction and Future (se_cur_ity at hotmail.com (morning_wood))
blabla bla bla bla (paul at maloyportalen.no (Paul Ottar Tornes))
[RHSA-2003:070-01] Updated hanterm packages provide security fixes (bugzilla at redhat.com (bugzilla@...hat.com))
Blackhats of the World Unite! (delta at faveve.uni-stuttgart.de (Helmut Springer))
blabla bla bla bla (ssteenkamp at aosl.co.za (Stephan Steenkamp))
XSS in Synkron.web CMS (b240503 at gyrniff.dk (gyrniff))
Re: newsphp - Persistant XSS JavaScript Flaws (support at newsphp.com (NewsPHP_Support))
Fwd: PATCH to BIND-8.2.3 to get rid of the, unnecessary, and potentially dangerous fchown() calls (madduck at madduck.net (martin f krafft))
Jibba Jabba (martin at hardlined.com (Martin Ekendahl))
Jibba Jabba (ssteenkamp at aosl.co.za (Stephan Steenkamp))
List Direction and Future (sdhmis at sheratondover.com (Kenneth Benson))
List Direction and Future (pauls at utdallas.edu (Schmehl, Paul L))
on topic - cisco snmp (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
SuSE Security Announcement: cups (SuSE-SA:2003:028) (krahmer at suse.de (Sebastian Krahmer))
SuSE Security Announcement: pptpd (SuSE-SA:2003:029) (krahmer at suse.de (Sebastian Krahmer))
Re: newsphp - Persistant XSS JavaScript Flaws (se_cur_ity at hotmail.com (morning_wood))
Administrivia: Charter Violations and Self-Moderation (len at netsys.com (Len Rose))
i give up (fabio.moraes at eds.com (Moraes, Fabio))
Another list or this list in moderation. (Azerail at supersecretninjaskills.com (Azerail))
List Direction and Future (tcannon at noops.org (Thomas Cannon))
Another list or this list in moderation. (se_cur_ity at hotmail.com (morning_wood))
"the badhat saga" a sad but true tale... (se_cur_ity at hotmail.com (morning_wood))
"the badhat saga" a sad but true tale... (matt at bravenet.com (Matthew Kent))
Administrivia: Charter Violations and Self-Moderation (se_cur_ity at hotmail.com (morning_wood))
i give up (d4yj4y at yahoo.com (Day Jay))
"the badhat saga" a sad but true tale... (madsaxon at direcway.com (madsaxon))
"the badhat saga" a sad but true tale... (xillwillx at yahoo.com (w g))
detecting if tracing is happening (andrewg at d2.net.au (Andrew Griffiths))

June 7 (24 messages)

Iomega NAS A300U security and inter-operability issues (keith.watson at orthodon.com (Keith R. Watson))
LiveJournal remote file upload (meme-boi at nothotmail.org (meme-boi))
Re: "grammar" (se_cur_ity at hotmail.com (morning_wood))
impending 0day (Jay at iNES.RO (Alexandru Balan))
[SECURITY] [DSA-308-1] New gzip packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
[SECURITY] [DSA-309-1] New eterm packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Cross-Platform Browser vulnerabilities - Critical (meme-boi at nothotmail.org (meme-boi))
POSSIBLE TARGETING OF SECURITY RELESE READERS (se_cur_ity at hotmail.com (morning_wood))
Speak Freely <=7.5 multiple remote and local vulnerabilities (the Hackademy Audit) (fozzy at dmpfrance.com (Fozzy))
on topic - cisco snmp (itemir at cisco.com (Ilker Temir))
POSSIBLE TARGETING OF SECURITY RELESE READERS (tal at musicgenome.com (Tal Kelrich))
public comment period for the Draft Security Vulnerability Reporting and Responding Process (OISAFETY) (guninski at guninski.com (Georgi Guninski))
Speak Freely <=7.5 multiple remote and local vulnerabilities (the Hackademy Audit) (fozzy at dmpfrance.com (Fozzy))
POSSIBLE TARGETING OF SECURITY RELESE READERS (purdy at tecman.com (Curt Purdy))
Fw: POSSIBLE TARGETING OF SECURITY RELESE READERS (se_cur_ity at hotmail.com (morning_wood))
POSSIBLE TARGETING OF SECURITY RELESE READERS (lwc at vapid.ath.cx (Larry W. Cashdollar))
Administrivia: Charter Violations and Self-Moderation (dhtml at hush.com (dhtml@...h.com))
Administrivia: Charter Violations and Self-Moderation (xillwillx at yahoo.com (w g))
POSSIBLE TARGETING OF SECURITY RELESE READ (nick at virus-l.demon.co.uk (Nick FitzGerald))
Java Virtual Machine Symlink Vulnerability (meme-boi at nothotmail.org (meme-boi))
Buffer Overflows in Novell iChain Authentication (security at Dunkel.de (Axel Dunkel))
Suggestions for a netbios emulator (honeypot)? (paulius at pit.ktu.lt (Paulius M.))
Speak Freely <=7.5 multiple remote and local vulnerabilities (the Hackademy Audit) (fozzy at dmpfrance.com (Fozzy))
Speak Freely <=7.5 multiple remote and local vulnerabilities (the Hackademy Audit) (fozzy at dmpfrance.com (Fozzy))

June 8 (10 messages)

Apache 2.x APR Exploit Code (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
Turbo10.com doesn't seem to filter some things it should (scottp at dreamwright.com (Scott Phelps / Dreamwright Studios))
Small buffer format string attack (xploit at hackermail.com (dong-h0un U))
Re: Turbo10.com doesn't seem to filter some things it should (megan at turbo10.com (Megan Hamilton))
Re: Turbo10.com doesn't seem to filter some things it should (scottp at dreamwright.com (Scott Phelps))
Suggestions for a netbios emulator (honeypot)? (nick at ethicsdesign.com (Nick Jacobsen))
Suggestions for a netbios emulator (honeypot)? (nick at ethicsdesign.com (Nick Jacobsen))
NMRC Announces New Services; Speaking Engagements (announce at www.nmrc.org (announce@....nmrc.org))
Cross-Platform Browser vulnerabilities - Critical (dveditz at cruzio.com (Daniel Veditz))
Small buffer format string attack (xploit at hackermail.com (dong-h0un U))

June 9 (17 messages)

[SECURITY] [DSA-311-1] New kernel packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-310-1] New xaos packages fix improper setuid-root execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
Cross-Platform Browser vulnerabilities - Critical (meme-boi at nothotmail.org (meme-boi))
[S] Errors in variables Cox regression? (lawrence-hunsicker at centrum.cz (Hunsicker, Lawrence))
Linux 2.0 remote info leak from too big icmp citation (biondi at cartel-securite.fr (Philippe Biondi))
List Charter (johnc at grok.org.uk (John Cartwright))
Linux 2.0 remote info leak from too big icmp citation (andrewg at d2.net.au (Andrew Griffiths))
Security Vulnerability Reporting and Response Process (security at nscs.uk.com (Byrne Ghavalas))
Security Vulnerability Reporting and Response Process (a.gietl at e-admin.de (Andreas Gietl))
Buffer Overflows in Novell iChain (Patches available) (security at Dunkel.de (Axel Dunkel))
WebSetup / WebMin Security Vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
[contact@...-pl.net: [LSD] HP-UX security vulnerabilities] (johnc at grok.org.uk (John Cartwright))
Gator eWallet Insecure User Data files Encryption and Gator BackUp / Banner Server Access/File retrieving (novappc at novappc.com (Lorenzo Hernandez Garcia-Hier…)
PostNuke Main Modules SQL Injections , DoS and Path Disclosures (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
PHP-Nuke Main Modules SQL Injections , Path Disclosures and Denial of Service Attack in Rating Systems (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
MSIE-5.0.x-6.0.2600.x Remote Cookies Retrieval trought PHP and JavaScript (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
PSOFT H-Sphere Cross Site Scripting Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))

