full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2004/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 64	² 46	³ 42	⁴ 22
⁵ 57	⁶ 53	⁷ 70	⁸ 53	⁹ 30	¹⁰ 12	¹¹ 9
¹² 7	¹³ 19	¹⁴ 63	¹⁵ 58	¹⁶ 76	¹⁷ 21	¹⁸ 23
¹⁹ 31	²⁰ 46	²¹ 30	²² 27	²³ 48	²⁴ 23	²⁵ 13
²⁶ 13	²⁷ 46	²⁸ 57	²⁹ 51	³⁰ 53

Messages by day:

April 1 (64 messages)

something for you (dayioglu at metu.edu.tr (dayioglu@...u.edu.tr))
internet-explorer: bug or feature? (and-bugtraq at doxdesk.com (Andrew Clover))
OpenLinux: vim arbitrary commands execution through modelines (please_reply_to_security at sco.com (please_reply_to_security@....com))
OpenLinux: util-linux could leak sensitive data (please_reply_to_security at sco.com (please_reply_to_security@....com))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : perl unsafe Safe compartment (please_reply_to_security at sco.com (please_reply_to_security@....com))
Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (fulldisc at ultratux.org (Maarten))
Security Hole in HTTP (RFC1945) - Browser-Spoofing (tobias at weisserth.de (Tobias Weisserth))
Forum notify (chows at ozemail.com.au (chows@...mail.com.au))
Re: Thanks :) (chows at ozemail.com.au (chows@...mail.com.au))
Bugfinder Being Indicted As Criminal ("Counterfei France (nobody at mail.futureworlds.it (futureworlds))
RE: Addressing Cisco Security Issues (BMartins at extend.COM (Bruce Martins))
AW: Security Hole in HTTP (RFC1945) -Browser-Spoofing (r.stiemer at imd-worldwide.tv (Ron Stiemer))
Encrypted document (ge at egotistical.reprehensible.net (ge@...tistical.reprehensible.net))
Encrypted document (alerta at redsegura.com (Alerta Redsegura))
Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (pauls at utdallas.edu (Paul Schmehl))
Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (ben at lanwest.com.au (Benjamin Meade))
Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (pauls at utdallas.edu (Paul Schmehl))
Encrypted document (mike at sentex.net (Mike Tancsa))
Encrypted document (hecky at hecky.com (Iraklis A. Mathiopoulos))
Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (ben at lanwest.com.au (Benjamin Meade))
Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (pauls at utdallas.edu (Paul Schmehl))
Subject: FW:*ALERT* NEW BID 10025 (URGENCY 9.3): Cisco CatOS Password (flairloops at hotmail.com (flair loops))
Encrypted document (hecky at hecky.com (Iraklis A. Mathiopoulos))
Security Hole in HTTP (RFC1945) - Browser-Spoofing (adam at hif.hu (Szilveszter Adam))
April 1st is here (joy). Subject: FW:*ALERT* NEW BID 10025 (URGENCY 9.3): Cisco CatOS Password (listuser at seifried.org (Kurt Seifried))
April 1st is here (joy). now improved (adam at hif.hu (Szilveszter Adam))
AW: Security Hole in HTTP (RFC1945) -Browser-Spoofing (Paranoiac_User at FreeNet.De (Paranoiac_User))
NMRC Press Release 01Apr2004 -- NMRC Speaks Out On Legal Woes (thegnome at nmrc.org (Simple Nomad))
Bugfinder Being Indicted As Criminal ("Counterfei France (nicob at nicob.net (Nicob))
Re: SEARCH web attack (i_t at thum.ath.cx (i.t Consulting))
Re: hello (1 at malware.com (1@...ware.com))
NOT GOOD: Outlook Express 6 + Internet Explorer 6 (jsage at finchhaven.com (John Sage))
Re: SEARCH web attack (IP address spoofed?) (martin.macok at underground.cz (Martin Mačok))
April 1st is here (joy). now improved (rgerhards at hq.adiscon.com (Rainer Gerhards))
internet-explorer: bug or feature? (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Re: SEARCH web attack (IP address spoofed?) (lists2 at onryou.com (Cael Abal))
Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (listuser at javelinux.com (Joe Polk))
Block notification / bounce mails (as in DDOS) (koen4security at hotmail.com (Security))
Block notification / bounce mails (as in DDOS) (Jos at meltemi.co.uk (Jos Osborne))
Block notification / bounce mails (as in DDOS) (koen4security at hotmail.com (Koen))
Block notification / bounce mails (as in DDOS) (koen4security at hotmail.com (Koen))
[SECURITY] [DSA 470-1] New Linux 2.4.17 packages fix several local root exploits (hppa) (debian-security-announce at lists.debian.org (debian-security-announce@…)
RE: new internet explorer exploit (was new worm) (ACastigliola at unumprovident.com (Castigliola, Angelo))
Block notification / bounce mails (as in DDOS) (twkonefal at compt.com (Tomasz Konefal))
Block notification / bounce mails (as in DDOS) (exibar at thelair.com (Exibar))
Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
InternetExplorer SSL Popup (r_i_c_h_lists at btopenworld.com (Richard Maudsley))
Autoreply: [SECURITY] [DSA 470-1] New Linux 2.4.17 packages fix several local root exploits (hppa) (ampersand at milwpc.com (ampersand@...wpc.com))
Securing Xp: XpLizer - the best WindowsXp Hardening tool with source code! (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Block notification / bounce mails (as in DDOS) (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
[OpenPKG-SA-2004.008] OpenPKG Security Advisory (squid) (openpkg at openpkg.org (OpenPKG))
Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (dufresne at winternet.com (Ron DuFresne))
Block notification / bounce mails (as in DDOS) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Block notification / bounce mails (as in DDOS) (security at saland.us (Security Administrator))
Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (dcopley at eeye.com (Drew Copley))
Block notification / bounce mails (as in DDOS) (koen4security at hotmail.com (Koen))
Block notification / bounce mails (as in DDOS) (koen4security at hotmail.com (Koen))
Block notification / bounce mails (as in DDOS) (dufresne at winternet.com (Ron DuFresne))
Re: SEARCH web attack (IP address spoofed?) (martin.macok at underground.cz (Martin Mačok))
Proactive Security Breaking News (press at openbsd.org (Press Office))
Block notification / bounce mails (as in DDOS) (michael at bluesuperman.com (Michael Gale))
FD should block attachments (michael at bluesuperman.com (Michael Gale))
Block notification / bounce mails (as in DDOS) (michael.gale at bluesuperman.com (Michael Gale))

