full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2003/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 39	² 66	³ 63	⁴ 43	⁵ 20	⁶ 3	⁷ 24
⁸ 35	⁹ 62	¹⁰ 73	¹¹ 92	¹² 103	¹³ 26	¹⁴ 20
¹⁵ 62	¹⁶ 100	¹⁷ 136	¹⁸ 90	¹⁹ 91	²⁰ 53	²¹ 34
²² 64	²³ 84	²⁴ 75	²⁵ 78	²⁶ 74	²⁷ 61	²⁸ 30
²⁹ 51	³⁰ 80

Messages by day:

September 1 (39 messages)

DCOM/RPC story (Analogy) (ralfml at alfray.com (Ralf))
DCOM/RPC story (Analogy) (nick at virus-l.demon.co.uk (Nick FitzGerald))
DCOM/RPC story (Analogy) (madsaxon at direcway.com (madsaxon))
CrossOver (enigma at netninja.com (Brian Enigma))
ReMS Blaster author / morning_wood misinformed (jenbradley at webmail.co.za (Jennifer Bradley))
Re: MS Blaster author / morning_wood misinformed (jenbradley at webmail.co.za (Jennifer Bradley))
DCOM/RPC story (Analogy) (jenbradley at webmail.co.za (Jennifer Bradley))
Security News Portal - XSS Untrusted Links (se_cur_ity at hotmail.com (morning_wood))
DCOM/RPC story (Analogy) (j_joensuu at yahoo.com (Jarmo Joensuu))
CrossOver (steve at stevesworld.hopto.org (Stephen Clowater))
Security Vulnerability in Tellurian TftpdNT (Long Filename) (aviram at beyondsecurity.com (Aviram Jenik))
GLSA: pam_smb (200309-01) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: pam_smb (200309-01) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: pam_smb (200309-01) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: pam_smb (200309-01) (aliz at gentoo.org (Daniel Ahlberg))
Virus, whether the scanners say so or not? (scottp at dreamwright.com (Scott Phelps / Dreamwright Studios))
PPC OSX Shellcode ASM (br00t at blueyonder.co.uk (B-r00t))
GLSA: vmware (200308-03.1) (aliz at gentoo.org (Daniel Ahlberg))
Virus, whether the scanners say so or not? (Marek.Isalski at smuht.nwest.nhs.uk (Marek Isalski))
GLSA: horde (200309-02) (aliz at gentoo.org (Daniel Ahlberg))
Virus Found in message "Virus whether the scanners say so or not?" (manipeto at yahoo.co.uk (Syed Imran Ali))
GLSA: horde (200309-02.1) (aliz at gentoo.org (Daniel Ahlberg))
Virus, whether the scanners say so or not? (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
PPC OSX Shellcode ASM (pinskia at physics.uc.edu (Andrew Pinski))
Fw: Virus, whether the scanners say so or not? (se_cur_ity at hotmail.com (morning_wood))
DCOM/RPC story (Analogy) (khermansen at ht-technology.com (Kristian Hermansen))
[Update]:Cross Site Scripting in Webbased Virusencyclopedia has fixed (momolly at kryptocrew.de (Redaktion-Kryptocrew))
Virus, whether the scanners say so or not? (bet at rahul.net (Bennett Todd))
Virus, whether the scanners say so or not? (pauls at utdallas.edu (Paul Schmehl))
DCOM/RPC story (Analogy) (pauls at utdallas.edu (Schmehl, Paul L))
PtHProductions Gastenboek - XSS (se_cur_ity at hotmail.com (morning_wood))
Ifriends payment bypass (se_cur_ity at hotmail.com (morning_wood))
DCOM/RPC story (Analogy) (se_cur_ity at hotmail.com (morning_wood))
xss holes (fabian.bieker at web.de (Fabian Bieker))
Anybody know what Sobig.F has downloaded? (b-nordquist at bethel.edu (Brent J. Nordquist))
DCOM/RPC story (Analogy) (marc at chabot.net (Marc Chabot (.net)))
Virus, whether the scanners say so or not? (misiu_ at gmx.de (misiu_@....de))
Virus, whether the scanners say so or not? (chows at ozemail.com.au (gregh))
Mcafee VSO (Virus scanner) (chows at ozemail.com.au (gregh))

September 2 (66 messages)

PPC OSX Shellcode ASM (dotslash at snosoft.com (KF))
Random SoBig.F Thoughts (jasonc at science.org (Jason Coombs))
Tracking a virus by logging infected machines (rms at computerbytesman.com (Richard M. Smith))
Re: RIP: ActiveX controls in Internet Explorer? (igenge2 at csc.com.au (igenge2@....com.au))
Tracking a virus by logging infected machines (ralfml at alfray.com (Ralf))
Tracking a virus by logging infected machines (m.graf at firmenwelt.de (Marcus Graf))
Tracking a virus by logging infected machines (se_cur_ity at hotmail.com (morning_wood))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (maru at scip.ch (Marc Ruef))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (irwanhadi at phxby.com (Irwan Hadi))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (se_cur_ity at hotmail.com (morning_wood))
Anybody know what Sobig.F has downloaded? (R.Ferris at napier.ac.uk (Ferris, Robin))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (maru at scip.ch (Marc Ruef))
GLSA: phpwebsite (200309-03) (aliz at gentoo.org (Daniel Ahlberg))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (maru at scip.ch (Marc Ruef))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (irwanhadi at phxby.com (Irwan Hadi))
STG Security Advisory: [SSA-20030902-04] Accessibility control bypass vulnerability of Wrapsody Viewer (advisory at stgsecurity.com (SSR Team))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (m.graf at firmenwelt.de (Marcus Graf))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (azmodan at linux.online.no (Mads))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (lists.netsys.com at jscript.dk (Thor Larholm))
GLSA: eroaster (200309-04) (aliz at gentoo.org (Daniel Ahlberg))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (lists.netsys.com at jscript.dk (Thor Larholm))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (steve.wray at paradise.net.nz (Steve Wray))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (Roland.Arendes at de.flextronics.com (Roland Arendes))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (m.graf at firmenwelt.de (Marcus Graf))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (se_cur_ity at hotmail.com (morning_wood))
GLSA: mindi (200309-05) (aliz at gentoo.org (Daniel Ahlberg))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (maru at scip.ch (Marc Ruef))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (irwanhadi at phxby.com (Irwan Hadi))
GLSA: gallery (200309-06) (aliz at gentoo.org (Daniel Ahlberg))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (svgn at orbid.be (Serge van Ginderachter (svgn)))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (zobel at hnw-online.de (Zobel M.))
JAP back doored (helmut.hauser at intraplan.de (Helmut Hauser))
GLSA: atari800 (200309-07) (aliz at gentoo.org (Daniel Ahlberg))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (at4r at hotmail.com (at4r ins4n3))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (hilfinger at zeelandnet.nl (beheer))
AW: New Microsoft Internet Explorer mshtml.dll Denial of Service? (pel at adv.magwien.gv.at (Pellmann Paul))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (nonleft at gmx.net (nonleft@....net))
Tracking a virus by logging infected machines (joel at helgeson.com (Joel R. Helgeson))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (thalm at netcabo.pt (Tiago Halm))
Tracking a virus by logging infected machines (rms at computerbytesman.com (Richard M. Smith))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (tim-security at sentinelchicken.org (Tim))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (tim-security at sentinelchicken.org (Tim))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (tim-security at sentinelchicken.org (Tim))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (nonleft at gmx.net (nonleft))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (se_cur_ity at hotmail.com (morning_wood))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (thalm at netcabo.pt (Tiago Halm))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (pauls at utdallas.edu (Schmehl, Paul L))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (steve.wray at paradise.net.nz (Steve Wray))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (steve.wray at paradise.net.nz (Steve Wray))
JAP back doored (dantams at danieltams.dyndns.org (Daniel Tams))
sans.org (lepkie at hushmail.com (lepkie))
sans.org (m.graf at firmenwelt.de (Marcus Graf))
Re: sans.org (madduck at madduck.net (martin f krafft))
sans.org (jheidtke at fmlh.edu (Jerry Heidtke))
sans.org - OFFTOPIC (listuser at seifried.org (Kurt Seifried))
sans.org (RLowdermilk at itgusa.com (Ryan Lowdermilk))
sans.org (B3r3n at argosnet.com (B3r3n))
sans.org (cta at hcsin.net (Bernie, CTA))
sans.org (JThomas at poweronemedia.com (Joshua Thomas))
sans.org (lists at venom600.org (Ben Nelson))
sans.org (nom.de.guerre at bonbon.net (NDG))
Re: atari800 (200309-07) (osgo at hotmail.com (- o s g o -))
sans.org (rms at computerbytesman.com (Richard M. Smith))
Email for sans.org? (rms at computerbytesman.com (Richard M. Smith))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Slow mail (was Re: New Microsoft Internet (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

September 3 (63 messages)

sans.org (hackerwacker at cybermesa.com (james))
sans.org - OFFTOPIC (david.vincent at mightyoaks.com (David Vincent))
The Worm tard who got busted (ALudwig at Calfingroup.com (Andre Ludwig))
sans.org (listuser at seifried.org (Kurt Seifried))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (tim-security at sentinelchicken.org (Tim))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (irwanhadi at phxby.com (Irwan Hadi))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (tim-security at sentinelchicken.org (Tim))
Code executing in McAfee's virus information websites (momolly at kryptocrew.de (Redaktion-Kryptocrew))
MDKSA-2003:088 - Updated pam_ldap packages fix vulnerability with pam filtering (security at linux-mandrake.com (Mandrake Linux Security Team))
New Microsoft Internet Explorer mshtml.dll Denial of Service? (maru at scip.ch (Marc Ruef))
Snort on a Bootable FreeBSD CD to catch Nachi, Blaster & Sobig (justin.tan at extol.com.my (Justin Tan))
Trend Micro Interscan Viruswall: missing whole_file_scan=yes let pass at least one Sobig.f eMail (pbieringer at aerasec.de (Dr. Peter Bieringer))
Trend Micro Interscan Viruswall: missing whole_file_scan=yes let pass at least one Sobig.f eMail (pbieringer at aerasec.de (Dr. Peter Bieringer))
Scanning the PCs for RPC Vulnerability (nrafi at jeraisy.com (Nadeem Rafi))
Bill Gates blames the victim (petr at blade-runner.mit.edu (Petr Swedock))
Bill Gates blames the victim (alexandre.dulaunoy at ael.be (Alexandre Dulaunoy))
Most Important Vulnerabilities - August 2003 (sintraq at sintelli.com (Sintelli SINTRAQ))
Scanning the PCs for RPC Vulnerability (jheidtke at fmlh.edu (Jerry Heidtke))
Scanning the PCs for RPC Vulnerability. (nrafi at jeraisy.com (Nadeem Rafi))
SMC Router safe Login in plaintext (florianrock at web.de (Florian Rock))
SMC7004VB sensitive information leak (alexander.mueller at electronic-security.de (Alexander M�ller))
CfP DIMVA 2004 (thomas at suse.de (Thomas Biege))
Scanning the PCs for RPC Vulnerability (tebodell at email.com (Ty Bodell))
Snort on a Bootable FreeBSD CD to catch Nachi, Blaster & Sobig (pauls at utdallas.edu (Schmehl, Paul L))
Scanning the PCs for RPC Vulnerability (pauls at utdallas.edu (Schmehl, Paul L))
Bill Gates blames the victim (rahnemann at affinity-mortgage.com (Robert Ahnemann))
SuSE Security Announcement: pam_smb (SuSE-SA:2003:036) (thomas at suse.de (Thomas Biege))
Scanning the PCs for RPC Vulnerability (nrafi at jeraisy.com (Nadeem Rafi))
Webcalendar <= 0.9.42 Cross Site Scripting Attacks and Potential SQL Injection Attack (nocon at texas-shooters.com (noconflic))
RE: Scanning the PCs for RPC Vulnerability (jheidtke at fmlh.edu (Jerry Heidtke))
Scanning the PCs for RPC Vulnerability (rjemckay at verizon.net (rjemckay@...izon.net))
Bill Gates blames the victim (cdw at mylinuxguy.com (C. David Wilde))
Bill Gates blames the victim (st_lim at stlim.net (Lim Swee Tat))
Bill Gates blames the victim (rahnemann at affinity-mortgage.com (Robert Ahnemann))
Scanning the PCs for RPC Vulnerability (B3r3n at argosnet.com (B3r3n))
Need contact in the BTOPENWORLD.COM securit y department (sbirl at temple.edu (Birl))
Bill Gates blames the victim (st_lim at stlim.net (Lim Swee Tat))
Scanning the PCs for RPC Vulnerability (marc at eeye.com (Marc Maiffret))
Bill Gates blames the victim (rahnemann at affinity-mortgage.com (Robert Ahnemann))
Bill Gates blames the victim (b-nordquist at bethel.edu (Brent J. Nordquist))
SMC Router safe Login in plaintext (pauls at utdallas.edu (Schmehl, Paul L))
Bill Gates blames the victim (pauls at utdallas.edu (Schmehl, Paul L))
Bill Gates blames the victim (rms at computerbytesman.com (Richard M. Smith))
Bill Gates blames the victim (petr at blade-runner.mit.edu (Petr Swedock))
Anyone have more info on this? (ALudwig at Calfingroup.com (Andre Ludwig))
Flaw in Microsoft Word Could Enable Macros toRun Automatically (827653) (irwanhadi at phxby.com (Irwan Hadi))
Flaw in Visual Basic for Applications Could Allow Arbitrary Code Execution (822715) (irwanhadi at phxby.com (Irwan Hadi))
Unchecked buffer in Microsoft Access Snapshot Viewer Could Allow Code Execution (827104) (irwanhadi at phxby.com (Irwan Hadi))
2nd Blaster copy-catter arrest in Romania (Blaster.F) (rms at computerbytesman.com (Richard M. Smith))
Flaw in NetBIOS Could Lead to Information Disclosure (824105) (irwanhadi at phxby.com (Irwan Hadi))
5 Microsoft Security Bulletin´s in one day ... (kruse at krusesecurity.dk (Peter Kruse))
SMC Router safe Login in plaintext (nrotschafer at geniussystems.net (Nathan Rotschafer))
SMC Router safe Login in plaintext (kjs at uchicago.edu (Kim Scarborough))
5 Microsoft Security Bulletin´s in one day ... (daniel_clemens at autism.birmingham-infragard.org (daniel uriah clemens))
INVITATION TO PARTNERSHIP (williams_m2 at tiscali.co.uk (Dr.Michael Williams))
About Gif's (khkreis at web.de (Karl-Heinz Kreis))
[tool] the new p0f 2.0.1 is now out (lcamtuf at ghettot.org (Michal Zalewski))
SMC Router safe Login in plaintext (nrotschafer at geniussystems.net (Nathan Rotschafer))
SMC Router safe Login in plaintext (cchurch at alertlogic.net (C. Church))
Bill Gates blames the victim (LONG) (bborton at conwin.com (Bill Borton))
FW: Microsoft Security Update (thor at pivx.com (Thor Larholm))
Bill Gates blames the victim (guninski at guninski.com (Georgi Guninski))
SMC Router safe Login in plaintext (pauls at utdallas.edu (Schmehl, Paul L))

September 4 (43 messages)

Flaw in NetBIOS Could Lead to Information Disclosure (824105) (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: 5 Microsoft Security Bulletin´s in one day ... (lists.netsys.com at jscript.dk (Thor Larholm))
Bill Gates blames the victim (st_lim at stlim.net (Lim Swee Tat))
Anyone have more info on this? (idoru at videosoft.net.uy (David F. Madrid))
SMC Router safe Login in plaintext (pauls at utdallas.edu (Paul Schmehl))
Bill Gates blames the victim (nick at virus-l.demon.co.uk (Nick FitzGerald))
(no subject) (nitroxboost at hotmail.com (Jim Duggan))
SMC Router safe Login in plaintext (jeremiah at nur.net (Jeremiah Cornelius))
SCADA - old (se_cur_ity at hotmail.com (morning_wood))
Code executing in RAV's virus encyclopedia (momolly at kryptocrew.de (Redaktion-Kryptocrew))
Authorities eye 2nd MSBlaster suspect (se_cur_ity at hotmail.com (morning_wood))
SMC Router safe Login in plaintext (irwanhadi at phxby.com (Irwan Hadi))
[Update]: Code executing in RAV's virus encyclopedia fixed (momolly at kryptocrew.de (Redaktion-Kryptocrew))
[RHSA-2003:240-01] Updated httpd packages fix Apache security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
Trend Micro Interscan Viruswall: missing whole_file_scan=yes let pass at least one Sobig.f eMail (harald at deppeler.org (harald@...peler.org))
FW: Microsoft Security Bulletin MS03-035: Flaw in Microsoft Word Could Enable Macros to Run Automatically(827653) (rgerhards at hq.adiscon.com (Rainer Gerhards))
FW: Microsoft Security Update (R.Ferris at napier.ac.uk (Ferris, Robin))
FW: Microsoft Security Bulletin MS03-035: Flaw in Microsoft Word Could Enable Macros to Run Automatically(827653) (rgerhards at hq.adiscon.com (Rainer Gerhards))
[Update]: Code executing in McAfee's virus information websites fixed (momolly at kryptocrew.de (Redaktion-Kryptocrew))
Snort on a Bootable FreeBSD CD to catch Nachi, Blaster & Sobig (justin.tan at extol.com.my (Justin Tan))
SMC Router safe Login in plaintext (justin-fulldisclosure at soze.net (Justin))
SMC Router safe Login in plaintext (dotslash at snosoft.com (KF))
SCADA - old (dotslash at snosoft.com (KF))
SMC Router safe Login in plaintext (se_cur_ity at hotmail.com (morning_wood))
SMC Router safe Login in plaintext (dufresne at winternet.com (Ron DuFresne))
Fw: U.S. warns nuke plants of worm threat (gshively at pivx.com (Geoff Shively))
[tool] the new p0f 2.0.1 is now out (lcamtuf at ghettot.org (Michal Zalewski))
Re: [tool] the new p0f 2.0.1 is now out (thetic_1900 at hotmail.com (thetic))
Re: [tool] the new p0f 2.0.1 is now out (dan at lockedbox.net (Daniel Bartlett))
Re: [tool] the new p0f 2.0.1 is now out (jeff.t.parker at hp.com (Parker, Jeff (MSE)))
Re: [tool] the new p0f 2.0.1 is now out (a.gietl at e-admin.de (Andreas Gietl))
Re: [tool] the new p0f 2.0.1 is now out (lcamtuf at ghettot.org (Michal Zalewski))
Re: [tool] the new p0f 2.0.1 is now out (matt.barrie at sensorynetworks.com (Matt Barrie))
Re: [tool] the new p0f 2.0.1 is now out (lcamtuf at ghettot.org (Michal Zalewski))
Re: [tool] the new p0f 2.0.1 is now out (zim at iq.pl (Robert Jaroszuk))
Re: [tool] the new p0f 2.0.1 is now out (thor at pivx.com (Thor Larholm))
Re: [tool] the new p0f 2.0.1 is now out (simon at snosoft.com (simon (www.snosoft.com)))
[tool] the new p0f 2.0.1 is now out (peter at bank-connect.com (Peter van den Heuvel))
Strange port 53 requests (peter at bank-connect.com (Peter van den Heuvel))
InlineEgg library release (gera at corest.com (Gerardo Richarte))
FW: Microsoft Security Update (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Bill Gates blames the victim (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
5 Microsoft Security Bulletin´s in one day ... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

September 5 (20 messages)

SMC Router safe Login in plaintext (dotslash at snosoft.com (KF))
Strange port 53 requests (blueboar at thievco.com (Blue Boar))
Strange port 53 requests (scosol at yahoo.com (Nathan Seven))
[SECURITY] [DSA-376-1] New exim, exim-tls packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Re: [tool] the new p0f 2.0.1 is now out (se_cur_ity at hotmail.com (morning_wood))
[SECURITY] [DSA-377-1] New wu-ftpd packages fix insecure program execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
Re: [tool] the new p0f 2.0.1 is now out (edwin at link.net.id (SPAM))
SMC Router safe Login in plaintext (nc at stormvault.net (Nicolas Couture))
FW: Microsoft Security Update (R.Ferris at napier.ac.uk (Ferris, Robin))
TestAOL7Extract and dllhost.exe (stk6363 at hotmail.com (Stephen Kelly))
Re: InlineEgg library release (nd at felinemenace.org (ned))
Re: [tool] the new p0f 2.0.1 is now out (lcamtuf at ghettot.org (Michal Zalewski))
Bill Gates blames the victim (LONG) (japc at co.sapo.pt (Jose Celestino))
Trend Micro Interscan Viruswall: missing whole_file_scan=yes let pass at least one Sobig.f eMail (pbieringer at aerasec.de (Dr. Peter Bieringer))
RE: Backdoor.coreflood infection (b9 at hushmail.com (b9@...hmail.com))
Fwd: How to Steal a Mainframe (goncalo.costa at kpnqwest.pt (Goncalo Costa))
Snort on a Bootable FreeBSD CD to catch Nachi,Blaster & Sobig (pauls at utdallas.edu (Schmehl, Paul L))
Bill Gates blames the victim (nick at virus-l.demon.co.uk (Nick FitzGerald))
OFF-TOPIC: Petition for a Software Patent Free Europe (th0rno at cyberspace.org (th0rno@...erspace.org))
Re: Microsoft Security Update (anthonysaffer at yahoo.com (Anthony Saffer))