June 10 (19 messages)

public comment period for the Draft Security Vulnerability Reporting and Responding Process (OISAFETY) (se_cur_ity at hotmail.com (morning_wood))
mnogosearch 3.1.20 and 3.2.10 buffer overflow (pokleyzz at scan-associates.net (pokleyzz))
[SECURITY] [DSA-312-1] New powerpc kernel fixes several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
BookCMS - Remote Default Administrator Password (se_cur_ity at hotmail.com (morning_wood))
mnogosearch 3.1.20 and 3.2.10 buffer overflow (se_cur_ity at hotmail.com (morning_wood))
mnogosearch 3.1.20 and 3.2.10 buffer overflow (johnc at grok.org.uk (John Cartwright))
mnogosearch 3.1.20 and 3.2.10 buffer overflow (lwc at vapid.ath.cx (Larry W. Cashdollar))
The Two Faces of Foundstone (dhtml at hush.com (dhtml@...h.com))
MDKSA-2003:065 - Updated ghostscript packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
mnogosearch 3.1.20 and 3.2.10 buffer overflow (coley at mitre.org (Steven M. Christey))
USDOJ BRAINWASHING TECHNIQUES (se_cur_ity at hotmail.com (morning_wood))
The Two Faces of Foundstone (nick at ethicsdesign.com (Nick Jacobsen))
public comment period for the Draft Security Vulnerability Reporting and Responding Process (OISAFETY)] (dbailey27 at ameritech.net (northern snowfall))
USDOJ BRAINWASHING TECHNIQUES (david.vincent at mightyoaks.com (David Vincent))
(offtopic) datestamp formats and timezones (justin-fulldisclosure at soze.net (Justin))
Potential Denial of Service using PIOCSWATCH ioctl on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Imperfect Broadcast Address Checking on IRIX (agent99 at sgi.com (SGI Security Coordinator))
USDOJ BRAINWASHING TECHNIQUES (dbailey27 at ameritech.net (northern snowfall))
USDOJ BRAINWASHING TECHNIQUES (se_cur_ity at hotmail.com (morning_wood))

June 11 (15 messages)

[Fwd: Re: USDOJ BRAINWASHING TECHNIQUES] (dbailey27 at ameritech.net (northern snowfall))
Re: USDOJ BRAINWASHING TECHNIQUES (madscientist at wyoming.com (Philip Stortz))
USDOJ BRAINWASHING TECHNIQUES (dbailey27 at ameritech.net (northern snowfall))
USDOJ BRAINWASHING TECHNIQUES (avalon at caligula.anu.edu.au (Darren Reed))
USDOJ BRAINWASHING TECHNIQUES (sockz at email.com (sockz loves you))
USDOJ BRAINWASHING TECHNIQUES (avalon at caligula.anu.edu.au (Darren Reed))
AW: Another list or this list in moderation. (vogt at hansenet.com (vogt@...senet.com))
USDOJ BRAINWASHING TECHNIQUES (peter at bank-connect.com (Peter van den Heuvel))
public comment period for the Draft Security Vulnerability Reporting and Responding Process (OISAFETY) (guninski at guninski.com (Georgi Guninski))
Re: USDOJ BRAINWASHING TECHNIQUES (smcmahon at eiv.com (Shawn McMahon))
Re: USDOJ BRAINWASHING TECHNIQUES (klaw at jogos.net (Klaw))
MDKSA-2003:066 - Updated kernel packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: USDOJ BRAINWASHING TECHNIQUES (sockz at email.com (sockz loves you))
iDEFENSE Security Advisory 06.11.03: Denial of Service Vulnerability in SMC Networks' Barricade Wireless Router (labs at idefense.com (iDEFENSE Labs))
[OT] software license costs - Re: The Two Faces of Foundstone (adam.lydick at verizon.net (Adam Lydick))

June 12 (91 messages)

