full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2003/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 38	² 53	³ 36	⁴ 61	⁵ 63	⁶ 29	⁷ 18
⁸ 21	⁹ 21	¹⁰ 62	¹¹ 53	¹² 22	¹³ 8	¹⁴ 8
¹⁵ 19	¹⁶ 35	¹⁷ 24	¹⁸ 19	¹⁹ 21	²⁰ 11	²¹ 5
²² 24	²³ 25	²⁴ 11	²⁵ 14	²⁶ 18	²⁷ 5	²⁸ 2
²⁹ 8	³⁰ 52	³¹ 14

Messages by day:

December 1 (38 messages)

One-Time Pad Authentication (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
One-Time Pad Authentication (jeremiah at nur.net (Jeremiah Cornelius))
One-Time Pad Authentication (kudzu at tenebras.com (Michael Sierchio))
One-Time Pad Authentication (gem at rellim.com (Gary E. Miller))
One-Time Pad Authentication (ekr at rtfm.com (Eric Rescorla))
don't waste your time (was: Re: One-Time Pad Authentication) (jon at divisionbyzero.com (jon schatz))
One-Time Pad Authentication (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
One-Time Pad Authentication (BlueBoar at thievco.com (Blue Boar))
One-Time Pad Authentication (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
One-Time Pad Authentication (cerebus at sackheads.org (Timothy J. Miller))
Assembly Code Question (widdlewon at hotmail.com (Jamie Penney))
#hackphreak lecture series (2) (vord at hushmail.com (vordhosbn))
file inclusion (les visiteurs) (evert at digipix.org (Evert Daman))
Virtual Programming VP-ASP Shopping Cart 5.0 multiple SQL Injection Vulnerabilities (research at s-quadra.com (S-Quadra Security Research))
Assembly Code Question (amebix at comcast.net (amebix@...cast.net))
#hackphreak lecture series (2) (lists at onryou.com (Cael Abal))
file inclusion (les visiteurs) (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
MPLS Security (James.Cupps at sappi.com (Cupps, James))
automated vulnerability testing (dufresne at winternet.com (Ron DuFresne))
file inclusion (les visiteurs) (dan at lockedbox.net (Dan))
#hackphreak lecture series (2) (jsage at finchhaven.com (John Sage))
Re: unsubscribe (otto1122 at hushmail.com (otto1122@...hmail.com))
file inclusion (les visiteurs) (root at freebox.mine.nu (root))
file inclusion (les visiteurs) (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
file inclusion (les visiteurs) (chorchert at veedev.de (Christian Horchert))
automated vulnerability testing (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Re: automated vulnerability testing (chris at improbable.org (Chris Adams))
[SECURITY] [DSA-403-1] userland can access Linux kernel memory (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
#hackphreak lecture series (2) (vord at rsc.cx (vordhosbn))
MDKSA-2003:110 - Updated kernel packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
file inclusion (les visiteurs) (evert at digipix.org (Evert Daman))
[SECURITY] [DSA-403-1] userland can access Linux kernel memory (fw at deneb.enyo.de (Florian Weimer))
#hackphreak lecture series (2) (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
UnixWare 7.1.1 : Bind: cache poisoning BIND 8 prior to 8.3.7 and BIND 8.4.x prior 8.4.2 (security at sco.com (security@....com))
Comments on 5 IE vulnerabilities (thor at pivx.com (Thor Larholm))
Increase probe on UDP port 1026 (irwanhadi at phxby.com (Irwan Hadi))
UnixWare 7.1.1 : Bind: cache poisoning BIND 8 prior to 8.3.7 and BIND 8.4.x prior 8.4.2 (security at sco.com (security@....com))
UnixWare 7.1.1 : Bind: cache poisoning BIND 8 prior to 8.3.7 and BIND 8.4.x prior 8.4.2 (security at sco.com (security@....com))

December 2 (53 messages)

Comments on 5 IE vulnerabilities (frank at knobbe.us (Frank Knobbe))
file inclusion (les visiteurs) (gazpa at euskalnet.net (gazpa))
[iSEC] Linux kernel do_brk() lacks argument bound checking (ihaquer at isec.pl (Paul Starzetz))
Increase probe on UDP port 1026 (phil.rodrigues at uconn.edu (Rodrigues, Philip))
file inclusion (les visiteurs) (chorchert at veedev.de (Christian Horchert))
Comments on 5 IE vulnerabilities (lists at onryou.com (Cael Abal))
Linux kernel do_brk() proof-of-concept exploit code (DEVINE at iie.cnam.fr (Christophe Devine))
Comments on 5 IE vulnerabilities (eballen1 at qwest.net (Bruce Ediger))
[RHSA-2003:392-00] Updated 2.4 kernel fixes privilege escalation security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Increase probe on UDP port 1026 (srenna at vdbmusic.com (srenna@...music.com))
automated vulnerability testing (michael at bluesuperman.com (Michael Gale))
[SECURITY] [DSA-403-1] userland can access Linux kernel memory (blancher at cartel-securite.fr (Cedric Blancher))
[SECURITY] [DSA-403-1] userland can access Linux kernel memory (draht at suse.de (Roman Drahtmueller))
#hackphreak lecture series (2) (ge at egotistical.reprehensible.net (Gadi Evron))
MPLS Security (nicolist at securite.org (Nicolas FISCHBACH))
[SECURITY] [DSA-403-1] userland can access Linux kernel memory (cliph at isec.pl (Wojciech Purczynski))
Comments on 5 IE vulnerabilities (jkuperus at planet.nl (Jelmer))
file inclusion (les visiteurs) (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Increase probe on UDP port 1026 (nicob at nicob.net (Nicob))
One-Time Pad Authentication (the1 at unixclan.net (the1@...xclan.net))
[RHSA-2003:392-00] Updated 2.4 kernel fixes privilege escalation security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[SECURITY] [DSA-403-1] userland can access Linux kernel memory (fw at deneb.enyo.de (Florian Weimer))
[SECURITY] [DSA-403-1] userland can access Linux kernel memory (fw at deneb.enyo.de (Florian Weimer))
[RHSA-2003:392-00] Updated 2.4 kernel fixes privilege escalation security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Comments on 5 IE vulnerabilities (guninski at guninski.com (Georgi Guninski))
[SECURITY] [DSA-403-1] userland can access Linux kernel memory (ihaquer at isec.pl (Paul Starzetz))
[RHSA-2003:335-01] Updated Net-SNMP packages fix security and other bugs (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:335-01] Updated Net-SNMP packages fix security and other bugs (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:335-01] Updated Net-SNMP packages fix security and other bugs (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:392-00] Updated 2.4 kernel fixes privilege escalation security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:392-00] Updated 2.4 kernel fixes privilege escalation security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:392-00] Updated 2.4 kernel fixes privilege escalation security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:335-01] Updated Net-SNMP packages fix security and other bugs (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2003:335-01] Updated Net-SNMP packages fix security and other bugs (bugzilla at redhat.com (bugzilla@...hat.com))
Comments on 5 IE vulnerabilities (jsage at finchhaven.com (John Sage))
Increase probe on UDP port 1026 (phil.rodrigues at uconn.edu (Rodrigues, Philip))
[RHSA-2003:335-01] Updated Net-SNMP packages fix security and other bugs (bugzilla at redhat.com (bugzilla@...hat.com))
Cisco Security Advisory: SNMP trap Reveals WEP Key in Cisco Aironet AP (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Vulnerability Scans (rraver at ipconsole.com (Robert Raver))
"The Rotten File" ( XFTeam IRC Chat log - script kiddies - just for fun ) (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Increase probe on UDP port 1026 (dokas at cs.umn.edu (Paul Dokas))
big activity (misiu_ at gmx.de (misiu_@....de))
Vulnerability Scans (msconzo at tamu.edu (Michael Sconzo))
file inclusion (les visiteurs) (gazpa at euskalnet.net (gazpa))
A quote about "script kiddies" (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
do_brk() vulnerability on SGI Altix systems (agent99 at sgi.com (SGI Security Coordinator))
One-Time Pad Authentication (otto1122 at hushmail.com (otto1122@...hmail.com))
Avecho Glasswall Anti virus technolog? (Zach.Forsyth at kiandra.com (Zach Forsyth))
A quote about "script kiddies" (ph1 at cogeco.ca (David))
Increase probe on UDP port 1026 (r_i_c_h at btopenworld.com (Richard Maudsley))
do_brk() vulnerability on SGI Altix systems (agent99 at sgi.com (SGI Security Coordinator))
do_brk() vulnerability on SGI Altix systems (agent99 at sgi.com (SGI Security Coordinator))
Comments on 5 IE vulnerabilities (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

December 3 (36 messages)