September 6 (3 messages)

Fwd: How to Steal a Mainframe (chows at ozemail.com.au (gregh))
Anybody know what Sobig.F has downloaded? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Fwd: How to Steal a Mainframe (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

September 7 (24 messages)

Product activation is exploitable (geoincidents at getinfo.org (Geoincidents))
Product activation is exploitable (xillwillx at yahoo.com (w g))
Product activation is exploitable (rkingsla at cox.net (Rick Kingslan))
Product activation is exploitable (khermansen at ht-technology.com (Kristian Hermansen))
Product activation is exploitable (rlanguy at hotmail.com (Lan Guy))
Fwd: How to Steal a Mainframe (rlanguy at hotmail.com (Lan Guy))
[tool] the new p0f 2.0.1 is now out (dufresne at winternet.com (Ron DuFresne))
Product activation is exploitable (geoincidents at getinfo.org (Geoincidents))
Fwd: How to Steal a Mainframe (chows at ozemail.com.au (gregh))
BAD NEWS: Microsoft Security Bulletin MS03-032 (1 at malware.com (http-equiv@...ite.com))
scanning port 1010? (dasdauertja at lycos.de (Sven Fischer))
Hotmail & Passport (.NET Accounts) Vulnerability (naty_nenalinda at hotmail.com (*Naty *))
[SECURITY] [DSA-376-2] New exim packages fix incorrect permissions on documentation (debian-security-announce at lists.debian.org (debian-security-announce@...t…)
scanning port 1010? (oliver.ritter at aor-consult.de (Oliver Ritter))
Product activation is exploitable (rkingsla at cox.net (Rick Kingslan))
Product activation is exploitable (rkingsla at cox.net (Rick Kingslan))
SV: Subject prefix changing! READ THIS! SURVEY!! (shana at ite.pt (Andreia Gaita))
BAD NEWS: Microsoft Security Bulletin MS03-032 (nick at ethicsdesign.com (Nick Jacobsen))
Product activation is exploitable (zorkshin at tampabay.rr.com (Justin Shin))
BAD NEWS: Microsoft Security Bulletin MS03-032 (rms at computerbytesman.com (Richard M. Smith))
SV: Subject prefix changing! READ THIS! SURVEY!! (ralfml at alfray.com (Ralf))
BAD NEWS: Microsoft Security Bulletin MS03-032 (rms at computerbytesman.com (Richard M. Smith))
FW: BAD NEWS: Microsoft Security Bulletin MS03-032 (rms at computerbytesman.com (Richard M. Smith))
[SECURITY] [DSA-378-1] New mah-jong packages fix buffer overflows, denial of service (debian-security-announce at lists.debian.org (debian-security-announce@lis…)

September 8 (35 messages)

Hotmail & Passport (.NET Accounts) Vulnerability (nc at stormvault.net (Nicolas Couture))
Ankit Fadia - A Reality (cutthroat_truth at yahoo.co.uk (Cutthroat Truth))
ICQ Webfront - Persistant XSS (se_cur_ity at hotmail.com (morning_wood))
Ankit Fadia - A Reality (list at nutz.ch (Adrian Nutz))
BAD NEWS: Microsoft Security Bulletin MS03-032 (se_cur_ity at hotmail.com (morning_wood))
BAD NEWS: Microsoft Security Bulletin MS03-032 (1 at malware.com (http-equiv@...ite.com))
Product activation is exploitable (eduardo.reis at corp.vodafone.pt (Eduardo Reis))
Computer problem ties up British Airways (manipeto at yahoo.co.uk (Syed Imran Ali))
Fwd: solution to wu-ftpd + tar program execution (securebox at hotmail.com (smith jerome))
Product activation is exploitable (rkingsla at cox.net (Rick Kingslan))
Should ISPs be blocking open ports for their customers? (rms at computerbytesman.com (Richard M. Smith))
RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (security at greymagic.com (GreyMagic Software))
EULA (geggam692000 at yahoo.com (D B))
Re: [VulnWatch] RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (tk at secunia.com (Thomas Kristensen))
EULA (jonathan at xcorps.net (Jonathan Rickman))
FW: Tim recommended you (jasonc at science.org (Jason Coombs))
Should ISPs be blocking open ports for their customers? (nonleft at gmx.net (nonleft))
Temporary Fix for IE Zero Day Malware RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (dcopley at eeye.com (Drew Copley))
FW: Tim recommended you (pauls at utdallas.edu (Schmehl, Paul L))
FW: Tim recommended you (mlande at bellsouth.net (Mary Landesman))
FW: Tim recommended you (ggilliss at netpublishing.com (Gregory A. Gilliss))
Backdoor.Sdbot.N Question (pwicks at oxygen.com (James Patterson Wicks))
FW: Tim recommended you (pegasus at nerv.eu.org (Jure Pecar))
Product activation is exploitable (khermansen at ht-technology.com (Kristian Hermansen))
EULA (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Ankit Fadia - A Reality (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
BAD NEWS: Microsoft Security Bulletin MS03-032 (bugtraq at gs2.com.br (Fabio Gomes de Souza))
Ankit Fadia - A Reality (madsaxon at direcway.com (madsaxon))
New release of the Solaris Security Module Papillon (kr at roqe.org (Konrad Rieck))
Rogerwilco: server's buffer overflow (aluigi at pivx.com (Luigi Auriemma))
RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (ADBecker at chmortgage.com (ADBecker@...ortgage.com))
MyServer 0.4.3 Denial Of Service (badpack3t at security-protocols.com (badpack3t))
Winamp 2.91 lets code execution through MIDI files (aluigi at pivx.com (Luigi Auriemma))
RE: Winamp 2.91 lets code execution through MIDI files (thor at pivx.com (Thor Larholm))
Backdoor.Sdbot.N Question (pwicks at oxygen.com (James Patterson Wicks))

September 9 (62 messages)

FW: Tim recommended you (brian at pc-radio.com (Brian McWilliams))
Backdoor.Sdbot.N Question (nick at ethicsdesign.com (Nick Jacobsen))
Backdoor.Sdbot.N Question (jade.deane at riven.net (Jade E. Deane))
Should ISPs be blocking open ports for their customers? (stephen.perciballi at ca.mci.com (Stephen Perciballi))
Backdoor.Sdbot.N Question (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
Interesting traffic (shawn6913 at comcast.net (shawn6913))
Apache::Gallery local webserver compromise, privilege escalation (warchild at spoofed.org (Jon Hart))
FW: Tim recommended you (gem at rellim.com (Gary E. Miller))
RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (thor at pivx.com (Thor Larholm))
FW: Tim recommended you (kernelclue at hushmail.com (kernelclue@...hmail.com))
RE: BAD NEWS: Microsoft Security Bulletin M S03-032 (jared.bergeron at office.xerox.com (Bergeron, Jared))
RealOne Player local privilege escalation (warchild at spoofed.org (Jon Hart))
FW: Tim recommended you (jasonc at science.org (Jason Coombs))
Backdoor.Sdbot.N Question (nick at virus-l.demon.co.uk (Nick FitzGerald))
RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (nick at virus-l.demon.co.uk (Nick FitzGerald))
MyServer 0.4.3 Denial Of Service (se_cur_ity at hotmail.com (morning_wood))
Should ISPs be blocking open ports for their customers? (se_cur_ity at hotmail.com (morning_wood))
Interesting traffic (se_cur_ity at hotmail.com (morning_wood))
Fwd: How to Steal a Mainframe (igenge2 at csc.com.au (igenge2@....com.au))
Backdoor.Sdbot.N Question (cseagle at redshift.com (cseagle))
re - Forgive Me My Trespasses (se_cur_ity at hotmail.com (morning_wood))
List Charter (johnc at grok.org.uk (John Cartwright))
Radius / LEAP pentest (max.moser at moser-informatik.ch (Max Moser))
Radius / LEAP pentest (mmo at remote-exploit.org (_MAX_))
[VulnDiscuss] Re: RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (info-machine at magi.net.au (K_aneda))
LYCOS WorldWide Members' Accounts Source Pages Disclosure & Directory Listening (elvi52001 at yahoo.com (Elv1S))
Winrar doesn't determine the actual size of compressed files (door_hUNT3R at blackcodemail.com (Bipin Gautam))
corrected statement / question LEAP/Radius (mmo at remote-exploit.org (_MAX_))
Winrar doesn't determine the actual size of compressed files (rgerhards at hq.adiscon.com (Rainer Gerhards))
Winrar doesn't determine the actual size of compressed files (rgerhards at hq.adiscon.com (Rainer Gerhards))
[RHSA-2003:264-01] Updated gtkhtml packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Israeli boffins crack GSM code (dksaarth at unix.za.net (Richard Spiers))
Backdoor.Sdbot.N Question (pwicks at oxygen.com (James Patterson Wicks))
Should ISPs be blocking open ports for their customers? (stephen.perciballi at ca.mci.com (Stephen Perciballi))
Israeli boffins crack GSM code (rgerhards at hq.adiscon.com (Rainer Gerhards))
Israeli boffins crack GSM code (adam at homeport.org (Adam Shostack))
AW: Israeli boffins crack GSM code (vogt at hansenet.com (vogt@...senet.com))
Israeli boffins crack GSM code (kspett at spidynamics.com (Kevin Spett))
MyServer 0.4.3 Denial Of Service (badpack3t at security-protocols.com (badpack3t))
Re: Forgive Me My Trespasses (and take it off-list otherwise) (ggilliss at netpublishing.com (Gregory A. Gilliss))
Israeli boffins crack GSM code (ggilliss at netpublishing.com (Gregory A. Gilliss))
RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (nick at virus-l.demon.co.uk (Nick FitzGerald))
list-unsubscribe (ckelley388 at hotmail.com (Chris Kelley))
Re: (Fixed under Pressure?) LYCOS WorldWide Members' Accounts Source Pages Disclosure (elvi52001 at yahoo.com (Elv1S))
Office 2000 Vulnerability (delacruzma at msn.com (Michael De La Cruz))
Re: InlineEgg library release (ivan.arce at corest.com (Ivan Arce))
[RHSA-2003:264-01] Updated gtkhtml packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Interesting traffic (GKPeek at AllstateTicketing.com (George Peek))
Denial of Service Vulnerability in NFS XDR decoding Update (agent99 at sgi.com (SGI Security Coordinator))
Winrar doesn't determine the actual size of compressed files (door_hUNT3R at blackcodemail.com (Bipin Gautam))
Denial of Service Vulnerability in NFS XDR decoding Update (agent99 at sgi.com (SGI Security Coordinator))
Israeli boffins crack GSM code (kspett at spidynamics.com (Kevin Spett))
EULA (david.hayes at mci.com (David Hayes))
RE: BAD NEWS: Microsoft Security Bulletin M S03-032 (security at updegrove.net (Rick Updegrove))
RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (owen at pungent.org (Nathan Wallwork))
Israeli boffins crack GSM code (damian at sentex.net (Damian Gerow))
EULA (ggilliss at netpublishing.com (Gregory A. Gilliss))
Israeli boffins crack GSM code (damian at sentex.net (Damian Gerow))
RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (dcopley at eeye.com (Drew Copley))
[RHSA-2003:264-01] Updated gtkhtml packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (dcopley at eeye.com (Drew Copley))
RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (dcopley at eeye.com (Drew Copley))

September 10 (73 messages)

Winrar doesn't determine the actual size of compressed files (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
EULA (purdy at tecman.com (Curt Purdy))
(Patch Updated) Microsoft Security Bulletin MS03-032 (australia001 at yahoo.com.au (Jim))
EULA (jheidtke at fmlh.edu (Jerry Heidtke))
MS03-032 Patch Updated or NOT ? (elvi52001 at yahoo.com (Elv1S))
EULA (fjaffe at netcom.com (Frank Jaffe))
MS03-032 Patch Updated or NOT ? (rms at computerbytesman.com (Richard M. Smith))
MS03-032 Patch Updated or NOT ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
MS03-032 Patch Updated or NOT ? (lists.netsys.com at jscript.dk (Thor Larholm))
Interesting traffic (deji at akomolafe.com (deji))
Apache::Gallery local webserver compromise, privilege escalation (warchild at spoofed.org (Jon Hart))
Winrar doesn't determine the actual size of compressed files (rgerhards at hq.adiscon.com (Rainer Gerhards))
Winrar doesn't determine the actual size of compressed files (maru at scip.ch (Marc Ruef))
Israeli boffins crack GSM code (dksaarth at unix.za.net (Richard Spiers))
Office 2000 Vulnerability (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: InlineEgg library release (nd at felinemenace.org (ned))
Bill Gates blames the victim (guninski at guninski.com (Georgi Guninski))
9/11 virus (mbassett at omaha.com (Bassett, Mark))
Office 2000 Vulnerability (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
HTA/<object> vulnerability (titus at hush.com (titus@...h.com))
Office 2000 Vulnerability (rgerhards at hq.adiscon.com (Rainer Gerhards))
9/11 virus (nodialtone at comcast.net (Byron Copeland))
9/11 virus (l8km7gr02 at sneakemail.com (l8km7gr02@...akemail.com))
RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (dlimanov at sct.com (Dimitri Limanovski))
HTA/<object> vulnerability (se_cur_ity at hotmail.com (morning_wood))
HTA/<object> vulnerability (rms at computerbytesman.com (Richard M. Smith))
Fwd: How to Steal a Mainframe (ajc22 at york.ac.uk (Arthur Clune))
Office 2000 Vulnerability (jbethune at town.kentville.ns.ca (Jason Bethune))
Office 2000 Vulnerability (rgerhards at hq.adiscon.com (Rainer Gerhards))
MS03-039 has been released - critical (pete.ryan at thomson.com (Ryan, Pete))
Microsoft Security Bulletin MS03-039 (Marcus.Noel at tri-c.edu (Noel, Marcus))
MS03-039 has been released - critical (exibar at thelair.com (Exibar))
Office 2000 Vulnerability (chrisw at cinci.rr.com (Chris Wanstrath))
EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II (marc at eeye.com (Marc Maiffret))
Microsoft Security Bulletin MS03-039 (irwanhadi at phxby.com (Irwan Hadi))
Why does a home computer user need DCOM? (rms at computerbytesman.com (Richard M. Smith))
Israeli boffins crack GSM code (jdenoy at digital-connexion.info (Johan Denoyer))
Administrivia: Posts Delayed (johnc at grok.org.uk (John Cartwright))
Keeping IE up to date on a Windows Server (cmeeusen at bnl.gov (Meeusen, Charles D))
MS03-039 has been released - critical (jcaggy at logisoft.com (Caggy, James))
MS03-039 has been released - critical (rahnemann at affinity-mortgage.com (Robert Ahnemann))
MS03-039 has been released - critical - IRONY (bkdelong at pobox.com (B.K. DeLong))
MS03-039 has been released - critical (subscriptions at hartsuijker.com (Maarten))
Local variable memory allocation (MXB285 at bham.ac.uk (M Bealby))
Why does a home computer user need DCOM? (hobbit at avian.org (*Hobbit*))
Multiple* bug's associated with Win xp default zip Manager... (door_hUNT3R at blackcodemail.com (Bipin Gautam))
MS03-039 has been released - critical (mike at sentex.net (Mike Tancsa))
MS03-039 has been released - critical (exibar at thelair.com (Exibar))
MS03-039 has been released - critical (exibar at thelair.com (Exibar))
MS03-039 has been released - critical (jwiens at nersp.nerdc.ufl.edu (Jordan Wiens))
MS03-039 has been released - critical (pdt at jackhammer.org (pdt@...khammer.org))
MS03-039 has been released - critical (pauls at utdallas.edu (Schmehl, Paul L))
iDEFENSE Security Advisory 09.10.03: Two Exploitable Overflows in PINE (labs at idefense.com (iDEFENSE Labs))
MS03-039 has been released - critical (Jeffrey.Stebelton at bisys.com (Jeffrey.Stebelton@...ys.com))
MS03-039 has been released - critical (anthony.aykut at frame4.com (Anthony Aykut))
EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II (Jeff.Urnaza at averydennison.com (Jeff.Urnaza@...rydennison.com))
MS03-039 has been released - critical (exibar at thelair.com (Exibar))
New MS scanner for MS03-39 (pauls at utdallas.edu (Schmehl, Paul L))
MS03-039 has been released - critical (exibar at thelair.com (Exibar))
SV: MS03-039 has been released - critical (kruse at krusesecurity.dk (Peter Kruse))
MS03-039 has been released - critical (Jones.David.H at principal.com (Jones, David H))
Buffer overflow in MySQL (j at pureftpd.org (Jedi/Sector One))
Authorities eye MSBlaster suspect (jasonc at science.org (Jason Coombs))
EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II (marc at eeye.com (Marc Maiffret))
MS03-039 has been released - critical (marc at eeye.com (Marc Maiffret))
EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II (cdevoney at u.washington.edu (Chris DeVoney))
MS03-039 has been released - critical (paul.bobby at lmco.com (Bobby, Paul))
Re: MS03-039 has been released (DoS) sploit ? (elvi52001 at yahoo.com (Elv1S))
MS03-039 has been released - critical (Dallas_LaRose at s2systems.com (LaRose, Dallas))
[UPDATED] OpenServer 5.0.5 OpenServer 5.0.6 OpenServer 5.0.7 : Samba security update available avaliable for download. (security at sco.com (security@....com))
[UPDATED] OpenServer 5.0.7 OpenServer 5.0.6 OpenServer 5.0.5 : Multiple Remote Vulnerabilities in BIND (security at sco.com (security@....com))
[UPDATED] OpenServer 5.0.5 OpenServer 5.0.6 : Various security fixes for Apache. (security at sco.com (security@....com))
MS03-039 has been released - critical (jared.bergeron at office.xerox.com (Bergeron, Jared))

September 11 (92 messages)

EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II (Jeff.Urnaza at averydennison.com (Jeff.Urnaza@...rydennison.com))
MS03-039 - Exploit ... (elvi52001 at yahoo.com (Elv1S))
MS03-039 - Exploit ... (elvi52001 at yahoo.com (Elv1S))
MS03-039 has been released - critical (pete.ryan at thomson.com (Ryan, Pete))
Re: MS03-039 has been released (DoS) sploit ? (yannick.vanosselaer at pi.be (Yannick Van Osselaer))
CERT Advisory CA-2003-23 RPCSS Vulnerabilities in Microsoft Windows (fwd) (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
MS03-039 has been released - critical (listuser at seifried.org (Kurt Seifried))
Liu Die Yu findings verified, details (thor at pivx.com (Thor Larholm))
[inbox] Re: MS03-039 has been released (DoS) sploit ? (exibar at thelair.com (Exibar))
[inbox] RE: MS03-039 has been released - critical (exibar at thelair.com (Exibar))
RE: MS03-039 DoS Exploit (elvi52001 at yahoo.com (Elv1S))
MS03-039 has been released - critical (pete.ryan at thomson.com (Ryan, Pete))
MS03-039 has been released - critical (coley at mitre.org (Steven M. Christey))
Local variable memory allocation (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
[inbox] RE: MS03-039 has been released - critical (jade.deane at riven.net (Jade E. Deane))
Israeli boffins crack GSM code (vosipov at tpg.com.au (vosipov@....com.au))
MS03-039 - Exploit ... (ALudwig at Calfingroup.com (Andre Ludwig))
[inbox] Re: MS03-039 has been released (DoS) sploit ? (Reda.Zitouni at vigilante.com (Réda Zitouni))
Pine: .procmailrc rule against integer overflow (zen-parse at gmx.net (zen-parse))
MS03-039 has been released - critical (tamas.wallner at scansoft.com (waces))
[RHSA-2003:273-01] Updated pine packages fix vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
MS03-039 has been released - critical (dsoeder at eeye.com (Derek Soeder))
MS03-039 has been released - critical (tamas.wallner at scansoft.com (waces))
SuSE Security Announcement: pine (SuSE-SA:2003:037) (thomas at suse.de (Thomas Biege))
A precis of the new attacks against GSM encryption (fwd) (lluzar at tigeraudits.com (Lukasz Luzar))
[SECURITY] [DSA 379-1] New sane-backends packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
Re: MS03-039 has been released (DoS) sploit ? (elvi52001 at yahoo.com (Elv1S))
Re: Rpc Exploit (dksaarth at unix.za.net (Richard Spiers))
Fwd: MS03-039 scanner (3APA3A at SECURITY.NNOV.RU (3APA3A))
Why does a home computer user need DCOM? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Keeping IE up to date on a Windows Server (nick at virus-l.demon.co.uk (Nick FitzGerald))
Office 2000 Vulnerability (nick at virus-l.demon.co.uk (Nick FitzGerald))
AW: 9/11 virus (vogt at hansenet.com (vogt@...senet.com))
Break Administrator/Share Folder in Windows 2000/XP/NT (Need Tips & Trick) (Andry_Christian/JKT/INDOFOOD at indofood.co.id (Andry_Christian/JKT/INDOFOOD@...ofoo…)
Why does a home computer user need DCOM? (Jean-Baptiste.Marchand at hsc.fr (Jean-Baptiste Marchand))
PTms03039.zip (antipov at algo.ru (Alexander Antipov))
HTA/<object> vulnerability (rms at computerbytesman.com (Richard M. Smith))
The role of explicit advisories (was: MS03-039 has been released - critical) (l8km7gr02 at sneakemail.com (l8km7gr02@...akemail.com))
9/11 virus (rgerhards at hq.adiscon.com (Rainer Gerhards))
Symantec wants to criminalize security info sharing (rms at computerbytesman.com (Richard M. Smith))
Why does a home computer user need DCOM? (stephen.perciballi at ca.mci.com (Stephen Perciballi))
Break Administrator/Share Folder in Windows 2000/XP/NT (Need Tips & Trick) (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
AW: 9/11 virus (l8km7gr02 at sneakemail.com (l8km7gr02@...akemail.com))
Symantec wants to criminalize security info sharing (andy.wood at sptrm.com (Andy Wood))
Symantec wants to criminalize security info sharing (jonathan at xcorps.net (Jonathan Rickman))
Windows 2003 Server - Defeating the stack protection mechanism (nisr at nextgenss.com (NGSSoftware Insight Security Research))
AW: 9/11 virus (exibar at thelair.com (Exibar))
Symantec wants to criminalize security info sharing (adam at homeport.org (Adam Shostack))
Keeping IE up to date on a Windows Server (petard at sdf.lonestar.org (petard))
[RHSA-2003:273-01] Updated pine packages fix vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[ESA-20030911-022] Multiple 'pine' remote vulnerabilities. (security at guardiandigital.com (EnGarde Secure Linux))
Symantec wants to criminalize security info sharing (ggilliss at netpublishing.com (Gregory A. Gilliss))
Keeping IE up to date on a Windows Server (jeremiah at nur.net (Jeremiah Cornelius))
Computer Sabotage by Microsoft (s.esser at e-matters.de (Stefan Esser))
Break Administrator/Share Folder in Windows 2000/XP/NT (Need Tips & Trick) (Azerail at supersecretninjaskills.com (Azerail))
Computer Sabotage by Microsoft (jeremiah at nur.net (Jeremiah Cornelius))
Symantec wants to criminalize security info sharing (Azerail at supersecretninjaskills.com (Azerail))
Computer Sabotage by Microsoft (hescominsoon at adelphia.net (William Warren))
RPCheck (lm at intrinsic.it (Luigi Mori))
Computer Sabotage by Microsoft (s.esser at e-matters.de (Stefan Esser))
Computer Sabotage by Microsoft (pwicks at oxygen.com (James Patterson Wicks))
Computer Sabotage by Microsoft (paul.bobby at lmco.com (Bobby, Paul))
Break Administrator/Share Folder in Windows 2000/XP/NT (Need Tips & Trick) (david.vincent at mightyoaks.com (David Vincent))
4D WebSTAR FTP Buffer Overflow. (br00t at blueyonder.co.uk (B-r00t))
unix based network scanner for 2nd MS DCOM DCE RPC vulnerability (doke at UDel.Edu (Doke))
Foundstone DCOM Scanner (Jones.David.H at principal.com (Jones, David H))
Computer Sabotage by Microsoft (Azerail at supersecretninjaskills.com (Azerail))
Computer Sabotage by Microsoft (rgerhards at hq.adiscon.com (Rainer Gerhards))
Computer Sabotage by Microsoft (s.esser at e-matters.de (Stefan Esser))
unix based network scanner for 2nd MS DCOM DCE RPC vulnerability (jeremiah at nur.net (Jeremiah Cornelius))
RE: Symantec wants to criminalize security info sharing (jasonc at science.org (Jason Coombs))
Computer Sabotage by Microsoft (rgerhards at hq.adiscon.com (Rainer Gerhards))
Foundstone DCOM Scanner (illectro2001 at yahoo.com (Chris Sharp))
Computer Sabotage by Microsoft (peter at bank-connect.com (Peter van den Heuvel))
DNS Poisoning? (Dark-Avenger at comcast.net (Dark Avenger))
Foundstone DCOM Scanner (jheidtke at fmlh.edu (Jerry Heidtke))
Computer Sabotage by Microsoft (s.esser at e-matters.de (Stefan Esser))
Computer Sabotage by Microsoft (hescominsoon at adelphia.net (William Warren))
Computer Sabotage by Microsoft (manofwar at web.de (Oliver Beck))
RE: Symantec wants to criminalize security info sharing (thor at pivx.com (Thor Larholm))
Positive Technologies DCOM Buffer Overflow2 Signatures/Packets (loki at fatelabs.com (Eric Hines))
RE: Computer Sabotage by Microsoft (shay_wilson at legis.state.ak.us (Shay Wilson))
RE: Symantec wants to criminalize security info sharing (l8km7gr02 at sneakemail.com (l8km7gr02@...akemail.com))
Internet explorer 6 on windows XP allows exection of arbitrary code (jkuperus at planet.nl (jelmer))
Foundstone DCOM Scanner (jheidtke at fmlh.edu (Jerry Heidtke))
Computer Sabotage by Microsoft (andy at digitalindustry.org (Andy Wood))
RE: Computer Sabotage by Microsoft (thor at pivx.com (Thor Larholm))
Re: Computer Sabotage by Microsoft (sundiatah1 at comcast.net (Qv6))
RE: Computer Sabotage by Microsoft (kennethx.m.presler at intel.com (Presler, KennethX M))
Internet explorer 6 on windows XP allows exection of arbitrary code (jkuperus at planet.nl (jelmer))
Internet explorer 6 on windows XP allows exection of arbitrary code (jkuperus at planet.nl (jelmer))
Symantec wants to criminalize security info sharing (cmeeusen at bnl.gov (Meeusen, Charles D))

September 12 (103 messages)

SRT2003-09-11-1200 - setgid man MANPL overflow (dotslash at snosoft.com (KF))
Re: Computer Sabotage by Microsoft (s.esser at e-matters.de (Stefan Esser))
Computer Sabotage by Microsoft (peter at bank-connect.com (Peter van den Heuvel))
RE: Symantec wants to criminalize security info sharing (jasonc at science.org (Jason Coombs))
Re: Computer Sabotage by Microsoft (measl at mfn.org (J.A. Terranson))
Internet explorer 6 on windows XP allows exection of arbitrary code (khermansen at ht-technology.com (Kristian Hermansen))
Keeping IE up to date on a Windows Server (jays at panix.com (Jay Sulzberger))
Computer Sabotage by Microsoft (rkingsla at cox.net (Rick Kingslan))
Computer Sabotage by Microsoft (booger at unixclan.net (security snot))
Internet explorer 6 on windows XP allows exection of arbitrary code (thor at pivx.com (Thor Larholm))
Re: Computer Sabotage by Microsoft (bugtraq at planetcobalt.net (Ansgar Wiechers))
Re: Computer Sabotage by Microsoft (sysadmin at sunet.com.au (Systems Administrator))
Re: Computer Sabotage by Microsoft (anthonysaffer at yahoo.com (Anthony Saffer))
Computer Sabotage by Microsoft (l8km7gr02 at sneakemail.com (l8km7gr02@...akemail.com))
Computer Sabotage by Microsoft (jays at panix.com (Jay Sulzberger))
RE:Internet explorer 6 on windows XP allows exection of arbitrary code ( and opera and Mozilla too) (meme-boi at nothotmail.org (meme-boi))
Computer Sabotage by Microsoft (jays at panix.com (Jay Sulzberger))
Re: Computer Sabotage by Microsoft (rkingsla at cox.net (Rick Kingslan))
RE: Symantec wants to criminalize security info sharing (dowlingg at sullcrom.com (Dowling, Gabrielle))
Foundstone DCOM Scanner (msoda at comcast.net (Marc Soda))
Re: Computer Sabotage by Microsoft (BlueBoar at thievco.com (Blue Boar))
Symantec wants to criminalize security info sharing (BlueBoar at thievco.com (Blue Boar))
RE:Internet explorer 6 on windows XP allows exection of arbitrary code ( and opera and Mozilla too) (jeremiah at nur.net (Jeremiah Cornelius))
Re: Computer Sabotage by Microsoft (JThomas at poweronemedia.com (Joshua Thomas))
Computer Sabotage by Microsoft (jays at panix.com (Jay Sulzberger))
Computer Sabotage by Microsoft (rkingsla at cox.net (Rick Kingslan))
Computer Sabotage by Microsoft (ercole at panix.com (Joseph Ercole))
AW: 9/11 virus (ralfml at alfray.com (Ralf))
Computer Sabotage by Microsoft (jays at panix.com (Jay Sulzberger))
Foundstone DCOM Scanner (nodialtone at comcast.net (Byron Copeland))
AW: 9/11 virus (psz at maths.usyd.edu.au (Paul Szabo))
Foundstone DCOM Scanner (j_joensuu at yahoo.com (Jarmo Joensuu))
Preventing-issues-in-web-UI FAQ? (ralfml at alfray.com (Ralf))
MDKSA-2003:089 - Updated XFree86 packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Computer Sabotage by Microsoft (rgerhards at hq.adiscon.com (Rainer Gerhards))
RE: Computer Sabotage by Microsoft (mds at helices.org (Michael D Schleif))
RE: Computer Sabotage by Microsoft (amarx at gega-it.de (Andreas Marx))
AW: AW: 9/11 virus (vogt at hansenet.com (vogt@...senet.com))
AW: Computer Sabotage by Microsoft (vogt at hansenet.com (vogt@...senet.com))
[ http://www.k-otik.com/exploits/07.21.win2kdos.c.php ] (jho at starhub.com (Julian HO Thean Swee))
Unwanted file download on Yahoo (life_is_so_boring at yahoo.co.in (**Saurabh**))
Internet explorer 6 on windows XP allows exection of arbitrary code (jkuperus at planet.nl (jelmer))
Internet explorer 6 on windows XP allows exection of arbitrary code (jkuperus at planet.nl (jelmer))
Re: Computer Sabotage by Microsoft (ralph at strg-alt-entf.org (Ralph Angenendt))
Re: Computer Sabotage by Microsoft (andy at digitalindustry.org (Andy Wood))
Re: Computer Sabotage by Microsoft (rgerhards at hq.adiscon.com (Rainer Gerhards))
Computer Sabotage by Microsoft (delta at lug-s.org (Helmut Springer))
Foundstone DCOM Scanner (marc at eeye.com (Marc Maiffret))
playing pocketc... (qobaiashi at gmx.net (qobaiashi@....net))
AW: AW: RE: Computer Sabotage by Microsoft (michael.henkel at eds.com (Henkel, Michael))
explorer.exe on port 1024 tcp (joel at helgeson.com (Joel R. Helgeson))
RE:Internet explorer 6 on windows XP allows exection of arbitrary code ( and opera and Mozilla too) (jkuperus at planet.nl (jelmer))
[ http://www.k-otik.com/exploits/07.21.win2kdos.c.php ] (vosipov at tpg.com.au (Vitaly Osipov))
// playing pocketc woops (qobaiashi at gmx.net (qobaiashi@....net))
OISAFTEY should be "criminalized." (dave at immunitysec.com (dave@...unitysec.com))
Computer Sabotage by Microsoft (chrisw at cinci.rr.com (Chris Wanstrath))
AW: RE: Computer Sabotage by Microsoft (rgerhards at hq.adiscon.com (Rainer Gerhards))
AW: AW: RE: Computer Sabotage by Microsoft (felix.roennebeck at gaussvip.com (felix.roennebeck@...ssvip.com))
Computer Sabotage by Microsoft (l8km7gr02 at sneakemail.com (l8km7gr02@...akemail.com))
RPC scanners (pauls at utdallas.edu (Schmehl, Paul L))
AW: RE: Computer Sabotage by Microsoft (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Unwanted file download on Yahoo (life_is_so_boring at yahoo.co.in (**Saurabh**))
AW: RE: Computer Sabotage by Microsoft (rgerhards at hq.adiscon.com (Rainer Gerhards))
Internet explorer 6 on windows XP allows exection of arbitrary code (1 at malware.com (http-equiv@...ite.com))
RPC scanners (randy.brown at hp.com (Brown, Randy (InfoSec)))
Computer Sabotage by Microsoft (booger at unixclan.net (security snot))
Oh, this is good. (caferace at well.com (J. Race))
b62.inc (lhand at co.la.ca.us (Larry Hand))
Internet explorer 6 on windows XP allows exection of arbitrary code (rms at computerbytesman.com (Richard M. Smith))
Internet explorer 6 on windows XP allows exection of arbitrary code (rms at computerbytesman.com (Richard M. Smith))
RPC scanners (deji at akomolafe.com (deji))
Looking for linux code of a rpc dcom Scanner (pel at adv.magwien.gv.at (Pellmann Paul))
RPC scanners (Matthew.Wagenknecht at Quantum.com (Matthew Wagenknecht))
Unwanted file download on Yahoo (l8km7gr02 at sneakemail.com (l8km7gr02@...akemail.com))
oops - b62.inc (lhand at co.la.ca.us (Larry Hand))
Strange Code...found in a Website...anyone who knows what this is? (bc_kamikatze at yahoo.de (KaMiKaTzE))
Looking for linux code of a rpc dcom Scanner (carl.belanger at wave-hosting.net (Carl Belanger))
Looking for linux code of a rpc dcom Scanner (petard at sdf.lonestar.org (petard))
[SECURITY] [DSA-380-1] New xfree86 packages fix multiple vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)
RPC scanners (pauls at utdallas.edu (Schmehl, Paul L))
Re: Preventing-issues-in-web-UI FAQ? (coley at mitre.org (Steven M. Christey))
Strange Code...found in a Website...anyone who knows what this is? (damian at sentex.net (Damian Gerow))
Strange Code...found in a Website...anyone who knows what this is? (matthew at textbox.net (404))
Strange Code...found in a Website...anyone who knows what this is? (dotslash at snosoft.com (KF))
Strange Code...found in a Website...anyone who knows what this is? (l8km7gr02 at sneakemail.com (l8km7gr02@...akemail.com))
Re: BAD NEWS: Microsoft Security Bulletin MS03-032 (cristjc at comcast.net (Crist J. Clark))
Strange Code...found in a Website...anyone who knows what this is? (steven_fruchter at hotmail.com (Steven Fruchter))
RE: BAD NEWS: Microsoft Security Bulletin MS03-032 (dcopley at eeye.com (Drew Copley))
RE: Computer Sabotage by Microsoft (emconnor at hendersonbrothers.com (Connor, Ethan M. W))
RE: Internet explorer 6 on windows XP allows exection of arbitrary code ( and opera and Mozilla too) (dcopley at eeye.com (Drew Copley))
Internet explorer 6 on windows XP allows exection of arbitrary code (jkuperus at planet.nl (jelmer))
Internet explorer 6 on windows XP allows exection of arbitrary code (dcopley at eeye.com (Drew Copley))
Re: Internet explorer 6 on windows XP allows exection of arbitrary code (info at djmegaworld.nl (Dj MegaWorld))
Strange Code...found in a Website...anyone who knows what this is? - [MODERATED] (jason at positivenetworks.net (On-the-fly Security Institute))
Internet explorer 6 on windows XP allows exection of arbitrary code (thor at pivx.com (Thor Larholm))
Strange Code...found in a Website...anyone who knows what this is? - [MODERATED] (jason at positivenetworks.net (On-the-fly Security Institute))
VSNL POP Webmail Referer Vulnerability (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Fw: Re: Wired misquote [Symantec want's to criminalize full-disclosure] (mds at helices.org (Michael D Schleif))
Re: BAD NEWS: Microsoft Security Bulletin MS03-032 (cristjc at comcast.net (Crist J. Clark))
4 more messages

September 13 (26 messages)

Strange Code...found in a Website...anyone who knows what this is? - [MODERATED] (jeremiah at nur.net (Jeremiah Cornelius))
Symantec wants to criminalize security info sharing (avalon at caligula.anu.edu.au (Darren Reed))
VSNL POP Webmail Referer Vulnerability (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Questions Regarding PINE Integer Overflow (dragon_eyes1492 at yahoo.com (dragoneyes yep.))
Re: Wired misquote [Symantec want's to criminalize full-disclosure] (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
AW: 9/11 virus (nick at virus-l.demon.co.uk (Nick FitzGerald))
Eudora 6.0 attachment spoof, exploit (psz at maths.usyd.edu.au (Paul Szabo))
Re: Wired misquote [Symantec want's to criminalize full-disclosure] (jeremiah at nur.net (Jeremiah Cornelius))
Looking for linux code of a rpc dcom Scanner (fw at deneb.enyo.de (Florian Weimer))
Computer Sabotage by Microsoft (Azerail at supersecretninjaskills.com (Azerail))
Administrivia: Noise and Politics (len at netsys.com (Len Rose))
Re: Internet explorer 6 on windows XP allows exection of arbitrary code (Demonstration Exploit Warning) (sgmasood at yahoo.com (S G Masood))
Re: Computer Sabotage by Microsoft (bugtraq at planetcobalt.net (Ansgar Wiechers))
Re: Internet explorer 6 on windows XP allows exection of arbitrary code (Demonstration Exploit Warning) (jkuperus at planet.nl (jelmer))
Computer Sabotage by Microsoft (jays at panix.com (Jay Sulzberger))
Re: Computer Sabotage by Microsoft (ggilliss at netpublishing.com (Gregory A. Gilliss))
Re: Internet explorer 6 on windows XP allows exection of arbitrary code (Demonstration Exploit Warning) (sgmasood at yahoo.com (S G Masood))
The Funeral [REF: OISAFETY should be "criminalized." & Administrivia: Noise and Politics] (sgmasood at yahoo.com (S G Masood))
Re: Computer Sabotage by Microsoft (rgerhards at hq.adiscon.com (Rainer Gerhards))
Alternate Fix/Workaround for Jelmer's ADO Activex Bug (dcopley at eeye.com (Drew Copley))
Administrivia: Noise and Politics (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Eudora 6.0 attachment spoof, exploit (psz at maths.usyd.edu.au (Paul Szabo))
Eudora 6.0 attachment spoof, exploit (psz at maths.usyd.edu.au (Paul Szabo))
Eudora 6.0 attachment spoof, exploit (psz at maths.usyd.edu.au (Paul Szabo))
Eudora 6.0 attachment spoof, exploit (psz at maths.usyd.edu.au (Paul Szabo))
Eudora 6.0 attachment spoof, exploit (psz at maths.usyd.edu.au (Paul Szabo))

September 14 (20 messages)

HTA/<object> vulnerability (aditya at mail15.com (Aditya))
Re: Computer Sabotage by Microsoft (computer at jacox.net (James A. Cox))
Administrivia: Noise and Politics (jshevland at ozemail.com.au (Joe Shevland))
[SECURITY] [DSA-381-1] New mysql packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Re: Administrivia: Noise and Politics (madduck at madduck.net (martin f krafft))
Why does a home computer user need DCOM? (cocksucker at mail2man.com (Quite Mad))
Mysql 3.23.x/4.0.x Remote Root Exploit (elvi52001 at yahoo.com (Elv1S))
Mysql 3.23.x/4.0.x Remote Root Exploit (j at pureftpd.org (Jedi/Sector One))
Mysql 3.23.x/4.0.x Remote Root Exploit (a.gietl at e-admin.de (Andreas Gietl))
Mysql 3.23.x/4.0.x Remote Root Exploit (kilian.cavalotti at crans.org (Kilian CAVALOTTI))
Information about my last project: Trylobite (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
RPC DCOM 2 Remote Exploit MS03-039 ? (elvi52001 at yahoo.com (Elv1S))
Re: Administrivia: Noise and Politics (pauls at utdallas.edu (Schmehl, Paul L))
Re: Administrivia: Noise and Politics (jsage at finchhaven.com (John Sage))
[TROJAN Win32] Can't identify trojan found on Win98SE box (ynezz at hysteria.sk (Petr Stetiar))
[TROJAN Win32] Can't identify trojan found on Win98SE box (ynezz at hysteria.sk (Petr Stetiar))
SV: [TROJAN Win32] Can't identify trojan found on Win98SE box (kruse at krusesecurity.dk (Peter Kruse))
IIS6 Security Issues (Matthew.Wagenknecht at Quantum.com (Matthew Wagenknecht))
[TROJAN Win32] Can't identify trojan found on Win98SE box (smuhammed at unicef.org (Suhail Muhammed))
RE: Computer Sabotage by Microsoft (killedbythoughts at mindcrime.net (Sebastian Niehaus))

September 15 (62 messages)