Re: USDOJ BRAINWASHING TECHNIQUES (madduck at madduck.net (martin f krafft))
Re: USDOJ BRAINWASHING TECHNIQUES (madduck at madduck.net (martin f krafft))
Re: USDOJ BRAINWASHING TECHNIQUES (avalon at caligula.anu.edu.au (Darren Reed))
Re: USDOJ BRAINWASHING TECHNIQUES (se_cur_ity at hotmail.com (morning_wood))
[SECURITY] [DSA-309-2] New eterm packages fix error introduced in DSA-309-1 (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
[SECURITY] [DSA-313-1] New ethereal packages fix buffer overflows, integer overflows (debian-security-announce at lists.debian.org (debian-security-announce@lis…)
[SECURITY] [DSA-314-1] New atftp packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-315-1] New gnocatan packages fix buffer overflows, denial of service (debian-security-announce at lists.debian.org (debian-security-announce@lis…)
[SECURITY] [DSA-316-1] New nethack packages fix buffer overflow, incorrect permissions (debian-security-announce at lists.debian.org (debian-security-announce@l…)
Administrivia: Poll (len at netsys.com (Len Rose))
Administrivia: Poll (dbailey27 at ameritech.net (northern snowfall))
hackers are evil? (se_cur_ity at hotmail.com (morning_wood))
Please Vote Today (se_cur_ity at hotmail.com (morning_wood))
[SECURITY] [DSA-316-2] New slashem packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-317-1] New cupsys packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
The Two Faces of Foundstone (xlopkov at eml.cc (xlopkov@....cc))
The Two Faces of Foundstone (xlopkov at eml.cc (xlopkov@....cc))
Administrivia: Poll (se_cur_ity at hotmail.com (morning_wood))
Administrivia: Poll (erc at pobox.com (Ed Carp))
The Two Faces of Foundstone (full-disclosure at ols.inorganic.org (Roy S. Rapoport))
Administrivia: Poll (dotslash at snosoft.com (KF))
Current Public FD Articles? (se_cur_ity at hotmail.com (morning_wood))
Please Vote Today (madscientist at wyoming.com (Philip Stortz))
Please Vote Today (se_cur_ity at hotmail.com (morning_wood))
Re: Please Vote Today (aliver at xexil.com (aliver@...il.com))
Please Vote Today (david.vincent at mightyoaks.com (David Vincent))
Re: Re: USDOJ BRAINWASHING TECHNIQUES (madduck at madduck.net (martin f krafft))
Re: Please Vote Today (madduck at madduck.net (martin f krafft))
Re: Small buffer format string attack (xploit at hackermail.com (dong-h0un U))
[Fwd: Re: USDOJ BRAINWASHING TECHNIQUES] (listbot at mailandnews.com (List Bot))
Please Vote Today (raju at linux-delhi.org (Raj Mathur))
Re: Please Vote Today (ben at lanwest.com.au (Benjamin Meade))
Administrivia: Poll (nexus at patrol.i-way.co.uk (Nexus))
Re: Please Vote Today (se_cur_ity at hotmail.com (morning_wood))
Administrivia: Poll (se_cur_ity at hotmail.com (morning_wood))
Administrivia: Poll (peter at bank-connect.com (Peter van den Heuvel))
Re: USDOJ BRAINWASHING TECHNIQUES (peter at bank-connect.com (Peter van den Heuvel))
Administrivia: Poll (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Please Vote Today (sam.pointer at hpdsoftware.com (Sam Pointer))
Administrivia: Poll (attica at stackheap.org (S . f . Stover))
Please Vote Today (MRMyers at anteon.com (Myers, Marvin))
Administrivia: Poll (se_cur_ity at hotmail.com (morning_wood))
hackers are evil? (dw-lists.netsys.com at botanicus.net (David M. Wilson))
Re: Re: USDOJ BRAINWASHING TECHNIQUES (smcmahon at eiv.com (Shawn McMahon))
SRT2003-06-12-1212 - FakeBO syslog() format string issue. (dotslash at snosoft.com (KF))
Administrivia: Poll (smcmahon at eiv.com (Shawn McMahon))
Please Vote Today (darrallp at icentrum.co.uk (Darrall Pullen))
Re: Please Vote Today (nick at virus-l.demon.co.uk (Nick FitzGerald))
Please Vote Today (mfratto at nwc.com (Mike Fratto))
Please Vote Today - subscribe to "full-disclosure@...unitysec.com" (dotslash at snosoft.com (KF))
Please Vote Today (ZachN at threerivers-cams.com (Zach Neuf))
Administrivia: Poll (martin at hardlined.com (Martin Ekendahl))
libmysqlclient 4.x and below mysql_real_connect() buffer overflow. (pokleyzz at scan-associates.net (pokleyzz))
Please Vote Today (rod at devnull.ms (rod@...null.ms))
Re: Full-Disclosure digest, Vol 1 #883 - 11 msgs (packet at vtr.net (Rodrigo Gutierrez))
hackers are evil? (avalon at caligula.anu.edu.au (Darren Reed))
Morning Wood Poll (David.Sentelle at cnbcbank.com (David Sentelle))
iDEFENSE Security Advisory 06.11.03: Denial of Service Vulnerability in SMC Networks' Barricade Wireless Router (khermans at rcn.com (Kristian Hermansen))
hackers are evil? (zen at kill-9.it (Zen))
Administrivia: Poll (bernz at bernztech.org (David Bernick))
USDOJ BRAINWASHING TECHNIQUES (nocon at texas-shooters.com (noconflic))
hackers are evil? (madsaxon at direcway.com (madsaxon))
Administrivia: Poll (jjacobs at Radford.edu (James Jacobs))
Please Vote Today - subscribe to "full-disclosure@...unitysec.com" (d4yj4y at yahoo.com (Day Jay))
Administrivia: Poll (nocon at texas-shooters.com (noconflic))
Morning Wood Poll (dme at duda.com (Daniel M. Edwards))
Re: Please Vote Today (beavis_design at telus.net (Export))
Administrivia: Poll (paul at voltagenoir.org (Paul M. Hirsch))
Please Vote Today - subscribe to "full-disclosure@...unitysec.com" (dotslash at snosoft.com (KF))
Re: Please Vote Today (eip at oakey.no-ip.com (eip@...ey.no-ip.com))
The point, kids. (mfratto at nwc.com (Mike Fratto))
Morning Wood Poll (cpeden at sundownerinteriors.com (Chris Peden))
Re: Please Vote Today (rms at 1407.org (Rui Miguel Seabra))
Re: Re: Re: USDOJ BRAINWASHING TECHNIQUES (madduck at madduck.net (martin f krafft))
waste of time (was Re: Administrivia: Poll) (security at updegrove.net (Rick Updegrove))
hackers are evil? (gml at phrick.net (gml))
How to run a mailing list (Was: Please Vote Today (A.J.Caines at halplant.com (Andrew J Caines))
[Fwd: Re: USDOJ BRAINWASHING TECHNIQUES] (dbailey27 at ameritech.net (northern snowfall))
Morning Wood Poll (dotslash at snosoft.com (KF))
Please Vote Today (root at tampabaypartygirls.com (TBPG))
Morning Wood Poll (doug at transformer.qpalzm.com (Doug Stewart))
Morning Wood Poll (cpeden at sundownerinteriors.com (Chris Peden))
Re: The point, kids. (paul at voltagenoir.org (Paul M. Hirsch))
PLEASE REDUCE THE NOISE (SecuresDotComs at hotmail.com (SecuresDotComs))
Noise (SecuresDotComs at hotmail.com (SecuresDotComs))
Wood's Infinity Project 3.69a Remote Command Execution (badpack3t at security-protocols.com (badpack3t))
waste of time (was Re: Administrivia: Poll) (devilok at hotmail.com (Chris Vicious))
Mourning Would (golddog at hushmail.com (golddog@...hmail.com))
"hacker/cracker/phreaks/ get'n deep on FD (haywire_x at hackermail.com (Z N))
List Problems/ Mourning Would (golddog at hushmail.com (golddog@...hmail.com))
Administrivia: Poll (highontcp at hotmail.com (j. p.))

June 13 (52 messages)

[SECURITY] [DSA-318-1] New lyskom-server packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
Wood's Infinity Project 3.69a Remote Command Execution (se_cur_ity at hotmail.com (morning_wood))
Wood's Infinity Project 3.69a Remote Command Execution (se_cur_ity at hotmail.com (morning_wood))
[SECURITY] [DSA-319-1] New webmin packages fix remote session ID spoofing (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.o…)
ExploitLabs.com CGI Script Irony (was: Vote Today) (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
Re: [0day] ExploitLabs.com CGI Script Irony (was: Vote Today) (se_cur_ity at hotmail.com (morning_wood))
Re: [0day] ExploitLabs.com CGI Script Irony (was: Vote Today) (se_cur_ity at hotmail.com (morning_wood))
iDEFENSE Security Advisory 06.11.03: Denial of Service Vulnerability in SMC Networks' Barricade Wireless Router (pauls at utdallas.edu (Schmehl, Paul L))
Administrivia: Poll (pauls at utdallas.edu (Schmehl, Paul L))
Another ExploitLabs.com Advisory (was: Vote Today) (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
Re: The point, kids. (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
Administrivia: Poll Null and Void (len at netsys.com (Len Rose))
Another ExploitLabs.com Advisory (was: Vote Today) (xillwillx at yahoo.com (w g))
Re: Administrivia: Poll (rsw at jfet.org (Riad S. Wahby))
Bugbear source code (louiscyphre666_2000 at yahoo.com.br (Louis Cyphre))
SRT2003-06-12-0853 - ike-scan local root format string issue (dotslash at snosoft.com (KF))
Administrivia: Poll (security at brvenik.com (Jason))
RE: ExploitLabs.com CGI Script Irony (was: Vote Today) (steve at entrenchtech.com (Steve Manzuik))
list annoyances (madscientist at wyoming.com (Philip Stortz))
[ANNOUNCE] kses 0.1.0 (ulfh at Update.UU.SE (Ulf Harnhammar))
Morning Wood Poll (smcmahon at eiv.com (Shawn McMahon))
SuSE Security Announcement: radiusd-cistron (SuSE-SA:2003:030) (thomas at suse.de (Thomas Biege))
Sphera Hosting Director Control Panel Multiple Vulnerabilities: XSS-Session Hijacking-DoS/Buffer Overflow-Another User A… (novappc at novappc.com (Lorenzo Hernand…)
Censorship (golddog at hushmail.com (golddog@...hmail.com))
pip (trippz at overflow.org (huw))
Sphera Hosting Director Control Panel Multiple Vulnerabilities: XSS-Session Hijacking-DoS/Buffer Overflow-Another User A… (novappc at novappc.com (Lorenzo Hernand…)
Zone Alarm (blueraven at libero.it (BlueRaven))
AW: Zone Alarm (blueraven at libero.it (BlueRaven))
Sphera Hosting Director Control Panel Multiple Vulnerabilities: XSS-Session Hijacking-DoS/Buffer Overflow-Another User Accounts a… (dotslash at snosoft.com (KF))
Zone Alarm (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
send me the Sphera Corp email contact , please (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Re: Administrivia: Poll (dev-null at no-id.com (dev-null@...id.com))
Re: Administrivia: Poll (a.gietl at e-admin.de (Andreas Gietl))
Zone Alarm (3APA3A at security.nnov.ru (3APA3A))
Zone Alarm (stephane.nasdrovisky at uniway.be (Stephane Nasdrovisky))
Zone Alarm (lwc at vapid.ath.cx (Larry W. Cashdollar))
send me the Sphera Corp email contact , please (dotslash at snosoft.com (KF))
Public Apology (se_cur_ity at hotmail.com (morning_wood))
THANKS FOR CONTACT INFO , KKF (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Zone Alarm (lwc at vapid.ath.cx (Larry W. Cashdollar))
-1 day exploit - Warning (brian at brianhouk.com (Brian Houk))
Re: -1 day exploit - Warning (brian at brianhouk.com (Brian Houk))
/Claimed/ remote root exploit in Pureftpd (dvb at users.sourceforge.net (Devdas Bhagat))
Re: Morning Wood Poll (madduck at madduck.net (martin f krafft))
Re: Administrivia: Poll (madduck at madduck.net (martin f krafft))
[OFFTOPIC] - moderated sublist announcement (listuser at seifried.org (Kurt Seifried))
Re: -1 day exploit - Warning (gml at phrick.net (gml))
-1 day exploit - Warning (amadei at dandy.net (Stephen Amadei))
-1 day exploit - Warning (brian at brianhouk.com (Brian Houk))
Censorship (scheidell at secnap.net (Michael Scheidell))
Re: -1 day exploit - Warning (bernz at alpha.bernztech.org (David Bernick))
-10Day CERT Advisory on PDF Files (hack4life at hushmail.com (hack4life@...hmail.com))

