full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2003/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 45	² 79	³ 54	⁴ 42	⁵ 48
⁶ 36	⁷ 74	⁸ 74	⁹ 100	¹⁰ 96	¹¹ 46	¹² 27
¹³ 55	¹⁴ 82	¹⁵ 90	¹⁶ 65	¹⁷ 71	¹⁸ 36	¹⁹ 41
²⁰ 70	²¹ 64	²² 54	²³ 42	²⁴ 65	²⁵ 32	²⁶ 14
²⁷ 65	²⁸ 61	²⁹ 81	³⁰ 86	³¹ 71

Messages by day:

October 1 (45 messages)

More on Dan Geer (measl at mfn.org (J.A. Terranson))
Cisco Security Advisory: SSL Implementation Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Strange behavior in Windows 98 and 2000 (bugtraq at gs2.com.br (Fabio Gomes de Souza))
Re: Welcome to the "Full-Disclosure" mailing list (m0nk3y at excelex.no-ip.com (t3h m0nk3y))
MDKSA-2003:098 - Updated openssl packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
CyberInsecurity: The cost of Monopoly (steve.wray at paradise.net.nz (Steve Wray))
SuSE Security Announcement: lsh (SuSE-SA:2003:041) (krahmer at suse.de (Sebastian Krahmer))
[SECURITY] [DSA-393-1] New OpenSSL packages correct denial of service issues (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debia…)
SuSE Security Announcement: mysql (SuSE-SA:2003:042) (krahmer at suse.de (Sebastian Krahmer))
[TURBOLINUX SECURITY INFO] 01/Oct/2003 (security-announce at turbolinux.co.jp (Turbolinux))
Soft-Chewy insides (was: CyberInsecurity: The cost of Monopoly) (capegeo at opengroup.org (George Capehart))
CyberInsecurity: The cost of Monopoly (lists at onryou.com (Cael Abal))
Security Vulnerabilities - Week 39, 2003 (sintraq at sintelli.com (Sintelli ))
Re: Prudent default security (mike at sane.com (Michael Smith))
GLSA: openssl (200309-19) (aliz at gentoo.org (Daniel Ahlberg))
NINCOMPOOPERY OF MICROSOFT (dhtml at hush.com (dhtml@...h.com))
Re: Prudent default security (mike at sane.com (Michael Smith))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (jimlane at cs.toronto.edu (Jim Lane))
SuSE Security Announcement: openssl (SuSE-SA:2003:043) (thomas at suse.de (Thomas Biege))
[SECURITY] [DSA-393-1] New OpenSSL packages correct denial of service issues (carl.belanger at wave-hosting.net (Carl Belanger))
Cross-site Scripting Vulnerability in Atrise EveryFind (sintraq at sintelli.com (Sintelli ))
Re: [ISN] Technology Firm With Ties to Microsoft Fires Executive Over Criticism (shawn.a.clifford at lmco.com (Clifford, Shawn A))
NINCOMPOOPERY OF MICROSOFT (guninski at guninski.com (Georgi Guninski))
Re: [ISN] Technology Firm With Ties to Microsoft Fires Executive Over Criticism (jasonc at science.org (Jason Coombs))
Mystery DNS Changes (kevin.hansen at thomson.com (Hansen, Kevin))
NINCOMPOOPERY OF MICROSOFT (Brent.Colflesh at ulticom.com (Brent Colflesh))
Mystery DNS Changes (flynngn at jmu.edu (Gary Flynn))
NINCOMPOOPERY OF MICROSOFT (joel at helgeson.com (Joel R. Helgeson))
NINCOMPOOPERY OF MICROSOFT (bruen at coldrain.net (Stormwalker))
NINCOMPOOPERY OF MICROSOFT (ggilliss at netpublishing.com (Gregory A. Gilliss))
Mystery DNS Changes (JBrown at thrupoint.net (Brown, James (Jim)))
Mystery DNS Changes (eckman at umn.edu (Brian Eckman))
Mystery DNS Changes (mlande at bellsouth.net (Mary Landesman))
Mystery DNS Changes (r.fulton at auckland.ac.nz (Russell Fulton))
NINCOMPOOPERY OF MICROSOFT (madsaxon at direcway.com (madsaxon))
Mystery DNS Changes (pauls at utdallas.edu (Schmehl, Paul L))
Mystery DNS Changes (mike at sentex.net (Mike Tancsa))
Mystery DNS Changes (david.vincent at mightyoaks.com (David Vincent))
Strange behavior in Windows 98 and 2000 (bugtraq at gs2.com.br (Fabio Gomes de Souza))
Mystery DNS Changes (tom_gordon at notes.k12.hi.us (tom_gordon@...es.k12.hi.us))
Mystery DNS Changes (HarrisMC at health.missouri.edu (Harris, Michael C.))
Mystery DNS Changes (hobbit at avian.org (*Hobbit*))
NINCOMPOOPERY OF MICROSOFT (guninski at guninski.com (Georgi Guninski))
Mystery DNS Changes (jstewart at lurhq.com (Joe Stewart))
Re: Prudent default security (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

October 2 (79 messages)

Google FILTERS searches for possible DMCA infringable content!!! (khermansen at ht-technology.com (Kristian Hermansen))
Mystery DNS Changes (fulldiclosure at ricin.com (Danny Pansters))
Strange behavior in Windows 98 and 2000 (danny at ricin.com (Danny Pansters))
Red Hat Certification for... (however much you want to pay) (smearp at mac.com (Sean Earp))
Google FILTERS searches for possible DMCA i nfringable content!!! (JThomas at poweronemedia.com (Joshua Thomas))
Google FILTERS searches for possible DMCA infringable content!!! (gui at goddessmoon.org (Poof))
Red Hat Certification for... (however much you want to pay) (zorkshin at tampabay.rr.com (Justin Shin))
CERT Advisory CA-2003-26 Multiple Vulnerabilities in SSL/TLS Implementations (fwd) (mfrd at attitudex.com (Muhammad Faisal Rauf Danka))
Mystery DNS Changes (pdt at jackhammer.org (Paul Tinsley))
Red Hat Certification for... (however much you want to pay) (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Google FILTERS searches for possible DMCAinfringable content!!! (khermansen at ht-technology.com (Kristian Hermansen))
Red Hat Certification for... (however much you want to pay) (irwanhadi at phxby.com (Irwan Hadi))
Solaris security patches. (len at netsys.com (Len Rose))
Google FILTERS searches for possible DMCA infringable content!!! (ggilliss at netpublishing.com (Gregory A. Gilliss))
Mystery DNS Changes (ALudwig at Calfingroup.com (Andre Ludwig))
Microsoft moves beyond patches (frank at knobbe.us (Frank Knobbe))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (ccozad at sci-aust.com.au (Chris Cozad))
[inbox] Re: CyberInsecurity: The cost of Mo nopoly (raju at linux-delhi.org (Raj Mathur))
Microsoft moves beyond patches (caferace at well.com (J. Race))
Google FILTERS searches for possible DMCA infringable content!!! (jeremiah at nur.net (Jeremiah Cornelius))
MOSDEF 0.1 Release (dave at immunitysec.com (dave@...unitysec.com))
Process Killing - Playing with PostThreadMessage (brett.moore at security-assessment.com (Brett Moore))
FW: This beats me!!! (fbotha at g5.co.za (Frikkie Botha))
FW: This beats me!!! (rob at rpi.net.au (Rob Thomas))
FW: This beats me!!! (jeremiah at nur.net (Jeremiah Cornelius))
CyberInsecurity: The cost of Monopoly (kluge at fujitsu.com.au (Steffen Kluge))
FW: This beats me!!! (j at pureftpd.org (Jedi/Sector One))
FW: This beats me!!! (rgerhards at hq.adiscon.com (Rainer Gerhards))
FW: This beats me!!! (steve.wray at paradise.net.nz (Steve Wray))
Process Killing - Playing with PostThreadMessage (guninski at guninski.com (Georgi Guninski))
Microsoft moves beyond patches (steven_fruchter at hotmail.com (Steven Fruchter))
MSN appears to be being a bit snoopy via a Hotmail server... (dan at losangelescomputerhelp.com (Daniel H. Renner))
INTERNIC WHOIS untrusted link XSS (se_cur_ity at hotmail.com (morning_wood))
Visualroute Server - reverse tracerouting (se_cur_ity at hotmail.com (morning_wood))
[Snort-sigs] Re: Mystery DNS Changes (pdt at jackhammer.org (Paul Tinsley))
Asynchronous, industry-wide virus naming scheme proposed (etomcat at freemail.hu (Feher Tamas))
Mystery DNS Changes (prandal at herefordshire.gov.uk (Randal, Phil))
Mystery DNS Changes (pdt at jackhammer.org (Paul Tinsley))
Mystery DNS Changes (HarrisMC at health.missouri.edu (Harris, Michael C.))
Mystery DNS Changes (jstewart at lurhq.com (Joe Stewart))
New Tool: MetaCoretex (DB Security Scanner) (visigoth at securitycentric.com (visigoth))
FW: This beats me!!! (jheidtke at fmlh.edu (Jerry Heidtke))
Re: Asynchronous, industry-wide virus naming scheme proposed (etomcat at freemail.hu (Feher Tamas))
AW: Asynchronous, industry-wide virus naming sc heme proposed (vogt at hansenet.com (vogt@...senet.com))
New Tool: MetaCoretex (DB Security Scanner) (rodrigob at suespammers.org (Rodrigo Barbosa))
Re: CyberInsecurity: The cost of Monopoly (etomcat at freemail.hu (Feher Tamas))
Mystery DNS Changes (pauls at utdallas.edu (Schmehl, Paul L))
Visualroute Server - reverse tracerouting (se_cur_ity at hotmail.com (morning_wood))
New Tool: MetaCoretex (DB Security Scanner) (visigoth at securitycentric.com (visigoth))
PINE-CERT-20030901: Integer Overflow in FreeBSD Kernel [fhold] (joost at pine.nl (Joost Pol))
PINE-CERT-20030902: Integer Overflow in FreeBSD Kernel [uio] (joost at pine.nl (Joost Pol))
Microsoft moves beyond patches (dufresne at winternet.com (Ron DuFresne))
OpenServer 5.0.7 : OpenSSH: multiple buffer handling problems (security at sco.com (security@....com))
Mystery DNS Changes (kurtbuff at spro.net (Kurt))
exploiting fortigate firewall through webinterface (subscriptions at hartsuijker.com (Maarten))
FreeBSD Security Advisory FreeBSD-SA-03:16.filedesc (security-advisories at freebsd.org (FreeBSD Security Advisories))
Google FILTERS searches for possible DMCA infringable content!!! (smcmahon at eiv.com (Shawn McMahon))
Class-action suit points to Microsoft security flaws (rms at computerbytesman.com (Richard M. Smith))
FW: IBM AIX GetIPNodeByName API Socket Management Vulnerability (semerson1978 at yahoo.com (Sherri Emerson))
GLSA: vpopmail (200310-01) (johnm at gentoo.org (John Mylchreest))
FW: IBM AIX GetIPNodeByName API Socket Management Vulnerability (shivapd at us.ibm.com (Shiva Persaud))
Solaris security patches. (fw at deneb.enyo.de (Florian Weimer))
FW: IBM AIX GetIPNodeByName API Socket Management Vulnerability (keith.stevenson at louisville.edu (Keith Stevenson))
Microsoft moves beyond patches (dufresne at winternet.com (Ron DuFresne))
AW: Asynchronous, industry-wide virus naming scheme proposed (nick at virus-l.demon.co.uk (Nick FitzGerald))
Class-action suit points to Microsoft security flaws (vosipov at tpg.com.au (V.O.))
INTERNIC WHOIS untrusted link XSS (jorge at pistone.com.ar (Pistone))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : OpenSSL Multiple Vulnerabilities (security at sco.com (security@....com))
Microsoft moves beyond patches (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
NINCOMPOOPERY OF MICROSOFT (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
PINE-CERT-20030902: Integer Overflow in FreeBSD Kernel [uio] (joost at pine.nl (Joost Pol))
Visualroute Server - reverse tracerouting (se_cur_ity at hotmail.com (morning_wood))
Visualroute Server - reverse tracerouting (se_cur_ity at hotmail.com (morning_wood))
Visualroute Server - reverse tracerouting (se_cur_ity at hotmail.com (morning_wood))
Visualroute Server - reverse tracerouting (se_cur_ity at hotmail.com (morning_wood))
Visualroute Server - reverse tracerouting (se_cur_ity at hotmail.com (morning_wood))
Visualroute Server - reverse tracerouting (se_cur_ity at hotmail.com (morning_wood))
Visualroute Server - reverse tracerouting (se_cur_ity at hotmail.com (morning_wood))
Visualroute Server - reverse tracerouting (se_cur_ity at hotmail.com (morning_wood))

October 3 (54 messages)

Google FILTERS searches for possible DMCA infringable content!!! (dotslash at snosoft.com (KF))
Mystery DNS Changes (dotslash at snosoft.com (KF))
Semi OT, Half Life 2 source code leaked due to Outlook flaw. (ALudwig at Calfingroup.com (Andre Ludwig))
EartStation 5 P2P application contains malicious code (randnut at yahoo.com (random nut))
Blocking Music Sharing. (bwatson at nettracers.com (Bryan K. Watson))
Hamilton v. Microsoft lawsuit complaint is now online (rms at computerbytesman.com (Richard M. Smith))
Cafelog WordPress / b2 SQL injection vulnerabilities discovered and fixed in CVS (seth at tautology.org (Seth Woolley))
Cafelog WordPress / b2 SQL injection vulnerabilities discovered and fixed in CVS (security at dylanic.de (Michael Renzmann))
OT: Hamilton v. Microsoft lawsuit complaint is now online (jeroen at unfix.org (Jeroen Massar))
Dictionary attack against Cisco's LEAP, Wireless LANs vulnerable (security at dylanic.de (Michael Renzmann))
Asynchronous, industry-wide virus naming scheme proposed (lists at michel-messerschmidt.de (Michel Messerschmidt))
Half-Life 2 source code stolen through IE exploit (thor at pivx.com (Thor Larholm))
[OT] Monopolies and software (robert at timetraveller.org (Robert Brockway))
Soft-Chewy insides (capegeo at opengroup.org (George Capehart))
OT: Hamilton v. Microsoft lawsuit complaint is now online (roblewis963 at hotmail.com (Rob Lewis))
Google FILTERS searches for possible DMCA infringable content!!! (lists at onryou.com (Cael Abal))
Fake ebay password stealer (tom at doctorunix.com (tom@...torunix.com))
Potential denial of service bug in Cisco Pix Firewall IOS 6.2.2 a nd 6.3.(3.102) (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Half-Life 2 source code stolen through IE e xploit (R.Ferris at napier.ac.uk (Ferris, Robin))
OT: Hamilton v. Microsoft lawsuit complaint is now online (pauls at utdallas.edu (Schmehl, Paul L))
[RHSA-2003:256-02] Updated Perl packages fix security issues. (bugzilla at redhat.com (bugzilla@...hat.com))
EartStation 5 P2P application contains malicious code (lists at onryou.com (Cael Abal))
Fake ebay password stealer (brobson at fulcrum.com.au (Benjamin M.A. Robson))
FreeBSD Security Advisory FreeBSD-SA-03:17.procfs (security-advisories at freebsd.org (FreeBSD Security Advisories))
Half-Life 2 source code stolen through IE exploit (rbrown at doitt.nyc.gov (Brown, Rodrick))
OT: Hamilton v. Microsoft lawsuit complaint is now online (Tim.Saunders at aquilauk.co.uk (Tim Saunders))
[ESA-20031003-028] Potential OpenSSL DoS. (security at guardiandigital.com (EnGarde Secure Linux))
Sun Cobalt RaQ Control Panel Multiple Vulnerabilities (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
OT: Hamilton v. Microsoft lawsuit complaint is now online (madsaxon at direcway.com (madsaxon))
OT: Hamilton v. Microsoft lawsuit complaint is now online (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
EartStation 5 P2P application contains malicious code (randnut at yahoo.com (random nut))
Half-Life 2 source code stolen through IE exploit (se_cur_ity at hotmail.com (morning_wood))
OT: Hamilton v. Microsoft lawsuit complaint is now online (andy at digitalindustry.org (Andy Wood))
Half-Life 2 source code stolen through IE exploit (smcmahon at eiv.com (Shawn McMahon))
ICANN is officially pissed off (caferace at well.com (J. Race))
OT: Hamilton v. Microsoft lawsuit complaint is now online (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Has Verisign time arrived ? (rodrigob at suespammers.org (Rodrigo Barbosa))
Class-action suit points to Microsoft security flaws (mole at morris.net (Paul J. Morris))
Half-Life 2 source code stolen through IE exploit (nick at virus-l.demon.co.uk (Nick FitzGerald))
Potential denial of service bug in Cisco Pix Firewall IOS 6.2.2 a nd 6.3.(3.102) (itemir at cisco.com (Ilker Temir))
Visualroute Server - reverse tracerouting (se_cur_ity at hotmail.com (morning_wood))
Has Verisign time arrived ? (frank at knobbe.us (Frank Knobbe))
Has Verisign time arrived ? (gui at goddessmoon.org (Poof))
Has Verisign time arrived ? (nodialtone at comcast.net (Byron Copeland))
Has Verisign time arrived ? (rahnemann at affinity-mortgage.com (Robert Ahnemann))
ICANN is officially pissed off (ggilliss at netpublishing.com (Gregory A. Gilliss))
Packit 0.7 Released (dbounds at intrusense.com (Darren Bounds))
Sun Cobalt RaQ Control Panel Multiple Vulnerabilities (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Has Verisign time arrived ? (gui at goddessmoon.org (Poof))
OpenLinux: OpenSSH: multiple buffer handling problems (security at sco.com (security@....com))
Fw: Removal of wildcard A records from .com and .net zones (hackerwacker at cybermesa.com (james))
Mystery DNS Changes (oconnor123 at sympatico.ca (Mike O'Connor))
Has Verisign time arrived ? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
FreeBSD Security Advisory FreeBSD-SA-03:18.openssl (security-advisories at freebsd.org (FreeBSD Security Advisories))

October 4 (42 messages)

OpenLinux: wget: Buffer overflow (security at sco.com (security@....com))
OpenLinux: Updated stunnel packages fix signal vulnerability (security at sco.com (security@....com))
OpenLinux: wu-ftpd fb_realpath() off-by-one bug (security at sco.com (security@....com))
Has Verisign time arrived ? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Has Verisign time arrived ? (nodialtone at comcast.net (Byron Copeland))
Has Verisign time arrived ? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Fw: Removal of wildcard A records from .com and .net zones (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
[Snort-sigs] Re: Mystery DNS Changes (pauls at utdallas.edu (Paul Schmehl))
RE: [Troll-Disclosure] Has Verisign time arrived ? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
RE: [Troll-Disclosure] Has Verisign time ar rived ? (JThomas at poweronemedia.com (Joshua Thomas))
[Snort-sigs] Re: Mystery DNS Changes (pdt at jackhammer.org (Paul Tinsley))
RE: [Troll-Disclosure] Has Verisign time ar rived ? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Fw: Removal of wildcard A records from .com and .net zones (tgood at mindsecurity.net (Travis Good))
Mystery DNS Changes (dowlingg at sullcrom.com (Dowling, Gabrielle))
shellcode encoders & IDS (nd at felinemenace.org (ned))
Mystery DNS Changes (pauls at utdallas.edu (Paul Schmehl))
[Snort-sigs] Re: Mystery DNS Changes (pauls at utdallas.edu (Paul Schmehl))
Microsoft Security Bulletin MS03-040: Cumulative Patch for Internet Explorer (828750) (jlhayes at comcast.net (Jack Hayes))
MS03-040 October cumulative patch for IE (jheidtke at fmlh.edu (Jerry Heidtke))
bugtraq.com (se_cur_ity at hotmail.com (morning_wood))
bugtraq.com (c.ayala at verizon.net (c.ayala))
Electronic Crimes Act 2003 of Pakistan (cutthroat_truth at yahoo.co.uk (Cutthroat Truth))
MS03-040 October cumulative patch for IE (nick at virus-l.demon.co.uk (Nick FitzGerald))
bugtraq.com (rodrigob at suespammers.org (Rodrigo Barbosa))
Mystery DNS Changes (nick at virus-l.demon.co.uk (Nick FitzGerald))
Electronic Crimes Act 2003 of Pakistan (se_cur_ity at hotmail.com (morning_wood))
Has Verisign time arrived ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Fw: Removal of wildcard A records from .com and .net zones (scheidell at secnap.net (Michael Scheidell))
Has Verisign time arrived ? (gui at goddessmoon.org (Poof))
Electronic Crimes Act 2003 of Pakistan (lists at onryou.com (Cael Abal))
bugtraq.com (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
RE: UPDATE! Jamming communication [COM] ports in windows... (Jean-Baptiste.Marchand at hsc.fr (Jean-Baptiste Marchand))
ProFTPD 1.2.9rc2 Remote Root Exploit (X-Force Vuln) (elvi52001 at yahoo.com (Peter King))
Electronic Crimes Act 2003 of Pakistan (joel at helgeson.com (Joel R. Helgeson))
bugtraq.com (dotslash at snosoft.com (KF))
verisigns overflow? (se_cur_ity at hotmail.com (morning_wood))
Re: Geeklog Multiple Versions Vulnerabilities (security at dylanic.de (Michael Renzmann))
[spam] Re: MS03-040 October cumulative patch for IE (exibar at thelair.com (Exibar))
Re: Geeklog Multiple Versions Vulnerabilities (dan at lockedbox.net (Daniel Bartlett))
Re: Geeklog Multiple Versions Vulnerabilities (shrdlu at deaddrop.org (Etaoin Shrdlu))
Re: Fake ebay password stealer (killedbythoughts at mindcrime.net (Sebastian Niehaus))
Mystery DNS Changes (oconnor123 at sympatico.ca (Mike O'Connor))