Windows Movie maker 2 determines a supportive file type JUST by judging its extension! (door_hUNT3R at blackcodemail.com (Bipin Gautam))
Subject prefix changing! READ THIS! SURVEY!! (mberg447 at comcast.net (Michael Berg))
Special file names in ZIP Files - small issue in Windows and potentially others (rgerhards at hq.adiscon.com (Rainer Gerhards))
Re: Administrivia: Noise and Politics (vdongen at hetisw.nl (I.R.van Dongen))
GLSA: mysql (200309-08) (aliz at gentoo.org (Daniel Ahlberg))
SCO internet manager local root. (full-disclosure at texonet.com (Texonet))
OpenServer 5.0.7 OpenServer 5.0.6 OpenServer 5.0.5 : SCO Internet Manager - local users can gain root level privileges. (security at sco.com (security@....com))
Re: Administrivia: Noise and Politics (webappsec at technicalinfo.net (webappsec@...hnicalinfo.net))
Re: RPC DCOM 2 Remote Exploit MS03-039 ? (suicyc0 at hush.com (suicyc0@...h.com))
[OpenPKG-SA-2003.038] OpenPKG Security Advisory (mysql) (openpkg at openpkg.org (OpenPKG))
GLSA: exim (200309-09) (aliz at gentoo.org (Daniel Ahlberg))
ID tags in rental / high-priced retail suits? (was: Administrivia: Noise and Politics) (l8km7gr02 at sneakemail.com (l8km7gr02@...akemail.com))
Immunity's paper? (exibar at thelair.com (Exibar))
Mysql 3.23.x/4.0.x Remote Root Exploit (msopacua at idg.nl (Melvyn Sopacua))
[OpenPKG-SA-2003.039] OpenPKG Security Advisory (perl) (openpkg at openpkg.org (OpenPKG))
Immunity's paper? (tharbad at kaotik.org (Joao Gouveia))
Immunity's paper? (jheidtke at fmlh.edu (Jerry Heidtke))
ID tags in rental / high-priced retail suits? (was: Admin (l8km7gr02 at sneakemail.com (l8km7gr02@...akemail.com))
Immunity's paper? (anthony.aykut at frame4.com (Anthony Aykut))
Blocking Music Sharing. (mjohnson at nmcr.com (Johnson, Mark))
Fw: Windows RPC DCOM Dos exploit (hackerwacker at cybermesa.com (james))
Blocking Music Sharing. (jbethune at town.kentville.ns.ca (Jason Bethune))
Re: Full-Disclosure digest, Vol 1 #1114 - 33 msgs (corliss at digitalmages.com (Arthur Corliss))
Blocking Music Sharing. (larryr at netbeam.net (Larry Roberts))
DSPAM Default Permissions Vulnerability (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Blocking Music Sharing. (dlimanov at sct.com (Dimitri Limanovski))
Blocking Music Sharing. (Carl.Andrews at crackerbarrel.com (Andrews Carl 448))
Qualys scanner fails to detect rst.b trojan? (onedo at gmx.net (ned))
Immunity's paper? (exibar at thelair.com (Exibar))
Immunity's paper? (jheidtke at fmlh.edu (Jerry Heidtke))
Blocking Music Sharing. (lists at onryou.com (Cael Abal))
Blocking Music Sharing. (jared.bergeron at office.xerox.com (Bergeron, Jared))
Blocking Music Sharing. (daniel_clemens at autism.birmingham-infragard.org (daniel uriah clemens))
Blocking Music Sharing. (denis at dimick.net (Denis Dimick))
Blocking Music Sharing. (srenna at vdbmusic.com (srenna@...music.com))
new ssh exploit? (chris at neitzert.com (christopher neitzert))
Blocking Music Sharing. (smenard at nbnet.nb.ca (S Menard))
Re: Administrivia: Noise and Politics (dufresne at winternet.com (Ron DuFresne))
Blocking Music Sharing. (lists at ciphin.com (Todd Mitchell - lists))
IE Object Type Validation Vulnerability Exploit (n30_lists at hotmail.com (n30))
Blocking Music Sharing. (hackerwacker at cybermesa.com (james))
Blocking Music Sharing. (dufresne at winternet.com (Ron DuFresne))
Blocking Music Sharing. (2of2 at unimatrix01.us (David Loyd))
new ssh exploit? (booger at unixclan.net (security snot))
IE Object Type Validation Vulnerability Exploit (phlox at comcast.net (phlox))
new ssh exploit? (phlox at comcast.net (phlox))
new ssh exploit? (chris at neitzert.com (christopher neitzert))
Blocking Music Sharing. (khermansen at ht-technology.com (Kristian Hermansen))
Blocking Music Sharing. (djsnm at djsnm.com (Scott Manley))
[disclosure] Re: Subject prefix changing! READ THIS! SURVEY!! (bruno_fob at bellsouth.net (Bruno))
new ssh exploit? (adam at homeport.org (Adam Shostack))
Blocking Music Sharing. (j at pureftpd.org (Jedi/Sector One))
Security firm Symantec has rubbed subscribers to the Full-Disclosure mailing list the wrong way (gshively at pivx.com (Geoff Shively))
Blocking Music Sharing (mgasperi at web.de (Michael Gasperi))
new ssh exploit? (nodialtone at comcast.net (Byron Copeland))
new ssh exploit? (jkreger at lwolenczak.net (Justin Kreger))
Eudora 6.0 attachment spoof, exploit (cdevoney at u.washington.edu (Chris DeVoney))
GLSA: mysql (200309-08) (aliz at gentoo.org (Daniel Ahlberg))
IE Object Type Validation Vulnerability Exploit (n30_lists at hotmail.com (n30))
explorer.exe on port 1024 tcp (aditya at mail15.com (Aditya))
new ssh exploit? (avalon at caligula.anu.edu.au (Darren Reed))
GLSA: mysql (200309-08) (aliz at gentoo.org (Daniel Ahlberg))

September 16 (100 messages)

ID tags in rental / high-priced retail suits? (avalon at caligula.anu.edu.au (Darren Reed))
Security firm Symantec has rubbed subscribers to the Full-Disclosure mailing list the wrong way (yossarian at planet.nl (yossarian))
IE Object Type Validation Vulnerability Exploit (titus at hush.com (titus@...h.com))
Blocking Music Sharing (Zach.Forsyth at kiandra.com (Zach Forsyth))
openssh remote exploit (auto64746 at hushmail.com (auto64746@...hmail.com))
Blocking Music Sharing. (lists at onryou.com (Cael Abal))
openssh remote exploit (avalon at caligula.anu.edu.au (Darren Reed))
Blocking Music Sharing. (Albert.Saerong at id.ey.com (Albert Saerong))
websites and privacy (n30_lists at hotmail.com (n30))
Strange Code...found in a Website...anyone who knows what this is? (mdiehl at dominion.dyndns.org (Mike Diehl (Encrypted email prefer red)))
Windows Movie maker 2 determines a supportive file type JUST by judging its extension! (door_hUNT3R at blackcodemail.com (Bipin Gautam))
New worm on port 445 ? (full-disclosure at szczepanek.de (Torge Szczepanek))
IE Object Type Validation Vulnerability Exploit (amarx at gega-it.de (Andreas Marx))
The lowdown on SSH vulnerability (carl at learningshophull.co.uk (Carl Livitt))
east coast powergrid / SCADA [OT?] (Peter_Osterberg at home.se (Peter Osterberg))
The lowdown on SSH vulnerability (carl at learningshophull.co.uk (Carl Livitt))
Blocking Music Sharing. (sam at reefedge.com (Sam Baskinger))
Global *.net XSS, thank you Verisign(TM) (xss_slut at hushmail.com (xss_slut@...hmail.com))
Re: Computer Sabotage by Microsoft (usura at zedz.net (Alex de Joode))
websites and privacy (kernelclue at hushmail.com (kernelclue@...hmail.com))
want to be paid for your opinion? (ucg7vlzsl at tka.att.ne.jp (Lola Elkins))
openssh remote exploit (auto64746 at hushmail.com (auto64746@...hmail.com))
VBScript/JScript.Encode Decoder (amarx at gega-it.de (Andreas Marx))
new ssh exploit? (a.gietl at e-admin.de (Andreas Gietl))
The lowdown on SSH vulnerability (zim at iq.pl (Robert Jaroszuk))
The lowdown on SSH vulnerability (andy at digitalindustry.org (Andy Wood))
The lowdown on SSH vulnerability (bkdelong at pobox.com (B.K. DeLong))
The lowdown on SSH vulnerability (daniel at eds.de (Daniel Berg))
Security firm Symantec has rubbed subscribers to the Full-Disclosure mailing list the wrong way (lists at onryou.com (Cael Abal))
IE Object Type Validation Vulnerability Exploit (lists at onryou.com (Cael Abal))
iDEFENSE Security Advisory 09.16.03: Remote Root Exploitation of Default Solaris sadmind Setting (labs at idefense.com (iDEFENSE Labs))
openssh remote exploit (tss at iki.fi (Timo Sirainen))
Global *.net XSS, thank you Verisign(TM) (j at pureftpd.org (Jedi/Sector One))
Blocking Music Sharing. (nick at virus-l.demon.co.uk (Nick FitzGerald))
want to be paid for your opinion? (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
explorer.exe on port 1024 tcp (elias2000ca at yahoo.ca (Elias Silva))
Global *.net XSS, thank you Verisign(TM) (marcs at znep.com (Marc Slemko))
Global *.net XSS, thank you Verisign(TM) (rms at computerbytesman.com (Richard M. Smith))
VBScript/JScript.Encode Decoder (lists at onryou.com (Cael Abal))
openssh remote exploit (ffddfe at yahoo.com (Diode Trnasistor))
new ssh exploit? (dufresne at winternet.com (Ron DuFresne))
Global *.net XSS, thank you Verisign(TM) (james.greenhalgh at worldpay.com (James Greenhalgh))
new ssh exploit? (dufresne at winternet.com (Ron DuFresne))
iDEFENSE Security Advisory 09.16.03: Remote Root Exploitation of Default Solaris sadmind Setting (devon at lithiumnode.com (Person))
[ESA-20030916-023] OpenSSH buffer management error. (security at guardiandigital.com (EnGarde Secure Linux))
Windows Movie maker 2 determines a supportive file type JUST by judging its extension! (ggilliss at netpublishing.com (Gregory A. Gilliss))
New worm on port 445 ? (Jeff_Lopes at groove.net (Jeff_Lopes@...ove.net))
Global *.net XSS, thank you Verisign(TM) (pablos at shmoo.com (Paul Holman))
The lowdown on SSH vulnerability (mark at ifl.net (Mark Vevers))
VBScript/JScript.Encode Decoder (amarx at gega-it.de (Andreas Marx))
openssh remote exploit (avalon at caligula.anu.edu.au (Darren Reed))
SSH Vulnerability (dmilisic at canada.com (Dan A. Milisic))
new ssh exploit? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
new ssh exploit? (bet at rahul.net (Bennett Todd))
[RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Global *.net XSS, thank you Verisign(TM) (spam at def-con.org (tadpole-boy))
VBScript/JScript.Encode Decoder (helmut_hauser at hotmail.com (Helmut Hauser))
Global *.net XSS, thank you Verisign(TM) (djsnm at djsnm.com (Scott Manley))
[RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[SECURITY] [DSA-382-1] OpenSSH buffer management fix (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Yahoo! Webcam ActiveX control buffer overflow. (cesarc56 at yahoo.com (Cesar))
iDEFENSE Security Advisory 09.16.03: Remote Root Exploitation of Default Solaris sadmind Setting (titus at hush.com (titus@...h.com))
Re: [RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (dave at themaneater.com (Dave Monk))
IE Object Type Validation Vulnerability Exp loit (Steve.Pelosi at conocophillips.com (Pelosi, Stephen:))
Re: Qualys scanner detects rst.b trojan? (smanley at qualys.com (Scott Manley))
FreeBSD Security Advisory FreeBSD-SA-03:12.openssh (security-advisories at freebsd.org (FreeBSD Security Advisories))
IE Object Type Validation Vulnerability Exploit (olafandjasper at hushmail.com (olafandjasper@...hmail.com))
OpenSSH exploit (ray at sdf1.net (Ray Slakinski))
openssh remote exploit (support at mmicman.com (Edward W. Ray))
EXPLOIT : RPC DCOM (MS03-039) (elvi52001 at yahoo.com (Elv1S))
new ssh exploit? (dufresne at winternet.com (Ron DuFresne))
MDKSA-2003:090 - Updated openssh packages fix buffer management error (security at linux-mandrake.com (Mandrake Linux Security Team))
openssh remote exploit (petard at sdf.lonestar.org (petard))
openssh remote exploit (avalon at caligula.anu.edu.au (Darren Reed))
SuSE Security Announcement: openssh (SuSE-SA:2003:038) (draht at suse.de (Roman Drahtmueller))
iDEFENSE Security Advisory 09.16.03: Remote Root Exploitation of Default Solaris sadmind Setting (devon at lithiumnode.com (Person))
[RHSA-2003:269-01] Updated KDE packages fix security issues (bugzilla at redhat.com (bugzilla@...hat.com))
openssh remote exploit (avalon at caligula.anu.edu.au (Darren Reed))
new ssh exploit? (list at hardlined.com (Shanphen Dawa))
iDEFENSE Security Advisory 09.16.03: Remote Root Exploitation of Default Solaris sadmind Setting (avalon at caligula.anu.edu.au (Darren Reed))
IRIX 6.5.21 NFS export vulnerability (agent99 at sgi.com (SGI Security Coordinator))
new ssh exploit? (fw at deneb.enyo.de (Florian Weimer))
[Announcement] New Weekly Security Vulnerability List (fwd) (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
openssh remote exploit (mike at prismnet.com (Mike Griffin))
GLSA: openssh (200309-11) (aliz at gentoo.org (Daniel Ahlberg))
EXPLOIT : RPC DCOM (MS03-039) (jasonc at science.org (Jason Coombs))
Blocking Music Sharing. (dufresne at winternet.com (Ron DuFresne))
[KDE SECURITY ADVISORY] KDM vulnerabilities (mueller at kde.org (Dirk Mueller))
Exploiting Multiple Flaws in Symantec Antivirus 2004 for Windows Mobile (auto9115 at hushmail.com (auto9115@...hmail.com))
new ssh exploit? (bet at rahul.net (Bennett Todd))
[RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
OpenSSH exploit (chris at neitzert.com (christopher neitzert))
[RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
openssh remote exploit (BlueBoar at thievco.com (Blue Boar))
OpenSSH exploit (adeon at o2.pl (Adam Dyga))
Re: [RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (kernelclue at hushmail.com (kernelclue@...hmail.com))
[VulnWatch] IRIX 6.5.21 NFS export vulnerability (agent99 at sgi.com (SGI Security Coordinator))
new ssh exploit? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Exploiting Multiple Flaws in Symantec Antivirus 2004 for Windows Mobile (door_hUNT3R at blackcodemail.com (Bipin Gautam))
ReExploiting Multiple .... +another NAV FLAWS (door_hUNT3R at blackcodemail.com (Bipin Gautam))

September 17 (136 messages)

EXPLOIT : RPC DCOM (MS03-039) (pdt at jackhammer.org (pdt@...khammer.org))
IE Object Type Validation Vulnerability Exploit (n30_lists at hotmail.com (n30))
new ssh exploit? (dinn at blend.twistedpair.ca (Michael 'Moose' Dinn))
Global *.net XSS, thank you Verisign(TM) (measl at mfn.org (J.A. Terranson))
OpenSSH exploit (itojun at itojun.org (Jun-ichiro itojun Hagino))
Re: Contents of Full-Disclosure digest... (r00tlevel4 at softhome.net (rootlevel4))
whoch DCOM exploit code are they speaking about here? (jkarp at visionael.com (Josh Karp))
(no subject) (rbrown at doitt.nyc.gov (Brown, Rodrick))
iDEFENSE Security Advisory 09.16.03: Remote Root Exploitation of Default Solaris sadmind Setting (titus at hush.com (titus@...h.com))
Blocking Music Sharing. (Zach.Forsyth at kiandra.com (Zach Forsyth))
OpenSSH exploit w/privsep (rbrown at doitt.nyc.gov (Brown, Rodrick))
new ssh exploit? (BlueBoar at thievco.com (Blue Boar))
The lowdown on SSH vulnerability (jshevland at ozemail.com.au (Joe Shevland))
Exploiting Multiple Flaws in Symantec Antivirus 2004 for Windows Mobile (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
EXPLOIT : RPC DCOM (MS03-039) (jheidtke at fmlh.edu (Jerry Heidtke))
Another Yahoo! ActiveX hole (cesarc56 at yahoo.com (Cesar))
Exploiting Multiple Flaws in Symantec Antivirus 2004 for Windows Mobile (matthew.brown at erogo.com (Matthew J. Brown))
Blocking Music Sharing. (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
whoch DCOM exploit code are they speaking about here? (jheidtke at fmlh.edu (Jerry Heidtke))
Fw: whoch DCOM exploit code are they speaking about here? (edwin at link.net.id (SPAM))
RE: Exploiting Multiple Flaws in Symantec Antivirus 2004 for Windows Mobile (fwd) (thor at pivx.com (Thor Larholm))
Verisign abusing .COM/.NET monopoly, BIND releases new (thor at pivx.com (Thor Larholm))
openssh remote exploit (hb-fulldisclosure at bsws.de (Henning Brauer))
whoch DCOM exploit code are they speaking about here? (elvar at ooz.net (Elvar))
Blocking Music Sharing. (rkingsla at cox.net (Rick Kingslan))
Verisign abusing .COM/.NET monopoly, BIND releases new (jlevitsk at joshie.com (Joshua Levitsky))
whoch DCOM exploit code are they speaking about here? (rbrown at doitt.nyc.gov (Brown, Rodrick))
Verisign abusing .COM/.NET monopoly, BIND releases new (jlevitsk at joshie.com (Joshua Levitsky))
EXPLOIT : RPC DCOM (MS03-039) (pdt at jackhammer.org (Paul Tinsley))
Verisign abusing .COM/.NET monopoly, BIND releases new (full-disclosure at ifokr.org (Brian Hatch))
RE: Exploiting Multiple Flaws in Symantec Antivirus 2004 for Windows Mobile (fwd) (Zach.Forsyth at kiandra.com (Zach Forsyth))
Blocking Music Sharing. (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Verisign abusing .COM/.NET monopoly, BIND releases new (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Verisign abusing .COM/.NET monopoly, BIND releases new (full-disclosure at ifokr.org (Brian Hatch))
Verisign abusing .COM/.NET monopoly, BIND releases new (mike at m5computersecurity.com (Michael J McCafferty))
Verisign abusing .COM/.NET monopoly, BIND releases new (rgerhards at hq.adiscon.com (Rainer Gerhards))
Verisign abusing .COM/.NET monopoly, BIND releases new (security at dylanic.de (Michael Renzmann))
MDKSA-2003:091 - Updated kdebase packages fix vulnerabilities in KDM (security at linux-mandrake.com (Mandrake Linux Security Team))
IE Object Type Validation Vulnerability (masterrat666 at yahoo.com (Mr M R))
EXPLOIT : RPC DCOM (MS03-039) (fw at deneb.enyo.de (Florian Weimer))
OpenSSH exploit w/privsep (fw at deneb.enyo.de (Florian Weimer))
whoch DCOM exploit code are they speaking a bout here? (R.Ferris at napier.ac.uk (Ferris, Robin))
Verisign abusing .COM/.NET monopoly, BIND releases new (rgerhards at hq.adiscon.com (Rainer Gerhards))
Cisco Security Advisory: OpenSSH Server Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Cisco Security Advisory: OpenSSH Server Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Verisign abusing .COM/.NET monopoly, BIND releases new (kilian.cavalotti at crans.org (Kilian CAVALOTTI))
Re: [RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (matt at clues.com (Matt Collins))
Verisign abusing .COM/.NET monopoly, BIND releases new (nexus at patrol.i-way.co.uk (Nexus))
Verisign abusing .COM/.NET monopoly, BIND releases new (rgerhards at hq.adiscon.com (Rainer Gerhards))
openssh remote exploit (adeon at tlen.pl (Adam Dyga))
Verisign abusing .COM/.NET monopoly, BIND releases new (security at dylanic.de (Michael Renzmann))
[SECURITY] [DSA-382-2] OpenSSH buffer management fix (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Re: [RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (rbrown at doitt.nyc.gov (Brown, Rodrick))
Re: [RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (j at pureftpd.org (Jedi/Sector One))
Sendmail 8.12.9 prescan bug (a new one) [CAN-2003-0694] (lcamtuf at dione.ids.pl (Michal Zalewski))
[TURBOLINUX SECURITY INFO] 17/Sep/2003 (security-announce at turbolinux.co.jp (Turbolinux))
Verisign abusing .COM/.NET monopoly, BIND releases new (mds at helices.org (Michael D Schleif))
whoch DCOM exploit code are they speaking about here? (James.Foster at foundstone.com (James Foster))
Verisign abusing .COM/.NET monopoly, BIND releases new (thor at pivx.com (Thor Larholm))
new ssh exploit? (aditya at mail15.com (Aditya))
[OpenPKG-SA-2003.040] OpenPKG Security Advisory (openssh) (openpkg at openpkg.org (OpenPKG))
Windows URG mystery solved! (lcamtuf at dione.ids.pl (Michal Zalewski))
RE: whoch DCOM exploit code are they speaking about here? (ccexies at nus.edu.sg (Xie Chun Yan, Sherman))
new ssh exploit? (bet at rahul.net (Bennett Todd))
Verisign abusing .COM/.NET - nothing new.. (roelof at sensepost.com (Roelof Temmingh))
Verisign abusing .COM/.NET monopoly, BIND releases new (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
openssh remote exploit (petard at sdf.lonestar.org (petard))
Blocking Music Sharing. (srenna at vdbmusic.com (srenna@...music.com))
Verisign abusing .COM/.NET monopoly, BIND r eleases new (sam.pointer at hpdsoftware.com (Sam Pointer))
Lun_mountd.c vs mounty.c (tobias.klein at ewetel.de (Tobias Klein))
new ssh exploit? (lists at onryou.com (Cael Abal))
Re: [RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (len at netsys.com (Len Rose))
Verisign abusing .COM/.NET monopoly, BIND releases new (webmaster at security-forums.com (SF Admin))
VeriSign hires Omniture to snoop on typos (rms at computerbytesman.com (Richard M. Smith))
openssh remote exploit (smcmahon at eiv.com (Shawn McMahon))
Re: [RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Lun_mountd.c vs mounty.c (devon at lithiumnode.com (Person))
Verisign abusing .COM/.NET monopoly, BIND releases new (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Re: [RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (nigel at sourcefire.com (Nigel Houghton))
Re: openssh remote exploit (rdump at river.com (Richard Johnson))
Exploiting Multiple Flaws in Symantec Antivirus 2004 for Windows Mobile (3APA3A at SECURITY.NNOV.RU (3APA3A))
Lun_mountd.c vs mounty.c (lists at onryou.com (Cael Abal))
[SECURITY] [DSA-383-1] OpenSSH buffer management fix (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Re: openssh remote exploit (rdump at river.com (Richard Johnson))
Who else is Omniture doing snooping for? (rms at computerbytesman.com (Richard M. Smith))
MDKSA-2003:090-1 - Updated openssh packages fix buffer management error (security at linux-mandrake.com (Mandrake Linux Security Team))
Lun_mountd.c vs mounty.c (R.Ferris at napier.ac.uk (Ferris, Robin))
Verisign abusing .COM/.NET monopoly, BIND r eleases new (d.rowles at outcometechnologies.com (Dan Rowles))
Buffer overflow in MySQL (dobber at bastun.net (Ivan Dimitrov))
Re: [RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (pauls at utdallas.edu (Schmehl, Paul L))
Opera Security Contact? (sgmasood at yahoo.com (S G Masood))
Re: Windows URG mystery solved! (willy at w.ods.org (Willy Tarreau))
Who else is Omniture doing snooping for? (lists at onryou.com (Cael Abal))
Lun_mountd.c vs mounty.c (ggilliss at netpublishing.com (Gregory A. Gilliss))
Verisign abusing .COM/.NET monopoly, BIND releases new (jlevitsk at joshie.com (Joshua Levitsky))
AMDPatchB & InstallStub (ml at intract.org (Michael Linke))
Who else is Omniture doing snooping for? (cory at onryou.com (Cory Donnelly))
Exploiting Multiple Flaws in Symantec Antivirus 2004 for Windows Mobile (jason at positivenetworks.net (Jason Sloderbeck))
Verisign abusing .COM/.NET monopoly, BIND releases new (scheidell at secnap.net (Michael Scheidell))
37 more messages