June 14 (13 messages)

[SECURITY] [DSA-320-1] New mikmod packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Re: -1 day exploit - Warning (gml at phrick.net (gml))
[SECURITY] [DSA-321-1] New radiusd-cistron packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
SRT2003-06-13-1009 - Progress _dbagent -installdir dlopen() issue (dotslash at snosoft.com (KF))
SRT2003-06-13-0945 - Progress PATH based dlopen() issue (dotslash at snosoft.com (KF))
SRT2003-06-12-0853 - ike-scan local root format string issue (nutcase26 at hotmail.com (easctun))
SRT2003-06-12-0853 - ike-scan local root format string issue (dotslash at snosoft.com (KF))
SRT2003-06-12-0853 - ike-scan local root format string issue (dotslash at snosoft.com (KF))
/Claimed/ remote root exploit in Pureftpd (j at pureftpd.org (Jedi/Sector One))
send me the Sphera Corp email contact , please (xlopkov at eml.cc (xlopkov@....cc))
Lycos Authenticating Systems and Lycos News server Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Ok KF, i tell you about the buffer overflow in Sphera (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
BlackICE PC Protection Cross Site Scripting Evasion (marc.ruef at computec.ch (Marc Ruef))

June 15 (6 messages)

Morning Wood Poll (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
Infobot-backdoor (se_cur_ity at hotmail.com (morning_wood))
Infobot-backdoor (vanja at pobox.com (Vanja Hrustic))
Message from "Lel Bruce Peto" to "Thor Larholm" - reply. (info at lelpeto.com (info@...peto.com))
Infobot-backdoor (xillwillx at yahoo.com (w g))
Message from "Lel Bruce Peto" to "Thor Larholm" - reply. (xlopkov at eml.cc (xlopkov@....cc))

June 16 (11 messages)

Re: -10Day CERT Advisory on PDF Files (psz at maths.usyd.edu.au (Paul Szabo))
Zone Alarm (blueraven at libero.it (BlueRaven))
Multiple Vulnerabilities Found in Mailtraq (DoS, Password Decryption, Directory Traversal) (bugtraq at securiteam.com (SecurITeam BugTraq Monitoring))
Asp Chat - .ASP XSS / JS Injection (se_cur_ity at hotmail.com (morning_wood))
SRT2003-06-12-0853 - ike-scan local root format string issue (DaveHowe at gmx.co.uk (Dave Howe))
Re: Administrivia: Poll (smcmahon at eiv.com (Shawn McMahon))
Re: Morning Wood Poll (smcmahon at eiv.com (Shawn McMahon))
iDEFENSE Security Advisory 06.16.03: Linux-PAM getlogin() Spoofing Vulnerability (labs at idefense.com (iDEFENSE Labs))
MDKSA-2003:067 - Updated ethereal packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:068 - Updated gzip packages fix insecure temporary file creation (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: Re: Morning Wood Poll (madduck at madduck.net (martin f krafft))

June 17 (28 messages)

Infobot-backdoor (s2_pi_di_ty at hotmail.com (Donnie Weiner))
STG Security Advisory: JEUS Web Application Server Cross Site Scripting Vulnerability (advisory at stgsecurity.com (SSR Team))
weasel32 (zorkshin at tampabay.rr.com (Justin Shin))
weasel32 (zorkshin at tampabay.rr.com (Justin Shin))
[SECURITY] [DSA-322-1] New typespeed packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-323-1] New noweb packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
ExploitLabs - URGENT 0day Alert!! (s2_pi_di_ty at hotmail.com (Donnie Weiner))
ExploitLabs - URGENT 0day Alert!! (full-disclosure at ols.inorganic.org (Roy S. Rapoport))
ExploitLabs - URGENT 0day Alert!! (xillwillx at yahoo.com (w g))
Infobot-backdoor (xillwillx at yahoo.com (w g))
ExploitLabs - URGENT 0day Alert!! (adam at hif.hu (Szilveszter Adam))
Infobot-backdoor (s2_pi_di_ty at hotmail.com (Donnie Weiner))
Cross-Site Scripting in Unparsable XML Files (GM#013-IE) (security at greymagic.com (GreyMagic Software))
Script Injection to Custom HTTP Errors in Local Zone (GM#014-IE) (security at greymagic.com (GreyMagic Software))
[OFFTOPIC] - moderated sublist announcement (listbot at mailandnews.com (List Bot))
Cross-Site Scripting in Unparsable XML Files (GM#013-IE) (kuper237 at planet.nl (jelmer))
Re: Re: Morning Wood Poll (smcmahon at eiv.com (Shawn McMahon))
ExploitLabs - URGENT 0day Alert!! (chris at go-net.com (Henry, Christopher))
Cross-Site Scripting in Unparsable XML Files (GM#013-IE) (kspett at spidynamics.com (Kevin Spett))
Fwd: Re: Infobot-backdoor (cihu at hotbrev.com (Karl Elgerstedt))
ExploitLabs - URGENT 0day Alert!! (Fake Wood) (dotslash at snosoft.com (KF))
Fwd: Re: Infobot-backdoor (s2_pi_di_ty at hotmail.com (Donnie Weiner))
Fwd: Re: Infobot-backdoor (cihu at hotbrev.com (Karl Elgerstedt))
Fake Wood (highontcp at hotmail.com (j. p.))
MDKSA-2003:069 - Updated BitchX packages fix DoS vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MIPSPro Compiler Predictable Temp File vulnerability (agent99 at sgi.com (SGI Security Coordinator))
Perl "Safe.pm" vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
A weasel32 update... (zorkshin at tampabay.rr.com (Justin Shin))

June 18 (64 messages)