October 5 (48 messages)

Bush Bashing (use to be Has Verisign time arrived ?) (Dark-Avenger at comcast.net (Dark Avenger))
Fw: New IE crash: CSS + HTML (bscabl at nycap.rr.com (bscabl))
Bush Bashing (use to be Has Verisign time arrived ?) (jlevitsk at joshie.com (Joshua Levitsky))
Bush Bashing (use to be Has Verisign time arrived ?) (lists at onryou.com (Cael Abal))
[spam] RE: Bush Bashing (use to be Has Verisign time arrived ?) (exibar at thelair.com (Exibar))
Electronic Crimes Act 2003 of Pakistan (ggilliss at netpublishing.com (Gregory A. Gilliss))
[spam] RE: Bush Bashing (use to be Has Verisign time arrived ?) (rob at rpi.net.au (Rob Thomas))
OT: Hamilton v. Microsoft lawsuit complaint is now online (jsage at finchhaven.com (John Sage))
MSN Any better? (was: verisigns overflow?) (pjp at paulo-pereira.net (Paulo Pereira))
Bush Bashing (use to be Has Verisign time arrived ?) (nexus at patrol.i-way.co.uk (Nexus))
Bush Bashing (use to be Has Verisign time arrived ?) (jsage at finchhaven.com (John Sage))
MSN Any better? (was: verisigns overflow?) (anthony at safferconsulting.com (Anthony Saffer))
Bush Bashing (use to be Has Verisign time arrived ?) (opsys at voodooland.net (Chris Watson))
MSN Any better? (ph1 at cogeco.ca (David))
Verisign fighting back at ICANN (thor at pivx.com (Thor Larholm))
Bush Bashing (use to be Has Verisign time arrived ?) (jc at farm9.com (Jeremiah Cornelius))
OT: Bush Bashing (used to be Has Verisign time arrived ?) (raikov at cc.gatech.edu (Ivan Raikov))
Political Posts (ericscher at mac.com (Eric Scher))
Verisign fighting back at ICANN (alastair at thebrix.org.uk (Alastair Scott))
Political Posts (andrei at fq.ro (Andrei Galca-Vasiliu))
Political Posts (ole at norlinux.com (Ole Myhre))
Political Posts (ndahouse at wcc.net (Sam))
GLSA: cfengine (200310-02) (klieber at gentoo.org (Kurt Lieber))
MSN Any better? (was: verisigns overflow?) (measl at mfn.org (J.A. Terranson))
Half-Life 2 source code stolen through IE exploit (mvp at joeware.net (Joe))
Political Posts (measl at mfn.org (J.A. Terranson))
Verisign fighting back at ICANN (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
FreeBSD Security Advisory FreeBSD-SA-03:15.openssh (security-advisories at freebsd.org (FreeBSD Security Advisories))
Re: Verisign fighting back at ICANN (prussell at nd.edu (Paul Russell))
Bush Bashing (use to be Has Verisign time arrived ?) (hescominsoon at adelphia.net (William Warren))
I have fixes for the Geeklog vulnerabilities (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Political Posts (jlevitsk at joshie.com (Joshua Levitsky))
Bush Bashing (use to be Has Verisign time arrived ?) (ravyn at omega2.com (ravyn))
Political Posts (adeon at tlen.pl (Adam Dyga))
another fix (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Bush Bashing (use to be Has Verisign time arrived ?) (jlevitsk at joshie.com (Joshua Levitsky))
Do not use the fix in lib-common.php . use in lib-security.php at /system/ dir (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Half-Life 2 source code stolen through IE exploit (venom at gen-x.co.nz (VeNoMouS))
Political Posts (measl at mfn.org (J.A. Terranson))
Bush Bashing (use to be Has Verisign time arrived ?) (measl at mfn.org (J.A. Terranson))
Do not use the fix in lib-common.php . use in lib-security.php at /system/ dir (pdt at jackhammer.org (Paul Tinsley))
Political Posts (measl at mfn.org (J.A. Terranson))
Bush Bashing (use to be Has Verisign time arrived ?) (jlevitsk at joshie.com (Joshua Levitsky))
Re: I have fixes for the Geeklog vulnerabilities (dirk at haun-online.de (Dirk Haun))
Political Posts (adeon at tlen.pl (Adam Dyga))
Bush Bashing (use to be Has Verisign time arrived ?) (measl at mfn.org (J.A. Terranson))
Bush Bashing (use to be Has Verisign time arrived ?) (mikebrown at cfl.rr.com (Mike Brown))
Political Posts (adeon at o2.pl (Adam Dyga))

October 6 (36 messages)

Political Posts (vb at bitsmart.com (vb))
Political Posts (smacdougall at idanalytics.com (MacDougall, Shane))
Re: I have fixes for the Geeklog vulnerabilities (se_cur_ity at hotmail.com (morning_wood))
Political Posts (jeremiah at nur.net (Jeremiah Cornelius))
Re: I have fixes for the Geeklog vulnerabilities (devnull at iprimus.com.au (devnull@...imus.com.au))
Re: I have fixes for the Geeklog vulnerabilities (security at dylanic.de (Michael Renzmann))
Bush Bashing (use to be Has Verisign time arrived ?) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Fw: Removal of wildcard A records from .com and .net zones (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Bush Bashing (used to be Has Verisign time arrived ?) (mjcarter at ihug.co.nz (Mike))
Half-Life 2 source code stolen through IE exploit (trey.mujakporue at uk.tesco.com (Trey Mujakporue/UK/Tesco))
Electronic Crimes Act 2003 of Pakistan (trey.mujakporue at uk.tesco.com (Trey Mujakporue/UK/Tesco))
ProFTPD 1.2.9rc2 Remote Root Exploit (X-Force Vuln) (alf1num3rik at yahoo.com (Stephen))
[PAPER] Juggling with packets: floating data storage (cliph at isec.pl (Wojciech Purczynski))
Bush Bashing (use to be Has Verisign time arrived ?) (mk at baerlap.north.de (Matthias Kurz))
[PAPER] Juggling with packets: floating data storage (sgmasood at yahoo.com (S G Masood))
Has Verisign time arrived ? (mike at sane.com (Michael Smith))
W32/Toolber.c.Trojan Removal? (Eric.Fassbender.bgszsiuk at t-online.de (Eric Fassbender))
Administrivia: Bait / Counterbait (len at netsys.com (Len Rose))
AW: Has Verisign time arrived ? (michael at elsdoerfer.net (Michael Elsdörfer))
[PAPER] Juggling with packets: floating data storage (petard at sdf.lonestar.org (petard))
Has Verisign time arrived ? (ggilliss at netpublishing.com (Gregory A. Gilliss))
RE: Internet explorer 6 on windows XP allows exection of arbitrary code ( and opera and Mozilla too) (msaqibilyas at myrealbox.com (M Saqib Ilyas))
filtering subscribers with procmail (was: Has Verisign time arrived ?) (fulldisclosure at pirispons.net (Kiko Piris))
Has Verisign time arrived ? (se_cur_ity at hotmail.com (morning_wood))
Re: I have fixes for the Geeklog vulnerabilities (jsage at finchhaven.com (John Sage))
Half-Life 2 source code stolen through IE exploit (rbrown at doitt.nyc.gov (Brown, Rodrick))
Bush Bashing (use to be Has Verisign time arrived ?) (pauls at utdallas.edu (Schmehl, Paul L))
Half-Life 2 source code stolen through IE exploit (pauls at utdallas.edu (Schmehl, Paul L))
Netscape Bug Bounty (sgmasood at yahoo.com (S G Masood))
Re: I have fixes for the Geeklog vulnerabilities (se_cur_ity at hotmail.com (morning_wood))
Netscape Bug Bounty (peter.thoenen at email-tc3.5sigcmd.army.mil (Thoenen, Peter CIV Sprint))
Re: Netscape Bug Bounty (zen-parse at gmx.net (zen-parse))
Re: Netscape Bug Bounty (dotslash at snosoft.com (KF))
Re: Netscape Bug Bounty (dotslash at snosoft.com (KF))
Half-Life 2 source code stolen through IE exploit (nobody at tatooine.homelinux.net (starwars))
Half-Life 2 source code stolen through IE exploit (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

October 7 (74 messages)

Half-Life 2 source code stolen through IE exploit (mvp at joeware.net (Joe))
Bush Bashing (use to be Has Verisign time arrived ?) (pros-n-cons at bak.rr.com (Vincent))
Bush Bashing (use to be Has Verisign time arrived ?) (guille7 at montevideo.com.uy (El Guille))
I've found the Allchin bug. (davek_throwaway at hotmail.com (Dave Korn))
Bush Bashing (use to be Has Verisign time arrived ?) (measl at mfn.org (J.A. Terranson))
Email Harvesting virus? (joel at helgeson.com (Joel R. Helgeson))
Bush Bashing (use to be Has Verisign time arrived ?) (pros-n-cons at bak.rr.com (Vincent))
Bush Bashing (use to be Has Verisign time arrived ?) (mk at baerlap.north.de (Matthias Kurz))
Bush Bashing (use to be Has Verisign time arrived ?) (steve at stevesworld.hopto.org (Stephen Clowater))
Email Harvesting virus? (mike at m5computersecurity.com (Michael J McCafferty))
Email Harvesting virus? (BlueBoar at thievco.com (Blue Boar))
Fw: Email Harvesting virus? (1 at malware.com (http-equiv@...ite.com))
Email Harvesting virus? (mlande at bellsouth.net (Mary Landesman))
Weak response from RH (ggilliss at netpublishing.com (Gregory A. Gilliss))
raq 550 compromised (adf at code511.com (adf--at--Code511.com))
raq 550 compromised (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
raq 550 compromised (oscar.fajardo at madrid.sema.slb.com (Oscar Fajardo Sanchez))
Sambar issues (3APA3A at SECURITY.NNOV.RU (3APA3A))
Bush Bashing (use to be Has Verisign time arrived ?) (peter at adamantix.org (Peter Busser))
[Fwd: DeskPRO News - v1.1.2 and v2.0.0 Beta 4] (rgerhards at hq.adiscon.com (Rainer Gerhards))
raq 550 compromised (etomcat at freemail.hu (Feher Tamas))
Email Harvesting virus? (chows at ozemail.com.au (gregh))
Allchin bug p-o-c. (davek_throwaway at hotmail.com (Dave Korn))
strange from address (jamesd at staff.intekom.com (James Devine))
[TURBOLINUX SECURITY INFO] 07/Oct/2003 (security-announce at turbolinux.co.jp (Turbolinux))
Spam with PGP (rlanguy at hotmail.com (Lan Guy))
Spam with PGP (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Spam with PGP (fw at deneb.enyo.de (Florian Weimer))
Spam with PGP (full-disclosure at arago.de (Thomas Binder))
Verisign fighting back at ICANN (Simon.Richter at hogyros.de (Simon Richter))
Spam with PGP (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Spam with PGP (randy.brown at hp.com (Brown, Randy (InfoSec)))
Spam with PGP (security at saharu.com (Security Administrator))
Allchin bug p-o-c. (Andrew.Berges at everestre.com (Andrew.Berges@...restre.com))
Spam with PGP (smcmahon at eiv.com (Shawn McMahon))
Spam with PGP (dan_20407 at msn.com (DAN MORRILL))
Political Posts (rahnemann at affinity-mortgage.com (Robert Ahnemann))
Re: Netscape Bug Bounty (rahnemann at affinity-mortgage.com (Robert Ahnemann))
Spam with PGP (brian.dinello at vigilantminds.com (Brian Dinello))
Spam with PGP (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Weak response from RH (pauls at utdallas.edu (Schmehl, Paul L))
Adobe SVG Viewer Active Scripting Bypass (GM#002-MC) (security at greymagic.com (GreyMagic Software))
Adobe SVG Viewer Local and Remote File Reading (GM#003-MC) (security at greymagic.com (GreyMagic Software))
Adobe SVG Viewer Cross Domain and Zone Access (GM#004-MC) (security at greymagic.com (GreyMagic Software))
Re: Netscape Bug Bounty (sgmasood at yahoo.com (S G Masood))
Break Macromedia Activation (pk95 at yandex.ru (Alex))
Email Harvesting virus? (david.vincent at mightyoaks.com (David Vincent))
Spam with PGP (ggilliss at netpublishing.com (Gregory A. Gilliss))
Spam with PGP (andy at digitalindustry.org (Andy Wood))
Spam with PGP (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Spam with PGP (smcmahon at eiv.com (Shawn McMahon))
Allchin bug p-o-c. (Andrew.Berges at everestre.com (Andrew.Berges@...restre.com))
Spam with PGP (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Spam with PGP (kweiske at kataan.org (Kurt Weiske))
Spam with PGP (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
[RHSA-2003:278-01] Updated SANE packages fix remote vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
IE Changes / Software Patents (rgerhards at hq.adiscon.com (Rainer Gerhards))
Spam with PGP (smcmahon at eiv.com (Shawn McMahon))
Spam with PGP (apthorpe+fd at cynistar.net (Bob Apthorpe))
Spam with PGP (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Spam with PGP (fulldisclosure at pirispons.net (Kiko Piris))
ltrace bug (abhisek at linuxmail.org (Abhisek Datta))
Spam with PGP (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Email Harvesting virus? (pappgeza at tolna.net (Papp Geza))
Spam with PGP (full-disclosure at arago.de (Thomas Binder))
Opera/Netscape/Mozilla: Floppy access from liveconnect html page (fwd) (schonef at uni-muenster.de (Marc Schoenefeld))
ltrace bug (aroldan at debian.org (Andrés Roldán))
Re: Spam with PGP (killedbythoughts at mindcrime.net (Sebastian Niehaus))
Re: strange from address (killedbythoughts at mindcrime.net (Sebastian Niehaus))
Opera/Netscape/Mozilla: Floppy access from liveconnect html page (fwd) (manzon at spamcop.net (Manzon))
Spam with PGP (craig at strong-box.net (Craig Pratt))
[RHSA-2003:278-01] Updated SANE packages fix remote vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
Allchin bug p-o-c. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Allchin bug p-o-c. (davek_throwaway at hotmail.com (Dave Korn))

October 8 (74 messages)

Spam with PGP (max at flebus.com (MaX Flebus))
ltrace bug (jikos at jikos.cz (Jirka Kosina))
Re: I have fixes for the Geeklog vulnerabilities (jkuperus at planet.nl (jelmer))
IE Changes / Software Patents (marklist at comcast.net (Mark))
Spam with PGP (devin.nate at bridgecomm.net (Devin Nate))
Spam with PGP (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Spam with PGP (devin.nate at bridgecomm.net (Devin Nate))
Spam with PGP (Zach.Forsyth at kiandra.com (Zach Forsyth))
IE Changes / Software Patents (and-bugtraq at doxdesk.com (Andrew Clover))
Indigoperl Perledit 1.08 (se_cur_ity at hotmail.com (morning_wood))
IE Changes / Software Patents (joel at helgeson.com (Joel R. Helgeson))
Spam with PGP (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
IE Changes / Software Patents (rgerhards at hq.adiscon.com (Rainer Gerhards))
Re: Dealing with spam (was: Spam with PGP) (prussell at nd.edu (Paul Russell))
Workshop on Cybersecurity, Research & Disclosure (adam at homeport.org (Adam Shostack))
Spam with PGP (mds at helices.org (Michael D Schleif))
Spam with PGP (pyrrhocorax at free.fr (Olivier))
[TURBOLINUX SECURITY INFO] 08/Oot/2003 (security-announce at turbolinux.co.jp (Turbolinux))
Microsoft Windows Server 2003 "Shell Folders" Directory Traversal Vulnerability (ptrs-ejy at bp.iij4u.or.jp (Eiji James Yoshida))
Spam with PGP (purdy at tecman.com (Curt Purdy))
Indigoperl Perledit 1.08 (Marcus.Noel at tri-c.edu (Noel, Marcus))
Increased TCP 139 Activity (phathat at hushmail.com (Phathat))
interesting trojan in the wild (scheidell at secnap.net (Michael Scheidell))
Indigoperl Perledit 1.08 (sgmasood at yahoo.com (S G Masood))
Increased TCP 139 Activity (WilliamsJonathan at JohnDeere.com (Williams Jon))
Spam with PGP (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Spam with PGP (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Re: I have fixes for the Geeklog vulnerabilities (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
RE: [PAPER] Juggling with packets: floating data storage (alun at texis.com (Alun Jones))
Re: I have fixes for the Geeklog vulnerabilities (Chris.Kulish at us.ing.com (Chris.Kulish@...ing.com))
Increased TCP 139 Activity (rbrown at doitt.nyc.gov (Brown, Rodrick))
[inbox] Re: Spam with PGP (purdy at tecman.com (Curt Purdy))
Scholarly Articles/Jounals Re: Full-Disclosure (fd_researcher at yahoo.com (Graduate Student))
RE: [PAPER] Juggling with packets: floating data storage (lcamtuf at ghettot.org (Michal Zalewski))
Re: [PAPER] Juggling with packets: floating data storage (lcamtuf at ghettot.org (Michal Zalewski))
HPUX dtprintinfo buffer overflow vulnerability (dante at alighieri.org (Davide Del Vecchio))
Scholarly Articles/Jounals Re: Full-Disclosure (bruen at coldrain.net (Stormwalker))
Re: [PAPER] Juggling with packets: floating data storage (nweaver at CS.berkeley.edu (Nicholas Weaver))
Is the record industry turning to Trojan horse programs to copy-protect CDs? (rms at computerbytesman.com (Richard M. Smith))
Scholarly Articles/Jounals Re: Full-Disclosure (dufresne at winternet.com (Ron DuFresne))
Increased TCP 139 Activity (dufresne at winternet.com (Ron DuFresne))
Internet Explorer (BAN IT !!!) (alf1num3rik at yahoo.com (Stephen))
Re: [PAPER] Juggling with packets: floating data storage (nweaver at CS.berkeley.edu (Nicholas Weaver))
Is the record industry turning to Trojan horse programs to copy-protect CDs? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Scholarly Articles/Jounals Re: Full-Disclosure (shollatz at d.umn.edu (scott hollatz))
Re: [PAPER] Juggling with packets: floating data storage (flynngn at jmu.edu (Gary Flynn))
Anyone know of a application that will decode a SIP VoIP conversa tion? (RCompton at chartercom.com (Compton, Rich))
Re: [PAPER] Juggling with packets: floating data storage (lcamtuf at ghettot.org (Michal Zalewski))
Anyone know of a application that will decode a SIP VoIP conversa tion? (raymond at prolocation.net (Raymond Dijkxhoorn))
Re: [PAPER] Juggling with packets: floating data storage (lcamtuf at ghettot.org (Michal Zalewski))
Internet Explorer (BAN IT !!!) (Brent.Colflesh at ulticom.com (Brent Colflesh))
Re: [PAPER] Juggling with packets: floating data storage (lcamtuf at ghettot.org (Michal Zalewski))
Anyone know of a application that will decode a SIP VoIP conversa tion? (larryr at netbeam.net (Larry Roberts))
Allchin bug p-o-c. (davek_throwaway at hotmail.com (Dave Korn))
Re: [PAPER] Juggling with packets: floating data storage (nweaver at CS.berkeley.edu (Nicholas Weaver))
Re: [PAPER] Juggling with packets: floating data storage (doug.moen at bluecoat.com (Doug Moen))
Re: [PAPER] Juggling with packets: floating data storage (rwash at citi.umich.edu (Rick Wash))
Re: [PAPER] Juggling with packets: floating data storage (doug.moen at bluecoat.com (Doug Moen))
Re: [PAPER] Juggling with packets: floating data storage (davidh at braunlift.com (David Heigl))
Re: [PAPER] Juggling with packets: floating data storage (mouse at Rodents.Montreal.QC.CA (der Mouse))
Re: [PAPER] Juggling with packets: floating data storage (tmh at whitefang.com (Thamer Al-Harbash))
Is the record industry turning to Trojan horse programs to copy-protect CDs? (e at hq.sk (Juraj Ziegler))
Is the record industry turning to Trojan horse programs to copy-protect CDs? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Re: [PAPER] Juggling with packets: floating data storage (sethb at panix.com (Seth Breidbart))
Re: [PAPER] Juggling with packets: floating data storage (trash at mightye.org (MightyE))
Re: [PAPER] Juggling with packets: floating data storage (rwash at citi.umich.edu (Rick Wash))
Internet Explorer (BAN IT !!!) (chows at ozemail.com.au (gregh))
Re: [PAPER] Juggling with packets: floating data storage (sethb at panix.com (Seth Breidbart))
Did you know verisin is a security company? (scheidell at secnap.net (Michael Scheidell))
Is the record industry turning to Trojan horse programs to copy-protect CDs? (pz at psychozapp.de (Sebastian Herbst))
Re: [PAPER] Juggling with packets: floating data storage (security at brvenik.com (Jason))
Is the record industry turning to Trojan horse programs to copy-protect CDs? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Increased TCP 139 Activity (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: [PAPER] Juggling with packets: floating data storage (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

October 9 (100 messages)