September 18 (90 messages)

openssh remote exploit (dotslash at snosoft.com (KF))
[RHSA-2003:283-01] Updated Sendmail packages fix vulnerability. (bugzilla at redhat.com (bugzilla@...hat.com))
Verisign abusing .COM/.NET monopoly, BIND releases new (nexus at patrol.i-way.co.uk (Nexus))
RE: Full-Disclosure digest, Vol 1 #1125 - 34 msgs (oday at eeye.com (Oliver))
Verisign abusing .COM/.NET monopoly, BIND releases new (anub-full.disclosure.200309 at open.mine.nu (Christopher Kruslicky))
How to block flash advertisement (rms at computerbytesman.com (Richard M. Smith))
VeriSign hints at backdown over redirection of error pages (rms at computerbytesman.com (Richard M. Smith))
Re: Verisign abusing .COM/.NET monopoly, BIND releases new (jlevitsk at joshie.com (Joshua Levitsky))
Re: Verisign abusing .COM/.NET monopoly, BIND releases new (dufresne at winternet.com (Ron DuFresne))
G-Con 2 speaker list (nahual at g-con.org (El Nahual))
Re: [RHSA-2003:279-01] Updated OpenSSH packages fix potential vulnerability (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
Re: Verisign abusing .COM/.NET monopoly, BIND releases new (rkingsla at cox.net (Rick Kingslan))
Verisign abusing .COM/.NET monopoly, BIND releases new (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
How to block flash advertisement [scanned] (cru at ircnet.de (Veit Wahlich))
AW: AMDPatchB & InstallStub (jwiens at nersp.nerdc.ufl.edu (Jordan Wiens))
MDKSA-2003:092 - Updated sendmail packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
unsubscribe (Thomas.Schulte at damovo.com (Thomas Schulte))
NetBSD Security Advisory 2003-012: Out of bounds memset(0) in sshd (security-officer at NetBSD.org (NetBSD Security Officer))
NetBSD Security Advisory 2003-013: Kernel memory disclosure via ibcs2 (security-officer at NetBSD.org (NetBSD Security Officer))
NetBSD Security Advisory 2003-014: Insufficient argument checking in sysctl(2) (security-officer at NetBSD.org (NetBSD Security Officer))
How to block flash advertisement (david.vincent at mightyoaks.com (David Vincent))
dcom2_scanner v1.1 (doke at UDel.Edu (Doke))
Blocking Music Sharing. (se_cur_ity at hotmail.com (morning_wood))
Java Anon Proxy wins legal battle against BKA (kris at koehntopp.de (Kristian Koehntopp))
How to block flash advertisement (Bart.BAUS at proximus.net (BAUS Bart (BMB)))
Global *.net XSS, thank you Verisign(TM) (se_cur_ity at hotmail.com (morning_wood))
Global *.net XSS, thank you Verisign(TM) (se_cur_ity at hotmail.com (morning_wood))
IE Object Type Validation Vulnerability Exploit (se_cur_ity at hotmail.com (morning_wood))
VBScript/JScript.Encode Decoder (se_cur_ity at hotmail.com (morning_wood))
dcom2_scanner v1.1 (gavin.henry at magicfx.co.uk (Gavin Henry))
Blocking Music Sharing. (Azerail at supersecretninjaskills.com (Azerail))
Audit Tools (anthony.aykut at frame4.com (Anthony Aykut))
AW: Re: [RHSA-2003:279-01] Updated OpenSSH pack ages fix potential vulnerability (vogt at hansenet.com (vogt@...senet.com))
How to block flash advertisement (lcdn at inwind.it (Giuseppe Torelli))
dcom2_scanner v1.1 (raymond at prolocation.net (Raymond Dijkxhoorn))
Re: Verisign abusing .COM/.NET monopoly, BIND releases new (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
[SECURITY] [DSA-384-1] New sendmail packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
VeriSign hints at backdown over redirection of error pages (tv at duh.org (Todd Vierling))
How to block flash advertisement (rgerhards at hq.adiscon.com (Rainer Gerhards))
How to block flash advertisement (peacemkr at wcc.net (Sam Morgan))
Petition against VeriSlime's DNS abuse (oelkers at zrz.TU-Berlin.DE (Dennis Oelkers))
Re: Verisign abusing .COM/.NET monopoly, BIND releases new (ed at well.com (Edward Rustin))
Re: [RHSA-2003:279-01] Updated OpenSSH pack ages fix potential vulnerability (joshua at roughtrade.net (Joshua Goodall))
Petition against VeriSlime's DNS abuse (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
VBScript/JScript.Encode Decoder (jwiens at nersp.nerdc.ufl.edu (Jordan Wiens))
Petition against VeriSlime's DNS abuse (oelkers at zrz.TU-Berlin.DE (Dennis Oelkers))
Lun_mountd.c vs mounty.c (lists at onryou.com (Cael Abal))
IE Object Type Validation Vulnerability Exploit (lists at onryou.com (Cael Abal))
Petition against VeriSlime's DNS abuse (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
CORE-2003-0531: Multiple IBM DB2 Stack Overflow Vulnerabilities (advisories at coresecurity.com (CORE Security Technologies Advisories))
VBScript/JScript.Encode Decoder (lists at onryou.com (Cael Abal))
Petition against VeriSlime's DNS abuse (oelkers at zrz.TU-Berlin.DE (Dennis Oelkers))
Petition against VeriSlime's DNS abuse (tv at duh.org (Todd Vierling))
Is Verisign Breaking the Law [Was: Re: Petition against Verislime's DNS Abuse] (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Petition against VeriSlime's DNS abuse (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Petition against VeriSlime's DNS abuse (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
new ssh exploit? (bet at rahul.net (Bennett Todd))
CORE-2003-0531: Multiple IBM DB2 Stack Overflow Vulnerabilities (advisories at coresecurity.com (CORE Security Technologies Advisories))
[RHSA-2003:283-01] Updated Sendmail packages fix vulnerability. (bugzilla at redhat.com (bugzilla@...hat.com))
VBScript/JScript.Encode Decoder (david.vincent at mightyoaks.com (David Vincent))
Audit Tools (oliver.ritter at aor-consult.de (Oliver Ritter))
new ssh exploit? (damian at sentex.net (Damian Gerow))
CORE-2003-0531: Multiple IBM DB2 Stack Overflow Vulnerabilities (advisories at coresecurity.com (CORE Security Technologies Advisories))
[TURBOLINUX SECURITY INFO] 18/Sep/2003 (security-announce at turbolinux.co.jp (Turbolinux))
[ESA-20030918-024] Additional 'OpenSSH" buffer management bugs. (security at guardiandigital.com (EnGarde Secure Linux))
Audit Tools (Steve.Lawlor at webmd.net (Lawlor, Steve))
[ESA-20030918-025] 'MySQL' buffer overflow. (security at guardiandigital.com (EnGarde Secure Linux))
[RHSA-2003:283-01] Updated Sendmail packages fix vulnerability. (bugzilla at redhat.com (bugzilla@...hat.com))
Petition against VeriSlime's DNS abuse (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
VBScript/JScript.Encode Decoder (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
How to block flash advertisement (kurtbuff at spro.net (Kurt))
Petition against VeriSlime's DNS abuse (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
RPC DCOM Scanner (jeff at myprograms.org (Jeff))
SuSE Security Announcement: openssh (second release) (SuSE-SA:2003:039) (draht at suse.de (Roman Drahtmueller))
Web counter in the new Swen/Gibe.F worm (rms at computerbytesman.com (Richard M. Smith))
Post vs. Times (was Is Verisign Breaking th e Law) (HHornstein at sempra.com (Hornstein, Johann (Hans)))
new ssh exploit? (bet at rahul.net (Bennett Todd))
Gator / Scumware research (n30_lists at hotmail.com (n30))
Get the Tools You Need to Compete With Linux (jasonc at science.org (Jason Coombs))
Re: Computer Sabotage by Microsoft (bugtraq at planetcobalt.net (Ansgar Wiechers))
Gator / Scumware research (anthonysaffer at yahoo.com (Anthony Saffer))
FW: New Net Security Upgrade (jasonc at science.org (Jason Coombs))
new ssh exploit? (damian at sentex.net (Damian Gerow))
new ssh exploit? (perry at piermont.com (Perry E. Metzger))
Web counter in the new Swen/Gibe.F worm (timo.schoeler at macfinity.de (Timo Schoeler))
new openssh exploit in the wild! (glast at everyday.com (gordon last))
Web counter in the new Swen/Gibe.F worm (bkdelong at pobox.com (B.K. DeLong))
Get the Tools You Need to Compete With Linux (exibar at thelair.com (Exibar))
New DCOM exploits (Rui_Newbie at hotmail.com (Rui Gaspar))
new openssh exploit in the wild! * is FAKE AS SH@!* (chris at neitzert.com (christopher neitzert))

September 19 (91 messages)

new ssh exploit? (dotslash at snosoft.com (KF))
new ssh exploit? (dotslash at snosoft.com (KF))
FW: New Net Security Upgrade (ricky.blaikie at servercity.co.uk (Ricky Blaikie))
Web counter in the new Swen/Gibe.F worm (sgmasood at yahoo.com (S G Masood))
AppSecInc Security Alert: Denial of Service Vulnerability in DB2 Discovery Service (anewman at appsecinc.com (Aaron C. Newman (Application Security, Inc.)))
Microsoft Biztalk Server documentation and repository sites weak permissions (cesarc56 at yahoo.com (Cesar))
Swen/Gibe.F Worm - Some New Info (was RE: Web counter in the new Swen/Gibe.F worm) (sgmasood at yahoo.com (S G Masood))
FW: New Net Security Upgrade (ALERT:Original Post Contains Live Swen Sample) (sgmasood at yahoo.com (S G Masood))
FW: New Net Security Upgrade (mlande at bellsouth.net (Mary Landesman))
FW: New Net Security Upgrade (shaolin at shaolin-tiger.com (Shaolin Tiger))
new openssh exploit in the wild! * is FAKE AS SH@!* (pdt at jackhammer.org (Paul Tinsley))
Sample of Swen/Gibe.F Worm (nirt_speed at yahoo.com (=))
MDKSA-2003:093 - Updated gtkhtml packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:094 - Updated MySQL packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Sample of Swen/Gibe.F Worm (jlevitsk at joshie.com (Joshua Levitsky))
Re: new openssh exploit in the wild! * is FAKE AS SH@!* (vosipov at tpg.com.au (Vitaly Osipov))
Re: new openssh exploit in the wild! * is FAKE AS SH@!* (jlo at ludd.luth.se (Lars Olsson))
Gator / Scumware research (se_cur_ity at hotmail.com (morning_wood))
Winrar doesn't determine the actual size of compressed files (jkuperus at planet.nl (jelmer))
Re: new openssh exploit in the wild! * is FAKE AS SH@!* (raymond at prolocation.net (Raymond Dijkxhoorn))
RPC DCOM Scanner (benjamin.hippler at siemens.com (Benjamin Hippler))
Re: new openssh exploit in the wild! * is FAKE AS SH@!* (vosipov at tpg.com.au (V.O.))
[SECURITY] [DSA-385-1] New hztty packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-386-1] New libmailtools-perl packages fix input validation bug (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
[SECURITY] [DSA-387-1] New gopher packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
hooking python send() (nd at felinemenace.org (ned))
[OpenPKG-SA-2003.041] OpenPKG Security Advisory (sendmail) (openpkg at openpkg.org (OpenPKG))
Re: new openssh exploit in the wild! * is FAKE AS SH@!* (chris at neitzert.com (christopher neitzert))
Verisign abusing .COM/.NET monopoly, BIND releases new (peter at trusteddebian.org (Peter Busser))
Re: new openssh exploit in the wild! * is FAKE AS SH@!* (adam at vattnet.net (Adam Balogh))
Remote root in LSH (haggis at learningshophull.co.uk (Haggis))
The lowdown on SSH vulnerability (dobber at bastun.net (Ivan Dimitrov))
want to be paid for your opinion? (dobber at bastun.net (Ivan Dimitrov))
Re: new openssh exploit in the wild! * isFAKE AS SH@!* (vosipov at tpg.com.au (V.O.))
openssh remote exploit (peter at trusteddebian.org (Peter Busser))
Re: new openssh exploit in the wild! * isFAKE AS SH@!* (adam at vattnet.net (Adam Balogh))
Post vs. Times (was Is Verisign Breaking th e Law) (smcmahon at eiv.com (Shawn McMahon))
lsh patch (was Re: new ssh exploit?) (bet at rahul.net (Bennett Todd))
want to be paid for your opinion? (rbrown at doitt.nyc.gov (Brown, Rodrick))
Re: new openssh exploit in the wild! *isFAKE AS SH@!* (pauls at utdallas.edu (Schmehl, Paul L))
new virus: (ron at pi-mail.Armstrong.EDU (Ron Clark))
Web counter in the new Swen/Gibe.F worm (security at smharr4.dnsalias.net (security@...arr4.dnsalias.net))
New port 901 scans? (caferace at well.com (J. Race))
new virus: (lists at onryou.com (Cael Abal))
new virus: (scheidell at secnap.net (Michael Scheidell))
new virus: (fwd) (ron at pi-mail.Armstrong.EDU (Ron Clark))
Web counter in the new Swen/Gibe.F worm (lists at onryou.com (Cael Abal))
lsh patch (was Re: new ssh exploit?) (carl at learningshophull.co.uk (Carl Livitt))
Web counter in the new Swen/Gibe.F worm (caferace at well.com (J. Race))
Re: new openssh exploit in the wild! *isFAKE AS SH@!* (lists at onryou.com (Cael Abal))
Re: new virus: (fwd) (ron at pi-mail.Armstrong.EDU (Ron Clark))
New port 901 scans? (john at pavlakis.net (John Pavlakis))
new virus: (mlande at bellsouth.net (Mary Landesman))
Re: new openssh exploit in the wild! *isFAKE AS SH@!* (brian.dinello at vigilantminds.com (Brian Dinello))
Automat? Was (Re: new virus: ) (disclosure at exotope.com (disclosure@...tope.com))
new virus: (security at smharr4.dnsalias.net (security@...arr4.dnsalias.net))
Remote root in LSH (jeremiah at nur.net (Jeremiah Cornelius))
new virus: (jlevitsk at joshie.com (Joshua Levitsky))
Automat? Was (Re: new virus: ) (disclosure at exotope.com (disclosure@...tope.com))
new virus: (fwd) (exibar at thelair.com (Exibar))
Web counter in the new Swen/Gibe.F worm (security at smharr4.dnsalias.net (security@...arr4.dnsalias.net))
Gibe (was Re: new virus:) (disclosure at exotope.com (disclosure@...tope.com))
New port 901 scans (lists at venom600.org ("Ben Nelson"))
new virus: (fwd) (ctommasini at bigbuffer.org (Christophe Tommasini))
Knox Arkeia 5.1.21 local/remote root exploit (bugtraq_vuln at yahoo.com (A. C.))
Re: new openssh exploit in the wild! *isFAKE AS SH@!* (cseagle at redshift.com (Chris Eagle))
idea (geggam692000 at yahoo.com (D B))
new virus: (ggilliss at netpublishing.com (Gregory A. Gilliss))
Remote root in LSH (security at dylanic.de (Michael Renzmann))
Re: Verisign abusing .COM/.NET monopoly (dhtml at hush.com (dhtml@...h.com))
Re: New virus? (smearp at mac.com (Sean Earp))
RES: Sample of Swen/Gibe.F Worm (c4m4l3on-li5t at bol.com.br (C4m4l3on-li5t))
lsh patch (was Re: new ssh exploit?) (nisse at lysator.liu.se (Niels Möller))
new virus: (fwd) (dantams at danieltams.dyndns.org (Daniel Tams))
Automat? Was (Re: new virus: ) (bkdelong at pobox.com (B.K. DeLong))
idea (timo.schoeler at macfinity.de (Timo Schoeler))
Virus Sample (smearp at mac.com (Sean Earp))
Co-location Facility Vulnerabilities: A possible scenario (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
idea (geggam692000 at yahoo.com (D B))
Sample of Swen/Gibe.F Worm (nom.de.guerre at bonbon.net (NDG))
new virus: (gary at baribault.net (Gary Baribault))
Knox Arkeia 5.1.21 local/remote root exploit (dlhane at sbcglobal.net (David Hane))
idea (rahnemann at affinity-mortgage.com (Robert Ahnemann))
idea (geggam692000 at yahoo.com (D B))
new virus: (fwd) (kye at lewislan.id.au (Kye Lewis))
Automat? Was (Re: new virus: ) (shalligan at 333tech.com (Steve Halligan))
RES: Sample of Swen/Gibe.F Worm (c4m4l3on at bol.com.br (C4m4l3on))
Greed Kills VeriSign Inc. (dhtml at hush.com (dhtml@...h.com))
phrack 62 ;P (upb at email.ee (upb@...il.ee))
Re: new openssh exploit in the wild! *isFAKE AS SH@!* (dolan at unt.edu (Patrick Dolan))
RE: Internet explorer 6 on windows XP allows exection of arbitrary code ( and opera and Mozilla too) (msaqibilyas at myrealbox.com (M Saqib Ilyas))