A correction to "A weasel32 update..." (zorkshin at tampabay.rr.com (Justin Shin))
Media mongers and the hacking epidemic... (this_is_kris at hotmail.com (Kristian Hermansen))
[SECURITY] [DSA-316-3] New jnethack packages fix buffer overflow, incorrect permissions (debian-security-announce at lists.debian.org (debian-security-announce@…)
[SECURITY] [DSA-324-1] New ethereal packages fix multiple vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.o…)
Destroying PCs remotely? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Destroying PCs remotely? (alex at kallisti.no-ip.org (Alexander Heidenreich))
Destroying PCs remotely? (MRMyers at anteon.com (Myers, Marvin))
Re: Administrivia: Poll (steve at videogroup.com (Steve))
Destroying PCs remotely? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Destroying PCs remotely? (pauls at utdallas.edu (Schmehl, Paul L))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
Destroying PCs remotely? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Destroying PCs remotely? (mike at sentex.net (Mike Tancsa))
Destroying PCs remotely? (pauls at utdallas.edu (Schmehl, Paul L))
phpMyAdmin XSS Vulnerabilities, Transversal Directory Attack , Information Encoding Weakness and Path Disclosures (novappc at novappc.com (Lorenzo Hernandez Gar…)
Destroying PCs remotely? (pauls at utdallas.edu (Schmehl, Paul L))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
(no subject) (cyn0n at myrealbox.com (cyn0n@...ealbox.com))
Destroying PCs remotely? (GGolomb at enterasys.com (Golomb, Gary))
Destroying PCs remotely? (madsaxon at direcway.com (madsaxon))
[RHSA-2003:196-01] Updated Xpdf packages fix security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
Destroying PCs remotely? (BlueBoar at thievco.com (Blue Boar))
Blowing up PC's and leaking CERT info (virtual_mage at earthlink.net (Virtual_Mage))
phpMyAdmin XSS Vulnerabilities, Transversal Directory Attack , Information Encoding Weakness and Path Disclosures (msopacua at idg.nl (Melvyn Sopacua))
Destroying PCs remotely? (se_cur_ity at hotmail.com (morning_wood))
Destroying PCs remotely? (dufresne at winternet.com (Ron DuFresne))
Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
(no subject) (BlueBoar at thievco.com (Blue Boar))
Destroying PCs remotely? (MRMyers at anteon.com (Myers, Marvin))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
Destroying PCs remotely? (dufresne at winternet.com (Ron DuFresne))
Destroying PCs remotely? (MRMyers at anteon.com (Myers, Marvin))
Destroying PCs remotely? (wcolburn at nmt.edu (William D. Colburn (aka Schlake)))
Destroying PCs remotely? (dufresne at winternet.com (Ron DuFresne))
Destroying PCs remotely? (daniel at yoobay.net (Daniel Mack))
Re: Destroying PCs remotely? (madduck at madduck.net (martin f krafft))
Blowing up PC's and leaking CERT info (smcmahon at eiv.com (Shawn McMahon))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
Multiple buffer overflows and XSS in Kerio MailServer (conde0 at telefonica.net (David F.Madrid))
Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
Re: Administrivia: Poll (steve.wray at paradise.net.nz (Steve Wray))
Destroying PCs remotely? (steve.wray at paradise.net.nz (Steve Wray))
unplugging (nutcase26 at hotmail.com (Nut Case))
Destroying PCs remotely? (wes at uia.net (Wes Zuber))
Linux firewall (spencerg at dtc.army.mil (Spencer, Gary TRI-S INC))
SQL Inject in ProFTPD login against Postgresql using mod_sql (runlevel at linuxmail.org (runlevel ))
Blowing up PC's and leaking CERT info (konfusius at gmx.de (Manfred Schmitt))
Destroying PCs remotely? (BlueBoar at thievco.com (Blue Boar))
Destroying PCs remotely? (andreq at infolink.com.br (André Luís Quintaes Guimarães))
Destroying PCs remotely? (konfusius at gmx.de (Manfred Schmitt))
Destroying PCs remotely? (s.lorentsen at box-smart.net (Simon Lorentsen))
Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
Blowing up PC's and leaking CERT info (jgrotegut at directpointe.com (Jonathan Grotegut))
Destroying PCs remotely? (gem at rellim.com (Gary E. Miller))
(no subject) (s.lorentsen at box-smart.net (Simon Lorentsen))
Destroying PCs remotely? (gem at rellim.com (Gary E. Miller))
Destroying PCs remotely? (se_cur_ity at hotmail.com (morning_wood))
R7-0014: RSA SecurID ACE Agent Cross Site Scripting (advisory at rapid7.com (advisory@...id7.com))
Linux firewall (f0x at squirrelsoup.net (Gabe Arnold))
[ANNOUNCE]: IISBanner 1.0 (thalm at netcabo.pt (Tiago Halm))
[ANNOUNCE]: ScanADS 1.0 (thalm at netcabo.pt (Tiago Halm))

June 19 (69 messages)

Destroying PCs remotely? (cta at hcsin.net (Bernie, CTA))
Destroying PCs remotely? (gml at phrick.net (gml))
Destroying PCs remotely? (se_cur_ity at hotmail.com (morning_wood))
[ANNOUNCE]: IISBanner 1.0 (thalm at netcabo.pt (Tiago Halm))
[ANNOUNCE]: ScanADS 1.0 (thalm at netcabo.pt (Tiago Halm))
Destroying PCs remotely? (mike-full at megaglobal.net (Michael))
Linux firewall (david at crlf.net (David Maxwell))
Linux firewall (denis at dimick.net (Denis Dimick))
Linux firewall (rottz at securityflaw.com (Peter E. Johnson))
Linux firewall (matthew at textbox.net (Matt))
Linux firewall (phantasm at textbox.net (phantasm))
Linux firewall (chubirka at bellatlantic.net (Michele Chubirka))
Destroying PCs remotely? (xlopkov at eml.cc (xlopkov@....cc))
is there a new virus? (madscientist at wyoming.com (Philip Stortz))
[ANNOUNCE]: IISBanner 1.0 (wesley.howell at landg.com (Howell, Wesley))
Re: Full-Disclosure digest, Vol 1 #902 - 22 msgs (madscientist at wyoming.com (Philip Stortz))
is there a new virus? (matthew at textbox.net (Matt))
is there a new virus? (ben at lanwest.com.au (Benjamin Meade))
Destroying PCs remotely? (lists at ktabic.co.uk (ktabic))
Linux firewall (full-disclosure at noname.franken.de (Michael Bergbauer))
is there a new virus? (matthew at textbox.net (Matt))
Sambar Server Buffer Overflow in search.pl (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Destroying PCs remotely? (thomas at northernsecurity.net (Thomas Sjögren))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
pMachine Cross Site Scripting in Search module and Path Disclosures (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Destroying PCs remotely? (simonwhitt at hotpop.com (Simon Whittaker))
Destroying PCs remotely? (asd at suespammers.org (Anthony DeRobertis))
Destroying PCs remotely? (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
Destroying PCs remotely? (strombrg at dcs.nac.uci.edu (Dan Stromberg))
Pissing wars (matthew at textbox.net (Matt))
is there a new virus? (rliebsch at stoneyamashita.com (Robert J. Liebsch))
Blowing up PC's and leaking CERT info (packet at vtr.net (Rodrigo Gutierrez))
Linux firewall (denis at dimick.net (Denis Dimick))
Linux firewall (denis at dimick.net (Denis Dimick))
Linux firewall (denis at dimick.net (Denis Dimick))
Java class obfuscation (dotslash at snosoft.com (KF))
Destroying PCs remotely? (madscientist at wyoming.com (Philip Stortz))
0day exploit (icer at hushmail.com (icer@...hmail.com))
Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
Destroying PCs remotely? (benjamin at seattlefenix.net (Benjamin Krueger))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
NTRootkit (zeroboy at arrakis.es (zero))
Destroying PCs remotely? (junkmail at barnowl.com (Rob Rosenberger))
Destroying PCs remotely? (rthompson at rrmm.net (Rick Thompson))
Disclosure Debate FW: [ISN] When to Shed Light (jasonc at science.org (Jason Coombs))
Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
Destroying PCs remotely? (dufresne at winternet.com (Ron DuFresne))
Re: Java class obfuscation (dbailey27 at ameritech.net (northern snowfall))
Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
RE: Java class obfuscation (phall at spss.com (Hall, Philip))
Destroying PCs remotely? (jeremiah at nur.net (Jeremiah Cornelius))
pMachine Cross Site Scripting in Search module and Path Disclosures (msopacua at idg.nl (Melvyn Sopacua))
Destroying PCs remotely? (guninski at guninski.com (Georgi Guninski))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
Sambar Server Buffer Overflow in search.pl (galiarept at phreaker.net (GaLiaRePt))
Destroying PCs remotely? (s2_pi_di_ty at hotmail.com (Donnie Weiner))
Destroying PCs remotely? (dotslash at snosoft.com (KF))
Destroying PCs remotely? (dotslash at snosoft.com (KF))
new stuff (icer at hushmail.com (icer@...hmail.com))
/usr/ports/games/abuse (icer at hushmail.com (icer@...hmail.com))
List subject header (chris at nmedia.net (Chris Cappuccio))
[SECURITY] [DSA-325-1] New eldav packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
[SECURITY] [DSA-326-1] New orville-write packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Destroying PCs remotely? (SecuresDotComs at hotmail.com (SecuresDotComs))
Destroying PCs remotely? (se_cur_ity at hotmail.com (morning_wood))
NTRootkit (zeroboy at arrakis.es (zero))