Internet Explorer (BAN IT !!!) (pauls at utdallas.edu (Paul Schmehl))
Shift key breaks CD copy locks (support at mmicman.com (Edward W. Ray))
Storage in a fiber (jason at compnski.com (Jason Freidman))
Is the record industry turning to Trojan horse programs to copy-protect CDs? (!DSPAM:3f849a9217188983316675!) (jonathan at nuclearelephant.com (Jonathan A. Zd…)
Shift key breaks CD copy locks (support at mmicman.com (Edward W. Ray))
Re: [PAPER] Juggling with packets: floating data storage (kudzu at tenebras.com (Michael Sierchio))
Is the record industry turning to Trojan horse programs to copy-protect CDs? (!DSPAM:3f849a9217188983316675!)] (djsnm at djsnm.com (Scott Manley))
The msvidctl.dll in Windows XP (rms at computerbytesman.com (Richard M. Smith))
Shift key breaks CD copy locks (lists at onryou.com (Cael Abal))
Internet Explorer (BAN IT !!!) (joel at helgeson.com (Joel R. Helgeson))
Indigoperl Perledit 1.08 (se_cur_ity at hotmail.com (morning_wood))
Shift key breaks CD copy locks (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Shift key breaks CD copy locks (se_cur_ity at hotmail.com (morning_wood))
The msvidctl.dll in Windows XP (fbret at stake.com (Frederic Bret-Mounet))
Shift key breaks CD copy locks (khermansen at ht-technology.com (Kristian Hermansen))
Shift key breaks CD copy locks (ggilliss at netpublishing.com (Gregory A. Gilliss))
Shift key breaks CD copy locks (godber at uberhip.com (Austin Godber))
Internet Explorer (BAN IT !!!) (irwanhadi at phxby.com (Irwan Hadi))
Is the record industry turning to Trojan horse programs to copy-protect CDs? (e at hq.sk (Juraj Ziegler))
Re: Internet Explorer (BAN IT !!!) (alf1num3rik at yahoo.com (Stephen))
Windows RPC2 UNIVERSAL EXPLOIT ? (elvi52001 at yahoo.com (Peter King))
Spam with PGP (kluge at fujitsu.com.au (Steffen Kluge))
Do you really think CDs will be protected in future? (dante at alighieri.org (Davide Del Vecchio))
Re: Internet Explorer (BAN IT !!!) (ben at lanwest.com.au (Benjamin Meade))
[RHSA-2003:281-01] Updated MySQL packages fix vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Internet Explorer (BAN IT !!!) (bonemach at sdf.lonestar.org (BoneMachine))
Internet Explorer (BAN IT !!!) (bonemach at sdf.lonestar.org (BoneMachine))
Do you really think CDs will be protected in future? (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Windows RPC2 UNIVERSAL EXPLOIT ? (3APA3A at SECURITY.NNOV.RU (3APA3A))
Shift key breaks CD copy locks (Tim.Saunders at aquilauk.co.uk (Tim Saunders))
Internet Explorer (BAN IT !!!) (elvi52001 at yahoo.com (Peter King))
Increased TCP 139 Activity (marc at marcd.org (Marc))
Shift key breaks CD copy locks (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Re: Do you really think CDs will be protected in future? (adam at hif.hu (Szilveszter Adam))
Do you really think CDs will be protected in future? (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Chaosreader: Trace TCP/UDP from snoop/tcpdump logs (brendan.gregg at tpg.com.au (Brendan Gregg))
Re: Do you really think CDs will be protected in future? (jeroen at unfix.org (Jeroen Massar))
Do you really think CDs will be protected in future? (se_cur_ity at hotmail.com (morning_wood))
Internet Explorer (BAN IT !!!) (jkuperus at planet.nl (jelmer))
Re: Do you really think CDs will be protected in future? (adam at hif.hu (Szilveszter Adam))
MS RPC remote exploit. (sudharsha at digitalhouse.lk (Sudharsha Wijesinghe))
Is the record industry turning to Trojan horse programs to copy-protect CDs? (lists at onryou.com (Cael Abal))
Do you really think CDs will be protected in future? (lists at onryou.com (Cael Abal))
MS RPC remote exploit. (pab at heisec.de (Patrick Brauch))
AW: IE Changes / Software Patents (michael at elsdoerfer.net (Michael Elsdörfer))
AW: IE Changes / Software Patents (michael at elsdoerfer.net (Michael Elsdörfer))
SV: MS RPC remote exploit. (kruse at krusesecurity.dk (Peter Kruse))
Shift key breaks CD copy locks (ken at vanwyk.org (Kenneth R. van Wyk))
The msvidctl.dll in Windows XP (tom.koehler at gmx.net (Tom Koehler))
MS RPC remote exploit. (alf1num3rik at yahoo.com (Stephen))
Spam with PGP (mbassett at omaha.com (Bassett, Mark))
RE: I've found the Allchin bug. (srudolph at iocenter.net (Steven Rudolph))
MS RPC remote exploit. (kilian.cavalotti at crans.org (Kilian CAVALOTTI))
MS RPC remote exploit. (nathan.grandbois at cerdant.com (Nathan))
Re: I have fixes for the Geeklog vulnerabilities (jsage at finchhaven.com (John Sage))
Microsoft Outlines New Initiatives in Ongoing Security Efforts To Help Customers (rms at computerbytesman.com (Richard M. Smith))
Do you really think CDs will be protected in future? (godber at uberhip.com (Austin Godber))
Internet Explorer (BAN IT !!!) (jsage at finchhaven.com (John Sage))
Windows Mediaplayer separate vulnerability? (lise_moorveld at hotmail.com (Lise Moorveld))
Do you really think CDs will be protected in future? (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
[normal] Re: MS RPC remote exploit. What about DCOMbobulator? (opticfiber at topsight.net (opticfiber))
Do you really think CDs will be protected in future? (jeremiah at nur.net (Jeremiah Cornelius))
Do you really think CDs will be protected in future? (jeremiah at nur.net (Jeremiah Cornelius))
Do you really think CDs will be protected in future? (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Shift key breaks CD copy locks (krs at dridus.com (Kevin Sullivan))
Re: [PAPER] Juggling with packets: floating data storage (thomas.chiverton at bluefinger.com (Thomas Chiverton))
SV: MS RPC remote exploit. (hvl at telefonica.de (Holger van Lengerich (Telefónica Deutschland)))
Re: [PAPER] Juggling with packets: floating data storage (bugtraq at umtstrial.co.uk (bugtraq@...strial.co.uk))
Do you really think CDs will be protected in future? (david.vincent at mightyoaks.com (David Vincent))
Do you really think CDs will be protected in future? (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Re: Shift key breaks CD copy locks (ericscher at mac.com (Eric Scher))
Re: I have fixes for the Geeklog vulnerabilities (se_cur_ity at hotmail.com (morning_wood))
Microsoft Outlines New Initiatives in Ongoing Security Efforts To Help Customers (ggilliss at netpublishing.com (Gregory A. Gilliss))
Do you really think CDs will be protected in future? (ggilliss at netpublishing.com (Gregory A. Gilliss))
Do you really think CDs will be protected in future? (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Re: Do you really think CDs will be protected in future? (prp17 at adelphia.net (Phillip R. Paradis))
Microsoft Outlines New Initiatives in Ongoi ng Security Efforts To Help Customers (Ben.Dehner at valmont.com (Dehner, Benjamin T.))
[normal] Re: MS RPC remote exploit. What about DCOMbobulator? (r.fulton at auckland.ac.nz (Russell Fulton))
Re: Do you really think CDs will be protected in future? (lists at onryou.com (Cael Abal))
[inbox] Re: MS RPC remote exploit. (purdy at tecman.com (Curt Purdy))
!A stupid bug ...that works on mozilla, opera, IE! (visitbipin at yahoo.com (bipin gautam))
Microsoft Outlines New Initiatives in Ongoi ng Security Efforts To Help Customers (ken at vanwyk.org (Kenneth R. van Wyk))
Fw: Windows Mediaplayer separate vulnerability? (1 at malware.com (http-equiv@...ite.com))
[normal] Re: MS RPC remote exploit. What about DCOMbobulator? (vladimir at arobas.net (Vladimir Parkhaev))
NetBSD Security Advisory 2003-015: Remote and local vulnerabilities in XFree86 font libraries (security-officer at NetBSD.org (NetBSD Security Officer))
NetBSD Security Advisory 2003-016: Sendmail - another prescan() bug CAN-2003-0694 (security-officer at NetBSD.org (NetBSD Security Officer))
NetBSD Security Advisory 2003-017: OpenSSL multiple vulnerabilities (security-officer at NetBSD.org (NetBSD Security Officer))
[PAPER] Juggling with packets: floating data storage (lcamtuf at ghettot.org (Michal Zalewski))
[PAPER] Juggling with packets: floating data storage (dave at dave.clendenan.ca (Dave Clendenan))
Re: Do you really think CDs will be protected in future? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: [PAPER] Juggling with packets: floating data storage (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: [PAPER] Juggling with packets: floating data storage (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Weak response from RH (benjamin at seattlefenix.net (Benjamin Krueger))
[normal] Re: MS RPC remote exploit. What about DCOMbobulator? (pab at heisec.de (Patrick Brauch))
Re: Do you really think CDs will be protected in future? (akloster at spp.org (Alan Kloster))
Port 135 scans, IDS/incidents mailing lists (damian at sentex.net (Damian Gerow))
Student faces suit over key to CD locks (rms at computerbytesman.com (Richard M. Smith))
SunnComm to sue 'Shift key' student for $10m (jeremiah at nur.net (Jeremiah Cornelius))
Internet Explorer (BAN IT !!!) (chows at ozemail.com.au (gregh))
SunnComm to sue 'Shift key' student for $10m (rms at computerbytesman.com (Richard M. Smith))

October 10 (96 messages)

SunnComm to sue 'Shift key' student for $10m (adeon at tlen.pl (Adam Dyga))
MDKSA-2003:099 - Updated sane packages fix remote vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
SunnComm to sue 'Shift key' student for $10m (nick at ethicsdesign.com (Nick Jacobsen))
SunnComm to sue 'Shift key' student for $10m (exibar at thelair.com (Exibar))
!A stupid bug ...that works on mozilla, opera, IE! (raz at chewies.net (Wayne Schroeder))
SunnComm to sue 'Shift key' student for $10m (jeremiah at nur.net (Jeremiah Cornelius))
MS RPC remote exploit. What about DCOMbobulator? (rbaer at innernet.net (Rob))
Port 135 scans, IDS/incidents mailing lists (pauls at utdallas.edu (Paul Schmehl))
Shattering By Example (brett.moore at security-assessment.com (Brett Moore))
Re: Shift key breaks CD copy locks (se_cur_ity at hotmail.com (morning_wood))
Re: Do you really think CDs will be protected in future? (prp17 at adelphia.net (Phillip R. Paradis))
Letter to Peter Jacobs, President, SunComm Technologies, Inc. (security at brvenik.com (Jason))
a stupid bug ...that works on mozilla, opera, IE (visitbipin at yahoo.com (bipin gautam))
Microsoft Outlines New Initiatives in Ongoing Security Efforts To Help Customers (support at mmicman.com (Edward W. Ray))
Re: [PAPER] Juggling with packets: floating data storage (avalon at caligula.anu.edu.au (Darren Reed))
Student faces suit over key to CD locks (jdenoy at digital-connexion.info (Johan Denoyer))
SunnComm to sue 'Shift key' student for $10m (fw at deneb.enyo.de (Florian Weimer))
Re: Do you really think CDs will be protected in future? (adam at hif.hu (Szilveszter Adam))
SunnComm to sue 'Shift key' student for $10m (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
a stupid bug ...that works on mozilla, opera, IE (jw at domainfactory.de (Jan Wildeboer))
SunnComm to sue 'Shift key' student for $10m (gui at goddessmoon.org (Poof))
MS RPC remote exploit. (trey.mujakporue at uk.tesco.com (Trey Mujakporue/UK/Tesco))
Student faces suit over key to CD locks (nicola.fankhauser at variant.ch (Nicola Fankhauser))
SunnComm to sue 'Shift key' student for $10m (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Internet Explorer (BAN IT !!!) (manipeto at yahoo.co.uk (Syed Imran Ali))
Student faces suit over key to CD locks (se_cur_ity at hotmail.com (morning_wood))
Internet Explorer (BAN IT !!!) (jkuperus at planet.nl (jelmer))
Opera/Netscape/Mozilla: Floppy access from untrusted java applet (schonef at uni-muenster.de (Marc Schoenefeld))
!A stupid bug ...that works on mozilla, opera, IE! (full-disclosure at arago.de (Thomas Binder))
Re: Strange from address (szalkai at 2fkft.com (Akos Szalkai))
Re: Do you really think CDs will be protected in future? (lists at onryou.com (Cael Abal))
SunnComm to sue 'Shift key' student for $10m (lists at onryou.com (Cael Abal))
"Mirror" attacks on windows clients (tharbad at kaotik.org (Joao Gouveia))
RE: Increased TCP 139 Activity (Sung.Choe at hickam.af.mil (Choe.Sung Cont. PACAF CSS/SCHP))
SunnComm to sue 'Shift key' student for $10m (roblewis963 at hotmail.com (Rob Lewis))
Internet Explorer (BAN IT !!!) (flynngn at jmu.edu (Gary Flynn))
Student faces suit over key to CD locks (jgrotegut at directpointe.com (Jonathan Grotegut))
[Fwd: PayPal Account Security Measures] (amery at geeks.cl (Alejandro Mery))
SunnComm to sue 'Shift key' student for $10m (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Student faces suit over key to CD locks (pauls at utdallas.edu (Schmehl, Paul L))
Microsoft Outlines New Initiatives in Ongoi ng Security Efforts To Help Customers (guninski at guninski.com (Georgi Guninski))
List Charter (johnc at grok.org.uk (John Cartwright))
[Fwd: PayPal Account Security Measures] (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Bad news on RPC DCOM vulnerability (3APA3A at SECURITY.NNOV.RU (3APA3A))
SunnComm to sue 'Shift key' student for $10m (kudzu at tenebras.com (Michael Sierchio))
[Fwd: PayPal Account Security Measures] (tool8185 at adelphia.net (tool8185@...lphia.net))
Student faces suit over key to CD locks (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Student faces suit over key to CD locks (dufresne at winternet.com (Ron DuFresne))
Student faces suit over key to CD locks (trey.mujakporue at uk.tesco.com (Trey Mujakporue/UK/Tesco))
Student faces suit over key to CD locks (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Student faces suit over key to CD locks (security at smharr4.dnsalias.net (security@...arr4.dnsalias.net))
SunnComm to sue 'Shift key' student for $10m (smcmahon at eiv.com (Shawn McMahon))
RE: Increased TCP 139 Activity (andrews at mis-cds.com (Andrew Simmons))
Student faces suit over key to CD locks (madsaxon at direcway.com (madsaxon))
SunnComm to sue 'Shift key' student for $10m (mbassett at omaha.com (Bassett, Mark))
Student faces suit over key to CD locks (rms at computerbytesman.com (Richard M. Smith))
Letter to Peter Jacobs, President, SunComm Technologies, Inc. (caferace at well.com (J. Race))
[Fwd: PayPal Account Security Measures] (bobbrown at deloitte.com (Brown, Bobby (US - Hermitage)))
Student faces suit over key to CD locks (smcmahon at eiv.com (Shawn McMahon))
[A bug! update...] Whom to blame, the HTML interpreter or the JavaScript compiler? (visitbipin at yahoo.com (bipin gautam))
Student faces suit over key to CD locks (ken at vanwyk.org (Kenneth R. van Wyk))
Local DoS in windows. (visitbipin at yahoo.com (bipin gautam))
Local DoS in windows. (visitbipin at yahoo.com (bipin gautam))
[A bug!] Whom to blame, the HTML interpreter or the JavaScript compiler? (visitbipin at yahoo.com (bipin gautam))
SunnComm to sue 'Shift key' student for $10m (dolan at cc.admin.unt.edu (Patrick Dolan))
Student faces suit over key to CD locks (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Sunncomm backs down from shift key prosecution (lists.netsys.com at jscript.dk (Thor Larholm))
[A bug! update...] Whom to blame, the HTML interpreter or the JavaScript compiler? (caferace at well.com (J. Race))
Re: Bad news on RPC DCOM vulnerability (pk95 at yandex.ru (Alex))
Student faces suit over key to CD locks (dhtml at hush.com (dhtml@...h.com))
Re: Bad news on RPC DCOM vulnerability (Adrian_Stone at fpl.com (Adrian_Stone@....com))
[A bug!] Whom to blame, the HTML interpreter or the JavaScript compiler? (florian.huber at mnet-online.de (Florian Huber))
[A bug! update...] Whom to blame, the HTML interpreter or the JavaScript compiler? (jkuperus at planet.nl (jelmer))
SunnComm to sue 'Shift key' student for $10 m (James.Cupps at NA.SAPPI.COM (James.Cupps@...SAPPI.COM))
[A bug!] Whom to blame, the HTML interpreter or the JavaScript compiler? (raz at chewies.net (Wayne Schroeder))
SunnComm to sue 'Shift key' student for $10m (mlande at bellsouth.net (Mary Landesman))
Student faces suit over key to CD locks (dhtml at hush.com (dhtml@...h.com))
Student faces suit over key to CD locks (DARREN.L.BENNETT at saic.com (Darren Bennett))
Re: Bad news on RPC DCOM vulnerability (bobbrown at deloitte.com (Brown, Bobby (US - Hermitage)))
Local DoS in windows. (steve.wray at paradise.net.nz (Steve Wray))
Microsoft Outlines Security Plan (Balmer Blows Hard) (jeremiah at nur.net (Jeremiah Cornelius))
Ejecting CDs with VBScript ( Online Exploit ) (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Re: Bad news on RPC DCOM vulnerability (lists at macroscape.com (Macroscape Solutions))
Re : [VERY] BAD news on RPC DCOM Exploit (alf1num3rik at yahoo.com (Stephen))
Re: Bad news on RPC DCOM vulnerability (petard at sdf.lonestar.org (petard))
Signed e-mail vs. turning off HTML mail under XP (yossarian at planet.nl (yossarian))
Excuse me , oh no! it was discovered before....;-( (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Ejecting CDs with VBScript ( Online Exploit ) (Brent.Colflesh at ulticom.com (Brent Colflesh))
Local DoS in windows. (lists at onryou.com (Cael Abal))
Ejecting CDs with VBScript ( Online Exploit ) (jkuperus at planet.nl (jelmer))
Signed e-mail vs. turning off HTML mail under XP (lists at onryou.com (Cael Abal))
Re: Bad news on RPC DCOM vulnerability (irwanhadi at phxby.com (Irwan Hadi))
Re: Bad news on RPC DCOM vulnerability (mdlammers_cissp at earthlink.net (Matthew D. Lammers))
Re: Bad news on RPC DCOM vulnerability (dlimanov at sct.com (Dimitri Limanovski))
Concern about Checkpoint and SSL Vulnerability (seeker at hush.ai (seeker@...h.ai))
Bad news on RPC DCOM vulnerability (3APA3A at SECURITY.NNOV.RU (3APA3A))

October 11 (46 messages)

About the supposed WinXp Local DoS ? (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Signed e-mail vs. turning off HTML mail under XP (yossarian at planet.nl (yossarian))
Re: Bad news on RPC DCOM vulnerability (bbrown at netsecadmin.com (Bobby Brown))
Re: Bad news on RPC DCOM vulnerability (vladimir at arobas.net (Vladimir Parkhaev))
Signed e-mail vs. turning off HTML mail under XP (kudzu at tenebras.com (Michael Sierchio))
Re: Bad news on RPC DCOM vulnerability (nodialtone at comcast.net (Byron Copeland))
Re: Bad news on RPC DCOM vulnerability (vosipov at tpg.com.au (V.O.))
Re: Bad news on RPC DCOM vulnerability (vosipov at tpg.com.au (V.O.))
[A bug! update...] Whom to blame, the HTML interpreter or the JavaScript compiler? (visitbipin at yahoo.com (bipin gautam))
Re: Bad news on RPC DCOM vulnerability (petard at sdf.lonestar.org (petard))
Local DoS in windows. (visitbipin at yahoo.com (bipin gautam))
Local DoS in windows. (visitbipin at yahoo.com (bipin gautam))
[A bug! update...] Whom to blame, the HTML interpreter or the JavaScript compiler? (visitbipin at yahoo.com (bipin gautam))
[A bug!] Whom to blame, the HTML interpreter or the JavaScript compiler? (visitbipin at yahoo.com (bipin gautam))
Local DoS in windows. [finally...] (visitbipin at yahoo.com (bipin gautam))
[A bug!] Whom to blame, the HTML interpreter or the JavaScript compiler? (visitbipin at yahoo.com (bipin gautam))
Bad news on RPC DCOM vulnerability (soc.rpc at vigilantminds.com (VigilantMinds Security Operations Center))
[A bug!] Whom to blame, the HTML interpreter or the JavaScript compiler? (raz at chewies.net (Wayne Schroeder))
Bad news on RPC DCOM2 vulnerability (elvi52001 at yahoo.com (Peter King))
AW: Bad news on RPC DCOM2 vulnerability (fkeller at absolute.tv (Florian Keller))
AW: Bad news on RPC DCOM2 vulnerability (fkeller at absolute.tv (Florian Keller))
Bad news on RPC DCOM2 vulnerability (pk95 at yandex.ru (Alex))
Signed e-mail vs. turning off HTML mail under XP (yossarian at planet.nl (yossarian))
Microsoft Outlines Security Plan (Balmer Blows Hard) (bruno at wolff.to (Bruno Wolff III))
[SECURITY] [DSA 394-1] New openssl095 packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Code for ban IP adresses inmediately (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Code for write the IPs to ban (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Code for write the IPs to ban (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
SA-20031006 slocate buffer overflow - exploitation proof (patrik.hornik at ebitech.sk (Patrik Hornik))
Testing my codes in www.nsrg-security.com , important notes (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
googlesyndication.com cookies (rms at computerbytesman.com (Richard M. Smith))
MySQL backend for BANNINIP System (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
I will not block attack ips ;-) i will publish them monthly ( see them accesing to BANED.TXT ) (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro…)
openssh exploit code? (attica at stackheap.org (S . f . Stover))
babelpr0xy? (se_cur_ity at hotmail.com (morning_wood))
Another example of completely incorrect behavior of vendor: SmartFTP.com (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Bad news on RPC DCOM2 vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Code for ban IP adresses inmediately (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
I will not block attack ips ;-) i will publish them monthly ( see them accesing to BANED.TXT ) (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
openssh exploit code? (hb-fulldisclosure at bsws.de (Henning Brauer))
Project structure of ADWARE/VIRUS/TROJAN ( AIM EXPLOIT) related to Realphx.com (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
googlesyndication.com cookies (booger at unixclan.net (security snot))
babelpr0xy? (sgmasood at yahoo.com (S G Masood))
openssh exploit code? (attica at stackheap.org (S . f . Stover))
SA-20031006 slocate buffer overflow - exploitation proof (patrik.hornik at ebitech.sk (Patrik Hornik))
Bad news on RPC DCOM2 vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