September 20 (53 messages)

new openssh exploit in the wild! * is FAKE AS SH@!* (dotslash at snosoft.com (KF))
idea (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
[inbox] Re: Petition against VeriSlime's DNS abuse (exibar at thelair.com (Exibar))
Phrack 62 is out! (del at hush.ai (del))
Re: Knox Arkeia 5.1.21 local/remote root exploit (bernz at alpha.bernztech.org (David Bernick))
idea (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[inbox] Re: Petition against VeriSlime's DNS abuse (mike at m5computersecurity.com (Michael J McCafferty))
Phrack 62 is out! (Vlad.Galu at rdsnet.ro (Vlad Galu))
[SECURITY] [DSA-388-1] New kdebase packages fix multiple vulnerabilites in KDM (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
idea (jsage at finchhaven.com (John Sage))
[inbox] Re: Petition against VeriSlime's DNS abuse (exibar at thelair.com (Exibar))
Phrack 62 is out! (vosipov at tpg.com.au (V.O.))
New port 901 scans? (se_cur_ity at hotmail.com (morning_wood))
Knox Arkeia 5.1.21 local/remote root exploit (cycloon at is-root.org (Christian Gut))
new lsh-releases fixes security problem (security at dylanic.de (Michael Renzmann))
idea (steven_fruchter at hotmail.com (Steven Fruchter))
new virus: (fwd) (se_cur_ity at hotmail.com (morning_wood))
How to block flash advertisement (aditya at mail15.com (Aditya))
ICANN and IAB Respond to Verislime DNS Abuse (edge at edgeinfotech.com (Ronald D. Edge))
idea (biondi at cartel-securite.fr (Philippe Biondi))
SV: new virus: (fwd) (kruse at krusesecurity.dk (Peter Kruse))
How VeriSign's SiteFinder service breaks Outlook Express (rms at computerbytesman.com (Richard M. Smith))
idea (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
idea (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
new virus: (fwd) (pauls at utdallas.edu (Paul Schmehl))
idea (max at nucleus.it (Massimiliano Hofer))
SuSE Security Announcement: sendmail, sendmail-tls (SuSE-SA:2003:040) (draht at suse.de (Roman Drahtmueller))
Greed Kills VeriSign Inc. (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
idea (biondi at cartel-securite.fr (Philippe Biondi))
How VeriSign's SiteFinder service breaks Outlook Express (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Does VeriSign's SiteFinder service violate the ECPA? (rms at computerbytesman.com (Richard M. Smith))
idea (geggam692000 at yahoo.com (D B))
idea (biondi at cartel-securite.fr (Philippe Biondi))
Automat? Was (Re: new virus: ) (nick at virus-l.demon.co.uk (Nick FitzGerald))
[inbox] Re: Petition against VeriSlime's DNS abuse (mike at m5computersecurity.com (Michael J McCafferty))
idea (matt.barrie at sensorynetworks.com (Matt Barrie))
Does VeriSign's SiteFinder service violate the ECPA? (sgmasood at yahoo.com (S G Masood))
[xfocus]The Analysis of RPC Long Filename Heap Overflow AND a Way to Write Universal Heap Overflow of Windows (quack at xfocus.org (quack@...cus.org))
Verisign's SiteFinder also breaks Outlook (rms at computerbytesman.com (Richard M. Smith))
[inbox] Re: Petition against VeriSlime's DNS abuse (jlevitsk at joshie.com (Joshua Levitsky))
Verisign abusing .COM/.NET monopoly, BIND releases new (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Symantec wants to criminalize security info sharing (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Symantec wants to criminalize security info sharing (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
How Verisign's SiteFinder service breaks Windows networking utilities (rms at computerbytesman.com (Richard M. Smith))
Probable new MS DCOM RPC worm for Windows (rnews at whirlpool.river.com (Richard Johnson))
new virus: (fwd) (steve.wray at paradise.net.nz (Steve Wray))
patent clarification (geggam692000 at yahoo.com (D B))
Symantec wants to criminalize security info sharing (eballen1 at qwest.net (Bruce Ediger))
idea (justin-fulldisclosure at soze.net (Justin))
patent clarification (rkingsla at cox.net (Rick Kingslan))
SV: new virus: (fwd) (grasshopper at linuxkungfu.org (Rocco Stanzione))
[SECURITY] [DSA-389-1] New ipmasq packages fix insecure packet filtering rules (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
Greed Kills VeriSign Inc. (attica at stackheap.org (S . f . Stover))

September 21 (34 messages)

Web counter in the new Swen/Gibe.F worm (security at smharr4.dnsalias.net (security@...arr4.dnsalias.net))
Probable new MS DCOM RPC worm for Windows (phlox at comcast.net (phlox))
Symantec wants to criminalize security info sharing (rms at computerbytesman.com (Richard M. Smith))
OpenSSH Mirror "Mallory" Attack Vulnerability [Was: Re: <Advice> Possible Backdoor into openssh-3.7.1p1-i386-1.tgz from… (jonathan at nuclearelephant.com (Jonath…)
Greed Kills VeriSign Inc. (lists at ciphin.com (Todd Mitchell - lists))
How Verisign's SiteFinder service breaks Windows networking utilities (justin-fulldisclosure at soze.net (Justin))
Ascend / Lucent Router gives root? (nabiy at freeshell.org (nathan aguirre))
Symantec wants to criminalize security info sharing (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Symantec wants to criminalize security info sharing (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
RE: Symantec wants to criminalize security info sharing (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
idea (jsage at finchhaven.com (John Sage))
lucent router gives root (nabiy at freeshell.org (nathan aguirre))
Using your HOSTS file to avoid seeing sightfinder (WAS: Petition against VeriSlime's DNS abuse) (exibar at thelair.com (Exibar))
RE: Symantec wants to criminalize security info sharing (chris at neitzert.com (christopher neitzert))
[spam] Re: Verisign abusing .COM/.NET monopoly, BIND releases new (exibar at thelair.com (Exibar))
RE: Symantec wants to criminalize security info sharing (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
RE: Symantec wants to criminalize security info sharing (chris at neitzert.com (christopher neitzert))
[spam] Re: Verisign abusing .COM/.NET monopoly, BIND releases new (samurai at fuckmicrosoft.com (Samurai))
Snort and SourceFire Compromised (joeypork at hushmail.com (joeypork@...hmail.com))
[spam] Re: Verisign abusing .COM/.NET monopoly, BIND releases new (vb at tiguidoo.com (Vincent))
Snort and SourceFire Compromised (vosipov at tpg.com.au (V.O.))
Snort and SourceFire Compromised (bmc at snort.org (Brian))
Re: idea (madduck at madduck.net (martin f krafft))
reverse proxy hacking (se_cur_ity at hotmail.com (morning_wood))
Infosec Seminar - Hyderabad, India (se_cur_ity at hotmail.com (morning_wood))
idea (quite a bit off-topic, but....) (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Snort and SourceFire Compromised (vaden at texoma.net (Larry Vaden))
Re: Snort and SourceFire "Backdoored" (bmc at snort.org (Brian))
Snort and SourceFire "Backdoored" (joeypork at hushmail.com (joeypork@...hmail.com))
Re: Snort and SourceFire "Backdoored" (joeypork at hushmail.com (joeypork@...hmail.com))
[SECURITY] [DSA-382-3] OpenSSH buffer management fix (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA-383-2] OpenSSH buffer management fix (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Re: [Snort-users] Re: Snort and SourceFire "Backdoored" (newsgroups at lf.lv (Peteris Krumins))
Does anybody have any more information? (marlb0ro at hushmail.com (marlb0ro@...hmail.com))

September 22 (64 messages)

Snort not backdoored, Sourcefire not compromised (roesch at sourcefire.com (Martin Roesch))
Increased port 135 activity (pdt at jackhammer.org (Paul Tinsley))
Does anybody have any more information? (measl at mfn.org (J.A. Terranson))
Increased port 135 activity (booger at unixclan.net (security snot))
Increased port 135 activity (pdt at jackhammer.org (Paul Tinsley))
Does anybody have any more information? (se_cur_ity at hotmail.com (morning_wood))
Re: new openssh exploit in the wild! *isFAKE AS SH@!* (adam at vattnet.net (Adam Balogh))
dtors sell out ( phrack#62 ) (se_cur_ity at hotmail.com (morning_wood))
[RHSA-2003:243-01] Updated Apache and mod_ssl packages fix security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:256-01] Updated Perl packages fix security issues. (bugzilla at redhat.com (bugzilla@...hat.com))
Snort not backdoored, Sourcefire not compromised (exibar at thelair.com (Exibar))
Re: [Snort-users] Snort and SourceFire "Backdoored" (webmaster at verticept.com (Richard DeYoung))
Symantec wants to criminalize security info sharing (vugdeox at freeshell.org (Nate Hill))
Re: Snort and SourceFire "Backdoored" (whatthefukever at hushmail.com (whatthefukever@...hmail.com))
OpenSSH - is X-Force really behind this? (lcamtuf at ghettot.org (Michal Zalewski))
Re: idea (chris at ngssoftware.com (Chris Anley))
Is Marty Lying? (booger at unixclan.net (security snot))
Snort not backdoored, Sourcefire not compromised (daniele at muscetta.com (Daniele Muscetta))
Does anybody have any more information? (darkcube at juanita.undef.net (darkcube))
[RHSA-2003:243-01] Updated Apache and mod_ssl packages fix security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
Snort not backdoored, Sourcefire not compromised (roesch at sourcefire.com (Martin Roesch))
[RHSA-2003:256-01] Updated Perl packages fix security issues. (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:243-01] Updated Apache and mod_ssl packages fix security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
Snort not backdoored, Sourcefire not compromised (roesch at sourcefire.com (Martin Roesch))
OpenSSH - is X-Force really behind this? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Is Marty Lying? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[RHSA-2003:256-01] Updated Perl packages fix security issues. (bugzilla at redhat.com (bugzilla@...hat.com))
Snort not backdoored, Sourcefire not compromised (amarx at gega-it.de (Andreas Marx))
Is Marty Lying? (roesch at sourcefire.com (Martin Roesch))
Fake Microsoft update e-mail (bugtraq at gs2.com.br (Fabio Gomes de Souza))
Is Marty Lying? (daniel_clemens at autism.birmingham-infragard.org (daniel uriah clemens))
Is Marty Lying? (booger at unixclan.net (security snot))
Fake Microsoft update e-mail (bugtraq at gs2.com.br (Fabio Gomes de Souza))
OpenSSH - is X-Force really behind this? (lcamtuf at ghettot.org (Michal Zalewski))
Fake Microsoft update e-mail (jlevitsk at joshie.com (Joshua Levitsky))
VeriSign's fake SMTP server for SiteFinder (rms at computerbytesman.com (Richard M. Smith))
Is Marty Lying? (peter at trusteddebian.org (Peter Busser))
Fake Microsoft update e-mail (todd at fries.net (Todd T. Fries))
Is Marty Lying? (ggilliss at netpublishing.com (Gregory A. Gilliss))
Is Marty Lying? (hackerwacker at cybermesa.com (james))
Is Marty Lying? (smcmahon at eiv.com (Shawn McMahon))
[Snort-users] RE: Snort not backdoored, Sourcefire not compromised (daniele at muscetta.com (Daniele Muscetta))
VeriSign's fake SMTP server for SiteFinder (ppatters at cbnco.com (Pamela Patterson))
VeriSign's fake SMTP server for SiteFinder (damian at sentex.net (Damian Gerow))
VeriSign's fake SMTP server for SiteFinder (b-nordquist at bethel.edu (Brent J. Nordquist))
VeriSign's fake SMTP server for SiteFinder (d.rowles at outcometechnologies.com (Dan Rowles))
Is Marty Lying? (peter at trusteddebian.org (Peter Busser))
Is Marty Lying? (frank at knobbe.us (Frank Knobbe))
Verisign abusing .COM/.NET monopoly, BIND releases new (mbassett at omaha.com (Bassett, Mark))
VeriSign's fake SMTP server for SiteFinder (lcamtuf at ghettot.org (Michal Zalewski))
Is Marty Lying? (booger at unixclan.net (security snot))
VeriSign's fake SMTP server for SiteFinder (fulldisclosure at varshaad.com (fulldisclosure@...shaad.com))
Is Marty Lying? (rbrown at doitt.nyc.gov (Brown, Rodrick))
Re: OpenSSH - is X-Force really behind this? (coley at mitre.org (Steven M. Christey))
VeriSign's fake SMTP server for SiteFinder (JThomas at poweronemedia.com (Joshua Thomas))
VeriSign's fake SMTP server for SiteFinder (damian at sentex.net (Damian Gerow))
VeriSign's fake SMTP server for SiteFinder (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
VeriSign's fake SMTP server for SiteFinder (vugdeox at freeshell.org (Nate Hill))
[RHSA-2003:243-01] Updated Apache and mod_ssl packages fix security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:256-01] Updated Perl packages fix security issues. (bugzilla at redhat.com (bugzilla@...hat.com))
Snort not backdoored, Sourcefire not compromised (roesch at sourcefire.com (Martin Roesch))
[RHSA-2003:256-01] Updated Perl packages fix security issues. (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:243-01] Updated Apache and mod_ssl packages fix security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
Snort not backdoored, Sourcefire not compromised (roesch at sourcefire.com (Martin Roesch))

September 23 (84 messages)

Is Marty Lying? (pdt at jackhammer.org (pdt@...khammer.org))
VeriSign's fake SMTP server for SiteFinder (jlevitsk at joshie.com (Joshua Levitsky))
Is Marty Lying? (florin at sgi.com (Florin Andrei))
Verisign "responds" (caferace at well.com (J. Race))
VeriSign's fake SMTP server for SiteFinder (jlevitsk at joshie.com (Joshua Levitsky))
VeriSign's fake SMTP server for SiteFinder (jlevitsk at joshie.com (Joshua Levitsky))
New Hacking Zine: p62 (phrackstaff at ziplip.com (phrackstaff@...lip.com))
Is Marty Lying? (Jeffrey.Stebelton at bisys.com (Jeffrey.Stebelton@...ys.com))
New Hacking Zine: p62 (formatting corrected) (phrackstaff at ziplip.com (Phrack Staff))
VeriSign's fake SMTP server for SiteFinder (geoincidents at getinfo.org (Geoincidents))
Verisign abusing .COM/.NET monopoly, BIND releases new (ph1 at cogeco.ca (David))
Verisign "responds" (gshively at pivx.com (Geoff Shively))
New Hacking Zine: p62 (lists at onryou.com (Cael Abal))
Is Marty Lying? (Tom_Gordon/RISE/HIDOE at notes.k12.hi.us (Tom_Gordon/RISE/HIDOE@...es.k12.hi.us))
VeriSign's fake SMTP server for SiteFinder (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Is Marty Lying? (pauls at utdallas.edu (Paul Schmehl))
Is Marty Lying? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
New Hacking Zine: p62 (formatting corrected) (npguy at ysgnet.com (npguy))
Verisign "responds" (ggilliss at netpublishing.com (Gregory A. Gilliss))
VeriSign's fake SMTP server for SiteFinder (ngps at netmemetic.com (Ng Pheng Siong))
New Hacking Zine: p62 (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
New Hacking Zine: p62 (formatting corrected) (brudy at bruderer-research.com (Peter Bruderer))
New Hacking Zine: p62 (formatting corrected) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
p63: Call for Articles! (phrackstaff at ziplip.com (Phrack Staff))
p63: Call for Articles! (jlevitsk at joshie.com (Joshua Levitsky))
Is Marty Lying? (BlueBoar at thievco.com (Blue Boar))
Is Marty Lying? (dhoelzer at cyber-defense.org (David Hoelzer))
ColdFusion cross-site scripting security vulnerability of an error page (sec at v23.org (sec@....org))
Re: Increased port 135 activity (rdump at river.com (Richard Johnson))
ColdFusion cross-site scripting security vulnerability of an error page (se_cur_ity at hotmail.com (morning_wood))
The usefullness of IDSes (Was: Re: Is Marty Lying?) (peter at trusteddebian.org (Peter Busser))
ColdFusion cross-site scripting security vulnerability of an error page (sec at v23.org (T.H))
Verisign abusing .COM/.NET monopoly, BIND releases new (felix.roennebeck at gaussvip.com (felix.roennebeck@...ssvip.com))
Is Marty Lying? (booger at unixclan.net (security snot))
The usefullness of IDSes (Was: Re: Is Marty Lying?) (xxradar at radarhack.com (Philippe Bogaerts))
New Hacking Zine: p62 (formatting corrected) (amarx at gega-it.de (Andreas Marx))
xfree86 latest version BUG not vuln. (b0fnet at yahoo.com (b0f))
Erm, Excuse Me, Honeynet.... (sockz at email.com (sockz loves you))
shout out 4 ... (R.Ferris at napier.ac.uk (Ferris, Robin))
Jamming communication [COM] ports in windows... (door_hUNT3R at blackcodemail.com (Bipin Gautam))
Erm, Excuse Me, Honeynet.... (se_cur_ity at hotmail.com (morning_wood))
Erm, Excuse Me, Honeynet.... (vosipov at tpg.com.au (V.O.))
p63: Call for Articles! (lists at onryou.com (Cael Abal))
Please don't feed the troll (was: Re: Is Marty Lying?) (lists at onryou.com (Cael Abal))
SINTRAQ Weekly - Security Vulnerabilities - Week 38, 2003 (sintraq at sintelli.com (SINTRAQ))
Just when you thought Macafee stuff was safe! (chows at ozemail.com.au (gregh))
Just when you thought Macafee stuff was safe! (jeroen at unfix.org (Jeroen Massar))
Just when you thought Macafee stuff was safe! (keith-list at mccammon.org (Keith W. McCammon))
Jamming communication [COM] ports in windows... (rgerhards at hq.adiscon.com (Rainer Gerhards))
New Hacking Zine: p62 (3APA3A at SECURITY.NNOV.RU (3APA3A))
shout out 4 ... (pauls at utdallas.edu (Schmehl, Paul L))
New Hacking Zine: p62 (formatting corrected) (jlevitsk at joshie.com (Joshua Levitsky))
Just when you thought Macafee stuff was safe! (Tim.Saunders at aquilauk.co.uk (Tim Saunders))
Verisign "responds" (mail at skrae.net (Sven Kraemer))
Jamming communication [COM] ports in windows... (sgmasood at yahoo.com (S G Masood))
Jamming communication [COM] ports in windows... (door_hUNT3R at blackcodemail.com (Bipin Gautam))
RE:UPDATE! Jamming communication [COM] ports in windows... (door_hUNT3R at blackcodemail.com (Bipin Gautam))
New Hacking Zine: p62 (b0fnet at yahoo.com (b0f))
[tj@...taglia.org: [Proftpd-user] ProFTPD Remote Exploit] (sven at timegate.de (Sven Hoexter))
No Subject (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
RE: UPDATE! Jamming communication [COM] ports in windows... (rgerhards at hq.adiscon.com (Rainer Gerhards))
Cisco Security Advisory Update: NTP Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
OpenSSH again (dics at ecommerce.com (Dumitru Stama))
New Hacking Zine: p62 (formatting corrected) (ggilliss at netpublishing.com (Gregory A. Gilliss))
The usefullness of IDSes (Was: Re: Is Marty Lying?) (blancher at cartel-securite.fr (Cedric Blancher))
[Fwd: Last Critical Update] (ralfml at alfray.com (Ralf))
dtors sell out ( phrack#62 ) (knud at skodliv.dk (Knud Erik Højgaard))
Is Marty Lying? (justin-fulldisclosure at soze.net (Justin))
**NEW** OpenSSH Vuln Today (jeremiah at nur.net (Jeremiah Cornelius))
GLSA: openssh (200309-14) (aliz at gentoo.org (Daniel Ahlberg))
Erm, Excuse Me, Honeynet.... (jeremiah at nur.net (Jeremiah Cornelius))
OpenSSH again (pdt at jackhammer.org (pdt@...khammer.org))
Privacy leak in VeriSign's SiteFinder service (rms at computerbytesman.com (Richard M. Smith))
GLSA: openssh (200309-14) (ademar at conectiva.com.br (Ademar de Souza Reis Jr.))
[Fwd: Last Critical Update] (rms at computerbytesman.com (Richard M. Smith))
Verisign "responds" (david.vincent at mightyoaks.com (David Vincent))
Just when you thought Macafee stuff was safe! (chows at ozemail.com.au (gregh))
Just when you thought Macafee stuff was safe! (chows at ozemail.com.au (gregh))
Just when you thought Macafee stuff was safe! (chows at ozemail.com.au (gregh))
Erm, Excuse Me, Honeynet.... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
OpenSSH again - not really. (listuser at seifried.org (Kurt Seifried))
[Fwd: Last Critical Update] (damian at sentex.net (Damian Gerow))
An open question for Snort and Project Honeynet (matsu at mailvault.com (Matsu Kandagawa))
FW: [Fwd: Re: AIM Password theft] (thor at pivx.com (Thor Larholm))

September 24 (75 messages)