June 20 (76 messages)

Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
Destroying PCs remotely? (s2_pi_di_ty at hotmail.com (Donnie Weiner))
List subject header (dotslash at snosoft.com (KF))
Destroying PCs remotely? (se_cur_ity at hotmail.com (morning_wood))
Destroying PCs remotely? (justin-fulldisclosure at soze.net (Justin))
Re: Java class obfuscation (avalon at caligula.anu.edu.au (Darren Reed))
Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
Re: Java class obfuscation (dbailey27 at ameritech.net (northern snowfall))
Destroying PCs remotely? (david.vincent at mightyoaks.com (David Vincent))
is there a new virus? (pauls at utdallas.edu (Schmehl, Paul L))
Blowing up PC's and leaking CERT info (pauls at utdallas.edu (Schmehl, Paul L))
Destroying PCs remotely? (dotslash at snosoft.com (KF))
Intrusec 55808 Trojan Analysis (djm at intrusec.com (David J. Meltzer))
[SECURITY] [DSA-327-1] New xbl packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-328-1] New webfs packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Apache 1.3.27 Remote Root 0-Day (koec at hushmail.com (koec@...hmail.com))
Destroying PCs remotely? (junkmail at barnowl.com (Rob Rosenberger))
ISS Security Brief: "Stumbler" Distributed Stealth Scanning Network (fwd) (rottz at securityflaw.com (Peter E. Johnson))
Re: is there a new virus? (madduck at madduck.net (martin f krafft))
Intrusec 55808 Trojan Analysis (ken_i_m at sharevalue.com (Ken Dyke))
no good deed ever goes unpunished (madscientist at wyoming.com (Philip Stortz))
Senator Orrin Hatch goes unpunished (madscientist at wyoming.com (Philip Stortz))
Blowing up PC's and leaking CERT info (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
Intrusec 55808 Trojan Analysis (slpl at madinfo.pt (slpl@...info.pt))
Re: Java class obfuscation (ruff.lists at edelweb.fr (Nicolas RUFF (lists)))
Re: Full-Disclosure digest, Vol 1 #908 - 22 msgs (doddvickers at mac.com (Dodd Vickers))
Intrusec 55808 Trojan Analysis (djm at intrusec.com (David J. Meltzer))
Senator Orrin Hatch goes unpunished (MRMyers at anteon.com (Myers, Marvin))
Re: Full-Disclosure digest, Vol 1 #908 - 22 msgs (evertjan at vanramselaar.nl (Evert Jan van Ramselaar))
Intrusec 55808 Trojan Analysis (full-disclosure at ols.inorganic.org (Roy S. Rapoport))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
Blowing up PC's and leaking CERT info (smcmahon at eiv.com (Shawn McMahon))
Blowing up PC's and leaking CERT info (smcmahon at eiv.com (Shawn McMahon))
Maelstrom Local Buffer Overflow Exploit, FreeBSD 4.8 edition (NC_Agent at kueppers-familie.de (NC Agent))
[SECURITY] [DSA-329-1] New osh packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Senator Orrin Hatch goes unpunished (madsaxon at direcway.com (madsaxon))
Blowing up PC's and leaking CERT info (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
Destroying PCs remotely? (smcmahon at eiv.com (Shawn McMahon))
Administrivia: Politics and Netiquette (len at netsys.com (Len Rose))
ISS "Stumbler" advisory questions (jstewart at lurhq.com (Joe Stewart))
Blowing up PC's and leaking CERT info (lee.x.james at gsk.com (lee.x.james@....com))
Blowing up PC's and leaking CERT info (packet at vtr.net (Rodrigo Gutierrez))
Destroying PCs remotely? (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
RE: Java class obfuscation (security.vip at softhome.net (Mike S))
Apache 1.3.27 Remote Root 0-Day (mike-full at megaglobal.net (Michael))
Re: Blowing up PC's and leaking CERT info (rsw at jfet.org (Riad S. Wahby))
Destroying PCs remotely? (VineMT at Corning.com (Vine, Matthew T))
Apache 1.3.27 Remote Root 0-Day (matthew at textbox.net (Matt))
Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST) (koec at hushmail.com (koec@...hmail.com))
Apache 1.3.27 Remote Root 0-Day (a.gietl at e-admin.de (Andreas Gietl))
Apache 1.3.27 Remote Root 0-Day (dotslash at snosoft.com (KF))
Apache 1.3.27 Remote Root 0-Day (james.greenhalgh at worldpay.com (James Greenhalgh))
RE: Java class obfuscation (dotslash at snosoft.com (KF))
phpBB sql injection (rikul at bellsouth.net (Rick))
Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST) (mike-full at megaglobal.net (Michael))
Apache 1.3.27 Remote Root 0-Day (jstewart at lurhq.com (Joe Stewart))
RE: Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST) (Tyler.Hudak at roadway.com (Hudak, Tyler))
Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST) (ecchien at yahoo.com (Eric Chien))
Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST) (gbromley at intstar.com (Gareth Bromley))
Apache 1.3.27 Remote Root 0-Day (nikoteen at hp.com (nikoteen))
Apache 1.3.27 Remote Root 0-Day (xbud at g0thead.com (xbud))
SRT2003-06-20-1232 - Progress 4GL Compiler datatype overflow (dotslash at snosoft.com (KF))
Apache 1.3.27 Remote Root 0-Day (wcolburn at nmt.edu (William D. Colburn (aka Schlake)))
[RHSA-2003:026-01] Updated Netscape packages are now available (bugzilla at redhat.com (bugzilla@...hat.com))
Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST) (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
http://www.theregister.co.uk/content/55/31353.html (david.vincent at mightyoaks.com (David Vincent))
Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST) (gml at phrick.net (gml))
Destroying PCs remotely? (jeremiah at nur.net (Jeremiah Cornelius))
Blowing up PC's and leaking CERT info (pauls at utdallas.edu (Schmehl, Paul L))
RE: http://www.theregister.co.uk/content/55/31353.html (david.vincent at mightyoaks.com (David Vincent))
phpBB sql injection (evertjan at vanramselaar.nl (Evert Jan van Ramselaar))
http://www.theregister.co.uk/content/55/31353.html (se_cur_ity at hotmail.com (morning_wood))
Blowing up PC's and leaking CERT info (pauls at utdallas.edu (Schmehl, Paul L))
Re: http://www.theregister.co.uk/content/55/31353.html (hack4life at hushmail.com (hack4life@...hmail.com))