Increase probe on UDP port 1026 (capegeo at opengroup.org (George Capehart))
A quote about "script kiddies" (jeremiah at nur.net (Jeremiah Cornelius))
Avecho Glasswall Anti virus technolog? (chill at herber-hill.com (Charles E. Hill))
Avecho Glasswall Anti virus technolog? (chill at herber-hill.com (Charles E. Hill))
file inclusion (les visiteurs) (chorchert at veedev.de (Christian Horchert))
Increase probe on UDP port 1026 (nick at virus-l.demon.co.uk (Nick FitzGerald))
big activity (coderman at charter.net (coderman))
Avecho Glasswall Anti virus technolog? (lists at onryou.com (Cael Abal))
Yahoo Instant Messenger YAUTO.DLL buffer overflow (trihuynh at zeeup.com (Tri Huynh))
Increase probe on UDP port 1026 (full-disclosure at royds.net (Bill Royds))
Yahoo Instant Messenger YAUTO.DLL buffer overflow (khermansen at ht-technology.com (Kristian Hermansen))
Avecho Glasswall Anti virus technolog? (dowlingg at sullcrom.com (Dowling, Gabrielle))
Avecho Glasswall Anti virus technolog? (nick at virus-l.demon.co.uk (Nick FitzGerald))
file inclusion (les visiteurs) (linux at digipix.org (Evert Daman))
GLSA: rsync.gentoo.org rotation server compromised (200312-01) (klieber at gentoo.org (Kurt Lieber))
A quote about "script kiddies" (the1 at unixclan.net (the1@...xclan.net))
[TURBOLINUX SECURITY INFO] 03/Dec/2003 (security-announce at turbolinux.co.jp (Turbolinux))
GnuPG 1.2.3, 1.3.3 external HKP interface format string issue (research at s-quadra.com (S-Quadra Security Research))
SUSE Security Announcement: gpg (SuSE-SA:2003:048) (draht at suse.de (Roman Drahtmueller))
Vulnerability Scans (hugh_fraser at dofasco.ca (hugh_fraser@...asco.ca))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (trihuynh at zeeup.com (trihuynh@...up.com))
Increase probe on UDP port 1026 (eckman at umn.edu (Brian Eckman))
flames security group start to play , yet another vuln found (rustymemory and welshboi) (rustymemory at cisco-ninjas.com (rustymemory))
Yahoo Instant Messenger YAUTO.DLL buffer overflow (trihuynh at zeeup.com (Tri Huynh))
Multiple OpenSSH/OpenSSL Vulnerabilities Update on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Yahoo Instant Messenger YAUTO.DLL buffer overflow (trihuynh at zeeup.com (Tri Huynh))
Yahoo Instant Messenger YAUTO.DLL buffer overflow (esper at sherohman.org (Dave Sherohman))
Anyone else seeing MyWork.zip - Modified Wdialupd virus? (nathan.risser at express-scripts.com (Risser, Nathan (BLM)))
Multiple OpenSSH/OpenSSL Vulnerabilities Update on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Multiple OpenSSH/OpenSSL Vulnerabilities Update on IRIX (agent99 at sgi.com (SGI Security Coordinator))
Kevin Mitnick Domain Name for Sale (steve at videogroup.com (Steve))
[Fwd: Re: Increase probe on UDP port 1026] (InCisT at popsikle.net (InCisT))
Kevin Mitnick Domain Name for Sale (frank at knobbe.us (Frank Knobbe))
Unix SIP client -> MS Messenger? (pauls at utdallas.edu (Schmehl, Paul L))
Increase probe on UDP port 1026 (woofz at gmx.net (bowwow))
Unix SIP client -> MS Messenger? (amilabs at optonline.net (amilabs))

December 4 (61 messages)

"The Rotten File" ( XFTeam IRC Chat log - script kiddies - just for fun ) (gazpa at euskalnet.net (gazpa))
automated vulnerability testing (full-disclosure at royds.net (Bill Royds))
flames security group start to play , yet another vuln found (rustymemory and welshboi) (dotslash at snosoft.com (KF))
[Fwd: Bugtraq: Linksys WRT54G Denial of Service Vulnerability] (security at dylanic.de (Michael Renzmann))
[Fwd: Bugtraq: Linksys WRT54G Denial of Service Vulnerability] (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
[Fwd: Bugtraq: Linksys WRT54G Denial of Service Vulnerability] (security at dylanic.de (Michael Renzmann))
[Fwd: Bugtraq: Linksys WRT54G Denial of Service Vulnerability] (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (deblanc01 at yahoo.com (De Blanc))
flames security group start to play , yet another vuln found (rustymemory and welshboi) (todd at hostopia.com (Todd Burroughs))
[Fwd: Bugtraq: Linksys WRT54G Denial of Service Vulnerability] (tim-security at sentinelchicken.org (Tim))
Partial Solution to SUID Problems (todd at hostopia.com (Todd Burroughs))
[Fwd: Bugtraq: Linksys WRT54G Denial of Service Vulnerability] (kang at insecure.ws (kang@...ecure.ws))
Partial Solution to SUID Problems (g.thomas at nux-acid.org (Gino Thomas))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (khermansen at ht-technology.com (Kristian Hermansen))
new dos attack? (geoincidents at getinfo.org (Geo.))
Yet another PayPal scam? (security at securespot.com (Christopher Carey))
new dos attack? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
SIP client for *nix (pauls at utdallas.edu (Schmehl, Paul L))
Linux kernel do_brk(), another proof-of-concept code for i386 (julien at cr0.org (Julien TINNES))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (khermansen at ht-technology.com (Kristian Hermansen))
SuSE Security Announcement: Kernel brk() vulnerability (SuSE-SA:2003:049) (okir at suse.de (Olaf Kirch))
[SECURITY] [DSA 404-1] New rsync packages fix unauthorised remote code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.d…)
SIP client for *nix (harry at behrens.com (harry@...rens.com))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (dave at isecureu.com (dave kleiman))
SUSE Security Announcement: rsync (SuSE-SA:2003:050) (thomas at suse.de (Thomas Biege))
[OpenPKG-SA-2003.051] OpenPKG Security Advisory (rsync) (openpkg at openpkg.org (OpenPKG))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (list.account at cerdant.com (List Account))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (khermansen at ht-technology.com (Kristian Hermansen))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (khermansen at ht-technology.com (Kristian Hermansen))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (khermansen at ht-technology.com (Kristian Hermansen))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (preston.newton at equipnetworks.com (Preston Newton))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (exibar at thelair.com (Exibar))
SIP client (pauls at utdallas.edu (Schmehl, Paul L))
big activity (misiu_ at gmx.de (misiu_@....de))
Nachi Worm (2of2 at unimatrix01.us (David Loyd))
[EXPLOIT] Windows XP Workstation New Exploit (MS03-049) (alf1num3rik at yahoo.com (Stephen))
Nachi Worm (ngirard at qualys.com (Norman Girard))
Linux kernel brk() log reports (dlhane at sbcglobal.net (David Hane))
RE: Yahoo Instant Messenger YAUTO.DLL buffe r overflow (ALudwig at Calfingroup.com (Andre Ludwig))
[RHSA-2003:398-01] New rsync packages fix remote security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (madsaxon at direcway.com (madsaxon))
Linux kernel brk() log reports (cliph at isec.pl (Wojciech Purczynski))
RE: Yahoo Instant Messenger YAUTO.DLL buffe r overflow (dave at 0dayspray.com (david maynor))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (khermansen at ht-technology.com (Kristian Hermansen))
[RHSA-2003:398-01] New rsync packages fix remote security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Linux kernel brk() log reports (dlhane at sbcglobal.net (David Hane))
[ESA-20031204-032] 'rsync' heap overflow vulnerability (security at guardiandigital.com (EnGarde Secure Linux))
[RHSA-2003:398-01] New rsync packages fix remote security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Nachi Worm (Sonny.Discini at montgomerycountymd.gov (Discini, Sonny))
Nachi Worm (ngirard at qualys.com (Norman Girard))
RE: Yahoo Instant Messenger YAUTO.DLL bufferoverflow (casey.roberts at ttu.edu (Roberts, Casey))
Re: Nachi Worm (somlo at acns.colostate.edu (Gabriel L. Somlo))
MDKSA-2003:111 - Updated rsync packages fix heap overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (borisv at lk.net (Boris Veytsman))
RE: Yahoo Instant Messenger YAUTO.DLL bufferoverflow (khermansen at ht-technology.com (Kristian Hermansen))
[iSEC] Linux kernel do_brk() vulnerability details (ihaquer at isec.pl (Paul Starzetz))
RE: Yahoo Instant Messenger YAUTO.DLL buffe r overflow (jeremiah at nur.net (Jeremiah Cornelius))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (khermansen at ht-technology.com (Kristian Hermansen))
Re: Nachi Worm (pauls at utdallas.edu (Schmehl, Paul L))
[iSEC] Linux kernel do_brk() vulnerability details (paul at isec.pl (Paul Starzetz))
Linux kernel brk() log reports (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

December 5 (63 messages)