Verisign "responds" (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
An open question for Snort and Project Honeynet (BlueBoar at thievco.com (Blue Boar))
An open question for Snort and Project Honeynet (Zach.Forsyth at kiandra.com (Zach Forsyth))
Verisign "responds" (lists at macroscape.com (Macroscape Solutions))
FW: [Fwd: Re: AIM Password theft] (xillwillx at yahoo.com (w g))
Verisign "responds" (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Swen Really Sucks (jasonc at science.org (Jason Coombs))
An open question for Snort and Project Honeynet (dbailey27 at ameritech.net (northern snowfall))
Swen Really Sucks (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Petition against VeriSlime's DNS abuse (mike at m5computersecurity.com (Michael J McCafferty))
Petition against VeriSlime's DNS abuse (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Petition against VeriSlime's DNS abuse (mike at m5computersecurity.com (Michael J McCafferty))
Erm, Excuse Me, Honeynet.... (jeremiah at nur.net (Jeremiah Cornelius))
CNN Report: Visa's Computer Systems DOWN ?? Confirm?? (gshively at pivx.com (Geoff Shively))
dtors sell out ( phrack#62 ) (se_cur_ity at hotmail.com (morning_wood))
Erm, Excuse Me, Honeynet.... (jeremiah at nur.net (Jeremiah Cornelius))
CNN Report: Visa's Computer Systems DOWN ?? Confirm?? (vosipov at tpg.com.au (Vitaly Osipov))
Re: Visa computers down (gshively at pivx.com (Geoff Shively))
Swen Really Sucks (peter at trusteddebian.org (Peter Busser))
CNN Report: Visa's Computer Systems DOWN ?? Confirm?? (gshively at pivx.com (Geoff Shively))
Just when you thought Macafee stuff was safe! (Tim.Saunders at aquilauk.co.uk (Tim Saunders))
OpenServer 5.0.7 OpenServer 5.0.6 OpenServer 5.0.5 : wu-ftpd fb_realpath() off-by-one bug (security at sco.com (security@....com))
MondoSoft File Creation vulnerability (jhc at protego.dk (Jens H. Christensen))
New Hacking Zine: p62 (I_Rony at securiboobs.com (I Rony))
New Hacking Zine: p62 (raju at linux-delhi.org (Raj Mathur))
[Fwd: Re: Petition against VeriSlime's DNS abuse] (jim at rootjuice.co.uk (Jim Quantrell))
[OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh) (openpkg at openpkg.org (OpenPKG))
Denial of Service against Gauntlet-Firewall / SQL-Gateway (heinz at arago.de (Oliver Heinz))
CERT Employee Gets Owned [Way Off Topic] (steve at videogroup.com (Steve))
US State Department hit by Welchia (incidents at tooterfish.com (Incident List Account))
[TURBOLINUX SECURITY INFO] 24/Sep/2003 (security-announce at turbolinux.co.jp (Turbolinux))
shout out 4 ... (R.Ferris at napier.ac.uk (Ferris, Robin))
FreeBSD Security Advisory FreeBSD-SA-03:14.arp (security-advisories at freebsd.org (FreeBSD Security Advisories))
Verisign "responds" (bruen at coldrain.net (Stormwalker))
FW: [Fwd: Re: AIM Password theft] (mbassett at omaha.com (Bassett, Mark))
Swen Really Sucks (evan.borgstrom at ca.mci.com (Evan Borgstrom))
The U.S. State Department needs "DCOMbobulator" (rms at computerbytesman.com (Richard M. Smith))
Verisign "responds" (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
CERT Employee Gets Owned [Way Off Topic] (mbassett at omaha.com (Bassett, Mark))
Erm, Excuse Me, Honeynet.... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
CERT Employee Gets Owned [Way Off Topic] (booger at unixclan.net (security snot))
[ESA-20030924-026] 'WebTool-userpass' passphrase disclosure vulnerability. (security at guardiandigital.com (EnGarde Secure Linux))
Re: Probable new MS DCOM RPC worm for Windows (rnews at whirlpool.river.com (Richard Johnson))
Re: CNN Report: Visa's Computer Systems DOWN ?? Confirm?? (rnews at whirlpool.river.com (Richard Johnson))
Swen Really Sucks (tmh at whitefang.com (Thamer Al-Harbash))
The U.S. State Department needs "DCOMbobulator" (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Swen Really Sucks (b-nordquist at bethel.edu (Brent J. Nordquist))
New Hacking Zine: p62 (rahnemann at affinity-mortgage.com (Robert Ahnemann))
FW: Re: AIM Password theft (sgmasood at yahoo.com (S G Masood))
DoS of Antivir Gateways with huge amount of attatchments with same name (helmut_hauser at hotmail.com (Helmut Hauser))
[Fwd: Re: Petition against VeriSlime's DNS abuse] (measl at mfn.org (J.A. Terranson))
BugTraq Speed (rgerhards at hq.adiscon.com (Rainer Gerhards))
Swen Really Sucks (christophe at cattlegrid.net (christophe barbe))
[Fwd: Re: Petition against VeriSlime's DNS abuse] (rahnemann at affinity-mortgage.com (Robert Ahnemann))
BugTraq Speed (jeremiah at nur.net (Jeremiah Cornelius))
BugTraq Speed (security at dylanic.de (Michael Renzmann))
BugTraq Speed (henrik at edlund.org (Henrik Edlund))
FW: The U.S. State Department needs "DCOMbobula tor" (dennisc at kdoc.dc.state.ks.us (Dennis Cooper))
BugTraq Speed (abi at rubyforen.de (Michael Ablassmeier))
BugTraq Speed (lists at onryou.com (Cael Abal))
The U.S. State Department needs "DCOMbobulator" (Stephen.Blass at asu.edu (Stephen Blass))
FW: [Fwd: Re: AIM Password theft] (thor at pivx.com (Thor Larholm))
new increase your gas mileage 27%+ (bxhqlfvu at lubbockapartments.com (Theron Briggs))
企业解决方案 (huaodong at yahoo.com.cn (广州鼎华科技有限公司))
BugTraq Speed (rbrown at doitt.nyc.gov (Brown, Rodrick))
An open question for Snort and Project Honeynet (matsu at mailvault.com (Matsu Kandagawa))
BugTraq Speed (security at updegrove.net (Rick Updegrove))
BugTraq Speed (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Official notice to all e-gold users (service at e-gold.com (e-gold Ltd))
BugTraq Speed (dunc_sec at hotmail.com (dunc sec))
OpenSSH again - not really. (booger at unixclan.net (security snot))
** OFFTOPIC ** OpenSSH again - not really. (listuser at seifried.org (Kurt Seifried))
Swen Really Sucks (jstewart at lurhq.com (Joe Stewart))
Swen Really Sucks (webmaster at q-cat.com (Nick Price))
FW: [Fwd: Re: AIM Password theft] (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

September 25 (78 messages)

CERT Employee Gets Owned [Way Off Topic] (dotslash at snosoft.com (KF))
BugTraq Speed (khermansen at ht-technology.com (Kristian Hermansen))
Official notice to all e-gold users (lists.netsys.com at jscript.dk (Thor Larholm))
Official notice to all e-gold users [FAKE] (sgmasood at yahoo.com (S G Masood))
Official notice to all e-gold users [FAKE] (sgmasood at yahoo.com (S G Masood))
Official notice to all e-gold users (dan at lockedbox.net (Daniel Bartlett))
My response to both the analysis of CIPE by Gutmann, Slashdot and the response by the CIPE list (jacob at appelbaum.net (Jake Appelbaum))
BugTraq Speed (raju at linux-delhi.org (Raj Mathur))
Swen Really Sucks (justin-fulldisclosure at soze.net (Justin))
BugTraq Speed (se_cur_ity at hotmail.com (morning_wood))
BugTraq Speed (Max.Rapaille at nbb.be (Rapaille Max))
Official notice to all e-gold users (Max.Rapaille at nbb.be (Rapaille Max))
Swen Really Sucks (evan.borgstrom at ca.mci.com (Evan Borgstrom))
My response to both the analysis of CIPE by Gutmann, Slashdot and the response by the CIPE list (fw at deneb.enyo.de (Florian Weimer))
What about astalavista.net (lionel.garcia at airbus.com (GARCIA Lionel))
My response to both the analysis of CIPE by Gutmann, Slashdot and the response by the CIPE list (lcamtuf at ghettot.org (Michal Zalewski))
My response to both the analysis of CIPE by Gutmann, Slashdot and the response by the CIPE list (fw at deneb.enyo.de (Florian Weimer))
My response to both the analysis of CIPE by Gutmann, Slashdot and the response by the CIPE list (fw at deneb.enyo.de (Florian Weimer))
My response to both the analysis of CIPE by Gutmann, Slashdot and the response by the CIPE list (alexandre.dulaunoy at ael.be (Alexandre Dulaunoy))
BugTraq Speed (security at dylanic.de (Michael Renzmann))
The U.S. State Department needs "DCOMbobulator" (guido at gvr.org (Guido van Rooij))
BugTraq Speed (security at dylanic.de (Michael Renzmann))
[OpenPKG-SA-2003.043] OpenPKG Security Advisory (proftpd) (openpkg at openpkg.org (OpenPKG))
BugTraq Speed (rgerhards at hq.adiscon.com (Rainer Gerhards))
What about astalavista.net (jwiens at nersp.nerdc.ufl.edu (Jordan Wiens))
SAM Switch - Win2k/XP password-less login (Palan at myrealbox.com (Palan))
RE: Probable new MS DCOM RPC worm for Windows (pauls at utdallas.edu (Schmehl, Paul L))
What about astalavista.net (anthony.aykut at frame4.com (Anthony Aykut))
What about astalavista.net (xillwillx at yahoo.com (w g))
RE: Probable new MS DCOM RPC worm for Windows (rahnemann at affinity-mortgage.com (Robert Ahnemann))
What about astalavista.net (purdy at tecman.com (Curt Purdy))
RE: Probable new MS DCOM RPC worm for Windows (lists at onryou.com (Cael Abal))
new increase your gas mileage 27%+ (mbassett at omaha.com (Bassett, Mark))
What about astalavista.net (lists at onryou.com (Cael Abal))
FreeBSD Security Advisory FreeBSD-SA-03:14.arp [REVISED] (security-advisories at freebsd.org (FreeBSD Security Advisories))
BugTraq Speed (gerhard at fugro-jason.com (Gerhard den Hollander))
Verisign Login Hijacking (newsfeed at solo.net (SoloNet Newsfeed))
RE: Probable new MS DCOM RPC worm for Windows (WilliamsJonathan at JohnDeere.com (Williams Jon))
What about astalavista.net (rahnemann at affinity-mortgage.com (Robert Ahnemann))
[inbox] DoS of Antivir Gateways with huge amount of attatchments with same name (purdy at tecman.com (Curt Purdy))
BugTraq Speed (bogorodskiy at inbox.ru (Roman Bogorodskiy))
RE: Probable new MS DCOM RPC worm for Windows (pfarrow at flamenetworks.co.uk (Paul Farrow))
new increase your gas mileage 27%+ (rahnemann at affinity-mortgage.com (Robert Ahnemann))
An open question for Snort and Project Honeynet (pauls at utdallas.edu (Schmehl, Paul L))
SV: RE: Probable new MS DCOM RPC worm for Windows (kruse at krusesecurity.dk (Peter Kruse))
Swen Really Sucks (pauls at utdallas.edu (Schmehl, Paul L))
SAM Switch - Win2k/XP password-less login (pauls at utdallas.edu (Schmehl, Paul L))
RE: Probable new MS DCOM RPC worm for Windows (pauls at utdallas.edu (Schmehl, Paul L))
email worms, spam etc etc (mike at alanpickel.com (Michael Evanchik))
RE: Probable new MS DCOM RPC worm for Windows (jwiens at nersp.nerdc.ufl.edu (Jordan Wiens))
RE: Probable new MS DCOM RPC worm for Windows (ggilliss at netpublishing.com (Gregory A. Gilliss))
Swen Really Sucks (jstewart at lurhq.com (Joe Stewart))
SAM Switch - Win2k/XP password-less login (lists at onryou.com (Cael Abal))
Analysis of a Spam Trojan (eckman at umn.edu (Brian Eckman))
RE: Possible new variant of Nachi (pauls at utdallas.edu (Schmehl, Paul L))
BugTraq Speed (darek-full-disclosure at beast.tu.kielce.pl (Dariusz Sznajder))
email worms, spam etc etc (gui at goddessmoon.org (Poof))
SAM Switch - Win2k/XP password-less login (steve at energistic.com (Steve Ames))
DANGER: potentially broken f-prot updates (mike at sentex.net (Mike Tancsa))
BugTraq Speed (raju at linux-delhi.org (Raj Mathur))
Swen, Virii, Spam etc etc (mike at alanpickel.com (Michael Evanchik))
RE: Probable new MS DCOM RPC worm for Windows (bkporter at yahoo.com (Brian))
RE: Probable new MS DCOM RPC worm for Windows (derek at cynicism.com (Derek Vadala))
BugTraq Speed (avalon at caligula.anu.edu.au (Darren Reed))
Analysis of a Spam Trojan (jstewart at lurhq.com (Joe Stewart))
DANGER: potentially broken f-prot updates (mike at sentex.net (Mike Tancsa))
myServer 0.4.3 Directory Traversal Vulnerability (webmaster at securiteinfo.com (scrap))
RE: Probable new MS DCOM RPC worm for Windows (exibar at thelair.com (Exibar))
myServer 0.4.3 Directory Traversal Vulnerability (webmaster at securiteinfo.com (scrap))
Port 6881 scans - why? (pjohnson at neudia.com.cn (Paul Johnson))
Swen Really Sucks (nick at virus-l.demon.co.uk (Nick FitzGerald))
Port 6881 scans - why? (BlueBoar at thievco.com (Blue Boar))
email worms, spam etc etc (A.J.Caines at halplant.com (Andrew J Caines))
What about astalavista.net (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
RE: Probable new MS DCOM RPC worm for Windows (steven-carey at us.army.mil (Carey, Steve T GARRISON))
An open question for Snort and Project Honeynet (matsu at mailvault.com (Matsu Kandagawa))
myServer 0.4.3 Directory Traversal Vulnerability (webmaster at securiteinfo.com (scrap))
wms.exe on win2k? (Stephen.Blass at asu.edu (Stephen Blass))

September 26 (74 messages)

email worms, spam etc etc (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Swen Really Sucks (pauls at utdallas.edu (Schmehl, Paul L))
Verisign Login Hijacking (jeremiah at nur.net (Jeremiah Cornelius))
CyberInsecurity: The cost of Monopoly (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Verisign Login Hijacking (newsfeed at solo.net (David A. Koran))
CyberInsecurity: The cost of Monopoly (marc at eeye.com (Marc Maiffret))
CyberInsecurity: The cost of Monopoly (rms at computerbytesman.com (Richard M. Smith))
Re: AIM Password theft (smenard at nbnet.nb.ca (Steve Menard))
Verisign Login Hijacking (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
CyberInsecurity: The cost of Monopoly (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
CyberInsecurity: The cost of Monopoly (ggilliss at netpublishing.com (Gregory A. Gilliss))
An open question for Snort and Project Honeynet (wtfeva at mailvault.com (Ma tsu Kan daga waga))
CyberInsecurity: The cost of Monopoly (bkdelong at pobox.com (B.K. DeLong))
Swen Really Sucks (nick at virus-l.demon.co.uk (Nick FitzGerald))
Daniel Geer, author of cybersecurity resigns (support at mmicman.com (Edward W. Ray))
An open question for Snort and Project Honeynet (madsaxon at direcway.com (madsaxon))
FullDisclosure: Re: CyberInsecurity: The cost of Monopoly (vosipov at tpg.com.au (V.O.))
RE: Probable new MS DCOM RPC worm for Windo ws (R.Ferris at napier.ac.uk (Ferris, Robin))
RE: Possible new variant of Nachi (R.Ferris at napier.ac.uk (Ferris, Robin))
Daniel Geer, author of cybersecurity resigns (rms at computerbytesman.com (Richard M. Smith))
[SECURITY] [DSA-390-1] New marbles packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Network worm simulator (eballen1 at qwest.net (Bruce Ediger))
Swen Really Sucks (craig at strong-box.net (Craig Pratt))
RE: Probable new MS DCOM RPC worm for Windo ws (flynngn at jmu.edu (Gary Flynn))
What about astalavista.net (lists at onryou.com (Cael Abal))
Daniel Geer, author of cybersecurity resigns (cwic at vrtainment.com (Sergij Vasilenko))
RE: Probable new MS DCOM RPC worm for Windo ws (R.Ferris at napier.ac.uk (Ferris, Robin))
Swen Really Sucks (kye at lewislan.id.au (Kye Lewis))
RE: Probable new MS DCOM RPC worm for Windo ws (pauls at utdallas.edu (Schmehl, Paul L))
RE: Probable new MS DCOM RPC worm for Windo ws (flynngn at jmu.edu (Gary Flynn))
RE: Probable new MS DCOM RPC worm for Windo ws (pauls at utdallas.edu (Schmehl, Paul L))
RE: Probable new MS DCOM RPC worm for Windo ws (Mark.Neis at enviam.de (Neis, Mark))
Swen Really Sucks (mlande at bellsouth.net (Mary Landesman))
Talk about biting the hand that feeds you (tetsujin at comcast.net (Tetsujin28GO))
Swen Really Sucks (kye at lewislan.id.au (Kye Lewis))
RE: Probable new MS DCOM RPC worm for Windo ws (prandal at herefordshire.gov.uk (Randal, Phil))
RE: Probable new MS DCOM RPC worm for Windo ws (jheidtke at fmlh.edu (Jerry Heidtke))
RE: Probable new MS DCOM RPC worm for Windo ws (R.Ferris at napier.ac.uk (Ferris, Robin))
RE: Probable new MS DCOM RPC worm for Windo ws (flynngn at jmu.edu (Gary Flynn))
RE: Probable new MS DCOM RPC worm for Windows (lists at onryou.com (Cael Abal))
CyberInsecurity: The cost of Monopoly (flbas at yahoo.com (Chris Stewart))
AW: RE: Probable new MS DCOM RPC worm for Windo ws (Mark.Neis at enviam.de (Neis, Mark))
Swen (pmarsh at nmefdn.org (Paul Marsh))
DCE 1.2.2c Denial of Service Vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Wow! How Times are a Changing. (nocon at texas-shooters.com (noconflic))
File versions [was: Probable new MS DCOM RPC worm for Windows] (mike.keighley at adarelexicon.com (mike.keighley@...relexicon.com))
Wow! How Times are a Changing. (jbajko at CTMSINC.com (Justin Bajko))
DCE 1.2.2c Denial of Service Vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
RE: Probable new MS DCOM RPC worm for Windo ws (pauls at utdallas.edu (Schmehl, Paul L))
RE: Probable new MS DCOM RPC worm for Windo ws (pauls at utdallas.edu (Schmehl, Paul L))
RE: Probable new MS DCOM RPC worm for Windo ws (jays at panix.com (Jay Sulzberger))
Wow! How Times are a Changing. (lists at onryou.com (Cael Abal))
An open question for Snort and Project Honeynet (matsu at mailvault.com (Matsu Kandagawa))
new trojan (HMarchand at co.routt.co.us (Hummer Marchand))
Rootkit (dlhane at sbcglobal.net (David Hane))
An open question for Snort and Project Honeynet (BlueBoar at thievco.com (Blue Boar))
Daniel Geer, author of cybersecurity screwed (bruen at coldrain.net (Stormwalker))
Rootkit (czelaya at intermarks.com (Conrado Zelaya))
Rootkit (dlhane at sbcglobal.net (David Hane))
new trojan (Stephen.Blass at asu.edu (Stephen Blass))
Rootkit (kernelclue at hushmail.com (kernelclue@...hmail.com))
CyberInsecurity: The cost of Monopoly (marc at eeye.com (Marc Maiffret))
Rootkit (B3r3n at argosnet.com (B3r3n))
Daniel Geer, author of cybersecurity screwed (madsaxon at direcway.com (madsaxon))
Rootkit (dlhane at sbcglobal.net (David Hane))
new trojan (ph1 at cogeco.ca (David))
RE: Probable new MS DCOM RPC worm for Windo ws (pauls at utdallas.edu (Schmehl, Paul L))
Rootkit (pauls at utdallas.edu (Schmehl, Paul L))
new trojan (pauls at utdallas.edu (Schmehl, Paul L))
@Stake Employment Opportunity (nom.de.guerre at bonbon.net (NDG))
new trojan (raymond at prolocation.net (Raymond Dijkxhoorn))
MDKSA-2003:095 - Updated proftpd packages fix remote root vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
CyberInsecurity: The cost of Monopoly (mike at adept.org (Mike Hoskins))
RE: Internet explorer 6 on windows XP allows exection of arbitrary code ( and opera and Mozilla too) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

September 27 (61 messages)