October 12 (27 messages)

Local DoS in windows. (dksaarth at unix.za.net (Richard Spiers))
Local DoS in windows. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Local DoS in windows. (mvp at joeware.net (Joe))
Local DoS in windows. (npguy at ysgnet.com (npguy))
babelpr0xy? (jsage at finchhaven.com (John Sage))
Hacker suspect says his PC was hijacked (pdt at jackhammer.org (Paul Tinsley))
Hacker suspect says his PC was hijacked (steve.wray at paradise.net.nz (Steve Wray))
babelpr0xy? (sgmasood at yahoo.com (S G Masood))
Who Cried Wolf???!? (or, Who's Shell32.exe?) [was: Local DoS in windows] (arcturus at secrev.net (Arcturus))
babelpr0xy? (se_cur_ity at hotmail.com (morning_wood))
buffer overflow in IRCD software (chopin at sgh.waw.pl (Piotr KUCHARSKI))
Hacker suspect says his PC was hijacked (kudzu at tenebras.com (Michael Sierchio))
babelpr0xy? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Local DoS in windows. (visitbipin at yahoo.com (bipin gautam))
Hacker suspect says his PC was hijacked (robert at timetraveller.org (Robert Brockway))
FileDonkey.com Cross Site Scripting (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Hacker suspect says his PC was hijacked (kudzu at tenebras.com (Michael Sierchio))
Hacker suspect says his PC was hijacked (jlevitsk at joshie.com (Joshua Levitsky))
Hacker suspect says his PC was hijacked (gui at goddessmoon.org (Poof))
Local DoS in windows. [indeed it works... PROOF?] (visitbipin at yahoo.com (bipin gautam))
Hacker suspect says his PC was hijacked (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Hacker suspect says his PC was hijacked (jlevitsk at joshie.com (Joshua Levitsky))
babelpr0xy? (full_disc_new at hotmail.com (David M))
Hacker suspect says his PC was hijacked (pdt at jackhammer.org (Paul Tinsley))
Hacker suspect says his PC was hijacked (jlevitsk at joshie.com (Joshua Levitsky))
RE: Re: Bad news on RPC DCOM vulnerability (sigpizbguy at hotpop.com (Mike Gordon))
Local DoS in windows. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

October 13 (55 messages)

I have fixes for the Geeklog vulnerabilities (jouko at iki.fi (Jouko Pynnonen))
Hacker suspect says his PC was hijacked (pdt at jackhammer.org (Paul Tinsley))
RE: Re: Bad news on RPC DCOM vulnerability (pdt at jackhammer.org (Paul Tinsley))
OT: An odd question that has arrisen within my household (saryon at swbell.net (Matt Carlson))
OT: I'd like to post a question to help settle an argument (saryon at swbell.net (Matt Carlson))
OT: An odd question that has arrisen within my household (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
OT: An odd question that has arrisen within my household (jlevitsk at joshie.com (Joshua Levitsky))
OT: An odd question that has arrisen within my household (bob at vawter.org (Robert W Vawter III))
OT: An odd question that has arrisen within my household (stefmit at comcast.net (stefmit))
RE: Re: Bad news on RPC DCOM vulnerability (pk95 at yandex.ru (Alex))
OT: An odd question that has arrisen within my household (joel at helgeson.com (Joel R. Helgeson))
OT: An odd question that has arrisen within my household (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: Re: Bad news on RPC DCOM vulnerability (sigpizbguy at hotpop.com (Mike Gordon))
RE: Re: Bad news on RPC DCOM vulnerability (sigpizbguy at hotpop.com (Mike Gordon))
Hacker suspect says his PC was hijacked (mjcarter at ihug.co.nz (Mike))
openssh exploit code? (booger at unixclan.net (security snot))
Hacker suspect says his PC was hijacked (jlevitsk at joshie.com (Joshua Levitsky))
OT: An odd question that has arrisen within my household (jlevitsk at joshie.com (Joshua Levitsky))
openssh exploit code? (hb-fulldisclosure at bsws.de (Henning Brauer))
OT: An odd question that has arrisen within my household (hmason at dbsinet.com (henry j. mason))
openssh exploit code? (booger at unixclan.net (security snot))
Hacker suspect says his PC was hijacked (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
OT: An odd question that has arrisen within my household (booger at unixclan.net (security snot))
Hacker suspect says his PC was hijacked (dufresne at winternet.com (Ron DuFresne))
RE: Re: Bad news on RPC DCOM vulnerability (webheadport80 at netscape.net (webheadport80@...scape.net))
Hacker suspect says his PC was hijacked (jlevitsk at joshie.com (Joshua Levitsky))
OT: An odd question that has arrisen within my household (jlevitsk at joshie.com (Joshua Levitsky))
openssh exploit code? (hb-fulldisclosure at bsws.de (Henning Brauer))
Hacker suspect says his PC was hijacked (jlevitsk at joshie.com (Joshua Levitsky))
OT: An odd question that has arrisen within my household (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
openssh exploit code? (tedu at stanford.edu (Ted Unangst))
Hacker suspect says his PC was hijacked (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: Re: Bad news on RPC DCOM vulnerability (pauls at utdallas.edu (Schmehl, Paul L))
Working proftpd remote root exploit (carl at learningshophull.co.uk (Carl Livitt))
openssh exploit code? (peter at adamantix.org (Peter Busser))
OT: An odd question that has arrisen within my household (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
No subject (Pocjfr at yandex.ru (Pocjfr))
Hacker suspect says his PC was hijacked (jlevitsk at joshie.com (Joshua Levitsky))
OT: An odd question that has arrisen within my household (vugdeox at freeshell.org (Nate Hill))
OT: An odd question that has arrisen within my household (se_cur_ity at hotmail.com (morning_wood))
openssh exploit code? (deadbeat at sdf.lonestar.org (Daniel))
Hacker suspect says his PC was hijacked (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
openssh exploit code? (smcmahon at eiv.com (Shawn McMahon))
re: Working proftpd remote root exploit (amebix at comcast.net (chris))
Hacker suspect says his PC was hijacked (jlevitsk at joshie.com (Joshua Levitsky))
No subject (ggilliss at netpublishing.com (Gregory A. Gilliss))
re: Working proftpd remote root exploit (carl at learningshophull.co.uk (Carl Livitt))
openssh exploit code? (hb-fulldisclosure at bsws.de (Henning Brauer))
[A bug!] Whom to blame, the HTML interpreter or the JavaScript compiler? (mbassett at omaha.com (Bassett, Mark))
Q whois arin? A.she aint internic (se_cur_ity at hotmail.com (morning_wood))
Hotmail & Passport (.NET Accounts) Vulnerability (lady_fm at hotmail.com (Melissa Ferreira))
What software breaks because of this DNS feature? (rms at computerbytesman.com (Richard M. Smith))
Q whois arin? A.she aint internic (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Hotmail & Passport (.NET Accounts) Vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
morning_wood , i discovered the arin.net whois XSS before ou but yo was more quickly to report it! (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hi…)

October 14 (82 messages)

Friendly and secure desktop operating system (tss at iki.fi (Timo Sirainen))
Re: Hotmail & Passport (.NET Accounts) Vulnerability (madduck at madduck.net (martin f krafft))
Hacker suspect says his PC was hijacked (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
Hacker suspect says his PC was hijacked (srenna at vdbmusic.com (Scott Renna))
Friendly and secure desktop operating system (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Friendly and secure desktop operating system (tss at iki.fi (Timo Sirainen))
Friendly and secure desktop operating system (chill at herber-hill.com (Charles E. Hill))
Friendly and secure desktop operating system (ph1 at cogeco.ca (David))
Hacker suspect says his PC was hijacked (hhoffman at ip-solutions.net (Harry Hoffman))
Friendly and secure desktop operating system (jman5000 at pacbell.net (Jimmy Mitchener))
Friendly and secure desktop operating system (flynngn at jmu.edu (Gary Flynn))
Friendly and secure desktop operating system (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Friendly and secure desktop operating system (tss at iki.fi (Timo Sirainen))
Friendly and secure desktop operating system (tss at iki.fi (Timo Sirainen))
client attacks server - XSS (se_cur_ity at hotmail.com (morning_wood))
Hacker suspect says his PC was hijacked (mjcarter at ihug.co.nz (Mike))
client attacks server - XSS (peter at ucsc.edu (Peter Moody))
Any news on www.kievonline.org site? (steve.wray at paradise.net.nz (Steve Wray))
Any news on www.kievonline.org site? (dimitry at al.org.ua (Dmitry Alyabyev))
Any news on www.kievonline.org site? (ben at lanwest.com.au (Benjamin Meade))
Any news on www.kievonline.org site? (j at pureftpd.org (Jedi/Sector One))
Friendly and secure desktop operating system (and-bugtraq at doxdesk.com (Andrew Clover))
Any news on www.kievonline.org site? (rgerhards at hq.adiscon.com (Rainer Gerhards))
Any news on www.kievonline.org site? (alexandre.dulaunoy at ael.be (Alexandre Dulaunoy))
Any news on www.kievonline.org site? (anthony.aykut at frame4.com (Anthony Aykut))
Any news on www.kievonline.org site? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Any news on www.kievonline.org site? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Any news on www.kievonline.org site? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Any news on www.kievonline.org site? (chows at ozemail.com.au (gregh))
Any news on www.kievonline.org site? (jwiens at nersp.nerdc.ufl.edu (Jordan Wiens))
RE: Re: Bad news on RPC DCOM vulnerability (brett.moore at security-assessment.com (Brett Moore))
[Re: Hotmail & Passport (.NET Accounts) Vulnerability] (dan at losangelescomputerhelp.com (Daniel H. Renner))
Any news on www.kievonline.org site? (matthias.andree at gmx.de (Matthias Andree))
Mod-Throttle [was: client attacks server - XSS] (zen-parse at gmx.net (zen-parse))
Friendly and secure desktop operating system (goetzvonberlichingen at comcast.net (Goetz Von Berlichingen))
Any news on www.kievonline.org site? (eckman at umn.edu (Brian Eckman))
Any news on www.kievonline.org site? (capegeo at opengroup.org (George Capehart))
Re: Any news on www.kievonline.org site? (jusenet2 at segitz.de (Johannes Segitz))
Friendly and secure desktop operating syste m (sam.pointer at hpdsoftware.com (Sam Pointer))
Re: Any news on www.kievonline.org site? (mstarr at ampeisch.com (Michael A. Starr))
Any news on www.kievonline.org site? (wcolburn at nmt.edu (William D. Colburn (aka Schlake)))
Friendly and secure desktop operating syste m (jeremiah at nur.net (Jeremiah Cornelius))
Any news on www.kievonline.org site? (MarkC at mtbaker.wednet.edu (Mark Challender))
Re: Any news on www.kievonline.org site? (odin at cleannorth.org (Dan Brosemer))
Re: Any news on www.kievonline.org site? (stefmit at comcast.net (stefmit))
SPAM, credit card numbers, what would you do? (tedklugman at yahoo.com (ted klugman))
Any news on www.kievonline.org site? (jsage at finchhaven.com (John Sage))
SPAM, credit card numbers, what would you do? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
SPAM, credit card numbers, what would you do? (lists at onryou.com (Cael Abal))
Re: Any news on www.kievonline.org site? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
RE: RE: Re: Bad news on RPC DCOM vulnerability (mike.gordon at lmco.com (Gordon, Mike))
SPAM, credit card numbers, what would you do? (lists_full-disclosure at darkuncle.net (lists_full-disclosure@...kuncle.net))
Patch Deployment (MRMyers at anteon.com (Myers, Marvin))
Any news on www.kievonline.org site? (steve.wray at paradise.net.nz (Steve Wray))
SPAM, credit card numbers, what would you do? (gui at goddessmoon.org (Poof))
Patch Deployment (david.grabowski at us.mizuho-sc.com (Grabowski, David))
SPAM, credit card numbers, what would you do? (dufresne at winternet.com (Ron DuFresne))
SPAM, credit card numbers, what would you do? (jeremiah at nur.net (Jeremiah Cornelius))
RE: RE: Re: Bad news on RPC DCOM vulnerabil ity (Michael.Acker at PREMERA.com (Michael Acker))
Re: [Re: Hotmail & Passport (.NET Accounts) Vulnerability] (madduck at madduck.net (martin f krafft))
Patch Deployment (mike at mishley.net (mike))
Security firm removes details of unpatched IE holes (ertugrul.gokcen at turkcell.com.tr (ertugrul.gokcen@...kcell.com.tr))
Another ProFTPd root EXPLOIT ? (alf1num3rik at yahoo.com (Stephen))
New MS Patch - Any Idea What This Is (anthony.aykut at frame4.com (Anthony Aykut))
Weekly Vulnerability Summary, Week 41 2003 (sintraq at sintelli.com (Sintelli SINTRAQ))
Cross-Site Scripting Vulnerability in Wrensoft Zoom Search Engine (sintraq at sintelli.com (Sintelli SINTRAQ))
Mirc Dos 6.11 and below (venom at gen-x.co.nz (VeNoMouS))
SPAM, credit card numbers, what would you do? (purdy at tecman.com (Curt Purdy))
about mcbeth claims: reasons and wrong information (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Any news on www.kievonline.org site? (nobody at nox.lemuria.org (Anonymous))
Friendly and secure desktop operating system (franzvs at thum.ath.cx (Franz von Sickingen))
OT: An odd question that has arrisen within my household (guninski at guninski.com (Georgi Guninski))
SPAM, credit card numbers, what would you do? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
something evil in your email (dinn at blend.twistedpair.ca (Michael 'Moose' Dinn))
OT: An odd question that has arrisen within my household (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
SPAM, credit card numbers, what would you do? (madsaxon at direcway.com (madsaxon))
SPAM, credit card numbers, what would you do? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Friendly and secure desktop operating syste m (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
OT: An odd question that has arrisen within my household (peter at adamantix.org (Peter Busser))
Friendly and secure desktop operating system (peter at adamantix.org (Peter Busser))
Cross-Site Scripting Vulnerability in Wrensoft Zoom Search Engine (sintraq at sintelli.com (Sintelli SINTRAQ))
Cross-Site Scripting Vulnerability in Wrensoft Zoom Search Engine (sintraq at sintelli.com (Sintelli SINTRAQ))

October 15 (90 messages)

SPAM, credit card numbers, what would you do? (jeremiah at nur.net (Jeremiah Cornelius))
New MS Patch - Any Idea What This Is (jlevitsk at joshie.com (Joshua Levitsky))
SPAM, credit card numbers, what would you do? (jeremiah at nur.net (Jeremiah Cornelius))
NASA.GOV Search system Cross Site Scripting ( SEARCH.NASA.GOV ) (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
OT: An odd question that has arrisen within my household (jlevitsk at joshie.com (Joshua Levitsky))
More NASA.GOV HOLES: naade02.msfc.nasa.gov (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
More Cross Site Scripting in NASA.gov Sites (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
NASA.GOV SQL Injections (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
OT: An odd question that has arrisen withinmy household (jlevitsk at joshie.com (Joshua Levitsky))
OT: An odd question that has arrisen withinmy household (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
something evil in your email (lists at onryou.com (Cael Abal))
SPAM, credit card numbers, what would you do? (devnull at iprimus.com.au (/dev/null))
SPAM, credit card numbers, what would you do? (lists at onryou.com (Cael Abal))
More NASA.GOV HOLES: naade02.msfc.nasa.gov (nodialtone at comcast.net (Byron Copeland))
Re: (rupam at kamarupa.com (Rupam Phukan))
Any news on www.kievonline.org site? (denis at dimick.net (Denis Dimick))
Re: Any news on www.kievonline.org site? (nick at virus-l.demon.co.uk (Nick FitzGerald))
OT: An odd question that has arrisen withinmy household (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
mIRC DCC Exploit (crawler at welho.com (Saint))
Prosecutors admit error in whistleblower conviction (jeremiah at nur.net (Jeremiah Cornelius))
NSRG-Security SaS Encryption cracked (pdt at jackhammer.org (Paul Tinsley))
mIRC DCC Exploit (gui at goddessmoon.org (Poof))
mIRC DCC Exploit (panther- at gmx.de (Nils))
NSRG-Security SaS Encryption cracked (jsage at finchhaven.com (John Sage))
Another ProFTPd root EXPLOIT ? (deadbeat at sdf.lonestar.org (Daniel))
FW: change of address (sam.pointer at hpdsoftware.com (Sam Pointer))
Any news on www.kievonline.org site? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Prosecutors admit error in whistleblower conviction (etomcat at freemail.hu (Feher Tamas))
[SECURITY] [DSA 395-1] New tomcat4 packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA 395-1] New tomcat4 packages fix denial of service (grenville.green at travel2.com (grenville.green@...vel2.com))
AW: [SECURITY] [DSA 395-1] New tomcat4 packages fix denial of service (Andriy.Bilous at sabre-merlin.de (Andriy Bilous))
FW: Microsoft Security Bulletin MS03-035 (korund at hotmail.com (Alex Mega))
FW: Microsoft Security Bulletin MS03-035 (Sonny.Discini at montgomerycountymd.gov (Discini, Sonny))
Finjan Software Discovers a New Critical Vulnerability In Microsoft Hotmail (menashe at finjan.com (Menashe Eliezer))
Gaim festival plugin exploit (error at lostinthenoise.net (error))
Finjan Software Discovers a New Critical Vulnerability In Microsoft Hotmail (menashe at finjan.com (Menashe Eliezer))
Fw: finally got it right! (se_cur_ity at hotmail.com (morning_wood))
Few issues previously unpublished in English (3APA3A at SECURITY.NNOV.RU (3APA3A))
sql injection question (richard at tccnet.co.uk (Richard Stevens))
Few issues previously unpublished in English (3APA3A at SECURITY.NNOV.RU (3APA3A))
sql injection question (fcharpentier at xmcopartners.com (Frederic Charpentier))
Prosecutors admit error in whistleblower conviction (montanatenor at yahoo.com (Montana Tenor))
R: sql injection question (ekerazha at yahoo.it (Manuel [ekerazha]))
OT: An odd question that has arrisen withinmy household (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
mIRC DCC Exploit (brett at custom-tech.net (Brett Campbell))
Supposed SaS "encryption" weak - Coments and Infor about wrong claims (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Fw: finally got it right! (bobbymanly at hotmail.com (bobby manly))
Gaim festival plugin exploit (error at lostinthenoise.net (error))
SQL Injection from SPAM message :) (auto67574 at hushmail.com (auto67574@...hmail.com))
Any news on www.kievonline.org site? (bones at quiecom.com (Bones))
about mcbeth claims: reasons and wrong information (mcbethh at op.pl (mcbethh@...pl))
Fw: finally got it right! (se_cur_ity at hotmail.com (morning_wood))
Supposed SaS "encryption" weak - Coments and Infor about wrong claims (petard at sdf.lonestar.org (petard))
Any news on www.kievonline.org site? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Supposed SaS "encryption" weak - Coments and Infor about wrong claims (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
OT: An odd question that has arrisen withinmy household (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
NSRG-Security SaS Encryption cracked (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Any news on www.kievonline.org site? (maxime at pandore-design.com (Maxime Ducharme))
FW: change of address (purdy at tecman.com (Curt Purdy))
Fw: change of address (maxime at pandore-design.com (Maxime Ducharme))
MS Security Bulletin MS03-043 (dbounds at intrusense.com (Darren Bounds))
FW: Last Microsoft Patch (purdy at tecman.com (Curt Purdy))
New Microsoft security bulletins today (jheidtke at fmlh.edu (Jerry Heidtke))
Messenger BO - Microsoft MS03-043 (full-disclosure at thechristies.org (full-disclosure@...christies.org))
Best behavior to report the holes that i found in NSAS.GOV WEBSITE (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
OT: An odd question that has arrisen withinmy household (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
FW: Last Microsoft Patch (gui at goddessmoon.org (Poof))
logs cant e edited remotly? (se_cur_ity at hotmail.com (morning_wood))
Fwd: [VulnWatch] 5 Windows vulnerabilities for October 2003 (4 critical, 1 important) (tamas.wallner at scansoft.com (waces))
Re: Gaim festival plugin exploit (merlyn at stonehenge.com (Randal L. Schwartz))
R: sql injection question (sgmasood at yahoo.com (S G Masood))
FW: Last Microsoft Patch (fabio_weissert at hotmail.com (Fabio Weissert))
FW: Last Microsoft Patch (anthony.aykut at frame4.com (Anthony Aykut))
Supposed SaS "encryption" weak - Coments and Infor about wrong claims (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
NSRG-Security SaS Encryption cracked (tinsleyphone at hotmail.com (Paul Tinsley))
ColdFusion SQL Error Pages XSS (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
FW: Last Microsoft Patch (pauls at utdallas.edu (Schmehl, Paul L))
FW: Last Microsoft Patch (jeremiah at nur.net (Jeremiah Cornelius))
Microsoft got it wrong (rms at computerbytesman.com (Richard M. Smith))
Anyone know where I can get a hold of the IEAK55? (Steve.Pelosi at conocophillips.com (Pelosi, Stephen:))
logs cant e edited remotly? (gui at goddessmoon.org (Poof))
New Microsoft security bulletins today (lists at venom600.org (Ben Nelson))
Weird dns queries increasing (Faron.Golden at Gunter.AF.mil (Golden Faron P Contr HQ SSG/XOON))
FW: Last Microsoft Patch (cdevoney at u.washington.edu (Chris DeVoney))
OT: An odd question that has arrisen withinmy household (jeremiah at nur.net (Jeremiah Cornelius))
RE: ColdFusion SQL Error Pages XSS (keith.kikta at iland.com (Keith Kikta - iLand Internet Solutions Corp.))
FW: Last Microsoft Patch (jheidtke at fmlh.edu (Jerry Heidtke))
sql injection question (richard at tccnet.co.uk (Richard Stevens))
Gaim festival plugin exploit (eguaj at free.fr (Jérôme Augé))
NASA.GOV SQL Injections (mcbethh at op.pl (mcbethh@...pl))