(Was: Re: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (lists at onryou.com (Cael Abal))
Cripes (Was Re: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (lists at onryou.com (Cael Abal))
SRT2003-12-04-0723 - PLDaniels Ebola remote overflow (dotslash at snosoft.com (KF))
(Was: Re: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (khermansen at ht-technology.com (Kristian Hermansen))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (gazpa at euskalnet.net (gazpa))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (khermansen at ht-technology.com (Kristian Hermansen))
Cripes (madsaxon at direcway.com (madsaxon))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (pauls at utdallas.edu (Paul Schmehl))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (madsaxon at direcway.com (madsaxon))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
(Was: Re: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (khermansen at ht-technology.com (Kristian Hermansen))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (trihuynh at zeeup.com (Tri Huynh))
[inbox] RE: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (exibar at thelair.com (Exibar))
completely OffTopic by now... WAS (Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (exibar at thelair.com (Exibar))
request for list administrator (aaron at alpete.com (Aaron Peterson))
request for list administrator (chris.rs at xtra.co.nz (Chris Smith))
completely OffTopic by now... WAS (Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (dowlingg at sullcrom.com (Dowling, Gabrielle))
request for list administrator (listuser at seifried.org (Kurt Seifried))
request for list administrator (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
[inbox] RE: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (khermansen at ht-technology.com (Kristian Hermansen))
(Was: Re: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (gator at mail.cacr.caltech.edu (Anne Henmi))
completely OffTopic by now... WAS (Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (raymond at dyn.org (Raymond Morsman))
[inbox] RE: RE: Yahoo Instant Messenger YAU TO.DLL buffer overflow (allan.vanleeuwen at orangemail.nl (allan.vanleeuwen@...ngemail.nl))
completely OffTopic by now... WAS (Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (cwis at nerim.fr (Christopher Allene))
RE: Yahoo Instant Messenger YAUTO.DLL buffer ov erflow (Sung.Choe at hickam.af.mil (Choe.Sung Cont. PACAF CSS/SCHP))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (bruen at coldrain.net (Stormwalker))
cisco acl (nonleft at gmx.net (isa vaul))
Partial Solution to SUID Problems (domino at asgardnet.org (Ciro))
request for list administrator (aaron at alpete.com (Aaron Peterson))
RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow (nix at syndicalist.net (Henrik Persson))
cisco acl (patrick.doyle at bbc.co.uk (Patrick Doyle))
cisco acl (Bill.Noren at PaeTec.com (Noren, Bill))
Administrivia: Off-topic Posts (johnc at grok.org.uk (John Cartwright))
cisco acl (petard at freeshell.org (petard))
RE: Yahoo Instant Messenger YAUTO.DLL bufferoverflow (jsage at finchhaven.com (John Sage))
(Was: Re: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (pwicks at oxygen.com (James Patterson Wicks))
cisco acl (vb at bitsmart.com (vb))
completely OffTopic by now... WAS (Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (jeremiah at nur.net (Jeremiah Cornelius))
cisco acl (nonleft at gmx.net (isa vaul))
cisco acl (pjp at paulo-pereira.net (Paulo Pereira))
(Was: Re: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (exibar at thelair.com (Exibar))
cisco acl (lists at onryou.com (Cael Abal))
cisco acl (keithp at corp.ptd.net (Keith Pachulski))
cisco acl (ceo at digicron.com (vb))
cisco acl (aclendenen at esri.com (Anthony Clendenen))
RE: cisco acl (clint at secureconsulting.com (Clint Bodungen))
cisco acl (thomas.tonneson at fortis.co.im (Tonneson, Thomas))
completely OffTopic by now... WAS (Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (hernani at tuners.ch (Hernani Marques Madeira))
completely OffTopic by now... WAS (Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (8tImER at gmx.net (8tImER))
[TURBOLINUX SECURITY INFO] 06/Dec/2003 (security-announce at turbolinux.co.jp (Turbolinux))
So off-topic, I don't know why I'm posting (Had absolutely nothing to do with: Yahoo Instant Messenger YAUTO.DLL buffer ove… (damian at sentex.net (Damian Gerow))
(no subject) (1 at malware.com (http-equiv@...ite.com))
So off-topic, I don't know why I'm posting (Had absolutely nothing to do with: Yahoo Instant Messenger YAUTO.DLL buffer… (jeremiah at nur.net (Jeremiah Cornelius…)
cisco acl (arivanov at sigsegv.cx (Anton Ivanov))
RE: Yahoo Instant Messenger YAUTO.DLL buffer ov erflow (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Reply of last "gazpa" e-mail (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
(no subject) (nick at virus-l.demon.co.uk (Nick FitzGerald))
rpc.mountd Vulnerabilities update on IRIX (agent99 at sgi.com (SGI Security Coordinator))
New Virus? (security at astrobox.net (Michael Bemmerl))
[SCSA-022] Multiple vulnerabilities in Xoops (advisory at security-corporation.com (Security Corporation Security Advisory))
rpc.mountd Vulnerabilities update on IRIX (agent99 at sgi.com (SGI Security Coordinator))
rpc.mountd Vulnerabilities update on IRIX (agent99 at sgi.com (SGI Security Coordinator))

December 6 (29 messages)

completely OffTopic by now... WAS (Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (L_Brutschy at web.de (Lucas Brutschy))
Re: New Virus? (nick at virus-l.demon.co.uk (Nick FitzGerald))
[OMG] NSRG Security & Lorenzo Hernandez "SuckYouBeans" Garcia-Hierro (morning_wood at singapore.net (Franks and Beans))
completely OffTopic by now... WAS (Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (michael at bluesuperman.com (Michael Gale))
(no subject) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Partial Solution to SUID Problems (vladimir at arobas.net (Vladimir Parkhaev))
(no subject) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[OMG] NSRG Security & Lorenzo Hernandez "SuckYouBeans" Garcia-Hierro (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
[OMG] NSRG Security & Lorenzo Hernandez "SuckYouBeans" Garcia-Hierro (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Drunkeness (pfarrow at flamenetworks.co.uk (Paul Farrow))
(no subject) (nick at virus-l.demon.co.uk (Nick FitzGerald))
Drunkeness (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Drunkeness (kalookalaa at hotmail.com (John Vill))
Drunkeness (measl at mfn.org (J.A. Terranson))
(no subject) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Partial Solution to SUID Problems (todd at hostopia.com (Todd Burroughs))
Partial Solution to SUID Problems (psz at maths.usyd.edu.au (Paul Szabo))
Partial Solution to SUID Problems (hb-fulldisclosure at bsws.de (Henning Brauer))
Drunkeness (whenders at insightbb.com (Wesley J. Henderson))
Partial Solution to SUID Problems (todd at hostopia.com (Todd Burroughs))
Partial Solution to SUID Problems (todd at hostopia.com (Todd Burroughs))
[OMG] NSRG Security & Lorenzo Hernandez "SuckYouBeans" Garcia-Hierro (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Linux kernel do_brk ROOT exploit [MAGIC Number] (elvi52001 at yahoo.com (- ElviS -))
UNSUBSCRIBE (damned at real.ipsec.ru (damned))
Partial Solution to SUID Problems (lcamtuf at ghettot.org (Michal Zalewski))
Partial Solution to SUID Problems (lcamtuf at ghettot.org (Michal Zalewski))
Administrivia: Off-topic Posts (jsage at finchhaven.com (John Sage))
[OMG] NSRG Security & Lorenzo Hernandez (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
[OMG] NSRG Security & Lorenzo Hernandez (morning_wood at singapore.net (Franks and Beans))

December 7 (18 messages)

About my last posts ( in reply of morning_wood@...gapore.net ) : Excuses (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Partial Solution to SUID Problems (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Partial Solution to SUID Problems (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
About my last posts ( in reply of morning_wood@...gapore.net ) : Excuses (gazpa at euskalnet.net (gazpa))
About my last posts ( in reply of morning_wood@...gapore.net ) : Excuses (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Partial Solution to SUID Problems (todd at hostopia.com (Todd Burroughs))
CLOSED: RING Fingerprinting (indianz at indianz.ch (IndianZ))
Partial Solution to SUID Problems (kdebisschop at alert.infoplease.com (Karl DeBisschop))
Partial Solution to SUID Problems (lcamtuf at coredump.cx (Michal Zalewski))
Internet Explorer JavaScript insecure function (freebrain at softhome.net (FREEBRAIN))
Partial Solution to SUID Problems (markus at openbsd.org (Markus Friedl))
Partial Solution to SUID Problems (bri at ifokr.org (Brian Hatch))
Administrivia: Off-topic Posts (johnc at grok.org.uk (John Cartwright))
Internet Explorer JavaScript insecure function (jkuperus at planet.nl (Jelmer))
points of analysis (kaber at aliansystems.com (sir kaber))
webeye exploit (datapath at softhome.net (datapath@...thome.net))
Drunkeness (cdevoney at u.washington.edu (Chris DeVoney))
DVD Encryption system ( CSS Protection ) with Linux players (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))

December 8 (21 messages)

About my last posts ( in reply of morning_wood@...gapore.net ) : Excuses (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
DVD Encryption system ( CSS Protection ) with Linux players (jeremiah at nur.net (Jeremiah Cornelius))
DVD Encryption system ( CSS Protection ) with Linux players (lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro))
Partial Solution to SUID Problems (hb-fulldisclosure at bsws.de (Henning Brauer))
cisco acl (jay at ines.ro (Alexandru Balan))
completely OffTopic by now... WAS (Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (misiu_ at gmx.de (misiu_@....de))
completely OffTopic by now... WAS (Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow) (madsaxon at direcway.com (madsaxon))
RE: Full-Disclosure digest, Vol 1 #1314 - 27 msgs (daniels at ponderosatel.com (Daniel Sichel))
PrimeBase SQL Database server cleartext password storage. (lwc at vapid.ath.cx (Larry W. Cashdollar))
rpc.mountd Vulnerabilities update on IRIX (agent99 at sgi.com (SGI Security Coordinator))
RE: Full-Disclosure digest, Vol 1 #1314 - 27 msgs (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
points of analysis (kaber at aliansystems.com (Akbar Ali))
RE: Full-Disclosure digest, Vol 1 #1314 - 27 msgs (ggilliss at netpublishing.com (Gregory A. Gilliss))
Implications of outsourcing email (MaxPageant at aol.com (MaxPageant@....com))
RE: Full-Disclosure digest, Vol 1 #1314 - 27 msgs (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Implications of outsourcing email (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Implications of outsourcing email (raymond at prolocation.net (Raymond Dijkxhoorn))
Implications of outsourcing email (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Malformed DNS packets (chris at get-tuf.com (Chris Brown))
Implications of outsourcing email (raymond at prolocation.net (Raymond Dijkxhoorn))
Malformed DNS packets (daniel_clemens at autism.birmingham-infragard.org (daniel uriah clemens))