June 21 (12 messages)

Windows Messenger Popup Spam on UDP Port 1026 (jstewart at lurhq.com (Joe Stewart))
Windows Messenger Popup Spam on UDP Port 1026 (se_cur_ity at hotmail.com (morning_wood))
Destroying PCs remotely? (konfusius at gmx.de (Manfred Schmitt))
Zope (se_cur_ity at hotmail.com (morning_wood))
Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST) (xian at mediaclan.at (Christian Friedl))
GNATS (The GNU bug-tracking system) multiple buffer overflow vulnerabilities. (xploit at hackermail.com (dong-h0un U))
[Dshield] Re: Windows Messenger Popup Spam on UDP Port 1026 (jullrich at euclidian.com (Johannes Ullrich))
RE: Windows Messenger Popup Spam on UDP Port 1026 (barryd at idunno.org (Barry Dorrans))
Re: Full-Disclosure digest, Vol 1 #913 - 13 msgs (ericv at cruzio.com (Eric N. Valor))
Windows Messenger Popup Spam on UDP Port 1026 (bugtraq at war-driving.org (Marcus Specht))
[Dshield] Re: Windows Messenger Popup Spamon UDP Port 1026 (se_cur_ity at hotmail.com (morning_wood))
[Dshield] Re: Windows Messenger Popup Spam on UDP Port 1026 (dietmar.goldbeck at acm.org (Dietmar Goldbeck))

June 22 (8 messages)

[Dshield] Re: Windows Messenger Popup Spam on UDP Port 1026 (petard at sdf.lonestar.org (petard))
Local file retrieving in QNX Internet Appliance Toolkit http-daemon (web.server) (security at astrobox.net (Michael Bemmerl))
Destroying PCs remotely? (ptourvi1 at twcny.rr.com (JT))
[Dshield] Re: Windows Messenger Popup Spam on UDP Port 1026 (full-disclosure at ols.inorganic.org (Roy S. Rapoport))
Indigostar - Perledit (se_cur_ity at hotmail.com (morning_wood))
ISS "Stumbler" advisory questions (NC_Agent at kueppers-familie.de (NC Agent))
Indigostar - Perledit (petard at sdf.lonestar.org (petard))
Indigostar - Perledit (se_cur_ity at hotmail.com (morning_wood))

June 23 (37 messages)

(no subject) (muhstik at yahoo.com (Muhstik Botha))
Symantec ActiveX control buffer overflow (cesarc56 at yahoo.com (Cesar))
(no subject) (se_cur_ity at hotmail.com (morning_wood))
Sql Injection big5 consultancy (t5con at hotmail.com (joseph blater))
cd rom (xillwillx at yahoo.com (w g))
AW: Windows Messenger Popup Spam on UDP Port 10 26 (vogt at hansenet.com (vogt@...senet.com))
AW: Windows Messenger Popup Spam on UDP Port 10 26 (nils.ketelsen at kuehne-nagel.com (Nils Ketelsen))
AW: AW: Windows Messenger Popup Spam on UDP Por t 10 26 (vogt at hansenet.com (vogt@...senet.com))
Apache 1.3.27 Remote Root 0-Day Exploit (OFFICIAL POST) (dw-lists.netsys.com at botanicus.net (David M. Wilson))
(no subject) (nick at virus-l.demon.co.uk (Nick FitzGerald))
(no subject) (petard at sdf.lonestar.org (petard))
[Dshield] Re: Windows Messenger Popup Spamon UDP Port 1026 (jstewart at lurhq.com (Joe Stewart))
Re: Windows Messenger Popup Spam - advisory amended (jstewart at lurhq.com (Joe Stewart))
Re: Gator Corporation Response (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
AW: Windows Messenger Popup Spam on UDP Port 10 26 (f0x at squirrelsoup.net (Gabe Arnold))
Sql Injection big5 consultancy (pauls at utdallas.edu (Schmehl, Paul L))
AW: Windows Messenger Popup Spam on UDP Por t 10 26 (smcmahon at eiv.com (Shawn McMahon))
RE: Windows Messenger Popup Spam on UDP Port 1026 (smcmahon at eiv.com (Shawn McMahon))
Implications of outsourcing email (secvar72 at hotmail.com (rajesh))
Sql Injection big5 consultancy (BlueBoar at thievco.com (Blue Boar))
Implications of outsourcing email (f0x at squirrelsoup.net (Gabe Arnold))
gid bin from /usr/ports/korean/elm (FreeBSD) (kain at ircop.dk (Knud Erik Højgaard))
Sql Injection big5 consultancy (justin-fulldisclosure at soze.net (Justin))
Implications of outsourcing email (full-disclosure at ols.inorganic.org (Roy S. Rapoport))
Re(2): Windows Messenger Popup Spam on UDP Port 1026 (xian at mediaclan.at (Christian Friedl))
Implications of outsourcing email (mckellar at telusplanet.net (Neil McKellar))
Re: gid bin from /usr/ports/korean/elm (FreeBSD) (kain at ircop.dk (Knud Erik Højgaard))
Implications of outsourcing email (ptourvi1 at twcny.rr.com (JT))
Implications of outsourcing email (full-disclosure at ols.inorganic.org (Roy S. Rapoport))
Implications of outsourcing email (VineMT at Corning.com (Vine, Matthew T))
[Dshield] Re: Windows Messenger Popup Spam on UDP Port 1026 (security at updegrove.net (Rick Updegrove))
[Dshield] Re: Windows Messenger Popup Spam on UDP Port 1026 (security at updegrove.net (Rick Updegrove))
Re(2): Windows Messenger Popup Spam on UDP Port 1026 (cherot at appliedmessaging.com (Christopher F. Herot))
Re(2): Windows Messenger Popup Spam on UDP Port 1026 (petard at sdf.lonestar.org (petard))
MDKSA-2003:070 - Updated ethereal packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Re(2): Windows Messenger Popup Spam on UDP Port 1026 (dufresne at winternet.com (Ron DuFresne))
[KSA-001] Multiple vulnerabilities in Tutos (francois.sorin at security-corporation.com (François SORIN))

June 24 (13 messages)

(Updated) Symantec ActiveX control buffer overflow (cesarc56 at yahoo.com (Cesar))
RE: Windows Messenger Popup Spam on UDP Port 1026 (niels=netsys at bakker.net (Niels Bakker))
[SECURITY] [DSA-330-1] New tcptraceroute packages fix failure to drop root privileges (debian-security-announce at lists.debian.org (debian-security-announce@li…)
Re: GNATS (The GNU bug-tracking system) multiple buffer overflow vulnerabilities. (xploit at hackermail.com (dong-h0un U))
Re(2): Windows Messenger Popup Spam on UDP Port 1026 (jsa at pen.homeip.net (John Andersen))
Symantec ActiveX control buffer overflow (guninski at guninski.com (Georgi Guninski))
RE: [Symantec Security Advisor] Symantec Security Check ActiveX Buffer Overflow (jasonc at science.org (Jason Coombs))
Symantec ActiveX control buffer overflow (cesarc56 at yahoo.com (Cesar))
Sql Injection big5 consultancy (t5con at hotmail.com (joseph blater))
Sql Injection big5 consultancy (smcmahon at eiv.com (Shawn McMahon))
Multiple IPv6-Induced Bugs & Vulnerabilities on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Sql Injection big5 consultancy (lists at bleepyou.com (M. Osten))
Re: [Announcement] oPortal - OWASP Portal Beta Site (bugtraq at cgisecurity.net (bugtraq@...security.net))