October 16 (65 messages)

Supposed SaS "encryption" weak - Coments and Infor about wrong claims (dotslash at snosoft.com (KF))
(Fwd) Re: more malformed DNS queries (bschnzl at cotse.net (Bill Scherr IV, GSEC, GCIA))
FW: Last Microsoft Patch (mlande at bellsouth.net (Mary Landesman))
Re: Any news on www.kievonline.org site? (smearp at mac.com (Sean Earp))
New Microsoft security bulletins today (jlevitsk at joshie.com (Joshua Levitsky))
OT: An odd question that has arrisen withinmy household (jlevitsk at joshie.com (Joshua Levitsky))
FW: Last Microsoft Patch (exibar at thelair.com (Exibar))
FW: Microsoft Security Bulletin MS03-035 (nick at virus-l.demon.co.uk (Nick FitzGerald))
New Microsoft security bulletins today (Zach.Forsyth at kiandra.com (Zach Forsyth))
OT: An odd question that has arrisen withinmy household (igenge2 at csc.com.au (igenge2@....com.au))
New Microsoft security bulletins today (jlevitsk at joshie.com (Joshua Levitsky))
FW: Last Microsoft Patch (gui at goddessmoon.org (Poof))
FW: Last Microsoft Patch (exibar at thelair.com (Exibar))
FW: Last Microsoft Patch (jeremiah at nur.net (Jeremiah Cornelius))
New Microsoft security bulletins today (jeremiah at nur.net (Jeremiah Cornelius))
Supposed SaS "encryption" weak - Coments and Infor about wrong claims (nick at virus-l.demon.co.uk (Nick FitzGerald))
FW: Last Microsoft Patch (devnull at iprimus.com.au (/dev/null))
New Microsoft security bulletins today (daniel.merriott at bbc.co.uk (Daniel Merriott))
New Microsoft security bulletins today (lists at onryou.com (Cael Abal))
3 Copies of messages? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Data Retention Legislation in Violation of EU Human Rights Laws (jc at farm9.com (Jeremiah Cornelius))
New Microsoft security bulletins today (Robert.L.Harris at rdlg.net (Robert L. Harris))
Listbox And Combobox Control Buffer Overflow (brett.moore at security-assessment.com (Brett Moore))
OpenServer 5.0.7 OpenServer 5.0.6 OpenServer 5.0.5 : Multiple security vulnerabilities in Xsco (security at sco.com (security@....com))
FW: Last Microsoft Patch (tcleary2 at csc.com.au (tcleary2@....com.au))
Getting even with a SPAMer (auto69366 at hushmail.com (auto69366@...hmail.com))
Microsoft Local Troubleshooter ActiveX control buffer overflow (cesarc56 at yahoo.com (Cesar))
FW: Last Microsoft Patch (petard at sdf.lonestar.org (petard))
3 Copies of messages? (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Friendly and secure desktop operating system (krajicek at ics.muni.cz (Ondrej Krajicek))
3 Copies of messages? (dan at ssc.com (Dan Wilder))
New Microsoft security bulletins today (full-disclosure at lists.netsys.com (LC))
New Microsoft security bulletins today (prandal at herefordshire.gov.uk (Randal, Phil))
Foundstone Labs to Present Information on New Microsoft Vulnerabilities (James.Foster at foundstone.com (James Foster))
New Microsoft security bulletins today (lists at onryou.com (Cael Abal))
New Microsoft security bulletins today (prandal at herefordshire.gov.uk (Randal, Phil))
3 Copies of messages? (jsage at finchhaven.com (John Sage))
VeriSign to Sell Network Solutions (jeremiah at nur.net (Jeremiah Cornelius))
New Microsoft security bulletins today (dan_20407 at msn.com (DAN MORRILL))
FW: Last Microsoft Patch (madsaxon at direcway.com (madsaxon))
FW: Last Microsoft Patch (purdy at tecman.com (Curt Purdy))
(Fwd) Re: more malformed DNS queries (p.nolan at comcast.net (Patrick Nolan))
Foundstone Labs to Present Information on New Microsoft Vulnerabilities (illectro2001 at yahoo.com (Chris Sharp))
3 Copies of messages? (dan at ssc.com (Dan Wilder))
Cross-Site Scripting Vulnerability in Wrensoft Zoom Search Engine (illectro2001 at yahoo.com (Chris Sharp))
Verisign to Sell Network Solutions (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Richard M. Smith got it wrong (nom.de.guerre at bonbon.net (NDG))
FW: Last Microsoft Patch (jeremiah at nur.net (Jeremiah Cornelius))
FW: Last Microsoft Patch (cdevoney at u.washington.edu (Chris DeVoney))
Verisign to Sell Network Solutions (jeremiah at nur.net (Jeremiah Cornelius))
Verisign to Sell Network Solutions (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
VeriSign to revive redirect service - Declan's Peice (jeremiah at nur.net (Jeremiah Cornelius))
Foundstone Labs to Present Information on New Microsoft Vulnerabilities (jsage at finchhaven.com (John Sage))
Verisign to Sell Network Solutions (rodrigob at suespammers.org (Rodrigo Barbosa))
Verisign to Sell Network Solutions (madsaxon at direcway.com (madsaxon))
FW: Last Microsoft Patch (MRMyers at anteon.com (Myers, Marvin))
Foundstone Labs to Present Information on New Microsoft Vulnerabilities (benjamin at seattlefenix.net (Benjamin Krueger))
FW: Last Microsoft Patch (mlande at bellsouth.net (Mary Landesman))
FW: Last Microsoft Patch (purdy at tecman.com (Curt Purdy))
FW: Last Microsoft Patch (frobozz at frotz.us (j))
FW: Last Microsoft Patch (exibar at thelair.com (Exibar))
FW: Last Microsoft Patch (exibar at thelair.com (Exibar))
Verisign to Sell Network Solutions (jeremiah at nur.net (Jeremiah Cornelius))
FW: Last Microsoft Patch (listuser at seifried.org (Kurt Seifried))
SSL Filtering (jason at positivenetworks.net (Jason Sloderbeck))

October 17 (71 messages)

MDKSA-2003:100 - Updated gdm packages fix local vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:101 - Updated fetchmail packages fix DoS vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
New Microsoft security bulletins today (jlevitsk at joshie.com (Joshua Levitsky))
Citrix Metaframe Eploits (indianz at indianz.ch (IndianZ))
SSL Filtering - OFFTOPIC (listuser at seifried.org (Kurt Seifried))
NASA.GOV SQL Injections (rspooner at unipalm.co.uk (Russ Spooner))
Worthwhile Security Certs / Courses (UK) (thomas.tonneson at fortis.co.im (Tonneson, Thomas))
IRC DCC Exploit (king at danger.org (Farrukh Hussain))
IRC DCC Exploit (ricky.blaikie at servercity.co.uk (Ricky Blaikie))
IRC DCC Exploit (andrei at fq.ro (Andrei Galca-Vasiliu))
IRC DCC Exploit (fw at deneb.enyo.de (Florian Weimer))
Teenager cleared of hacking - Off Topic? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Application level firewall (jason.full-disclosure at compnski.com (Jason Freidman))
IRC DCC Exploit (andrewg at d2.net.au (andrewg@...net.au))
IRC DCC Exploit (sgmasood at yahoo.com (S G Masood))
Application level firewall (fw at deneb.enyo.de (Florian Weimer))
Application level firewall (Andriy.Bilous at sabre-merlin.de (Andriy Bilous))
Strange netcat behavior (thalm at netcabo.pt (thalm))
Application level firewall (a.gietl at e-admin.de (Andreas Gietl))
Teenager cleared of hacking - Off Topic? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
NASA.GOV SQL Injections (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
IRC DCC Exploit (manipeto at yahoo.co.uk (Syed Imran Ali))
Teenager cleared of hacking - Off Topic? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
IRC DCC Exploit (chriss_1979 at lycos.de (Christian Lycos))
Application level firewall (raju at linux-delhi.org (Raj Mathur))
Application level firewall (h1o at arago.de (Oliver Heinz))
Strange netcat behavior (frick at SC-Networks.de (Christoph Frick))
Strange netcat behavior (giovanni at giacobbi.net (Giovanni Giacobbi))
Foundstone Labs to Release Absolutely FREE Tool (James.Foster at foundstone.com (James Foster))
Foundstone Labs to Release Absolutely FREE Tool (security at dylanic.de (Michael Renzmann))
Has m$ fixed the fun with SetWindowsHookEx? (guninski at guninski.com (Georgi Guninski))
NASA.GOV SQL Injections (pauls at utdallas.edu (Schmehl, Paul L))
Foundstone Labs to Release Absolutely FREE Tool (randy.brown at hp.com (Brown, Randy (InfoSec)))
Strange netcat behavior (thalm at netcabo.pt (thalm))
IRC DCC Exploit (Klinzer at gmx.de (Ferdinand Klinzer))
Foundstone Labs to Release Absolutely FREE Tool (jheidtke at fmlh.edu (Jerry Heidtke))
Teenager cleared of hacking - Off Topic? (merlyn at stonehenge.com (Randal L. Schwartz))
Any news on basesrv.dll issue with latest MS patches? (bugtraq at arcanasystems.com (Doug Lhotka))
NASA.GOV SQL Injections (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Teenager cleared of hacking - Off Topic? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
IRC DCC Exploit (lists at onryou.com (Cael Abal))
Teenager cleared of hacking - Off Topic? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
SSL Filtering (john_sec_lists at hotmail.com (John Sec))
NASA.GOV SQL Injections (dufresne at winternet.com (Ron DuFresne))
NASA.GOV SQL Injections (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Foundstone Labs to Release Absolutely FREE Tool (SpeedM at nmbc.com (SpeedM@...c.com))
Foundstone Labs to Release Absolutely FREE Tool (pdt at jackhammer.org (Paul Tinsley))
NASA.GOV SQL Injections (dufresne at winternet.com (Ron DuFresne))
NASA.GOV SQL Injections (ggilliss at netpublishing.com (Gregory A. Gilliss))
Application level firewall (john at johnleach.co.uk (John Leach))
Strange netcat behavior (thalm at netcabo.pt (thalm))
Application level firewall (epartner3 at thum.ath.cx (fg))
Question: Microsoft Security Bulletin MS03-035 (korund at hotmail.com (Alex Mega))
Application level firewall (kcurrie at undertow.2y.net (Kevin Currie))
SSL Filtering (BlueBoar at thievco.com (Blue Boar))
NASA.GOV SQL Injections (madsaxon at direcway.com (madsaxon))
[SD:jason.full-disclosure] RE: NASA.GOV SQL Injections (jason at compnski.com (Jason Freidman))
Foundstone Labs to Release Absolutely FREE Tool (rahnemann at affinity-mortgage.com (Robert Ahnemann))
Strange netcat behavior (dan at ssc.com (Dan Wilder))
NASA.GOV SQL Injections (dufresne at winternet.com (Ron DuFresne))
SSL Filtering (full-disclosure at ifokr.org (Brian Hatch))
NASA experience (jason.full-disclosure at compnski.com (Jason Freidman))
Foundstone Labs to Release Absolutely FREE Tool (nom.de.guerre at bonbon.net (NDG))
Strange netcat behavior (sgmasood at yahoo.com (S G Masood))
NASA.GOV SQL Injections (exibar at thelair.com (Exibar))
Problems with MS03-042 (KB826232) patch? (jheidtke at fmlh.edu (Jerry Heidtke))
Strange netcat behavior (bschnzl at cotse.net (Bill Scherr IV, GSEC, GCIA))
Strange netcat behavior (dan at ssc.com (Dan Wilder))
NASA experience (purdy at tecman.com (Curt Purdy))
[inbox] Problems with MS03-042 (KB826232) patch? (purdy at tecman.com (Curt Purdy))
Foundstone Labs to Release Absolutely FREE Tool (ronald at cyberforce.segfault.net (Ronald McDownload))

October 18 (36 messages)

SSL Filtering (smcmahon at eiv.com (Shawn McMahon))
Re: Gaim festival plugin exploit (security at humancentrictech.com (HCTITS Security Division))
Re: Gaim festival plugin exploit (security at humancentrictech.com (HCTITS Security Division))
AT&T early warning system (jkmanowar9 at fastmail.fm (jkm))
Re: Gaim festival plugin exploit (lists at onryou.com (Cael Abal))
AT&T early warning system (jays at panix.com (Jay Sulzberger))
Foundstone Labs to Release Absolutely FREE Tool (Dark-Avenger at comcast.net (Dark Avenger))
Re: Gaim festival plugin exploit (merlyn at stonehenge.com (Randal L. Schwartz))
AT&T early warning system (jkmanowar9 at fastmail.fm (jkm))
[IE] Pure html DOS although some version require minor user interaction ( highlighting/minimising ) (mccann at lexicon.net (John))
Question: is this exploitable? (pjp at paulo-pereira.net (Paulo Pereira))
Question: is this exploitable? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Question: is this exploitable? (jason at dixongroup.net (Jason Dixon))
Prosecutors admit error in whistleblower conviction (whenders at insightbb.com (Wesley J. Henderson))
Question: is this exploitable? (merlyn at stonehenge.com (Randal L. Schwartz))
NASA.GOV SQL Injections (mvp at joeware.net (Joe))
[IE] Pure html DOS although some version require minor user interaction ( highlighting/minimising ) (tim-security at sentinelchicken.org (Tim))
Application level firewall (Andriy.Bilous at sabre-merlin.de (Andriy Bilous))
Re: Gaim festival plugin exploit (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
AT&T early warning system (hoho at tacomeat.net (Hoho))
NASA.GOV SQL Injections (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
NASA.GOV SQL Injections (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
NASA.GOV SQL Injections (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
AT&T early warning system (sgmasood at yahoo.com (S G Masood))
AT&T early warning system (steve.wray at paradise.net.nz (Steve Wray))
AT&T early warning system (sgmasood at yahoo.com (S G Masood))
Question: is this exploitable? (jsage at finchhaven.com (John Sage))
[ANNOUNCE] mod_security 1.7 released (ivanr at webkreator.com (Ivan Ristic))
[IE] Pure html DOS although some version require minor user interaction ( highlighting/minimising ) (thomas at outcast-media.com (Thomas Rogg))
Question: is this exploitable? (codex at bogus.net (Codex))
Proof of concept for Windows Messenger Service overflow (recca at mail.ru ("Hanabishi Recca" ))
Re: Gaim festival plugin exploit (lists at onryou.com (Cael Abal))
Re: Gaim festival plugin exploit (lists at onryou.com (Cael Abal))
Re: Gaim festival plugin exploit (lists at onryou.com (Cael Abal))
Re: Gaim festival plugin exploit (lists at onryou.com (Cael Abal))
Re: Gaim festival plugin exploit (lists at onryou.com (Cael Abal))

October 19 (41 messages)

AT&T early warning system (mailinglist at teifke.de (Sascha Teifke))
[IE] Pure html DOS although some version require minor user interaction ( highlighting/minimising ) (sgmasood at yahoo.com (S G Masood))
Proof of concept for Windows Messenger Service overflow (pdt at jackhammer.org (Paul Tinsley))
Question: is this exploitable? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Question: is this exploitable? (pdt at jackhammer.org (Paul Tinsley))
Question: is this exploitable? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Question: is this exploitable? (pdt at jackhammer.org (Paul Tinsley))
AT&T early warning system (eballen1 at qwest.net (Bruce Ediger))
NASA.GOV SQL Injections (pauls at utdallas.edu (Paul Schmehl))
Application level firewall (adam.lydick at verizon.net (Adam Lydick))
NASA.GOV SQL Injections (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Pure html DOS although some version require minor user interaction ( highlighting/minimising ) (dante at alighieri.org (Davide Del Vecchio))
NASA.GOV SQL Injections (streck at papafloh.de (Florian Streck))
Caucho Resin 2.x - Cross Site Scripting (se_cur_ity at hotmail.com (morning_wood))
openssh exploit code? (attica at stackheap.org (S . f . Stover))
[OpenPKG-SA-2003.045] OpenPKG Security Advisory (ircd) (openpkg at openpkg.org (OpenPKG))
Proof of concept for Windows Messenger Serviceoverflow (recca at mail.ru ("Hanabishi Recca" ))
NASA.GOV SQL Injections (pauls at utdallas.edu (Paul Schmehl))
Geeklog exploit (jouko at iki.fi (Jouko Pynnonen))
Foundstone Labs to Release Absolutely FREE Tool (jeremiah at nur.net (Jeremiah Cornelius))
Bugtraq? (se_cur_ity at hotmail.com (morning_wood))
NASA.GOV SQL Injections (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Foundstone Labs to Release Absolutely FREE Tool (ggilliss at netpublishing.com (Gregory A. Gilliss))
ByteHoard Directory Traversal Vulnerability (sintraq at sintelli.com (Sintelli SINTRAQ))
Caucho Resin 2.x - Cross Site Scripting (jkuperus at planet.nl (jelmer))
Geeklog exploit (thomas at outcast-media.com (Thomas Rogg))
Bugtraq? (galiarept at phreaker.net (GaLiaRePt))
Vulneraibilty Asesment report in NASA.GOV Websites [not finished , only news] (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Bugtraq? (ph1 at cogeco.ca (David))
Bugtraq? (exibar at thelair.com (Exibar))
Bugtraq? (fw at deneb.enyo.de (Florian Weimer))
Bugtraq? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Bugtraq? (pfarrow at flamenetworks.co.uk (Paul Farrow))
ByteHoard Directory Traversal Vulnerability (sintraq at sintelli.com (Sintelli SINTRAQ))
ByteHoard Directory Traversal Vulnerability (sintraq at sintelli.com (Sintelli SINTRAQ))
ByteHoard Directory Traversal Vulnerability (sintraq at sintelli.com (Sintelli SINTRAQ))
ByteHoard Directory Traversal Vulnerability (sintraq at sintelli.com (Sintelli SINTRAQ))
ByteHoard Directory Traversal Vulnerability (sintraq at sintelli.com (Sintelli SINTRAQ))
ByteHoard Directory Traversal Vulnerability (sintraq at sintelli.com (Sintelli SINTRAQ))
ByteHoard Directory Traversal Vulnerability (sintraq at sintelli.com (Sintelli SINTRAQ))
ByteHoard Directory Traversal Vulnerability (sintraq at sintelli.com (Sintelli SINTRAQ))

October 20 (70 messages)