December 9 (21 messages)

MDKSA-2003:112 - Updated cvs packages fix malformed module request vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2003:113 - Updated screen packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
@Mail web interface multiple security vulnerabilities (research at s-quadra.com (S-Quadra Security Research))
List Charter (johnc at grok.org.uk (John Cartwright))
RE: FWD: Internet Explorer URL parsing vulnerability (sgmasood at yahoo.com (S G Masood))
FWD: Internet Explorer URL parsing vulnerability (sgmasood at yahoo.com (S G Masood))
RE: FWD: Internet Explorer URL parsing vulnerability (clint at secureconsulting.com (Clint Bodungen))
RE: FWD: Internet Explorer URL parsing vulnerability (attica at stackheap.org (S . f . Stover))
RE: FWD: Internet Explorer URL parsing vulnerability (clint at secureconsulting.com (Clint Bodungen))
RE: FWD: Internet Explorer URL parsing vulnerability (sgmasood at yahoo.com (S G Masood))
RE: FWD: Internet Explorer URL parsing vulnerability (clint at secureconsulting.com (Clint Bodungen))
RE: FWD: Internet Explorer URL parsing vulnerability (lcamtuf at ghettot.org (Michal Zalewski))
RE: FWD: Internet Explorer URL parsing vulnerability (clint at secureconsulting.com (Clint Bodungen))
RE: FWD: Internet Explorer URL parsing vulnerability (nick at virus-l.demon.co.uk (Nick FitzGerald))
RE: Internet Explorer URL parsing vulnerability (1 at malware.com (http-equiv@...ite.com))
RE: FWD: Internet Explorer URL parsing vulnerability (nick at virus-l.demon.co.uk (Nick FitzGerald))
Kevin Mitnick Domain Name for Sale (full-disclosure at nicepeople.org (Josh))
RE: Internet Explorer URL parsing vulnerability (1 at malware.com (http-equiv@...ite.com))
Re: Yahoo Instant Messenger YAUTO.DLL buffer overflow (bugtraq-post at beej.org (Marc Bejarano))
RE: FWD: Internet Explorer URL parsing vulnerability (muti at afterglo.ws (Chris S))
RE: FWD: Internet Explorer URL parsing vulnerability (jeremiah at nur.net (Jeremiah Cornelius))

December 10 (62 messages)

Kevin Mitnick Domain Name for Sale (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
RE: FWD: Internet Explorer URL parsing vulnerability (jho at starhub.com (Julian HO Thean Swee))
Antivirus Software Solutions? (michael at bluesuperman.com (Michael Gale))
RE: FWD: Internet Explorer URL parsing vulnerability (venom at gen-x.co.nz (VeNoMouS))
RE: FWD: Internet Explorer URL parsing vulnerability (venom at gen-x.co.nz (VeNoMouS))
IE Unpatched Vuln Site? (joel at helgeson.com (Joel R. Helgeson))
RE: FWD: Internet Explorer URL parsing vulnerability (sgmasood at yahoo.com (S G Masood))
Re: Internet Explorer URL parsing vulnerability (etomcat at freemail.hu (Feher Tamas))
RE: FWD: Internet Explorer URL parsing vulnerability (venom at gen-x.co.nz (VeNoMouS))
IE Unpatched Vuln Site? (ferruh at mavituna.com (Ferruh Mavituna))
RE: FWD: Internet Explorer URL parsing vulnerability (venom at gen-x.co.nz (VeNoMouS))
Password quality? (kris at koehntopp.de (Kristian Köhntopp))
Re: Internet Explorer URL parsing vulnerability (frankdewit at home.nl (Frank de Wit))
IE Unpatched Vuln Site? (jeremy at 33ad.org (jeremy@...d.org))
RES: RE: FWD: Internet Explorer URL parsing vulnerability (cleber.souza at cmp.ind.br (Cleber P. de Souza))
Re: Internet Explorer URL parsing vulnerability (etomcat at freemail.hu (Feher Tamas))
RE: FWD: Internet Explorer URL parsing vulnerability (rgerhards at hq.adiscon.com (Rainer Gerhards))
Re: Internet Explorer URL parsing vulnerability (j at pureftpd.org (Jedi/Sector One))
Password quality? (lwc at vapid.ath.cx (Larry W. Cashdollar))
Password quality? (lwc at vapid.ath.cx (Larry W. Cashdollar))
Re: Internet Explorer URL parsing vulnerability (clint at secureconsulting.com (Clint Bodungen))
RE: FWD: Internet Explorer URL parsing vulnerability (rgerhards at hq.adiscon.com (Rainer Gerhards))
Re: Internet Explorer URL parsing vulnerability (sgmasood at yahoo.com (S G Masood))
Password quality? (hvl at telefonica.de (Holger van Lengerich))
Re: Internet Explorer URL parsing vulnerability (hescominsoon at trifles.com (William Warren))
RE: FWD: Internet Explorer URL parsing vulnerability (exibar at thelair.com (Exibar))
Re: Internet Explorer URL parsing vulnerability (exibar at thelair.com (Exibar))
RE: FWD: Internet Explorer URL parsing vulnerability (exibar at thelair.com (Exibar))
Re: Internet Explorer URL parsing vulnerability (jsage at finchhaven.com (John Sage))
RE: FWD: Internet Explorer URL parsing vulnerability (guninski at guninski.com (Georgi Guninski))
Cisco Security Advisory: Vulnerability in Authentication Library for ACNS (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
SGI Advanced Linux Environment security update #6 (agent99 at sgi.com (SGI Security Coordinator))
RE: FWD: Internet Explorer URL parsing vuln erability (thomas.tonneson at fortis.co.im (Tonneson, Thomas))
Re: Internet Explorer URL parsing vulnerability (ruiper at shaw.ca (Rui Pereira))
RE: FWD: Internet Explorer URL parsing vulnerability (clint at secureconsulting.com (Clint Bodungen))
Re: Internet Explorer URL parsing vulnerability (exibar at thelair.com (Exibar))
RE: FWD: Internet Explorer URL parsing vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Internet Explorer URL parsing vulnerability (ruiper at shaw.ca (Rui Pereira))
Re: Internet Explorer URL parsing vulnerability (sgmasood at yahoo.com (S G Masood))
Cisco Security Advisory: Unity Vulnerabilities on IBM-based Servers (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
IE Unpatched Vuln Site? (dan at losangelescomputerhelp.com (Daniel H. Renner))
Re: Internet Explorer URL parsing vulnerability (exibar at thelair.com (Exibar))
Re: New Virus? (security at astrobox.net (Michael Bemmerl))
Re: Internet Explorer URL parsing vulnerability (ggilliss at netpublishing.com (Gregory A. Gilliss))
Re: Internet Explorer URL parsing vulnerability (clint at secureconsulting.com (Clint Bodungen))
Annoying IE bug (cesarc56 at yahoo.com (Cesar))
Re: Internet Explorer URL parsing vulnerability (dan at losangelescomputerhelp.com (Daniel H. Renner))
Password quality? (petard at freeshell.org (petard))
RE: FWD: Internet Explorer URL parsing vulnerability (blancher at cartel-securite.fr (Cedric Blancher))
[SCSA-023] Multiple vulnerabilities in Mambo Server (advisory at security-corporation.com (Security Corporation Security Advisory))
Re: Internet Explorer URL parsing vulnerability (petard at freeshell.org (petard))
Before you post or reply... (tfs at vortex.uprising.net (Tim Scanlon))
Re: Internet Explorer URL parsing vulnerability (j at pureftpd.org (Jedi/Sector One))
Re: Internet Explorer URL parsing vulnerability (pauls at utdallas.edu (Schmehl, Paul L))
MDKSA-2003:112-1 - Updated cvs packages fix malformed module request vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
A new TCP/IP blind data injection technique? (lcamtuf at ghettot.org (Michal Zalewski))
Password quality? (kris at koehntopp.de (Kristian Köhntopp))
MDKSA-2003:114 - Updated ethereal packages fix multiple remotely exploitable vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: Internet Explorer URL parsing vulnerabi lity (david.vincent at mightyoaks.com (David Vincent))
Re: A new TCP/IP blind data injection technique? (kris at FreeBSD.ORG (Kris Kennaway))
Password quality? (the1 at unixclan.net (the1@...xclan.net))
RE: FWD: Internet Explorer URL parsing vulnerability (sgmasood at yahoo.com (S G Masood))

December 11 (53 messages)