June 25 (16 messages)

Exploit for Kerio MailServer 5.6.3 (br00t at blueyonder.co.uk (B-r00t))
[RHSA-2003:173-01] Updated ypserv packages fix a denial of service vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:067-00] Updated XFree86 packages provide security and bug fixes (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:067-01] Updated XFree86 packages provide security and bug fixes (bugzilla at redhat.com (bugzilla@...hat.com))
Re: Internet Explorer >=5.0 : Buffer overflow (bugtraq at securiteam.com (SecurITeam BugTraq Monitoring))
RE: [Symantec Security Advisor] Symantec Security Check ActiveX Buffer Overflow (cesarc56 at yahoo.com (Cesar))
[RHSA-2003:066-01] Updated XFree86 packages provide security and bug fixes (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:064-01] Updated XFree86 4.1.0 packages are available (bugzilla at redhat.com (bugzilla@...hat.com))
Re: Internet Explorer >=5.0 : Buffer overflow (biondi at cartel-securite.fr (Philippe Biondi))
Re: Internet Explorer >=5.0 : Buffer overflow (rikul at bellsouth.net (Rick))
Re: Windows Messenger Popup Spam - advisory amended (jstewart at lurhq.com (Joe Stewart))
CD-ROM drive opens (Jill.Treu at compuware.com (Treu, Jill))
RE: [Symantec Security Advisor] Symantec Security Check ActiveX Buffer Overflow (jeremiah at nur.net (Jeremiah Cornelius))
A worm... (simon at snosoft.com (ATD))
CD-ROM drive opens (thor at pivx.com (Thor Larholm))
A worm... (hobbit at avian.org (*Hobbit*))

June 26 (31 messages)

A worm... (phillip.jaeger at athletics.utexas.edu (Phillip A Jaeger))
A worm... (golddog at hushmail.com (golddog@...hmail.com))
A worm... (gml at phrick.net (gml))
A worm... (dotslash at snosoft.com (KF))
A worm... (simon at snosoft.com (ATD))
CD-ROM drive opens (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Windows Messenger Popup Spam - advisory amended (jh at dok.org (jh))
Netddemsg (n_mercier at msn.com (Nicolas MERCIER))
Secunia Research: BRS WebWeaver Error Page Cross-Site Scripting (che at secunia.com (Carsten H. Eiram))
A worm... (rms at computerbytesman.com (Richard M. Smith))
SV: A worm... (kruse at krusesecurity.dk (Peter Kruse))
CD-ROM drive opens (thor at pivx.com (Thor Larholm))
Bahamut IRCd <= 1.4.35 and several derived daemons (je-fulldisclosure at bitnux.com (Joel Eriksson))
A worm... (rms at computerbytesman.com (Richard M. Smith))
A worm... (se_cur_ity at hotmail.com (morning_wood))
A worm... (nexus at patrol.i-way.co.uk (Nexus))
A worm... (pauls at utdallas.edu (Schmehl, Paul L))
Secunia Research: FTPServer/X Response Buffer Overflow Vulnerability (che at secunia.com (Carsten H. Eiram))
A worm... (simon at snosoft.com (ATD))
A worm... (simon at snosoft.com (ATD))
A worm... (simon at snosoft.com (ATD))
A worm... (pauls at utdallas.edu (Schmehl, Paul L))
A worm... (simon at snosoft.com (ATD))
SV: A worm... (kruse at krusesecurity.dk (Peter Kruse))
A worm... (simon at snosoft.com (ATD))
[KSA-002] Multiple Vulnerabilities In Moregroupware (francois.sorin at security-corporation.com (François SORIN))
A worm... (rms at computerbytesman.com (Richard M. Smith))
A worm... (se_cur_ity at hotmail.com (morning_wood))
Linux 2.4.x execve() file read race vulnerability (paul at starzetz.de (Paul Starzetz))
A worm... (dufresne at winternet.com (Ron DuFresne))
A worm... (full-disclosure at ols.inorganic.org (Roy S. Rapoport))

June 27 (21 messages)

Adminstrivia: Digest Limits/Netiquette (len at netsys.com (Len Rose))
Adminstrivia: Digest Limits/Netiquette (nick at virus-l.demon.co.uk (Nick FitzGerald))
A worm... (lists at bleepyou.com (M. Osten))
ZoPe folow ups (se_cur_ity at hotmail.com (morning_wood))
A worm... (brett at hutley.net (Brett Hutley))
A worm... (nick at virus-l.demon.co.uk (Nick FitzGerald))
food for thought -- root zone exposures (len at netsys.com (Len Rose))
tripbid secure codes (auto94042 at hushmail.com (auto94042@...hmail.com))
Here ya Go (leandro.toledo at pop.com.br (Leandro Toledo))
A worm... (hobbit at avian.org (*Hobbit*))
Adminstrivia: Digest Limits/Netiquette (purdy at tecman.com (Curt Purdy))
MDKSA-2003:071 - Updated xpdf packages fix arbitrary code execution vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:072 - Updated ypserv packages fix DoS vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Adminstrivia: Digest Limits/Netiquette (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
food for thought -- root zone exposures (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Adminstrivia: Digest Limits/Netiquette (full-disclosure at ols.inorganic.org (Roy S. Rapoport))
Adminstrivia: Digest Limits/Netiquette (pauls at utdallas.edu (Schmehl, Paul L))
Adminstrivia: Digest Limits/Netiquette (smcmahon at eiv.com (Shawn McMahon))
Adminstrivia: Digest Limits/Netiquette (troywhoffman at yahoo.com (Troy))
Adminstrivia: Digest Limits/Netiquette (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: [Security] [vendor-sec] Linux 2.4.x execve() file read race vulnerability (crispin at immunix.com (Crispin Cowan))

June 28 (4 messages)

(no subject) (atd at secnetops.com (ATD))
(no subject) (pauls at utdallas.edu (Schmehl, Paul L))
Adminstrivia: Digest Limits/Netiquette (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Adminstrivia: Digest Limits/Netiquette (ftobin at neverending.org (Frank Tobin))

June 29 (9 messages)

[SECURITY] [DSA-331-1] New imagemagick packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@lis…)
[SECURITY] [DSA-331-1] New imagemagick packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@lis…)
[SECURITY] [DSA-332-1] New Linux 2.4.17 source code and MIPS kernel images fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-sec…)
[SECURITY] [DSA-333-1] New acm packages fix integer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-334-1] New xgalaga packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-335-1] New mantis packages fix insecure file permissions (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)
[SECURITY] [DSA-338-1] New proftpd packages fix SQL injection (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-337-1] New gtksee packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-336-1] New Linux 2.2.20 packages and i386 kernel images fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-securi…)

June 30 (8 messages)

Microsoft Cries Wolf ( again ) (se_cur_ity at hotmail.com (morning_wood))
Aprelium Abyss webserver X1 arbitrary code execution and header injection (fozzy at dmpfrance.com (Fozzy))
Megabook 2.0 -XSS & UA execution (se_cur_ity at hotmail.com (morning_wood))
RE: [Symantec Security Advisor] Symantec Security Check ActiveX Buffer Overflow (cesarc56 at yahoo.com (Cesar))
Re: Internet Explorer >=5.0 : Buffer overflow (3APA3A at SECURITY.NNOV.RU (3APA3A))
[SECURITY] [DSA-336-2] Factual correction for DSA-336-1 (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Microsoft Cries Wolf ( again ) (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
Microsoft Cries Wolf ( again ) (andrewg at d2.net.au (Andrew Griffiths))

891 messages