Windows covert channel (macubergeek at comcast.net (James Kelly))
Windows covert channel (mvp at joeware.net (Joe))
Windows covert channel (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
Windows covert channel (8tImER at gmx.net (8tImER))
Windows covert channel (madsaxon at direcway.com (madsaxon))
AT&T early warning system (jkmanowar9 at fastmail.fm (jkm))
Windows covert channel (jazper at cox.net (jazper))
Linux Ported Version of MS03-043 DOS (venom at gen-x.co.nz (VeNoMouS))
AT&T early warning system (jkmanowar9 at fastmail.fm (jkm))
Windows covert channel (jeremiah at nur.net (Jeremiah Cornelius))
Windows covert channel (dotslash at snosoft.com (KF))
Windows covert channel (kdebisschop at alert.infoplease.com (Karl DeBisschop))
Linux Ported Version of MS03-043 DOS (venom at gen-x.co.nz (VeNoMouS))
Bugtraq? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Bugtraq? (exibar at thelair.com (Exibar))
Linux Ported Version of MS03-043 DOS (dowlingg at sullcrom.com (Dowling, Gabrielle))
AT&T early warning system (steve.wray at paradise.net.nz (Steve Wray))
Linux Ported Version of MS03-043 DOS (venom at gen-x.co.nz (VeNoMouS))
Windows covert channel (kain at kain.org (Kain))
Linux Ported Version of MS03-043 DOS (dowlingg at sullcrom.com (Dowling, Gabrielle))
Caucho Resin 2.x - Cross Site Scripting (greg-fulldisclosure at nest.cx (Gregory Steuck))
JAP Wins Court Victory (comesefosse at ntani.firenze.linux.it (Tarapia Tapioco))
re: openssh exploit code? (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
Caucho Resin 2.x - Cross Site Scripting (jkuperus at planet.nl (jelmer))
Re: Teenager cleared of hacking - Off Topic? (etomcat at freemail.hu (Feher Tamas))
[TURBOLINUX SECURITY INFO] 20/Oct/2003 (security-announce at turbolinux.co.jp (Turbolinux))
re: openssh exploit code? (attica at stackheap.org (S . f . Stover))
JAP Wins Court Victory (lists at onryou.com (Cael Abal))
re: openssh exploit code? (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
Throughput Testing Switches, need advice (amebix at comcast.net (amebix@...cast.net))
JAP Wins Court Victory (ggilliss at netpublishing.com (Gregory A. Gilliss))
re: openssh exploit code? (attica at stackheap.org (S . f . Stover))
JAP Wins Court Victory (lists at onryou.com (Cael Abal))
Linux Ported Version of MS03-043 DOS (pdt at jackhammer.org (Paul Tinsley))
Throughput Testing Switches, need advice (volker.tanger at discon.de (Volker Tanger))
NASA.GOV SQL Injections (dufresne at winternet.com (Ron DuFresne))
re: openssh exploit code? (jsage at finchhaven.com (John Sage))
JAP Wins Court Victory (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
re: openssh exploit code? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
re: openssh exploit code? (attica at stackheap.org (S . f . Stover))
[inbox] Re: Windows covert channel (purdy at tecman.com (Curt Purdy))
Re: Linux Ported Version of MS03-043 DOS (mike.gordon at lmco.com (Gordon, Mike))
re: openssh exploit code? (pandora at swi.com.br (pandora@....com.br))
Re: Advanced XSS paper and semi-new attack (Ulf.Harnhammar.9485 at student.uu.se (Härnhammar, Ulf))
[inbox] Re: Windows covert channel (david.c.maynard at xo.com (Maynard, David C))
Multiple SQL Injection Vulnerabilities in DeskPRO (aviram at beyondsecurity.com (Aviram Jenik))
Multiple SQL Injection Vulnerabilities in DeskPRO (aviram at beyondsecurity.com (Aviram Jenik))
Re: Gaim festival plugin exploit (merlyn at stonehenge.com (Randal L. Schwartz))
Linux Ported Version of MS03-043 DOS (PerrymonJ at bek.com (Perrymon, Josh L.))
FW: [inbox] Re: Windows covert channel (henri123 at netzero.net (Henri123-Netzero))
re: openssh exploit code? (frank at knobbe.us (Frank Knobbe))
Linux Ported Version of MS03-043 DOS (frank at knobbe.us (Frank Knobbe))
Tanato WarGame , notes and news (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Re: Gaim festival plugin exploit (merlyn at stonehenge.com (Randal L. Schwartz))
Linux Ported Version of MS03-043 DOS (venom at gen-x.co.nz (VeNoMouS))
re: openssh exploit code? (smcmahon at eiv.com (Shawn McMahon))
No Subject (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
Re: Gaim festival plugin exploit (merlyn at stonehenge.com (Randal L. Schwartz))
Re: Gaim festival plugin exploit (merlyn at stonehenge.com (Randal L. Schwartz))
Re: No Subject (frank at knobbe.us (Frank Knobbe))
Cross Site Java applets (schonef at uni-muenster.de (Marc Schoenefeld))
Cross Site Java applets (schonef at uni-muenster.de (Marc Schoenefeld))
Cross Site Java applets (schonef at uni-muenster.de (Marc Schoenefeld))
port of ms03-043 dos, fix for freebsd (venom at gen-x.co.nz (VeNoMouS))
No Subject (pauls at utdallas.edu (Schmehl, Paul L))
[Cert-lists] Re: Re: Gaim festival plugin exploit (georg.moritz at topalis.com (Georg Moritz))
Cross Site Java applets (schonef at uni-muenster.de (Marc Schoenefeld))
Re: Gaim festival plugin exploit (merlyn at stonehenge.com (Randal L. Schwartz))
Cross Site Java applets (schonef at uni-muenster.de (Marc Schoenefeld))
Re: Gaim festival plugin exploit (merlyn at stonehenge.com (Randal L. Schwartz))

October 21 (64 messages)

No Subject (re: openssh exploit code?) (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
No Subject (re: openssh exploit code?) (ggilliss at netpublishing.com (Gregory A. Gilliss))
ByteHoard Directory Traversal Vulnerability (venom at gen-x.co.nz (VeNoMouS))
No Subject (re: openssh exploit code?) (pauls at utdallas.edu (Paul Schmehl))
No Subject (re: openssh exploit code?) (booger at unixclan.net (security snot))
Re: No Subject (lcamtuf at ghettot.org (Michal Zalewski))
No Subject (re: openssh exploit code?) (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
Re: No Subject (frank at knobbe.us (Frank Knobbe))
Potential DoS in WinSyslog/MonitorWare Agent Interactive Syslog Server (rgerhards at hq.adiscon.com (Rainer Gerhards))
svchost.exe crashes (dantams at sdf-eu.org (Daniel Tams))
No Subject (re: openssh exploit code?) (hdw at kallisti.se (Anders B Jansson))
No Subject (re: openssh exploit code?) (jsage at finchhaven.com (John Sage))
JAP Wins Court Victory (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
Windows covert channel (WEaton at coj.net (Wally Eaton))
Re: Teenager cleared of hacking - Off Topic? (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
No Subject (re: openssh exploit code?) (attica at stackheap.org (S . f . Stover))
Windows covert channel (rgerhards at hq.adiscon.com (Rainer Gerhards))
No Subject (re: openssh exploit code?) (madsaxon at direcway.com (madsaxon))
SANS Top 20 [scanned] (cru at ircnet.de (Veit Wahlich))
No Subject (re: openssh exploit code?) (pauls at utdallas.edu (Schmehl, Paul L))
No Subject (re: openssh exploit code?) (pauls at utdallas.edu (Schmehl, Paul L))
SQL Injection Vulnerability in FuzzyMonkey MyClassifieds SQL Version (sintraq at sintelli.com (Sintelli SINTRAQ))
SQL Injection Vulnerability in FuzzyMonkey MyClassifieds SQL Version (sintraq at sintelli.com (Sintelli SINTRAQ))
No Subject (re: openssh exploit code?) (b-nordquist at bethel.edu (Brent J. Nordquist))
Re: No Subject (lcamtuf at ghettot.org (Michal Zalewski))
SQL Injection Vulnerability in FuzzyMonkey MyClassifieds SQL Version (sintraq at sintelli.com (Sintelli SINTRAQ))
No Subject (re: openssh exploit code?) (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
No Subject (re: openssh exploit code?) (jasonc at science.org (Jason Coombs))
No Subject (re: openssh exploit code?) (jasonc at science.org (Jason Coombs))
JAP Wins Court Victory (DaveHowe at cmn.sharp-uk.co.uk (David Howe))
No Subject (re: openssh exploit code?) (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
No Subject (re: openssh exploit code?) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Where to find NYC and New Jersey Penetration Testing Firms (admin at governmentsecurity.org (Governmentsecurity.org))
remote mirc < 6.11 exploit (daigoku2003 at yahoo.com (test test2))
Re: No Subject (bjshedwick at yahoo.com (Bradford Shedwick))
No Subject (re: openssh exploit code?) (pauls at utdallas.edu (Schmehl, Paul L))
No Subject (re: openssh exploit code?) (mbassett at omaha.com (Bassett, Mark))
remote mirc < 6.11 exploit (daigoku2003 at yahoo.com (Daigoku))
No Subject (re: openssh exploit code?) (BlueBoar at thievco.com (Blue Boar))
remote mirc < 6.11 exploit (alf1num3rik at yahoo.com (Stephen))
Tanato WarGame , notes and news (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
The NASA websites security holes report will be finished this Sunday. (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
No Subject (re: openssh exploit code?) (montanatenor at yahoo.com (Montana Tenor))
No Subject (re: openssh exploit code?) (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
No Subject (re: openssh exploit code?) (rahnemann at affinity-mortgage.com (Robert Ahnemann))
When should you patch? Was: No Subject (re: openssh exploit code?) (pauls at utdallas.edu (Schmehl, Paul L))
No Subject (re: openssh exploit code?) (rahnemann at affinity-mortgage.com (Robert Ahnemann))
IE6 & Java 1.4.2_02 applet: Hardware stress on floppy drive (schonef at uni-muenster.de (Marc Schoenefeld))
No Subject (re: openssh exploit code?) (montanatenor at yahoo.com (Montana Tenor))
No Subject (re: openssh exploit code?) (dan at ssc.com (Dan Wilder))
No Subject (re: openssh exploit code?) (rahnemann at affinity-mortgage.com (Robert Ahnemann))
No Subject (re: openssh exploit code?) (ken at vanwyk.org (Kenneth R. van Wyk))
No Subject (re: openssh exploit code?) (benjamin at seattlefenix.net (Benjamin Krueger))
No Subject (re: openssh exploit code?) (rmassa at unixboxen.net (Richard Massa))
Re: No Subject (frank at knobbe.us (Frank Knobbe))
No Subject (re: openssh exploit code?) (tedu at stanford.edu (Ted Unangst))
No Subject (re: openssh exploit code?) (pauls at utdallas.edu (Schmehl, Paul L))
No Subject (re: openssh exploit code?) (randomusername at hushmail.com (Generated by a PseudoRandom Number Generator))
IE6 & Java 1.4.2_02 applet: Hardware stress on floppy drive (schonef at uni-muenster.de (Marc Schoenefeld))
RE: IE6 & Java 1.4.2_02 applet: Hardware stress on floppy drive (rms at computerbytesman.com (Richard M. Smith))
RE: Linux (in)security (foofus at foofus.net (Mr. Rufus Faloofus))
SQL Injection Vulnerability in FuzzyMonkey MyClassifieds SQL Version (sintraq at sintelli.com (Sintelli SINTRAQ))
IE6 & Java 1.4.2_02 applet: Hardware stress on floppy drive (schonef at uni-muenster.de (Marc Schoenefeld))
IE6 & Java 1.4.2_02 applet: Hardware stress on floppy drive (schonef at uni-muenster.de (Marc Schoenefeld))

October 22 (54 messages)

Re: No Subject (lcamtuf at ghettot.org (Michal Zalewski))
No Subject (re: openssh exploit code?) (vosipov at tpg.com.au (V.O.))
Re: No Subject (pauls at utdallas.edu (Paul Schmehl))
Re: No Subject (nodialtone at comcast.net (Byron Copeland))
No Subject (re: openssh exploit code?) (se_cur_ity at hotmail.com (morning_wood))
Linux (in)security (Was: Re: Re: No Subject) (peter at adamantix.org (Peter Busser))
Re: No Subject (peter at adamantix.org (Peter Busser))
No Subject (re: openssh exploit code?) (peter at adamantix.org (Peter Busser))
Re: NGSEC's SG #1 [SPOILER] (was: Tanato WarGame , notes and news) (Leto at tabr.org (Martin Schuster))
Windows hosts file changing. (poof1 at cox.net (Kevin Gerry))
Windows hosts file changing. (chows at ozemail.com.au (gregh))
Windows hosts file changing. (gui at goddessmoon.org (Poof))
Windows hosts file changing. (vosipov at tpg.com.au (V.O.))
Windows hosts file changing. (gui at goddessmoon.org (Poof))
Windows hosts file changing. (bjornar.bjorgum.larsen at ementor.no (Bjørnar Bjørgum Larsen))
Windows hosts file changing. (vosipov at tpg.com.au (V.O.))
Windows hosts file changing. (jlevitsk at joshie.com (Joshua Levitsky))
Windows hosts file changing. (chows at ozemail.com.au (gregh))
Windows hosts file changing. (deadbeat at sdf.lonestar.org (Daniel))
Windows hosts file changing. (dgianndrea at comsquared.com (David Gianndrea))
Windows hosts file changing. (mike at sentex.net (Mike Tancsa))
Windows hosts file changing. (eckman at umn.edu (Brian Eckman))
Windows hosts file changing. (aehlers at comcast.net (Austin Ehlers))
Windows hosts file changing. (jstewart at lurhq.com (Joe Stewart))
No Subject (re: openssh exploit code?) (smcmahon at eiv.com (Shawn McMahon))
RE: Linux (in)security (pauls at utdallas.edu (Schmehl, Paul L))
Sylpheed-claws format string bug, yet still sylpheed much better than windows (guninski at guninski.com (Georgi Guninski))
Windows hosts file changing. (exibar at thelair.com (Exibar))
RE: Linux (in)security (mbassett at omaha.com (Bassett, Mark))
Sylpheed-claws format string bug, yet still sylpheed much better than windows (allan.vanleeuwen at orangemail.nl (allan.vanleeuwen@...ngemail.nl))
Worm Propagation Simulation (paper) (tom at lemuria.org (Tom))
No Subject (re: openssh exploit code?) (dufresne at winternet.com (Ron DuFresne))
Fun with /bin/ls, yet still ls better than windows (guninski at guninski.com (Georgi Guninski))
WSTI03 Honeypots conference (dante at alighieri.org (Davide Del Vecchio))
RE: Linux (in)security (smcmahon at eiv.com (Shawn McMahon))
RE: Linux (in)security (full-disclosure at arago.de (Thomas Binder))
RE: Linux (in)security (ksmith at chartwelltechnology.com (Kenton Smith))
RE: Linux (in)security (support at mmicman.com (Edward W. Ray))
RE: Linux (in)security (vdongen at hetisw.nl (I.R. van Dongen))
Need help to find web server attacks signature (maxime at pandore-design.com (Maxime Ducharme))
AT&T early warning system (jimmy at digitalguardian.net (Jimmy Alderson))
Need help to find web server attacks signature (Sonny.Discini at montgomerycountymd.gov (Discini, Sonny))
Re: Need help to find web server attacks signature (maxime at pandore-design.com (Maxime Ducharme))
Windows hosts file changing. (gui at goddessmoon.org (Poof))
RE: Linux (in)security (peter at adamantix.org (Peter Busser))
RE: Linux (in)security (robert at timetraveller.org (Robert Brockway))
Need help to find web server attacks signature (pauls at utdallas.edu (Schmehl, Paul L))
RE: Linux (in)security (arcturus at secrev.net (Arcturus))
RE: Linux (in)security (jeremiah at nur.net (Jeremiah Cornelius))
Need help to find web server attacks signature (maxime at pandore-design.com (Maxime Ducharme))
RE: Linux (in)security (lists at onryou.com (Cael Abal))
[inbox] Re: RE: Linux (in)security (purdy at tecman.com (Curt Purdy))
Linux Exec Shield (was: Linux (in)security) (chris+fulldisc at ruvolo.net (Chris Ruvolo))
No Subject (re: openssh exploit code?) (delta at lug-s.org (Helmut Springer))

October 23 (42 messages)

[inbox] Re: RE: Linux (in)security (lcamtuf at ghettot.org (Michal Zalewski))
Linux (in)security (Was: Re: Re: No Subject) (eballen1 at qwest.net (Bruce Ediger))
Linux (in)security (Was: Re: Re: No Subject) (avalon at caligula.anu.edu.au (Darren Reed))
Anyone running SUS see the content update today? (jlevitsk at joshie.com (Joshua Levitsky))
Linux (in)security (Was: Re: Re: No Subject) (flynngn at jmu.edu (Gary Flynn))
Anyone running SUS see the content update today? (jheidtke at fmlh.edu (Jerry Heidtke))
Linux (in)security (Was: Re: Re: No Subject) (pauls at utdallas.edu (Paul Schmehl))
Anyone running SUS see the content update today? (jlevitsk at joshie.com (Joshua Levitsky))
Weekly Vulnerability Summary - Week 42, 2003 (sintraq at sintelli.com (Sintelli SINTRAQ))
RE: Linux (in)security (peter at adamantix.org (Peter Busser))
Anyone running SUS see the content update t oday? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Weekly Vulnerability Summary, Week 41 2003 (m0rtis at adelphia.net (Mortis))
Linux Exec Shield (was: Linux (in)security) (peter at adamantix.org (Peter Busser))
Re: Gaim festival plugin exploit (full-disclosure at ifokr.org (Brian Hatch))
Re: Gaim festival plugin exploit (merlyn at stonehenge.com (Randal L. Schwartz))
RE: Linux (in)security (dufresne at winternet.com (Ron DuFresne))
Linux Exec Shield (was: Linux (in)security) (arjanv at redhat.com (Arjan van de Ven))
[inbox] Re: RE: Linux (in)security (dufresne at winternet.com (Ron DuFresne))
Linux (in)security (Was: Re: Re: No Subject) (dufresne at winternet.com (Ron DuFresne))
RE: Linux (in)security (peter at adamantix.org (Peter Busser))
Shatter XP (olavery at pivx.com (Oliver Lavery))
RE: Linux (in)security (jsage at finchhaven.com (John Sage))
Linux (in)security (Was: Re: Re: No Subject) (dufresne at winternet.com (Ron DuFresne))
RE: Linux (in)security (madsaxon at direcway.com (madsaxon))
Re: Gaim festival plugin exploit (scottp at dreamwright.com (Scott Phelps / Dreamwright Studios))
AOL fixes the Windows Messenger Service popup spam problem (rms at computerbytesman.com (Richard M. Smith))
[inbox] Re: RE: Linux (in)security (purdy at tecman.com (Curt Purdy))
RE: Linux (in)security (dufresne at winternet.com (Ron DuFresne))
RE: Linux (in)security (dufresne at winternet.com (Ron DuFresne))
[inbox] Re: RE: Linux (in)security (lcamtuf at ghettot.org (Michal Zalewski))
Re: Gaim festival plugin exploit (rodmur at maybe.org (Dale Harris))
AOL fixes the Windows Messenger Service popup spam problem (ksmith at chartwelltechnology.com (Kenton Smith))
Re: Gaim festival plugin exploit (smcmahon at eiv.com (Shawn McMahon))
[inbox] Re: RE: Linux (in)security (Glenn_Everhart at bankone.com (Glenn_Everhart@...kone.com))
NASA WebSites Multiple Vulnerabilities ADVISORY opened to public access ( NASA websites Patched ) (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hie…)
RE: Linux (in)security (pauls at utdallas.edu (Paul Schmehl))
[inbox] Re: RE: Linux (in)security (dufresne at winternet.com (Ron DuFresne))
[inbox] Re: RE: Linux (in)security (jeremiah at nur.net (Jeremiah Cornelius))
[inbox] Re: RE: Linux (in)security (pauls at utdallas.edu (Paul Schmehl))
[inbox] Re: RE: Linux (in)security (hescominsoon at adelphia.net (William Warren))
Fw: CensorNet: Cross Site Scripting Vulnerability (r_i_c_h_lists at btopenworld.com (Richard Maudsley))
Re: Linux Exec Shield (was: Linux (in)security) (chris+fulldisc at ruvolo.net (Chris Ruvolo))

October 24 (65 messages)