Re: Internet Explorer URL parsing vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[RHSA-2003:390-01] Updated gnupg packages disable ElGamal keys (bugzilla at redhat.com (bugzilla@...hat.com))
Re: Internet Explorer URL parsing vulnerability (michael at bluesuperman.com (Michael Gale))
A new TCP/IP blind data injection technique? (fulldisc at sun.consumer.org.il (Shachar Shemesh))
A new TCP/IP blind data injection technique? (lcamtuf at ghettot.org (Michal Zalewski))
A new TCP/IP blind data injection technique? (fulldisc at sun.consumer.org.il (Shachar Shemesh))
The *real* reason the pivx unpatched IE flaws page was taken offline? (jkuperus at planet.nl (Jelmer))
Re: Internet Explorer URL parsing vulnerability (khermansen at ht-technology.com (Kristian Hermansen))
Finjan Software Discovers a New Critical Vulnerability In Yahoo E-mail Service (dshalev at finjan.com (Dror Shalev))
The *real* reason the pivx unpatched IE flaws page was taken offline? (list.account at cerdant.com (List Account))
Re: Internet Explorer URL parsing vulnerability (guninski at guninski.com (Georgi Guninski))
Annoying IE bug (rlanguy at hotmail.com (Lan Guy))
Re: Internet Explorer URL parsing vulnerability (Karlis.Zigurs at ctco.lv (Karlis Zigurs))
The *real* reason the pivx unpatched IE fla ws page was taken offline? (thomas.tonneson at fortis.co.im (Tonneson, Thomas))
The *real* reason the pivx unpatched IE flaws page was taken offline? (raymond at dyn.org (Raymond Morsman))
Re: Internet Explorer URL parsing vulnerability (jcfunkjr at co.bucks.pa.us (Funk Jr, Joseph C.))
The *real* reason the pivx unpatched IE flaws page was taken offline? (list.account at cerdant.com (List Account))
Annoying IE bug (clint at secureconsulting.com (Clint Bodungen))
The *real* reason the pivx unpatched IE flaws page was taken offline? (peter at null.priv.at (Peter Kuhm))
Re: Internet Explorer URL parsing vulnerability (jt at klake.org (Jarkko Turkulainen))
Re: Internet Explorer URL parsing vulnerability (petard at freeshell.org (petard))
Qwik-Fix >> was: The *real* reason the pivx unp atched IE flaws page was taken offline? (cmeeusen at bnl.gov (Meeusen, Charles D))
Metacortex v1.0 Released (ts at securityoffice.net (Tamer Sahin))
Re: Internet Explorer URL parsing vulnerabi lity (david.vincent at mightyoaks.com (David Vincent))
Re: Internet Explorer URL parsing vulnerability (pauls at utdallas.edu (Schmehl, Paul L))
Re: Internet Explorer URL parsing vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
A new TCP/IP blind data injection technique? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Internet Explorer URL parsing vulnerabi lity (frank at knobbe.us (Frank Knobbe))
Re: Internet Explorer URL parsing vulnerabi lity (caferace at well.com (Jim Race))
Re: Internet Explorer URL parsing vulnerabi lity (caferace at well.com (Jim Race))
Re: Internet Explorer URL parsing vulnerability (sgmasood at yahoo.com (S G Masood))
Re: Internet Explorer URL parsing vulnerability (petard at freeshell.org (petard))
Re: A new TCP/IP blind data injection technique? (casper at holland.sun.com (Casper Dik))
RE: A new TCP/IP blind data injection technique? (gillettdavid at fhda.edu (David Gillett))
Re: Internet Explorer URL parsing vulnerabi lity (hjtoi at comcast.net (Heikki Toivonen))
A new TCP/IP blind data injection technique? (swmike at swm.pp.se (Mikael Abrahamsson))
Re: Internet Explorer URL parsing vulnerabi lity (esper at sherohman.org (Dave Sherohman))
Security....hmmmmm (Rob.Barrett at zurnwilkins.com (Barrett, Rob))
Security....hmmmmm (toybreaker at hotmail.com (Rob Barrett))
Re: Internet Explorer URL parsing vulnerabi lity (hescominsoon at trifles.com (William Warren))
Security....hmmmmm (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Internet Explorer URL parsing vulnerability (jsage at finchhaven.com (John Sage))
Re: Internet Explorer URL parsing vulnerabi lity (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Internet Explorer URL parsing vulnerabi lity (jbruce at unitedscience.com (jbruce@...tedscience.com))
[Fwd: More on IE URL obfuscation] (hescominsoon at adelphia.net (William Warren))
sharing ssh session (ldreamer at pisem.net (ldreamer))
Re: Internet Explorer URL parsing vulnerabi lity (peter at ucsc.edu (Peter Moody))
sharing ssh session (andrewg at d2.net.au (andrewg@...net.au))
Security....hmmmmm (cdevoney at u.washington.edu (Chris DeVoney))
Re: Internet Explorer URL parsing vulnerabi lity (m0rtis at adelphia.net (Mortis))
sharing ssh session (dotslash at snosoft.com (KF))
xchat 2.0.6 crashes with mirc 6.0-6.11 DCC exploit (s.hecker at stud.uni-goettingen.de (Stefan Hecker))
Re: Internet Explorer URL parsing vulnerability (sgmasood at yahoo.com (S G Masood))

December 12 (22 messages)

Re: A new TCP/IP blind data injection technique? (lcamtuf at ghettot.org (Michal Zalewski))
Advisory: Dark Age of Camelot - Weak encryption of network traffic exposed personal information. (tchapman at leoninedev.com (Todd Chapman))
RE: FWD: Internet Explorer URL parsing vulnerability (venom at gen-x.co.nz (VeNoMouS))
Re: Internet Explorer URL parsing vulnerabi lity (full-disclosure at royds.net (Bill Royds))
Re: Internet Explorer URL parsing vulnerabi lity (full-disclosure at royds.net (Bill Royds))
Re: Internet Explorer URL parsing vulnerability (ricardo at microhardbr.com.br (Ricardo Moura))
Re: Internet Explorer URL parsing vulnerabi lity (nick at virus-l.demon.co.uk (Nick FitzGerald))
MDKSA-2003:115 - Updated net-snmp packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: Internet Explorer URL parsing vulnerability (emvs.fd.3FB4D11C at cpo.tn.tudelft.nl (Erik van Straten))
2nd CfP DIMVA 2004 (mm at Informatik.TU-Cottbus.DE (Michael Meier))
Re: Internet Explorer URL parsing vulnerability (Dark-Avenger at attbi.com (Dark Avenger))
Secunia Advisory: URL Spoofing (1 at malware.com (http-equiv@...ite.com))
Re: A new TCP/IP blind data injection technique? (lcamtuf at ghettot.org (Michal Zalewski))
Secunia Advisory: URL Spoofing (tk at secunia.com (Thomas Kristensen))
Re: Internet Explorer URL parsing vulnerability (sgmasood at yahoo.com (S G Masood))
Re: A new TCP/IP blind data injection technique? (barney at databus.com (Barney Wolff))
Re: A new TCP/IP blind data injection technique? (sfrost at snowman.net (Stephen Frost))
IE 0x01 Byte URL Spoofing Vulnerability[Scriptless PoC Exploit & Additional Details] (sgmasood at yahoo.com (S G Masood))
Re: A new TCP/IP blind data injection technique? (jeff-kell at utc.edu (Jeff Kell))
Re: Internet Explorer URL parsing vulnerability (guninski at guninski.com (Georgi Guninski))
Re: Internet Explorer URL parsing vulnerability (guninski at guninski.com (Georgi Guninski))
UPDATED UnixWare 7.1.1 : Bind: cache poisoning BIND 8 prior to 8.3.7 and BIND 8.4.x prior 8.4.2 (security at sco.com (security@....com))

December 13 (8 messages)

Re: Internet Explorer URL parsing vulnerabi lity (full-disclosure at royds.net (Bill Royds))
IE 0x01 Byte URL Spoofing Vulnerability[Scriptless PoC Exploit & Additional Details] (piotr.bulczak at pl.abb.com (Piotr Bulczak))
A new TCP/IP blind data injection technique? (michael at bluesuperman.com (Michael Gale))
A new TCP/IP blind data injection technique? (lcamtuf at ghettot.org (Michal Zalewski))
A new TCP/IP blind data injection technique? (michael at bluesuperman.com (Michael Gale))
A new TCP/IP blind data injection technique? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
lftp buffer overflows (Ulf.Harnhammar.9485 at student.uu.se (Härnhammar, Ulf))
Saddam Hussein Captured (dotslash at snosoft.com (KF))

December 14 (8 messages)

A new TCP/IP blind data injection technique? (lcamtuf at ghettot.org (Michal Zalewski))
Finjan Software Discovers a New Critical Vulnerability In Yahoo E-mail Service (menashe at finjan.com (Menashe Eliezer))
Breaking the checksum (a new TCP/IP blind data injection technique) (lcamtuf at ghettot.org (Michal Zalewski))
Saddam Hussein Captured (full-disclosure at gideonrasmussen.com (Gideon Rasmussen, CISSP, CFSO, CFSA, SCSA))
Saddam Hussein Captured (full-disclosure at gideonrasmussen.com (Gideon Rasmussen, CISSP, CFSO, CFSA, SCSA))
Saddam Hussein Captured (gui at goddessmoon.org (Poof))
Get admin rights using Doro (pdf creator) (ml at portsonline.net (Ramon Kukla))
GLSA: Malformed dcc send requests in xchat-2.0.6 lead to a denial of service (klieber at gentoo.org (Kurt Lieber))

December 15 (19 messages)