MDKSA-2003:096 - Updated apache2 packages fix CGI scripting deadlock (security at linux-mandrake.com (Mandrake Linux Security Team))
new trojan (Stephen.Blass at asu.edu (Stephen Blass))
RE: Probable new MS DCOM RPC worm for Windows (lists at onryou.com (Cael Abal))
Rootkit (eballen1 at qwest.net (Bruce Ediger))
Rootkit (vugdeox at freeshell.org (Nate Hill))
Rootkit (danny at ricin.com (Danny Pansters))
RE: Probable new MS DCOM RPC worm for Windo ws (jays at panix.com (Jay Sulzberger))
Rootkit (snj at pobox.com (Soren Jacobsen))
UnixWare 7.1.3 UnixWare 7.1.1 Open UNIX 8.0.0 : Network device drivers reuse old frame buffer data to pad packets (security at sco.com (security@....com))
CyberInsecurity: The cost of Monopoly (bugtraq at gs2.com.br (Fabio Gomes de Souza))
Rootkit (marc at shopos.com (Marcus H. Sachs))
Rootkit (pauls at utdallas.edu (Paul Schmehl))
CyberInsecurity: The cost of Monopoly (pauls at utdallas.edu (Paul Schmehl))
Rootkit (gui at goddessmoon.org (Poof))
Rootkit (pauls at utdallas.edu (Paul Schmehl))
RE: Probable new MS DCOM RPC worm for Windows (pauls at utdallas.edu (Paul Schmehl))
CyberInsecurity: The cost of Monopoly (rkingsla at cox.net (Rick Kingslan))
@Stake Employment Opportunity (justin-fulldisclosure at soze.net (Justin))
CyberInsecurity: The cost of Monopoly (eballen1 at qwest.net (Bruce Ediger))
CyberInsecurity: The cost of Monopoly (ggilliss at netpublishing.com (Gregory A. Gilliss))
An open question for Snort and Project Honeynet (matsu at mailvault.com (Matsu Kandagawa))
Rootkit (vugdeox at freeshell.org (Nate Hill))
CyberInsecurity: The cost of Monopoly (hobbit at avian.org (*Hobbit*))
CyberInsecurity: The cost of Monopoly (mattmurphy at kc.rr.com (Matthew Murphy))
CyberInsecurity: The cost of Monopoly (rodrigob at suespammers.org (Rodrigo Barbosa))
MDKSA-2003:095 - Updated proftpd packages fix remote root vulnerability (j at pureftpd.org (Jedi/Sector One))
RE: Probable new MS DCOM RPC worm for Windows (kdebisschop at alert.infoplease.com (Karl DeBisschop))
RE: Probable new MS DCOM RPC worm for Windows (lists at notatla.org.uk (lists@...atla.org.uk))
MDKSA-2003:095 - Updated proftpd packages fix remote root vulnerability (j at pureftpd.org (Jedi/Sector One))
Incriminating innocent peer to peer network users (auto93146 at hush.com (auto93146@...h.com))
wms.exe on win2k? (jtburn at gmx.net (JTBurn))
wms.exe on win2k? (sgmasood at yahoo.com (S G Masood))
CyberInsecurity: The cost of Monopoly (peter at trusteddebian.org (Peter Busser))
wms.exe on win2k? (ph1 at cogeco.ca (David))
CyberInsecurity: The cost of Monopoly (Sung.Choe at hickam.af.mil (Choe.Sung Cont. PACAF CSS/SCHP))
CyberInsecurity: The cost of Monopoly (rkingsla at cox.net (Rick Kingslan))
CyberInsecurity: The cost of Monopoly (rkingsla at cox.net (Rick Kingslan))
RE: Probable new MS DCOM RPC worm for Windows (pauls at utdallas.edu (Paul Schmehl))
Does Swen forge the sender? WARNING - LONG POST (pauls at utdallas.edu (Paul Schmehl))
Swen (nick at virus-l.demon.co.uk (Nick FitzGerald))
Eine Mail an Sie von paul schmehl <pauls@...allas.edu> enthielt einen Virus! (pauls at utdallas.edu (pauls@...allas.edu))
IP Resolving problems with DSL user (administrator at maginetworks.com (Administrator))
CyberInsecurity: The cost of Monopoly (purdy at tecman.com (Curt Purdy))
IP Resolving problems with DSL user [sls] (PoulWaJ at it-college.dk (Poul Wann Jensen))
CyberInsecurity: The cost of Monopoly (listmail at joeware.net (Joe))
RE: Probable new MS DCOM RPC worm for Windows (kdebisschop at alert.infoplease.com (Karl DeBisschop))
Antigen Notification:Antigen found VIRUS= Exploit-MIME.gen (NAI,C A(Vet)) virus (fwd) (pauls at utdallas.edu (Paul Schmehl))
RE: Probable new MS DCOM RPC worm for Windows (pauls at utdallas.edu (Paul Schmehl))
CyberInsecurity: The cost of Monopoly (listmail at joeware.net (Joe))
IP Resolving problems with DSL user (kernelclue at hushmail.com (kernelclue@...hmail.com))
CyberInsecurity: The cost of Monopoly (listmail at joeware.net (Joe))
CyberInsecurity: The cost of Monopoly (jonathan at networkdweebs.com (Jonathan A. Zdziarski))
Does Swen forge the sender? WARNING - LONG POST (nick at virus-l.demon.co.uk (Nick FitzGerald))
CyberInsecurity: The cost of Monopoly (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
CyberInsecurity: The cost of Monopoly (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Incriminating innocent peer to peer network users (ggilliss at netpublishing.com (Gregory A. Gilliss))
CyberInsecurity: The cost of Monopoly (mvp at joeware.net (Joe))
Incriminating innocent peer to peer network users (jays at panix.com (Jay Sulzberger))
CyberInsecurity: The cost of Monopoly (david.vincent at mightyoaks.com (David Vincent))
Geeklog Multiple Versions Vulnerabilities (security at novappc.com (Lorenzo Hernandez Garcia-Hierro))
CyberInsecurity: The cost of Monopoly (jonathan at networkdweebs.com (Jonathan A. Zdziarski))

September 28 (30 messages)

CyberInsecurity: The cost of Monopoly (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
CyberInsecurity: The cost of Monopoly (blancher at cartel-securite.fr (Cedric Blancher))
Does Swen forge the sender? WARNING - LONG POST (nazgul at somewhere.com (Kee Hinckley))
WINDOWS XP software restriction policy [path rule] bypass... (visitbipin at yahoo.com (bipin gautam))
CyberInsecurity: The cost of Monopoly (mvp at joeware.net (Joe))
CyberInsecurity: The cost of Monopoly (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
There will Be No New MSBlaster-style worm?? (mjcarter at ihug.co.nz (Mike))
CyberInsecurity: The cost of Monopoly (jeremiah at nur.net (Jeremiah Cornelius))
WINDOWS XP software restriction policy [path rule] bypass... (visitbipin at yahoo.com (bipin gautam))
CyberInsecurity: The cost of Monopoly (fw at deneb.enyo.de (Florian Weimer))
Re: Geeklog Multiple Versions Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
CyberInsecurity: The cost of Monopoly (kdebisschop at alert.infoplease.com (Karl DeBisschop))
[SECURITY] [DSA-391-1] New freesweep packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
CyberInsecurity: The cost of Monopoly (pauls at utdallas.edu (Paul Schmehl))
CyberInsecurity: The cost of Monopoly (lcamtuf at ghettot.org (Michal Zalewski))
CyberInsecurity: The cost of Monopoly (fw at deneb.enyo.de (Florian Weimer))
CyberInsecurity: The cost of Monopoly (frank at knobbe.us (Frank Knobbe))
CyberInsecurity: The cost of Monopoly (fw at deneb.enyo.de (Florian Weimer))
Soft-Chewy insides (was: CyberInsecurity: The cost of Monopoly) (purdy at tecman.com (Curt Purdy))
CyberInsecurity: The cost of Monopoly (lcamtuf at ghettot.org (Michal Zalewski))
CyberInsecurity: The cost of Monopoly (frank at knobbe.us (Frank Knobbe))
[inbox] Re: CyberInsecurity: The cost of Monopoly (purdy at tecman.com (Curt Purdy))
[inbox] Re: CyberInsecurity: The cost of Monopoly (purdy at tecman.com (Curt Purdy))
Administrivia: Circularity - Windows v. Unix (len at netsys.com (Len Rose))
Re: Geeklog Multiple Versions Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Re: Geeklog Multiple Versions Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Re: Geeklog Multiple Versions Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Re: Geeklog Multiple Versions Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Re: Geeklog Multiple Versions Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Re: Geeklog Multiple Versions Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))

September 29 (51 messages)

CyberInsecurity: The cost of Monopoly (pauls at utdallas.edu (Paul Schmehl))
CyberInsecurity: The cost of Monopoly (bugtraq at gs2.com.br (Fabio Gomes de Souza))
Pudent default security - Was: CyberInsecurity: The cost of Monopoly (security at brvenik.com (security@...enik.com))
Re: Pudent default security (pauls at utdallas.edu (Paul Schmehl))
Re: Pudent default security (jays at panix.com (Jay Sulzberger))
[inbox] Re: CyberInsecurity: The cost of Monopoly (khermansen at ht-technology.com (Kristian Hermansen))
Re: Pudent default security (jays at panix.com (Jay Sulzberger))
Re: Pudent default security (jays at panix.com (Jay Sulzberger))
Re: Pudent default security - Was: CyberInsecurity: The cost of Monopoly (lcamtuf at ghettot.org (Michal Zalewski))
[inbox] Re: CyberInsecurity: The cost of Monopoly (ggilliss at netpublishing.com (Gregory A. Gilliss))
Re: Pudent default security (erc at smi.kicks-ass.net (Ed Carp))
Re: Pudent default security (erc at smi.kicks-ass.net (Ed Carp))
Shattering SEH III (brett.moore at security-assessment.com (Brett Moore))
MDKSA-2003:095 - Updated proftpd packages fix remote root vulnerability (hamster at proftpd.org (Mark Lowes))
Soft-Chewy insides (was: CyberInsecurity: The cost of Monopoly) (capegeo at opengroup.org (George Capehart))
Nostalgia, Whatever happened to Jonathan Zanderson (jsz) ? (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
Soft-Chewy insides (was: CyberInsecurity: The cost of Monopoly) (scheidell at secnap.net (Michael Scheidell))
RE: Probable new MS DCOM RPC worm for Windows (b-nordquist at bethel.edu (Brent J. Nordquist))
GLSA: media-video/mplayer (200309-15) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: net-ftp/proftpd (200309-16) (aliz at gentoo.org (Daniel Ahlberg))
Webmails (including Yahoo) + IE 6 = XSS (j at pureftpd.org (Jedi/Sector One))
Soft-Chewy insides (pauls at utdallas.edu (Schmehl, Paul L))
Soft-Chewy insides (was: CyberInsecurity: The cost of Monopoly) (capegeo at opengroup.org (George Capehart))
Re: Pudent default security (sjohnston at libertysite.com (Shannon Johnston))
OpenSSH - is X-Force really behind this? (ekr at rtfm.com (Eric Rescorla))
Verisgn SiteFinder lawsuit complaint is now online (rms at computerbytesman.com (Richard M. Smith))
[inbox] Re: CyberInsecurity: The cost of Monopoly (rodrigob at suespammers.org (Rodrigo Barbosa))
Soft-Chewy insides (was: CyberInsecurity: The cost of Monopoly) (scheidell at secnap.net (Michael Scheidell))
Soft-Chewy insides (petard at sdf.lonestar.org (petard))
[SECURITY] [DSA-392-1] New webfs packages fix buffer overflows, file and directory exposure (debian-security-announce at lists.debian.org (debian-security-annou…)
New Social Engineering for MS03-32 (mtighe at appliedmessaging.com (Michael Tighe))
Possible Apache directory rules bypass / override (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
Re: Geeklog Multiple Versions Vulnerabilities (novappc at novappc.com (Lorenzo Hernandez Garcia-Hierro))
[inbox] Re: CyberInsecurity: The cost of Monopoly (pauls at utdallas.edu (Schmehl, Paul L))
re: MS03-32 Social Engineering (mtighe at appliedmessaging.com (Michael Tighe))
Re: [ISN] Technology Firm With Ties to Microsoft Fires Executive Over Criticism (jasonc at science.org (Jason Coombs))
[ANNOUNCE] kses 0.2.1 (Ulf.Harnhammar.9485 at student.uu.se (Härnhammar, Ulf))
sendmail prescan() vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
CyberInsecurity: The cost of Monopoly (dwr3ck at hushmail.com (dwr3ck@...hmail.com))
sendmail prescan() vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
[inbox] Re: CyberInsecurity: The cost of Monopoly (rodrigob at suespammers.org (Rodrigo Barbosa))
[inbox] Re: CyberInsecurity: The cost of Monopoly (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
GLSA: net-ftp/proftpd (200309-16) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: media-video/mplayer (200309-15) (aliz at gentoo.org (Daniel Ahlberg))
[gentoo-announce] GLSA: media-video/mplayer (200309-15) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: media-video/mplayer (200309-15) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: net-ftp/proftpd (200309-16) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: net-ftp/proftpd (200309-16) (aliz at gentoo.org (Daniel Ahlberg))
sendmail prescan() vulnerability on IRIX (agent99 at sgi.com (SGI Security Coordinator))
GLSA: net-ftp/proftpd (200309-16) (aliz at gentoo.org (Daniel Ahlberg))
GLSA: net-ftp/proftpd (200309-16) (aliz at gentoo.org (Daniel Ahlberg))

September 30 (80 messages)

[inbox] Re: CyberInsecurity: The cost of Monopoly (frank at knobbe.us (Frank Knobbe))
[inbox] Re: CyberInsecurity: The cost of Monopoly (rodrigob at suespammers.org (Rodrigo Barbosa))
[inbox] Re: CyberInsecurity: The cost of Monopoly (eballen1 at qwest.net (Bruce Ediger))
[inbox] Re: CyberInsecurity: The cost of Monopoly (pauls at utdallas.edu (Paul Schmehl))
[inbox] Re: CyberInsecurity: The cost of Monopoly (pauls at utdallas.edu (Paul Schmehl))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (ccozad at sci-aust.com.au (Chris Cozad))
[inbox] Re: CyberInsecurity: The cost of Monopoly (rodrigob at suespammers.org (Rodrigo Barbosa))
Re: Pudent default security - Was: CyberInsecurity: The cost of Monopoly (steve.wray at paradise.net.nz (Steve Wray))
[inbox] Re: CyberInsecurity: The cost ofMonopoly (steve.wray at paradise.net.nz (Steve Wray))
Re: Pudent default security - Was: CyberInsecurity: The cost of Monopoly (lcamtuf at coredump.cx (Michal Zalewski))
[TURBOLINUX SECURITY INFO] 30/Sep/2003 (security-announce at turbolinux.co.jp (Turbolinux))
[inbox] Re: CyberInsecurity: The cost ofMon opoly (prandal at herefordshire.gov.uk (Randal, Phil))
Re: Pudent default security - Was: CyberInsecurity: The cost of Monopoly (steve.wray at paradise.net.nz (Steve Wray))
[inbox] Re: CyberInsecurity: The cost of Monopoly (dufresne at winternet.com (Ron DuFresne))
CyberInsecurity: The cost of Mo nopoly (full-disclosure at arago.de (Thomas Binder))
CyberInsecurity: The cost of Monopoly (guninski at guninski.com (Georgi Guninski))
[RHSA-2003:292-01] Updated OpenSSL packages fix vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:291-01] Updated OpenSSL packages fix vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[inbox] Re: CyberInsecurity: The cost of Monopoly (purdy at tecman.com (Curt Purdy))
CyberInsecurity: The cost of Monopoly (guninski at guninski.com (Georgi Guninski))
[inbox] Re: CyberInsecurity: The cost of Monopoly (purdy at tecman.com (Curt Purdy))
New article describing Intel's "LaGrande" (jeremiah at nur.net (Jeremiah Cornelius))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[inbox] Re: CyberInsecurity: The cost of Monopoly (se_cur_ity at hotmail.com (morning_wood))
More on Dan Geer (bruen at coldrain.net (Stormwalker))
Re: Prudent default security (pauls at utdallas.edu (Schmehl, Paul L))
CyberInsecurity: The cost of Monopoly (Sung.Choe at hickam.af.mil (Choe.Sung Cont. PACAF CSS/SCHP))
GLSA: mpg123 (200309-17) (aliz at gentoo.org (Daniel Ahlberg))
[inbox] Re: CyberInsecurity: The cost of Monopoly (pauls at utdallas.edu (Schmehl, Paul L))
Vendor non-acknowledgement (bowulf at myrealbox.com (Kent A))
Subject: [OpenPKG-SA-2003.044] OpenPKG Security Advisory (openssl) (openpkg at openpkg.org (OpenPKG))
[OpenSSL Advisory] Vulnerabilities in ASN.1 parsing (mark at openssl.org (Mark J Cox))
New article describing Intel's "LaGrande" (ggilliss at netpublishing.com (Gregory A. Gilliss))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (mike at sane.com (Michael Smith))
[OpenSSL Advisory] Vulnerabilities in ASN.1 parsing (fw at deneb.enyo.de (Florian Weimer))
More on Dan Geer (madsaxon at direcway.com (madsaxon))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (dufresne at winternet.com (Ron DuFresne))
Vendor non-acknowledgement (fw at deneb.enyo.de (Florian Weimer))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (cherot at appliedmessaging.com (Christopher F. Herot))
More on Dan Geer (keith-list at mccammon.org (Keith W. McCammon))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (pauls at utdallas.edu (Schmehl, Paul L))
More on Dan Geer (madsaxon at direcway.com (madsaxon))
CyberInsecurity: The cost of Monopoly (purdy at tecman.com (Curt Purdy))
[RHSA-2003:291-01] Updated OpenSSL packages fix vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
Vendor non-acknowledgement (giovanni at communicationvalley.it (Giovanni Bobbio))
Multiple OpenSSH/OpenSSL Vulnerabilities on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Vendor non-acknowledgement (nicob at nicob.net (Nicob))
[inbox] Re: CyberInsecurity: The cost of Monopoly (strombrg at dcs.nac.uci.edu (Dan Stromberg))
RE: 40,000 deaths per year - Was: CyberInsecurity: The cost of Mo nopoly (pauls at utdallas.edu (Schmehl, Paul L))
More on Dan Geer (bruen at coldrain.net (Stormwalker))
More on Dan Geer (keith-list at mccammon.org (Keith W. McCammon))
Re: Pudent default security - Was: CyberInsecurity: The cost of Monopoly (frobozz at frotz.us (j))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (mike at sane.com (Michael Smith))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (dufresne at winternet.com (Ron DuFresne))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (Frank_Bridges at ncsu.edu (Frank Bridges))
[inbox] Re: CyberInsecurity: The cost ofMonopoly (pauls at utdallas.edu (Schmehl, Paul L))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (pauls at utdallas.edu (Schmehl, Paul L))
CyberInsecurity: The cost of Monopoly (lists at onryou.com (Cael Abal))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (flynngn at jmu.edu (Gary Flynn))
More on Dan Geer (madsaxon at direcway.com (madsaxon))
Re: Pudent default security - Was: CyberInsecurity: The cost of Monopoly (frank at knobbe.us (Frank Knobbe))
RE: 40,000 deaths per year - Was: CyberInsecurity: The cost of Mo nopoly (frobozz at frotz.us (j))
More on Dan Geer (dufresne at winternet.com (Ron DuFresne))
User responsibility [was: CyberInsecurity: The cost of Monopoly] (ggilliss at netpublishing.com (Gregory A. Gilliss))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (dufresne at winternet.com (Ron DuFresne))
How *not* to point out a security problem (rms at computerbytesman.com (Richard M. Smith))
[ESA-20030930-027] OpenSSL ASN.1 parsing vulnerabilities. (security at guardiandigital.com (EnGarde Secure Linux))
Re: [ISN] Technology Firm With Ties to Microsoft Fires Executive Over Criticism (paul at robichaux.net (Paul Robichaux))
Re: Vendor non-acknowledgement (coley at mitre.org (Steven M. Christey))
Re: Prudent default security (steve.wray at paradise.net.nz (Steve Wray))
More on Dan Geer (nexus at patrol.i-way.co.uk (Nexus))
GLSA: teapop (200309-18) (aliz at gentoo.org (Daniel Ahlberg))
block multihome access (mmo at remote-exploit.org (mmo@...ote-exploit.org))
MDKSA-2003:097 - Updated mplayer packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
[gentoo-announce] GLSA: mpg123 (200309-17) (aliz at gentoo.org (Daniel Ahlberg))
RE: 40,000 deaths per year - Was: CyberInsecurity: The cost of Mo nopoly (cherot at appliedmessaging.com (Christopher F. Herot))
CyberInsecurity: The cost of Monopoly (mike at prismnet.com (Mike Griffin))
Security presentation from OracleWorld (anewman at appsecinc.com (Aaron C. Newman (Application Security, Inc.)))
[gentoo-announce] GLSA: mpg123 (200309-17) (aliz at gentoo.org (Daniel Ahlberg))
Multiple OpenSSH/OpenSSL Vulnerabilities on IRIX (agent99 at sgi.com (SGI Security Coordinator))

1832 messages