[inbox] Re: RE: Linux (in)security (andy at digitalindustry.org (Andy Wood))
Re: Gaim festival plugin exploit (merlyn at stonehenge.com (Randal L. Schwartz))
Re: Gaim festival plugin exploit (merlyn at stonehenge.com (Randal L. Schwartz))
[inbox] Re: RE: Linux (in)security (dan at ssc.com (Dan Wilder))
[inbox] Re: RE: Linux (in)security (arcturus at secrev.net (Arcturus))
Linux (in)security (Was: Re: Re: No Subject) (capegeo at opengroup.org (George Capehart))
[inbox] Re: RE: Linux (in)security (pauls at utdallas.edu (Paul Schmehl))
[inbox] Re: RE: Linux (in)security (pauls at utdallas.edu (Paul Schmehl))
Stanford Law School Conference on CyberSecurity, Research, and Disclosure (jeremiah at nur.net (Jeremiah Cornelius))
[inbox] Re: RE: Linux (in)security (peter at adamantix.org (Peter Busser))
[inbox] Re: RE: Linux (in)security (peter at adamantix.org (Peter Busser))
Microsoft Shares Drop as Security Flaws Slow Contract Signings (guninski at guninski.com (Georgi Guninski))
[inbox] Re: RE: Linux (in)security (dhtml at hush.com (dhtml@...h.com))
FW: Citibank E-mail Verification (bbrown at asg.com (ASG Bobby Brown))
Re: [inbox] Re: Linux (in)security (chris+fulldisc at ruvolo.net (Chris Ruvolo))
HTML Help API - Privilege Escalation (brett.moore at security-assessment.com (Brett Moore))
[inbox] Re: RE: Linux (in)security (smcmahon at eiv.com (Shawn McMahon))
[inbox] Re: RE: Linux (in)security (smcmahon at eiv.com (Shawn McMahon))
NASA WebSites Multiple Vulnerabilities ADVISORY opened to public access ( NASA websites Patched ) (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hie…)
ProFTPD-1.2.9rc2 remote root exploit (fufeur at hotmail.com (Jean-Kevin Grosnakeur))
[inbox] Re: RE: Linux (in)security (dwr3ck at hushmail.com (dwr3ck@...hmail.com))
ProFTPD-1.2.9rc2 remote root exploit (fufeur at hotmail.com (Jean-Kevin Grosnakeur))
FW: Citibank E-mail Verification (Richard.Hopkins at bristol.ac.uk (Richard Hopkins))
ProFTPD-1.2.9rc2 remote root exploit (a.gietl at e-admin.de (Andreas Gietl))
Re: [inbox] Re: RE: Linux (in)security (killedbythoughts at mindcrime.net (Sebastian Niehaus))
[inbox] Re: RE: Linux (in)security (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[inbox] Re: RE: Linux (in)security (sven at timegate.de (Sven Hoexter))
About eMule web server "Buffer Overflow" discovered vulnerability (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
ProFTPD-1.2.9rc2 remote root exploit (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
ProFTPD-1.2.9rc2 remote root exploit (zim at iq.pl (Robert Jaroszuk))
ProFTPD-1.2.9rc2 remote root exploit (lionel.garcia at airbus.com (GARCIA Lionel))
ProFTPD-1.2.9rc2 remote root exploit (a.gietl at e-admin.de (Andreas Gietl))
[inbox] Re: RE: Linux (in)security (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
NASA WebSites Multiple Vulnerabilities ADVISORY opened to public access ( NASA websites Patched ) (mcbethh at op.pl (mcbethh@...pl))
ProFTPD-1.2.9rc2 remote root exploit (qobaiashi at gmx.net (qobaiashi@....net))
ProFTPD-1.2.9rc2 remote root exploit (j at pureftpd.org (Jedi/Sector One))
[inbox] Re: RE: Linux (in)security (dufresne at winternet.com (Ron DuFresne))
ProFTPD-1.2.9rc2 remote root exploit (amebix at comcast.net (amebix@...cast.net))
ProFTPD-1.2.9rc2 localhost delete (kang at insecure.ws (kang))
[inbox] Re: RE: Linux (in)security (smcmahon at eiv.com (Shawn McMahon))
ProFTPD-1.2.9rc2 remote root exploit (pb+full-disclosure at mlsub.buehler.net (Philipp Buehler))
[inbox] Re: RE: Linux (in)security (pauls at utdallas.edu (Schmehl, Paul L))
ProFTPD-1.2.9rc2 remote root exploit (wine_ at gmx.net (Wine))
ProFTPD-1.2.9rc2 remote root exploit (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
ProFTPD-1.2.9rc2 remote root exploit (lwc at vapid.ath.cx (Larry W. Cashdollar))
About eMule web server "Buffer Overflow" discovered vulnerability (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
ProFTPD-1.2.9rc2 remote root exploit (lists at onryou.com (Cael Abal))
(no subject) (dilema at mkeadle.org (dilema))
ProFTPD-1.2.9rc2 localhost delete (dilema at dtors.net (dilema))
Re: HTML Help API - Privilege Escalation (killedbythoughts at mindcrime.net (Sebastian Niehaus))
[inbox] Re: RE: Linux (in)security (ds at 1d10t.de (Dennis Schön))
Re: [inbox] Re: RE: Linux (in)security (killedbythoughts at mindcrime.net (Sebastian Niehaus))
ProFTPD-1.2.9rc2 remote root exploit (sim at netnation.com (Simon Kirby))
ProFTPD-1.2.9rc2 remote root exploit (roblewis963 at hotmail.com (Rob Lewis))
Linux (in)security (Was: Re: Re: No Subject) (mbassett at omaha.com (Bassett, Mark))
ProFTPD-1.2.9rc2 remote root exploit (zeroboy at arrakis.es (zero))
Linux (in)security (Was: Re: Re: No Subject) (benjamin at seattlefenix.net (Benjamin Krueger))
NASA WebSites Multiple Vulnerabilities ADVISORY opened to public access ( NASA websites Patched ) (warchild at spoofed.org (Jon Hart))
NASA WebSites Multiple Vulnerabilities ADVISORY opened to public access ( NASA websites Patched ) (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hie…)
FW: Mail delivery failed: returning message to sender (mbassett at omaha.com (Bassett, Mark))
FW: Mail delivery failed: returning message to sender (damian at sentex.net (Damian Gerow))
NASA WebSites Multiple Vulnerabilities ADVISORY opened to public access ( NASA websites Patched ) (daniel_clemens at autism.birmingham-infragard.org (daniel ur…)
Explanations about the NASA security issues and confused people (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Linux (in)security (Was: Re: Re: No Subject) (avalon at caligula.anu.edu.au (Darren Reed))
Re: HTML Help API - Privilege Escalation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

October 25 (32 messages)

HTML Help API - Privilege Escalation (dotslash at snosoft.com (KF))
[inbox] Re: RE: Linux (in)security (dotslash at snosoft.com (KF))
Re: HTML Help API - Privilege Escalation (dotslash at snosoft.com (KF))
Trojan author revealed (was: Re: ProFTPD-1.2.9rc2 remote root exploit) (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
Re: HTML Help API - Privilege Escalation (booger at unixclan.net (security snot))
ProFTPD-1.2.9rc2 remote root exploit (upb at email.ee (upb))
Trojan author revealed (was: Re: ProFTPD-1.2.9rc2 remote root exploit) (lists at onryou.com (Cael Abal))
Trojan author revealed (was: Re: ProFTPD-1.2.9rc2 remote root exploit) (mitch_hurrison at ziplip.com (mitch_hurrison@...lip.com))
Vulnerability in MERCUR Mail Server v4.2 SP3 and below (kostya.kortchinsky at renater.fr (Kostya KORTCHINSKY))
Re: Trojan author revealed (was: Re: ProFTPD-1.2.9rc2 remote root exploit) (zeroboy at arrakis.es (zero))
MDKSA-2003:096-1 - Updated apache2 packages fix CGI scripting deadlock (security at linux-mandrake.com (Mandrake Linux Security Team))
[inbox] Re: RE: Linux (in)security (purdy at tecman.com (Curt Purdy))
Re: HTML Help API - Privilege Escalation (dotslash at snosoft.com (KF))
Symantec AntiVirus and AOL (jlevitsk at joshie.com (Joshua Levitsky))
My new PGP key (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
My new PGP key (chorchert at veedev.de (Christian Horchert))
My new PGP key (npguy at ysgnet.com (npguy))
My new PGP key (robert at rootprompt.net (Robert Banniza))
Re: Trojan author revealed (was: Re: ProFTPD-1.2.9rc2 remote root exploit) (segfault at nycap.rr.com (segfault))
RE: Internet Explorer and Opera local zone restriction bypass (thor at pivx.com (Thor Larholm))
My new PGP key (blankermetallarsch at web.de (Timo Schoeler))
My new PGP key (sarose at ysgnet.com (sarose))
Explanations about the NASA security issues and confused people (qobaiashi at gmx.net (qobaiashi))
Trojan author revealed (was: Re: ProFTPD-1.2.9rc2 remote root exploit) (lists at onryou.com (Cael Abal))
RE: Internet Explorer and Opera local zone restriction bypass (jkuperus at planet.nl (jelmer))
PIVX - GLAMOR PUSSES DE LUXE (dhtml at hush.com (dhtml@...h.com))
PIVX - GLAMOR PUSSES DE LUXE (jkuperus at planet.nl (jelmer))
Some serious security holes in 'The Bat!' (visitbipin at yahoo.com (bipin gautam))
My new PGP key (lcamtuf at ghettot.org (Michal Zalewski))
Some serious security holes in 'The Bat!' (lists at onryou.com (Cael Abal))
Symantec AntiVirus and AOL (jlevitsk at joshie.com (Joshua Levitsky))
Re: Internet Explorer and Opera local zone restriction bypass (psz at maths.usyd.edu.au (Paul Szabo))

October 26 (14 messages)

HTML Help API - Privilege Escalation (dotslash at snosoft.com (KF))
Java 1.4.2_02 InsecurityManager JVM crash (schonef at uni-muenster.de (Marc Schoenefeld))
Some serious security holes in 'The Bat!' (visitbipin at yahoo.com (bipin gautam))
Some serious security holes in 'The Bat!' (visitbipin at yahoo.com (bipin gautam))
Re: ProFTPD-1.2.9rc2 localhost delete (ebh at hushmail.com (ebh@...hmail.com))
Re: HTML Help API - Privilege Escalation (booger at unixclan.net (security snot))
IE Security hole exploited once again - "britney.jpg" irc worm. (kalleth at nildram.co.uk (Tom Russell))
IE Security Exploited by "britney.jpg" irc worm. (elvi52001 at yahoo.com (Peter King))
[inbox] Re: RE: Linux (in)security (full-disclosure at royds.net (Bill Royds))
Trojan author revealed (was: Re: ProFTPD-1.2.9rc2 remote root exploit) (jikos at jikos.cz (Jirka Kosina))
[inbox] Re: RE: Linux (in)security (ggilliss at netpublishing.com (Gregory A. Gilliss))
[inbox] Re: RE: Linux (in)security (pauls at utdallas.edu (Paul Schmehl))
[inbox] Re: RE: Linux (in)security (brett at hutley.net (Brett Hutley))
Java 1.4.2_02 InsecurityManager JVM crash (schonef at uni-muenster.de (Marc Schoenefeld))

October 27 (65 messages)

[inbox] Re: RE: Linux (in)security (tedu at stanford.edu (Ted Unangst))
[inbox] Re: RE: Linux (in)security (brett at hutley.net (Brett Hutley))
[inbox] Re: RE: Linux (in)security (full-disclosure at royds.net (Bill Royds))
[inbox] Re: RE: Linux (in)security (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Coding securely, was Linux (in)security (pauls at utdallas.edu (Paul Schmehl))
[inbox] Re: RE: Linux (in)security (steve at netwaynetworks.com.au (Steven Evans))
Coding securely, was Linux (in)security (pauls at utdallas.edu (Paul Schmehl))
My new PGP key (mlaltf4 at chello.at (M.L.))
Coding securely, was Linux (in)security (coderman at charter.net (coderman))
Coding securely, was Linux (in)security (cseagle at redshift.com (Chris Eagle))
Coding securely, was Linux (in)security (brett at hutley.net (Brett Hutley))
Coding securely, was Linux (in)security (brett at hutley.net (Brett Hutley))
Coding securely, was Linux (in)security (brett at hutley.net (Brett Hutley))
Coding securely, was Linux (in)security (full-disclosure at royds.net (Bill Royds))
Coding securely, was Linux (in)security (pauls at utdallas.edu (Paul Schmehl))
Coding securely, was Linux (in)security (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Coding securely, was Linux (in)security (cseagle at redshift.com (Chris Eagle))
Coding securely, was Linux (in)security (cseagle at redshift.com (Chris Eagle))
[inbox] Re: RE: Linux (in)security (eballen1 at qwest.net (Bruce Ediger))
Coding securely, was Linux (in)security (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Coding securely, was Linux (in)security (brett at hutley.net (Brett Hutley))
Coding securely, was Linux (in)security (brett at hutley.net (Brett Hutley))
Off topic programming thread (m0rtis at adelphia.net (Mortis))
NASA WebSites Multiple Vulnerabilities ADVISORY opened to public access ( NASA websites Patched ) (m0rtis at adelphia.net (Mortis))
Off topic programming thread (houdini at nmt.edu (Bill Weiss))
Off topic programming thread (chris.rs at xtra.co.nz (Chris Smith))
RE: Linux (in)security (etomcat at freemail.hu (Feher Tamas))
Java 1.4.2_02 InsecurityManager JVM crash (th.campos at bol.com.br (Thiago Campos))
[inbox] Re: RE: Linux (in)security (full-disclosure at royds.net (Bill Royds))
[inbox] Re: RE: Linux (in)security (bruen at coldrain.net (Stormwalker))
NASA WebSites Multiple Vulnerabilities ADVISORY opened to public access ( NASA websites Patched ) (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hie…)
[inbox] Re: RE: Linux (in)security (eballen1 at qwest.net (Bruce Ediger))
sh-httpd `wildcard character' vulnerability (xploit at hackermail.com (dong-h0un U))
Musicqueue multiple local vulnerabilities (xploit at hackermail.com (dong-h0un U))
Off topic programming thread (pauls at utdallas.edu (Schmehl, Paul L))
sh-httpd `wildcard character' vulnerability (xploit at hackermail.com (dong-h0un U))
Musicqueue multiple local vulnerabilities (xploit at hackermail.com (dong-h0un U))
sh-httpd `wildcard character' vulnerability (full-disclosure at arago.de (Thomas Binder))
NASA WebSites Multiple Vulnerabilities ADVISORY opened to public access ( NASA websites Patched ) (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hie…)
Off topic programming thread (madsaxon at direcway.com (madsaxon))
[VulnWatch] Musicqueue multiple local vulnerabilities (xploit at hackermail.com (dong-h0un U))
[VulnWatch] sh-httpd `wildcard character' vulnerability (xploit at hackermail.com (dong-h0un U))
Is bugtraq even worth it anymore? (full_disc_new at hotmail.com (David M))
Trojan author revealed (was: Re: ProFTPD-1.2.9rc2 remote root exploit) (dufresne at winternet.com (Ron DuFresne))
SGI Advanced Linux Environment security update #2 (agent99 at sgi.com (SGI Security Coordinator))
SGI Advanced Linux Environment security update #3 (agent99 at sgi.com (SGI Security Coordinator))
SGI Advanced Linux Environment security update #4 (agent99 at sgi.com (SGI Security Coordinator))
NASA WebSites Multiple Vulnerabilities ADVISORY opened to public access ( NASA websites Patched ) (stefan at sno.pp.se (Stefan Larsson))
SGI Advanced Linux Environment security update #4 (agent99 at sgi.com (SGI Security Coordinator))
SGI Advanced Linux Environment security update #3 (agent99 at sgi.com (SGI Security Coordinator))
Remote overflow in thttpd (full-disclosure at texonet.com (full-disclosure@...onet.com))
Re: Java 1.4.2_02 InsecurityManager JVM crash (fandrades at nextj.com (Francisco Andrades))
Linux (in)security (Was: Re: Re: No Subject) (mbassett at omaha.com (Bassett, Mark))
[inbox] Is bugtraq even worth it anymore? (purdy at tecman.com (Curt Purdy))
Deprecation (schonef at uni-muenster.de (Marc Schoenefeld))
SGI Advanced Linux Environment security update #2 (agent99 at sgi.com (SGI Security Coordinator))
SGI Advanced Linux Environment security update #2 (agent99 at sgi.com (SGI Security Coordinator))
[inbox] Is bugtraq even worth it anymore? (lcamtuf at ghettot.org (Michal Zalewski))
[inbox] Is bugtraq even worth it anymore? (madsaxon at direcway.com (madsaxon))
Re: Java 1.4.2_02 InsecurityManager JVM crash (schonef at uni-muenster.de (Marc Schoenefeld))
Linux (in)security (Was: Re: Re: No Subject) (avalon at caligula.anu.edu.au (Darren Reed))
[inbox] Re: RE: Linux (in)security (coley at mitre.org (Steven M. Christey))
Expert City and WebEx (daniels at ponderosatel.com (Daniel Sichel))
Re: Java 1.4.2_02 InsecurityManager JVM crash (schonef at uni-muenster.de (Marc Schoenefeld))
[inbox] Is bugtraq even worth it anymore? (andy at digitalindustry.org (Andy Wood))

October 28 (61 messages)

Re: Deprecation (th.campos at bol.com.br (Thiago Campos))
Bytehoard File Disclosure VUlnerability Sequel (illectro2001 at yahoo.com (Chris Sharp))
Off topic programming thread (full-disclosure at royds.net (Bill Royds))
NASA WebSites Multiple Vulnerabilities ADVISORY opened to public access ( NASA websites Patched ) (nosp at xades.com (nosp))
Re: Deprecation (paim at inf.ufsc.br (Thiago Campos))
Coding securely, was Linux (in)security (steve.wray at paradise.net.nz (Steve Wray))
Coding securely, was Linux (in)security (ggilliss at netpublishing.com (Gregory A. Gilliss))
Re: Java 1.4.2_02 InsecurityManager JVM crash (tolo at informatik.uni-freiburg.de (Torsten Lodderstedt))
Week 43 Security Vulnerabiliites (sintraq at sintelli.com (Sintelli SINTRAQ))
Cisco takes it easy (dante at alighieri.org (Davide Del Vecchio))
New variant of Nachi ? (Farrukh.Awan at dc.gov (Awan, Farrukh (OCTO)))
STG Security Advisory: [SSA-20031025-05] InfronTech WebTide 7.04 Directory and File Disclosure Vulnerability (advisory at stgsecurity.com (SSR Team))
Is bugtraq even worth it anymore? (roblewis963 at hotmail.com (Rob Lewis))
when will IE exploits COME TO AN END... (door_hUNT3R at blackcodemail.com (Bipin Gautam))
when will IE exploits COME TO AN END... (j at pureftpd.org (Jedi/Sector One))
Is bugtraq even worth it anymore? (cpeden at sundownerinteriors.com (Chris Peden))
when will IE exploits COME TO AN END... (jkuperus at planet.nl (jelmer))
when will IE exploits COME TO AN END... (dan.brown at raytheon.com (Dan Brown))
when will IE exploits COME TO AN END... (lists at onryou.com (Cael Abal))
when will IE exploits COME TO AN END... (door_hUNT3R at blackcodemail.com (Bipin Gautam))
[OpenPKG-SA-2003.046] OpenPKG Security Advisory (apache) (openpkg at openpkg.org (OpenPKG))
Is bugtraq even worth it anymore? (frank at knobbe.us (Frank Knobbe))
[securemac] Local vulnerability: MacOSX Screensaver locking bypass. (kang at insecure.ws (kang))
when will IE exploits COME TO AN END... (lists at onryou.com (Cael Abal))
when will IE exploits COME TO AN END... (sgmasood at yahoo.com (S G Masood))
[securemac] Local vulnerability: MacOSX Screensaver locking bypass. (kang at insecure.ws (kang))
Is bugtraq even worth it anymore? (kudzu at tenebras.com (Michael Sierchio))
Is bugtraq even worth it anymore? (warchild at spoofed.org (Jon Hart))
Cisco takes it easy (gem at rellim.com (Gary E. Miller))
Local root vuln in kpopup (b0fnet at yahoo.com (b0f))
when will IE exploits COME TO AN END... (door_hUNT3R at blackcodemail.com (Bipin Gautam))
strange wordpad.exe behavior! (door_hUNT3R at blackcodemail.com (Bipin Gautam))
Is bugtraq even worth it anymore? (full_disc_new at hotmail.com (David M))
Local root vuln in kpopup (rbrown at doitt.nyc.gov (Brown, Rodrick))
when will IE exploits COME TO AN END... (Brent.Colflesh at ulticom.com (Brent Colflesh))
Is bugtraq even worth it anymore? (david.vincent at mightyoaks.com (David Vincent))
Is bugtraq even worth it anymore? (damian at sentex.net (Damian Gerow))
sharp increase on 27347/TCP (ebowser at i-trap.net (Eric Bowser))
Re: Full-Disclosure digest, Vol 1 #1232 - 32 msgs (dbounds at intrusense.com (Darren Bounds))
strange wordpad.exe behavior! (cat at final-frontier.ath.cx (Dennis Freise))
when will IE exploits COME TO AN END... (visitbipin at yahoo.com (bipin gautam))
Cisco takes it easy (ken at vanwyk.org (Kenneth R. van Wyk))
sharp increase on 27347/TCP (jlevitsk at joshie.com (Joshua Levitsky))
My new PGP key (rahnemann at affinity-mortgage.com (Robert Ahnemann))
mod_security 1.7RC1 to 1.7.1 vulnerability (adeon at tlen.pl (Adam Dyga))
sharp increase on 27347/TCP (xillwillx at yahoo.com (Will Image))
strange wordpad.exe behavior! (jsage at finchhaven.com (John Sage))
Re: sh-httpd `wildcard character' vulnerability (richard at northstar.dartmouth.edu (Richard Brittain))
sharp increase on 27347/TCP (ebowser at i-trap.net (Eric Bowser))
Wildcard exportfs issue in NFS on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Has anyone heard about a new rpc vulnerability (James.McDermott at ny.frb.org (James.McDermott@...frb.org))
Wildcard exportfs issue in NFS on IRIX (agent99 at sgi.com (SGI Security Coordinator))
when will IE exploits COME TO AN END... (Zach.Forsyth at kiandra.com (Zach Forsyth))
sharp increase on 27347/TCP (khermansen at ht-technology.com (Kristian Hermansen))
strange wordpad.exe behavior! (dick_laghey at hushmail.com (Dick LaGay))
FirstClass 7.1 HTTP Server: Remote Directory Listing (maudr001 at rbwm.org (Richard Maudsley))
Re: sh-httpd `wildcard character' vulnerability (da at securityfocus.com (Dave Ahmad))
Re: sh-httpd `wildcard character' vulnerability (richard at northstar.dartmouth.edu (Richard Brittain))
Wildcard exportfs issue in NFS on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Wildcard exportfs issue in NFS on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Coding securely, was Linux (in)security (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

October 29 (81 messages)