Saddam Hussein Captured (gui at goddessmoon.org (Poof))
Saddam Hussein Captured (dksaarth at unix.za.net (Richard Spiers))
SUSE Security Announcement: lftp (SuSE-SA:2003:051) (thomas at suse.de (Thomas Biege))
Saddam Hussein Captured (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))
Re: Several Things about IE bugs (1 at malware.com (http-equiv@...ite.com))
Saddam Hussein Captured (matthew at textbox.net (404))
Saddam Hussein Captured (jsage at finchhaven.com (John Sage))
Re: Several Things about IE bugs (gui at goddessmoon.org (Poof))
Cisco Security Advisory: Cisco FWSM Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Re: Several Things about IE bugs (8tImER at gmx.net (8tImER))
Cisco Security Advisory: Cisco PIX Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
A new TCP/IP blind data injection technique? (michael at bluesuperman.com (Michael Gale))
A new TCP/IP blind data injection technique? (lcamtuf at ghettot.org (Michal Zalewski))
A new TCP/IP blind data injection technique? (michael at bluesuperman.com (Michael Gale))
Saddam Hussein Captured (lwc at vapid.ath.cx (Larry W. Cashdollar))
Cyrus IMSP remote root vulnerability (felix.lindner at nruns.com (Felix Lindner))
PayPal issues another blow to user security (anthrax101 at yahoo.com (Aaron Horst))
MDKSA-2003:116 - Updated lftp packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
A funny (but real) story for XMAS (dotslash at snosoft.com (KF))

December 16 (35 messages)

A funny (but real) story for XMAS (trihuynh at zeeup.com (Tri Huynh))
A new TCP/IP blind data injection technique ? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
A funny (but real) story for XMAS (cparker at member.fsf.org (Christopher Parker))
A funny (but real) story for XMAS (lists at onryou.com (Cael Abal))
[RHSA-2003:403-01] Updated lftp packages fix security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
A funny (but real) story for XMAS (Jeffrey.Stebelton at bisys.com (Jeffrey.Stebelton@...ys.com))
A funny (but real) story for XMAS (dufresne at winternet.com (Ron DuFresne))
A funny (but real) story for XMAS (madsaxon at direcway.com (madsaxon))
PayPal issues another blow to user security (exibar at thelair.com (Exibar))
A funny (but real) story for XMAS (exibar at thelair.com (Exibar))
Microsoft's plans for making XP more secure (rms at computerbytesman.com (Richard M. Smith))
Internet Explorer URL parsing vulnerability - fix available (fulldisclosure at hagenson.com (Frank Hagenson))
A funny (but real) story for XMAS (pauls at utdallas.edu (Schmehl, Paul L))
Microsoft's plans for making XP more secure (gui at goddessmoon.org (Poof))
Microsoft's plans for making XP more secure (helmut.hauser at intraplan.de (Helmut Hauser))
Symantec Manhunt ? (fcharpentier at xmcopartners.com (Frederic Charpentier))
Symantec Manhunt ? (misiu_ at gmx.de (misiu_@....de))
Internet Explorer URL parsing vulnerability - fix available (ggilliss at netpublishing.com (Gregory A. Gilliss))
A funny (but real) story for XMAS (ggilliss at netpublishing.com (Gregory A. Gilliss))
Microsoft's plans for making XP more secure (jkuperus at planet.nl (Jelmer))
RE: Full-Disclosure digest, Vol 1 #1331 - 20 msgs (daniels at ponderosatel.com (Daniel Sichel))
Symantec Manhunt ? (clint at secureconsulting.com (Clint Bodungen))
Re: Symantec Manhunt ? (chris at get-tuf.com (Chris Brown))
A funny (but real) story for XMAS (dufresne at winternet.com (Ron DuFresne))
RE: Breaking the checksum (a new TCP/IP blind data injection technique) (brightwell_151 at yahoo.co.uk (John Brightwell))
Internet Explorer URL parsing vulnerability - fix available (exibar at thelair.com (Exibar))
Internet Explorer URL parsing vulnerability - fix available (rahnemann at affinity-mortgage.com (Robert Ahnemann))
Symantec Manhunt ? (misiu_ at gmx.de (misiu_@....de))
A funny (but real) story for XMAS (listuser at seifried.org (Kurt Seifried))
Internet Explorer URL parsing vulnerability - fix available (dufresne at winternet.com (Ron DuFresne))
[RHSA-2003:320-01] Updated httpd packages fix Apache security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
OSVDB (was [Funny Story]) (ggilliss at netpublishing.com (Gregory A. Gilliss))
Port 3858 (weinert at sys2.de (Michael Weinert))
Symantec Manhunt ? (clint at secureconsulting.com (Clint Bodungen))
A funny (but real) story for XMAS (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

December 17 (24 messages)

Symantec Manhunt ? (frank at knobbe.us (Frank Knobbe))
Edonkey/Overnet Plugins Could Pose Harm (ashton at joltmedia.com (ashton))
[TURBOLINUX SECURITY INFO] 17/Dec/2003 (security-announce at turbolinux.co.jp (Turbolinux))
[OpenPKG-SA-2003.052] OpenPKG Security Advisory (cvs) (openpkg at openpkg.org (OpenPKG))
[OpenPKG-SA-2003.053] OpenPKG Security Advisory (lftp) (openpkg at openpkg.org (OpenPKG))
Edonkey/Overnet Plugins Could Pose Harm (petard at freeshell.org (petard))
Edonkey/Overnet Plugins Could Pose Harm (ashton at joltmedia.com (ashton))
Edonkey/Overnet Plugins Could Pose Harm (ashton at joltmedia.com (ashton))
eZ remote exploit (kralor at coromputer.net (Iván Rodriguez Almuiña))
IE Content Manager (on_a_thousand at hotmail.com (Jim Duggan))
Re: IE Content Manager (on_a_thousand at hotmail.com (Jim Duggan))
PayPal issues another blow to user security (rob at ebeep.org (Rob Adams))
PayPal issues another blow to user security (mlande at bellsouth.net (Mary Landesman))
IE Content Manager (geoincidents at getinfo.org (Geo.))
Symantec Manhunt ? (clint at secureconsulting.com (Clint Bodungen))
NetBSD Security Advisory 2003-018: DNS negative cache poisoning (security-officer at NetBSD.org (NetBSD Security Officer))
PayPal issues another blow to user security (dgallagher at starnetusa.net (Dom Gallagher))
PayPal issues another blow to user security (exibar at thelair.com (Exibar))
PayPal issues another blow to user security (exibar at thelair.com (Exibar))
PayPal issues another blow to user security (seth at fogieonline.com (Seth Fogie))
PayPal issues another blow to user security (exibar at thelair.com (Exibar))
A funny (but real) story for XMAS (cdevoney at u.washington.edu (Chris DeVoney))
SGI Advanced Linux Environment security update #7 (agent99 at sgi.com (SGI Security Coordinator))
IE Content Manager (dotslash at snosoft.com (KF))

December 18 (19 messages)

IE Content Manager (lord_ph at comcast.net (bryce))
[RHSA-2003:405-01] Updated apache packages fix minor security vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
Detailed Information about WinXPSP2 Firewall (helmut.hauser at intraplan.de (Helmut Hauser))
Xmas virus on the cards ? (secsquirrel at lycos.com (security squirrel))
A funny (but real) story for XMAS (proidg at comcast.net (proidg@...cast.net))
Xmas virus on the cards ? (secsquirrel at lycos.com (security squirrel))
[Full-Disc]: Xmas virus on the cards ? (CNQQTROVMYSY at spammotel.com (Anders))
Xmas virus on the cards ? (libove at felines.org (Jay Libove))
[Full-Disc]: Xmas virus on the cards ? (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
Xmas virus on the cards ? (secsquirrel at lycos.com (security squirrel))
Xmas virus on the cards ? (pauls at utdallas.edu (Schmehl, Paul L))
[Full-Disc]: Xmas virus on the cards ? (rgerhards at hq.adiscon.com (Rainer Gerhards))
[Full-Disc]: Xmas virus on the cards ? (rgerhards at hq.adiscon.com (Rainer Gerhards))
MDKSA-2003:117 - Updated irssi packages fix remote crash (security at linux-mandrake.com (Mandrake Linux Security Team))
Cert Sucks and Leaks (daniels at ponderosatel.com (Daniel Sichel))
Cert Sucks and Leaks (madsaxon at direcway.com (madsaxon))
Cert Sucks and Leaks (ggilliss at netpublishing.com (Gregory A. Gilliss))
Cert Sucks and Leaks (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Cert Sucks and Leaks (khermansen at ht-technology.com (Kristian Hermansen))

December 19 (21 messages)

A funny (but real) story for XMAS (broyds at rogers.com (Bill Royds))
Openware.org IE Fix - Warning (Thierry at Sniff-em.com (Thierry))
MDKSA-2003:118 - Updated XFree86 packages fix xdm vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: Openware.org IE Fix - Warning (anthrax101 at yahoo.com (Aaron Horst))
Openware.org IE Fix - Warning (petard at freeshell.org (petard))
13 NASA Servers Hacked (simon at snosoft.com (Simon Smith))
13 NASA Servers Hacked (richard at tccnet.co.uk (Richard Stevens))
13 NASA Servers Hacked (shaolin at shaolin-tiger.com (Shaolin Tiger))
13 NASA Servers Hacked (dcweber at raytheon.com (Don C. Weber))
ucd-snmp - arbitrary query ? (cdowns at drippingdead.com (cdowns))
13 NASA Servers Hacked (madsaxon at direcway.com (madsaxon))
[Exploit]: DameWare Mini Remote Control Server Overflow Exploit (netninja at hotmail.kg (Adik))
atrticle in: Security Wire Perspectives, Vol. 5, NO. 93, December 19, 2003 (dufresne at winternet.com (Ron DuFresne))
Openware.org IE Fix - Warning (emvs.fd.3FB4D11C at cpo.tn.tudelft.nl (Erik van Straten))
Openware.org IE Fix - Warning (phased at mail.ru ("phased" ))
[Exploit]: DameWare Mini Remote Control Server Overflow Exploit (ggilliss at netpublishing.com (Gregory A. Gilliss))
atrticle in: Security Wire Perspectives, Vol. 5, NO. 93, December 19, 2003 (capegeo at opengroup.org (George Capehart))
[Exploit]: DameWare Mini Remote Control Server Overflow Exploit (kmitnick at defthi.com (Kevin Mitnick))
13 NASA Servers Hacked (simon at snosoft.com (Simon Smith))
13 NASA Servers Hacked (ggilliss at netpublishing.com (Gregory A. Gilliss))
DameWare Mini Remote Control < v3.73 remote exploit by kralor (kralor at coromputer.net (Iván Rodriguez Almuiña))

December 20 (11 messages)

[Exploit]: DameWare Mini Remote Control Server Overflow Exploit (jkuperus at planet.nl (Jelmer))
[Exploit]: DameWare Mini Remote Control Server Overflow Exploit (kmitnick at defthi.com (Kevin Mitnick))
[Exploit]: DameWare Mini Remote Control Server Overflow Exploit (jkuperus at planet.nl (Jelmer))
veritas security contact? (dotslash at snosoft.com (KF))
[Exploit]: DameWare Mini Remote Control Server Overflow Exploit (stripped) (netninja at hotmail.kg (Adik))
13 NASA Servers Hacked (Sung.Choe at hickam.af.mil (Choe.Sung Cont. PACAF CSS/SCHP))
13 NASA Servers Hacked (madsaxon at direcway.com (madsaxon))
13 NASA Servers Hacked (lists at onryou.com (Cael Abal))
13 NASA Servers Hacked (steve.wray at paradise.net.nz (Steve Wray))
[SCSA-024] BES-CMS including file vulnerability (advisory at security-corporation.com (Security Corporation Security Advisory))
13 NASA Servers Hacked (khermansen at ht-technology.com (Kristian Hermansen))

December 21 (5 messages)

13 NASA Servers Hacked (full-disclosure at royds.net (Bill Royds))
13 NASA Servers Hacked (gazpa at euskalnet.net (gazpa))
13 NASA Servers Hacked (mjcarter at ihug.co.nz (Mike))
Openware.org IE Fix - Withdrawn (helmut_hauser at hotmail.com (helmut hauser))
atrticle in: Security Wire Perspectives, Vol. 5, NO. 93, December 19, 2003 (eballen1 at qwest.net (Bruce Ediger))

December 22 (24 messages)

Removing ShKit Root Kit (chris at cr-secure.net (Chris))
Removing ShKit Root Kit (lists at onryou.com (Cael Abal))
Removing ShKit Root Kit (als at thangorodrim.de (Alexander Schreiber))
Removing ShKit Root Kit (full-disclosure at no-spam.co.uk (nicholas))
13 NASA Servers Hacked (tanknet at lycos.de (Stefan K ))
Removing ShKit Root Kit (nicholas at no-spam.co.uk (nicholas))
Removing ShKit Root Kit (dufresne at winternet.com (Ron DuFresne))
Removing ShKit Root Kit (wes at umich.edu (Wesley D Craig))
Removing ShKit Root Kit (pauls at utdallas.edu (Schmehl, Paul L))
13 NASA Servers Hacked (chris.rs at xtra.co.nz (Chris Smith))
Removing ShKit Root Kit (eckman at umn.edu (Brian Eckman))
Removing ShKit Root Kit (g.thomas at nux-acid.org (Gino Thomas))
13 NASA Servers Hacked (HOtero at lanchile.cl (Otero, Hernan (EDS)))
Removing ShKit Root Kit (mole at morris.net (Paul J. Morris))
Removing ShKit Root Kit (nbates at wpni.com (Nathan Bates))
Removing ShKit Root Kit (g.thomas at nux-acid.org (Gino Thomas))
Removing ShKit Root Kit (lwc at vapid.ath.cx (Larry W. Cashdollar))
Removing ShKit Root Kit (eckman at umn.edu (Brian Eckman))
Removing ShKit Root Kit (nick at virus-l.demon.co.uk (Nick FitzGerald))
Removing ShKit Root Kit (eckman at umn.edu (Brian Eckman))
Removing ShKit Root Kit (als at thangorodrim.de (Alexander Schreiber))
Removing ShKit Root Kit (chris at cr-secure.net (Chris))
Removing ShKit Root Kit (dufresne at winternet.com (Ron DuFresne))
Removing ShKit Root Kit (ggilliss at netpublishing.com (Gregory A. Gilliss))

December 23 (25 messages)

Removing ShKit Root Kit (pauls at utdallas.edu (Schmehl, Paul L))
Removing ShKit Root Kit (security at brvenik.com (Jason))
Avecho Glasswall Anti virus technolog? (ashipp at messagelabs.com (Alex Shipp))
visa XSS? (almauri at cs.com.uy (Mauro Flores))
visa XSS? (almauri at cs.com.uy (Mauro Flores))
visa XSS? (jan.muenther at nruns.com (jan.muenther@...ns.com))
visa XSS? (almauri at cs.com.uy (Mauro Flores))
visa XSS? (joshua.knarr at sap.com (Knarr, Joshua))
visa XSS? (flynngn at jmu.edu (Gary Flynn))
visa XSS? (lists at computersecurityonline.com (lists@...putersecurityonline.com))
visa XSS? (jan.muenther at nruns.com (jan.muenther@...ns.com))
visa XSS? (joshua.knarr at sap.com (Knarr, Joshua))
Removing ShKit Root Kit (lists at onryou.com (Cael Abal))
visa XSS? (megaticker at gmx.de (Oliver Gobin))
Removing ShKit Root Kit (John.Airey at rnib.org.uk (John.Airey@...b.org.uk))
visa XSS? (hescomingsoon at verizon.net (William Warren))
Massive Attacks from mistral.cz (helmut_hauser at hotmail.com (Helmut Hauser))
Removing ShKit Root Kit (nathan.bates at wpni.com (Nathan Bates))
Removing ShKit Root Kit (chris at compucounts.com (Chris Carlson))
Removing ShKit Root Kit (security at brvenik.com (Jason))
visa XSS? (adam at huntrecruiting.com (Adam Hunt))
Removing ShKit Root Kit (ggilliss at netpublishing.com (Gregory A. Gilliss))
Long intevals on phase I rekey on VPN (daniels at ponderosatel.com (Daniel Sichel))
Removing ShKit Root Kit (eckman at umn.edu (Brian Eckman))
visa XSS? (scottanderson392 at hotmail.com (Scott Anderson))

December 24 (11 messages)

visa XSS? (adam at huntrecruiting.com (Adam Hunt))
visa XSS? (full-disclosure at royds.net (Bill Royds))
visa XSS? (JBrown at thrupoint.net (Brown, James (Jim)))
FW: Visa Security Update (khermansen at ht-technology.com (Kristian Hermansen))
FW: Visa Security Update (houdini at nmt.edu (Bill Weiss))
FW: Visa Security Update (pjp at paulo-pereira.net (Paulo Pereira))
visa XSS? (adam at huntrecruiting.com (Adam Hunt))
Bugtraq Security Systems XMAS Advisory 0001 (research at bugtraq.org (Bugtraq Security Systems))
Bugtraq Security Systems XMAS Advisory 0001 (madsaxon at direcway.com (madsaxon))
FW: Visa Security Update (khermansen at ht-technology.com (Kristian Hermansen))
Bugtraq Security Systems XMAS Advisory 0001 (mudge at uidzero.org (mudge))

December 25 (14 messages)

Bugtraq Security Systems XMAS Advisory 0001 (research at bugtraq.org (Bugtraq Security Systems))
Bugtraq Security Systems XMAS Advisory 0001 (jsage at finchhaven.com (John Sage))
Bugtraq Security Systems XMAS Advisory 0001 (fd at asgardnet.org (Ciro))
Sears Scam Trojan Code (segfault at nycap.rr.com (segfault))
Bugtraq Security Systems XMAS Advisory 0001 (research at bugtraq.org (Bugtraq Security Systems))
Bugtraq Security Systems XMAS Advisory 0001 (m0rtis at adelphia.net (Mortis))
Sears Scam Trojan Code (r_i_c_h_lists at btopenworld.com (Richard Maudsley))
Sears Scam Trojan Code (nick at virus-l.demon.co.uk (Nick FitzGerald))
Sears Scam Trojan Code (jt at klake.org (Jarkko Turkulainen))
Bugtraq Security Systems XMAS Advisory 0001 (zorkshin at tampabay.rr.com (Justin Shin))
Sears Scam Trojan Code (pdt at jackhammer.org (Paul Tinsley))
Bugtraq Security Systems XMAS Advisory 0001 (jsage at finchhaven.com (John Sage))
Bugtraq Security Systems XMAS Advisory 0001 (jsage at finchhaven.com (John Sage))
Sears Scam Trojan Code (security at astrobox.net (Michael Bemmerl))

December 26 (18 messages)