New variant of Nachi ? (dotslash at snosoft.com (KF))
Has anyone heard about a new rpc vulnerability (alf1num3rik at yahoo.com (Stephen))
sharp increase on 27347/TCP (nick at virus-l.demon.co.uk (Nick FitzGerald))
OSX 10.3 Personal Firewall. (br00t at blueyonder.co.uk (B-r00t))
So I have just been studying IE source code and found this strange behaviour.. (xbud at g0thead.com (Orlando Padilla))
sharp increase on 27347/TCP (se_cur_ity at hotmail.com (morning_wood))
Coding securely, was Linux (in)security (greg-fulldisclosure-2003 at nest.cx (Gregory Steuck))
OSX 10.3 Personal Firewall. (jamie at arpa.com (jamie))
[Bogus] Microsoft AuthenticodeT webcam viewer plugin (se_cur_ity at hotmail.com (morning_wood))
strange wordpad.exe behavior! (nick at virus-l.demon.co.uk (Nick FitzGerald))
Fw: sharp increase on 27347/TCP (edwin at link.net.id (SPAM))
win32 stack bof & shellcode size (npguy at ysgnet.com (npguy))
[Bogus] Microsoft AuthenticodeT webcam viewer plugin (nick at virus-l.demon.co.uk (Nick FitzGerald))
Off topic programming thread (brett at hutley.net (Brett Hutley))
New variant of Nachi ? (delta at faveve.uni-stuttgart.de (Helmut Springer))
[SECURITY] [DSA 396-1] New thttpd packages fix information leak, DoS and arbitrary code execution (debian-security-announce at lists.debian.org (debian-security…)
[Bogus] Microsoft AuthenticodeT webcam viewer plugin (rlanguy at hotmail.com (Lan Guy))
Coding securely, was Linux (in)security (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[Bogus] Microsoft AuthenticodeT webcam viewer plugin (and-bugtraq at doxdesk.com (Andrew Clover))
W2k users, local admin rights and GPOs (security at exim.dyndns.org (James Exim))
TinyURL (joel at helgeson.com (Joel R. Helgeson))
Coding securely, was Linux (in)security (ben at algroup.co.uk (Ben Laurie))
Coding securely, was Linux (in)security (pz at psychozapp.de (Sebastian Herbst))
[Bogus] Microsoft AuthenticodeT webcam viewer plugin (nick at virus-l.demon.co.uk (Nick FitzGerald))
Coding securely, was Linux (in)security (full-disclosure at royds.net (Bill Royds))
Off topic programming thread (full-disclosure at royds.net (Bill Royds))
New variant of Nachi ? (fw at deneb.enyo.de (Florian Weimer))
suckit and releases (agsb at bdep.gov.br (Alvaro Gomes Sobral Barcellos))
NAV 2003 vuln (lionel.garcia at airbus.com (GARCIA Lionel (SOGETI France EXPLOITATION SUD)))
Off topic programming thread (alexandre.dulaunoy at ael.be (Alexandre Dulaunoy))
Fw: sharp increase on 27347/TCP (ebowser at i-trap.net (Eric Bowser))
Re: Internet Explorer and Opera local zone restriction bypass (door_hUNT3R at blackcodemail.com (Bipin Gautam))
when will IE exploits COME TO AN END... (door_hUNT3R at blackcodemail.com (Bipin Gautam))
Re: Internet Explorer and Opera local zone restriction bypass (door_hUNT3R at blackcodemail.com (Bipin Gautam))
TinyURL (klotz at acm.org (David Klotz))
TinyURL (tuevsec at gmx.net (Thomas Springer))
Remote MS03-043 detection for Windows NT (fw at deneb.enyo.de (Florian Weimer))
xng heap overflow (tmayr at kitcon.net (Thorsten Mayr))
W2k users, local admin rights and GPOs (gordey at infosec.ru (Sergey V. Gordeychik))
W2k users, local admin rights and GPOs (gordey at infosec.ru (Sergey V. Gordeychik))
TinyURL (mbassett at omaha.com (Bassett, Mark))
when will IE exploits COME TO AN END... (ricky.blaikie at servercity.co.uk (Ricky Blaikie))
New variant of Nachi ? (Sonny.Discini at montgomerycountymd.gov (Discini, Sonny))
Fw: sharp increase on 27347/TCP (ebowser at i-trap.net (Eric Bowser))
TinyURL (dennisc at kdoc.dc.state.ks.us (Dennis Cooper))
Re: Internet Explorer and Opera local zone restriction bypass (fulldisc at xades.com (fulldisc))
when will IE exploits COME TO AN END... (maxime at pandore-design.com (Maxime Ducharme))
Coding securely, was Linux (in)security (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Coding securely, was Linux (in)security (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Coding securely, was Linux (in)security (pz at psychozapp.de (Sebastian Herbst))
Re: Internet Explorer and Opera local zone restriction bypass (jkuperus at planet.nl (jelmer))
when will IE exploits COME TO AN END... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[Bogus] Microsoft AuthenticodeT webcam viewer plugin (and at doxdesk.com (Andrew Clover))
suckit and releases (agsb at bdep.gov.br (Alvaro Gomes Sobral Barcellos))
System monitor scheme - anyone know anything like this? (Glenn_Everhart at bankone.com (Glenn_Everhart@...kone.com))
TinyURL (jsage at finchhaven.com (John Sage))
TinyURL (ksmith at chartwelltechnology.com (Kenton Smith))
TinyURL (jsage at finchhaven.com (John Sage))
W2k users, local admin rights and GPOs (exibar at thelair.com (Exibar))
New variant of Nachi ? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
TinyURL (jsage at finchhaven.com (John Sage))
TinyURL (joel at helgeson.com (Joel R. Helgeson))
[Bogus] Microsoft AuthenticodeT webcam viewer plugin (and-bugtraq at doxdesk.com (Andrew Clover))
TinyURL (ricky.blaikie at servercity.co.uk (Ricky Blaikie))
TinyURL (dlhane at sbcglobal.net (David Hane))
W2k users, local admin rights and GPOs (yossarian at planet.nl (yossarian))
TinyURL (joel at helgeson.com (Joel R. Helgeson))
Information Security Training Reviews (contrast_compare at yahoo.com (contrast compare))
System monitor scheme (caraciola at gmx.net (Caraciola))
TinyURL (th at zeno.com (Troy))
TinyURL (joel at helgeson.com (Joel R. Helgeson))
[Bogus] Microsoft AuthenticodeT webcam viewer plugin (nick at virus-l.demon.co.uk (Nick FitzGerald))
TinyURL (th at zeno.com (Troy))
IDS Evasion (simon at snosoft.com (simon))
IDS Evasion (lists at venom600.org (Ben Nelson))
Off topic programming thread (pauls at utdallas.edu (Schmehl, Paul L))
Remote MS03-043 detection for Windows NT (pauls at utdallas.edu (Schmehl, Paul L))
Off topic programming thread (brett at hutley.net (Brett Hutley))
[Bogus] Microsoft AuthenticodeT webcam viewer plugin (capegeo at opengroup.org (George Capehart))
TinyURL (Douglas at karanet.at (Martin Schuster))
IDS Evasion (rnunez at cpiu.us (Rafael Nuñez))

October 30 (86 messages)

TinyURL (jimmy at digitalguardian.net (Jimmy Alderson))
Coding securely, was Linux (in)security (full-disclosure at royds.net (Bill Royds))
IDS Evasion thank you. (simon at snosoft.com (simon))
System monitor scheme (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Off topic programming thread (brett at hutley.net (Brett Hutley))
Off topic programming thread (full-disclosure at royds.net (Bill Royds))
Auditing code for security problems (full-disclosure at royds.net (Bill Royds))
System monitor scheme (full-disclosure at royds.net (Bill Royds))
Remote MS03-043 detection for Windows NT (edwin at link.net.id (SPAM))
[Bogus] Microsoft AuthenticodeT webcam viewer plugin (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[Bogus] Microsoft AuthenticodeT webcam viewer plugin (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Coding securely, was Linux (in)security (steve.wray at paradise.net.nz (Steve Wray))
Coding securely, was Linux (in)security (brett at hutley.net (Brett Hutley))
Coding securely, was Linux (in)security (venom at gen-x.co.nz (VeNoMouS))
remotely triggered program execution on MacOS-X Jaguar (security at security-gui.de (Kai Kretschmann))
TinyURL (helge.oldach at atosorigin.com (Helge Oldach))
TinyURL (rune at juhljacobsen.dk (Rune Jacobsen))
Re: System monitor scheme (Everhart at gce.com (Glenn and Mary Everhart))
IDS Evasion (booger at unixclan.net (security snot))
OSX 10.3 Personal Firewall. (attica at stackheap.org (S . f . Stover))
IDS Evasion (indianz at indianz.ch (indianz@...ianz.ch))
[OpenPKG-SA-2003.047] OpenPKG Security Advisory (postgresql) (openpkg at openpkg.org (OpenPKG))
W2k users, local admin rights and GPOs (gordey at infosec.ru (Sergey V. Gordeychik))
Shortcut...... may cause 100% cpu use!!! (door_hUNT3R at blackcodemail.com (Bipin Gautam))
Shortcut...... may cause 100% cpu use!!! (door_hUNT3R at blackcodemail.com (Bipin Gautam))
Shortcut...... may cause 100% cpu use!!! (sysadmin at agent.co.il (Ag. System Administrator))
Shortcut...... may cause 100% cpu use!!! (tim-security at sentinelchicken.org (Tim))
Shortcut...... may cause 100% cpu use!!! (door_hUNT3R at blackcodemail.com (Bipin Gautam))
Shortcut...... may cause 100% cpu use!!! (maxime at pandore-design.com (Maxime Ducharme))
Shortcut...... may cause 100% cpu use!!! (bpatterson at sleeponthebest.com (Brian Patterson))
Shortcut...... may cause 100% cpu use!!! (ricky.blaikie at servercity.co.uk (Ricky Blaikie))
Shortcut...... may cause 100% cpu use!!! (ricardo at microhardbr.com.br (Ricardo Moura))
Shortcut...... may cause 100% cpu use!!! (tim-security at sentinelchicken.org (Tim))
Shortcut...... may cause 100% cpu use!!! (ricky.blaikie at servercity.co.uk (Ricky Blaikie))
Shortcut...... may cause 100% cpu use!!! (sysadmin at agent.co.il (Ag. System Administrator))
Shortcut...... may cause 100% cpu use!!! (ricky.blaikie at servercity.co.uk (Ricky Blaikie))
Shortcut...... may cause 100% cpu use!!! (door_hUNT3R at blackcodemail.com (Bipin Gautam))
Shortcut...... may cause 100% cpu use!!! (madsaxon at direcway.com (madsaxon))
Shortcut...... may cause 100% cpu use!!! (maxime at pandore-design.com (Maxime Ducharme))
Shortcut...... may cause 100% cpu use!!! (ricky.blaikie at servercity.co.uk (Ricky Blaikie))
Shortcut...... may cause 100% cpu use!!! (visitbipin at yahoo.com (bipin gautam))
Shortcut...... may cause 100% cpu use!!! (richard at tccnet.co.uk (Richard Stevens))
Shortcut...... may cause 100% cpu use!!! (madsaxon at direcway.com (madsaxon))
Security issues with Asp.Net in Shared Hosting Environments (Dinis at ddplus.net (Dinis Cruz))
Shortcut...... may cause 100% cpu use!!! (vb at bitsmart.com (vb))
Shortcut...... may cause 100% cpu use!!! (lists at onryou.com (Cael Abal))
nEW wINDOWS EXPLOIT -- 100% D.O.S. (ceo at digicron.com (vb))
Shortcut...... may cause 100% cpu use!!! (david.vincent at mightyoaks.com (David Vincent))
Shortcut...... may cause 100% cpu use!!! (mike at sane.com (Michael Smith))
Shortcut...... may cause 100% cpu use!!! (vincent at renardias.com (Vincent Renardias))
Shortcut...... may cause 100% cpu use!!! (vincent at renardias.com (Vincent Renardias))
Shortcut...... may cause 100% cpu use!!! (jsage at finchhaven.com (John Sage))
Shortcut...... may cause 100% cpu use!!! (jsage at finchhaven.com (John Sage))
Shortcut...... may cause 100% cpu use!!! (mbassett at omaha.com (Bassett, Mark))
Shortcut...... may cause 100% cpu use!!! (david.vincent at mightyoaks.com (David Vincent))
Shortcut...... may cause 100% cpu use!!! (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Shortcut...... may cause 100% cpu use!!! (jlk at thrashyour.com (John Kinsella))
[inbox] Re: RE: Linux (in)security (hb-fulldisclosure at bsws.de (Henning Brauer))
nEW wINDOWS EXPLOIT -- 100% D.O.S. (ebowser at i-trap.net (Eric Bowser))
Shortcut...... may cause 100% cpu use!!! (wrees at htoc.com (Warren Rees))
Flamewar...... may cause 100% waste of time use!!! (full_disc_new at hotmail.com (David M))
Shortcut...... may cause 100% cpu use!!! (dennisc at kdoc.dc.state.ks.us (Dennis Cooper))
Coding securely, was Linux (in)security (ben at algroup.co.uk (Ben Laurie))
Shortcut...... may cause 100% cpu use!!! (ALudwig at Calfingroup.com (Andre Ludwig))
W2k users, local admin rights and GPOs (3APA3A at SECURITY.NNOV.RU (3APA3A))
Shortcut...... may cause 100% cpu use!!! (sgmasood at yahoo.com (S G Masood))
nEW wINDOWS EXPLOIT -- 100% D.O.S. (davidmarkle at comcast.net (davidmarkle@...cast.net))
Re: Internet Explorer and Opera local zone restriction bypass (psz at maths.usyd.edu.au (Paul Szabo))
Shortcut...... may cause 100% cpu use!!! (ggilliss at netpublishing.com (Gregory A. Gilliss))
nEW wINDOWS EXPLOIT -- 100% D.O.S. (djsnm at djsnm.com (Scott Manley))
Re: Shortcut...... may cause 100% cpu use!!! (madduck at madduck.net (martin f krafft))
Shortcut...... may cause 100% cpu use!!! (frank at knobbe.us (Frank Knobbe))
Shortcut...... may cause 100% cpu use!!! (p00p at instable.net (|reduced|minus|none|))
RE: Internet Explorer and Opera local zone restriction bypass (psz at maths.usyd.edu.au (Paul Szabo))
TinyURL (anub-full.disclosure.200307 at open.mine.nu (Christopher Kruslicky))
TinyURL (josh at nicepeople.org (Josh))
27347 (dosboink at yahoo.com (Joe Blow))
RE: Internet Explorer and Opera local zone restriction bypass (thor at pivx.com (Thor Larholm))
stcloader.exe / slmss.exe ?? (jbruce at ecodigitaldevelopment.com (James Bruce))
RE: Internet Explorer and Opera local zone restriction bypass (psz at maths.usyd.edu.au (Paul Szabo))
RE: Internet Explorer and Opera local zone restriction bypass (thor at pivx.com (Thor Larholm))
Re: Internet Explorer and Opera local zone restriction bypass (psz at maths.usyd.edu.au (Paul Szabo))
RE: Internet Explorer and Opera local zone restriction bypass (psz at maths.usyd.edu.au (Paul Szabo))
Re: Internet Explorer and Opera local zone restriction bypass (psz at maths.usyd.edu.au (Paul Szabo))
RE: Internet Explorer and Opera local zone restriction bypass (thor at pivx.com (Thor Larholm))
RE: Internet Explorer and Opera local zone restriction bypass (psz at maths.usyd.edu.au (Paul Szabo))

October 31 (71 messages)

TinyURL (lists at burningriver.net (lists@...ningriver.net))
Shortcut...... may cause 100% cpu use!!! (jsage at finchhaven.com (John Sage))
RE: Internet Explorer and Opera local zone restriction bypass (jheidtke at fmlh.edu (Jerry Heidtke))
RE: Internet Explorer and Opera local zone restriction bypass (thor at pivx.com (Thor Larholm))
Shortcut...... may cause 100% cpu use!!! (zorkshin at tampabay.rr.com (Justin Shin))
port of x-ws_ftp.c to linux and *bsd from wintendo (venom at gen-x.co.nz (VeNoMouS))
Shortcut...... may cause 100% cpu use!!! (visitbipin at yahoo.com (bipin gautam))
pipeupadmin (ivan.coric at workcoverqld.com.au (Ivan Coric))
Re: Internet Explorer and Opera local zone restriction bypass (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Shortcut...... may cause 100% cpu use!!! (se_cur_ity at hotmail.com (morning_wood))
TinyURL (kluge at fujitsu.com.au (Steffen Kluge))
IEpatch.exe? (plasser at hexagon.at (Jürgen R. Plasser))
stcloader.exe / slmss.exe ?? (tom.koehler at gmx.net (Tom Koehler))
Corsaire Security Advisory: BEA Tuxedo Administration CGI multiple argument issues (advisories at corsaire.com (advisories))
Corsaire Security Advisory: BEA WebLogic example InteractiveQuery.jsp XSS issue (advisories at corsaire.com (advisories))
SUSE Security Announcement: thttpd (SuSE-SA:2003:044) (thomas at suse.de (Thomas Biege))
Shortcut...... may cause 100% cpu use!!! (p00p at instable.net (|reduced|minus|none|))
IEpatch.exe? (andrei at fq.ro (Andrei Galca-Vasiliu))
Microsoft plans tighter security measures in Windows XP SP2 (helmut.hauser at intraplan.de (Helmut Hauser))
Microsoft plans tighter security measures in Windows XP SP2 (yossarian at planet.nl (yossarian))
pipeupadmin (putasnews at terra.es (.))
(no subject) (t4rku5 at hushmail.com (t4rku5@...hmail.com))
Installation Security Issue for DATEV IDVS (t4rku5 at hushmail.com (t4rku5@...hmail.com))
pipeupadmin (ixnay at infonegocio.com (Víctor))
27347 (lists at venom600.org (Ben Nelson))
IEpatch.exe? (plasser at hexagon.at (Jürgen R. Plasser))
pipeupadmin (allan.vanleeuwen at orangemail.nl (allan.vanleeuwen@...ngemail.nl))
stcloader.exe / slmss.exe ?? (Matthew.Wagenknecht at Quantum.com (Matthew Wagenknecht))
Microsoft plans tighter security measures in Windows XP SP2 (lists at venom600.org (Ben Nelson))
Microsoft plans tighter security measures in Windows XP SP2 (guninski at guninski.com (Georgi Guninski))
Asian Hackers? (quakeroats at hushmail.com (Quaker Oats))
27347 (mbassett at omaha.com (Bassett, Mark))
Microsoft plans tighter security measures in Windows XP SP2 (pauls at utdallas.edu (Schmehl, Paul L))
stcloader.exe / slmss.exe ?? (Matthew.Wagenknecht at Quantum.com (Matthew Wagenknecht))
pipeupadmin (putasnews at terra.es (.))
Proxies (Earl.Keyser at wayzata.k12.mn.us (Earl Keyser))
Proxies (jan.meijer at surfnet.nl (Jan Meijer))
Microsoft plans tighter security measures in Windows XP SP2 (jason.full-disclosure at compnski.com (Jason Freidman))
Microsoft plans tighter security measures in Windows XP SP2 (yossarian at planet.nl (yossarian))
Proxies (lists at venom600.org (Ben Nelson))
Gates: 'You don't need perfect code' for good security (jeremiah at nur.net (Jeremiah Cornelius))
Proxies (chill at herber-hill.com (Charles E. Hill))
Proxies (gem at rellim.com (Gary E. Miller))
Proxies (nosp at xades.com (nosp))
Proxies (venom at venom600.org (Ben Nelson))
IE6 - Crash via DOS device (se_cur_ity at hotmail.com (morning_wood))
XSS In mldonkey - But.... (illectro2001 at yahoo.com (Chris Sharp))
nEW wINDOWS EXPLOIT -- 100% D.O.S. (steve.wray at paradise.net.nz (Steve Wray))
Gates: 'You don't need perfect code' for good security (Stephen.Blass at asu.edu (Stephen Blass))
Proxies (mbassett at omaha.com (Bassett, Mark))
Proxies (dksaarth at unix.za.net (Richard Spiers))
Re: Gates: 'You don't need perfect code' for good security (ken at vanwyk.org (Kenneth R. van Wyk))
Proxies (jlell at JakobLell.de (Jakob Lell))
IE6 - Crash via DOS device (p00p at instable.net (|reduced|minus|none|))
_another_ Internet explorer vulnerability (spread via IRC) - new variation of irc.trojan.fgt (kalleth at nildram.co.uk (Tom Russell))
IE6 - Crash via DOS device (dksaarth at unix.za.net (Richard Spiers))
IE6 - Crash via DOS device (se_cur_ity at hotmail.com (morning_wood))
Gates: 'You don't need perfect code' for good security (rahnemann at affinity-mortgage.com (Robert Ahnemann))
Gates: 'You don't need perfect code' for good security (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Proxies (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Proxies (sgmasood at yahoo.com (S G Masood))
Microsoft plans tighter security measures in Windows XP SP2 (ksmith at chartwelltechnology.com (Kenton Smith))
Gates: 'You don't need perfect code' for good security (exibar at thelair.com (Exibar))
Proxies (adam.richards at wnonline.net (adam.richards))
Proxies (lists at venom600.org (Ben Nelson))
Re: Gates: 'You don't need perfect code' for good security (peter at ucsc.edu (Peter Moody))
Gates: 'You don't need perfect code' for good security (p00p at instable.net (|reduced|minus|none|))
Microsoft plans tighter security measures inWindows XP SP2 (yossarian at planet.nl (yossarian))
Microsoft plans tighter security measures in Windows XP SP2 (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Gates: 'You don't need perfect code' for good security (Bryan.Beaty at vector.com (Beaty, Bryan))
Microsoft plans tighter security measures in Windows XP SP2 (ksmith at chartwelltechnology.com (Kenton Smith))

1866 messages