Bugtraq Security Systems XMAS Advisory 0001 (research at bugtraq.org (Bugtraq Security Systems))
Bugtraq Security Systems XMAS Advisory 0001 (jsage at finchhaven.com (John Sage))
Sears Scam Trojan Code (jt at klake.org (Jarkko Turkulainen))
Winnie The Pooh Hacking Squadron Presents: 0day 31337 vulnerability in indent 2.2.9 (wtphs at hush.com (Winnie The Pooh Hacking Squadron))
Bugtraq Security Systems XMAS Advisory 0001 (vb at dontpanic.ulm.ccc.de (vb@...tpanic.ulm.ccc.de))
Re: Sears Scam Trojan Code (etomcat at freemail.hu (Feher Tamas))
DANGER ZONE: Internet Explorer (1 at malware.com (http-equiv@...ite.com))
[Out-of-Office reply] Re: Bugtraq Security Systems XMAS Advisory 0001 (jsage at finchhaven.com (John Sage))
Bugtraq Security Systems XMAS Advisory 0001 (jasonc at science.org (Jason Coombs))
Re: Reported Command Injection in Squirrelmail GPG (brian at braverock.com (Brian G. Peterson))
Winnie The Pooh Hacking Squadron Presents: 0day 31337 vulnerability in indent 2.2.9 (raymond at dyn.org (Raymond Morsman))
OpenBB 1.06 SQL Injection (n.teusink at planet.nl (n.teusink@...net.nl))
Winnie The Pooh Hacking Squadron Presents:0day 31337 vulnerability in indent 2.2.9 (listuser at seifried.org (Kurt Seifried))
Fw: Use this patch immediately ! Lacking some serious credibility (pfarrow at flamenetworks.co.uk (Paul Farrow))
FWD: Use this patch immediately ! Lacking credibility (pfarrow at flamenetworks.co.uk (Paul Farrow))
Eine Mail an Sie von "paul farrow" <pfarrow@...menetworks.co.uk> enthielt einen Virus! (pfarrow at flamenetworks.co.uk (pfarrow@...menetworks.co.uk))
Re: Reported Command Injection in Squirrelmail GPG (brian at braverock.com (Brian G. Peterson))
Winnie The Pooh Hacking Squadron Presents: 0day 31337 vulnerability in indent 2.2.9 (wtphs at hush.com (Winnie The Pooh Hacking Squadron))

December 27 (5 messages)

OpenBB 1.06 SQL Injection (groovy2600 at yahoo.com.ar (gr00vy))
Landesk Management Suite IRCRBOOT.DLL buffer overflow (trihuynh at zeeup.com (Tri Huynh))
Sears Scam Trojan Code (jt at klake.org (Jarkko Turkulainen))
Sears variant (bscabl at nycap.rr.com (bscabl))
gkrellm 2.1.19 email user/password storage in clear text (chris at neitzert.com (christopher neitzert))

December 28 (2 messages)

gkrellm 2.1.19 email user/password storage in clear text (sysadmin at agent.co.il (Ag. System Administrator))
gkrellm 2.1.19 email user/password storage in clear text (eguaj at free.fr (Jérôme Augé))

December 29 (8 messages)

(no subject) (shurikx1 at newmail.ru (shurikx1@...mail.ru))
php-ping: Executing arbritary commands (security at ppp-design.de (ppp-design))
Jefferson-Is this a known problem? Trojans? (montanatenor at yahoo.com (Montana Tenor))
Possible way to get rid of Trojans and other Malware (shadowsurfr1 at hotmail.com (Aaron))
RE: DANGER ZONE: Internet Explorer (tlarholm at pivx.com (tlarholm@...x.com))
RE: DANGER ZONE: Internet Explorer (1 at malware.com (http-equiv@...ite.com))
Reverse http traffic (dan at losangelescomputerhelp.com (Daniel H. Renner))
RE: php-ping: Executing arbritary commands (bugtraq at bhodisoft.com (Golden_Eternity))

December 30 (52 messages)

malware (pappgeza at tolna.net (Papp Geza))
Reverse http traffic (rlanguy at hotmail.com (Lan Guy))
Re: php-ping: Executing arbritary commands (security at ppp-design.de (ppp-design))
[SECURITY] [DSA 405-1] New xsok packages fix local group games exploit (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
malware (cat at final-frontier.ath.cx (Dennis Freise))
weird worm ? (vogt at hansenet.com (vogt@...senet.com))
weird worm ? (Max.Rapaille at nbb.be (Rapaill))
weird worm ? (cat at final-frontier.ath.cx (Dennis Freise))
weird worm ? (chema at chema.homelinux.org (José María Mateos))
weird worm ? (deadbeat at sdf.lonestar.org (Daniel))
weird worm ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
weird worm ? (joris at digitaldefense.be (Joris De Donder))
Reverse http traffic (dufresne at winternet.com (Ron DuFresne))
weird worm ? (Sonny.Discini at montgomerycountymd.gov (Discini, Sonny))
Whois acting funny in FreeBSD (chrism at t3wireless.com (Chris McGinnis))
Whois acting funny in FreeBSD (merlyn at stonehenge.com (Randal L. Schwartz))
weird worm ? (tal at musicgenome.com (Tal Kelrich))
whois.crsnic.net hacked? (JBrown at thrupoint.net (Brown, James (Jim)))
fwd: Join "IE Dream Team" (guninski at guninski.com (Georgi Guninski))
Disabling Cached Logon Credentials (dwr3ck at hushmail.com (dwr3ck@...hmail.com))
Whois acting funny in FreeBSD (kronovohr at finalaeon.net (Rev. Kronovohr))
weird worm ? (Kare at Presttun.org (Kare Presttun))
weird worm ? (swmike at swm.pp.se (Mikael Abrahamsson))
Whois acting funny in FreeBSD (mbassett at omaha.com (Bassett, Mark))
weird worm ? (roy at rant-central.com (roy@...t-central.com))
Whois acting funny in FreeBSD (mbassett at omaha.com (Bassett, Mark))
whois.crsnic.net hacked? (pfarrow at flamenetworks.co.uk (Paul Farrow))
Whois acting funny in FreeBSD (petard at freeshell.org (petard))
Whois acting funny in FreeBSD (mbassett at omaha.com (Bassett, Mark))
malware (pappgeza at tolna.net (Papp Geza))
weird worm ? (pappgeza at tolna.net (Papp Geza))
fwd: Join "IE Dream Team" (anthony.aykut at frame4.com (Anthony Aykut))
Look what's back for New Years (ggilliss at netpublishing.com (Gregory A. Gilliss))
weird worm ? (Sonny.Discini at montgomerycountymd.gov (Discini, Sonny))
weird worm ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
whois.crsnic.net hacked? (mike at sentex.net (Mike Tancsa))
Whois acting funny in FreeBSD (hhoffman at ip-solutions.net (Harry Hoffman))
fwd: Join "IE Dream Team" (Sonny.Discini at montgomerycountymd.gov (Discini, Sonny))
whois.crsnic.net hacked? (jsage at finchhaven.com (John Sage))
Whois acting funny in FreeBSD (damian at sentex.net (Damian Gerow))
Whois acting funny in FreeBSD (merlyn at stonehenge.com (Randal L. Schwartz))
whois.crsnic.net hacked? (merlyn at stonehenge.com (Randal L. Schwartz))
RE: Disabling Cached Logon Credentials (nduda at VistaPrint.com (Nick Duda))
Reverse http traffic (dan at losangelescomputerhelp.com (Daniel H. Renner))
malware (dan at losangelescomputerhelp.com (Daniel H. Renner))
Local Denial Of Service Attack Against Apple MacOS X, MacOS X Server, and Darwin. (marukka at mac.com (Matt Burnett))
Look what's back for New Years (nick at virus-l.demon.co.uk (Nick FitzGerald))
Look what's back for New Years (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
malware (pappgeza at tolna.net (Papp Geza))
FW: IE 5.22 on Mac Transmitting HTTP Referer from Secure Page (tlarholm at pivx.com (tlarholm@...x.com))
Jefferson-Is this a known problem? Trojans? (francij at hastings-ent.com (Francis, Justin))
RE: Reverse http traffic (dan at losangelescomputerhelp.com (Daniel H. Renner))

December 31 (14 messages)

Look what's back for New Years (pappgeza at tolna.net (Papp Geza))
Reverse http traffic (dan at losangelescomputerhelp.com (Daniel H. Renner))
weird worm ? (nekramer at mindtheater.net (Nancy Kramer))
New IE Thread crashes by WU (Admin at SecureTarget.Net (Kaveh Mofidi))
Disabling Cached Logon Credentials (ruff.lists at edelweb.fr (Nicolas RUFF (lists)))
RE: Winnie The Pooh Hacking Squadron Presents: 0day 31337 vulnerability in indent 2.2.9 (kindergarten at hush.com (kindergarten@...h.com))
Re: Local Denial Of Service Attack Against Apple MacOS X, MacOS X Server, and Darwin. (william.a at carrel.org (William A. Carrel))
weird worm ? (sebastian at jawmail.org (sebastian@...mail.org))
RE: Disabling Cached Logon Credentials (dwr3ck at hushmail.com (dwr3ck@...hmail.com))
RE: Disabling Cached Logon Credentials (nduda at VistaPrint.com (Nick Duda))
XSS vulnerability in Canon webcam (townsend at northlink.com (townsend@...thlink.com))
weird worm ? (chema at chema.homelinux.org (José María Mateos))
MDKSA-2003:095-1 - Updated proftpd packages fix remote root vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
weird worm ? (jonathan at nuclearelephant.com (Jonathan A. Zdziarski))

800 messages