April 2 (46 messages)

Backdoor not recognized by Kaspersky (sean01 at accnet.com.au (Sean Crawford))
Backdoor not recognized by Kaspersky (sean01 at accnet.com.au (Sean Crawford))
FD should block attachments (Zach.Forsyth at kiandra.com (Zach Forsyth))
Block notification / bounce mails (as in DDOS) (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Block notification / bounce mails (as in DDOS) (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
FD should block attachments (admin at goddessmoon.org (Poof))
Block notification / bounce mails (as in DDOS) (rgerhards at hq.adiscon.com (Rainer Gerhards))
Thomas Scheller/DE/TNT/TPG ist außer Haus. (Thomas.Scheller at tnt.de (Thomas.Scheller@....de))
Re: Thomas Scheller/DE/TNT/TPG ist außer Haus. (phobie at axfr.org (riki))
Re: Thomas Scheller/DE/TNT/TPG ist außer Haus. (Seuli at bsdunix.ch (Seuli))
MondoSoft - Proxy through MsmHigh.exe (uni at protego.dk (Uffe Nielsen))
MondoSoft - MsmHigh.exe - Denial of Service (uni at protego.dk (Uffe Nielsen))
MondoSoft - MsmLink.exe - Denial of Service (uni at protego.dk (Uffe Nielsen))
MondoSoft - User enumeration possible (uni at protego.dk (Uffe Nielsen))
Buffer Overflow in HAHTsite Scenario Server 5.1 (dra at protego.dk (Dennis Rand))
Block notification / bounce mails (as in DDOS) (Richard.Gadsden at cobbetts.co.uk (Richard Gadsden))
Block notification / bounce mails (as in DDOS) (Jos at meltemi.co.uk (Jos Osborne))
FD should block attachments (pauls at utdallas.edu (Paul Schmehl))
Re: [FD] FD should block attachments (A.J.Caines at halplant.com (Andrew J Caines))
Block notification / bounce mails (as in DDOS) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
FD should block attachments (tim-security at sentinelchicken.org (Tim))
FD should block attachments (mike at sane.com (Mike Smith))
[SECURITY] [DSA 471-1] New interchange packages fix information leak (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
MSN\Qwest ships DSL modem with "unconfigurable" firewall (jlay at ameriben.com (James Lay))
FD should block attachments (mklinke at futzin.com (Mike Klinke))
I wish to unsubscribe (rcoggan at microsoft.com (Randy Coggan))
Thomas Scheller/DE/TNT/TPG ist außer Haus. (Thomas.Scheller at tnt.de (Thomas.Scheller@....de))
Protected message (matthew at textbox.net (404))
FD should block attachments (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Odd SEARCH Requests (bpacket at stackheap.org (badpack3t))
FD should block attachments (dickcox at quepasa.com (dickcox@...pasa.com))
MS code leak update? (rnerrath at hush.com (rnerrath@...h.com))
Training & Certifications (robertrepp at hotmail.com (Robert Repp))
Re: Odd SEARCH Requests (borg at hush.com (borg@...h.com))
FD should block attachments (ggilliss at netpublishing.com (Gregory A. Gilliss))
FD should block attachments (pauls at utdallas.edu (Paul Schmehl))
[despammed] Odd SEARCH Requests (Karl.Levinson at dhs.gov (Levinson, Karl))
FD should block attachments (tim-security at sentinelchicken.org (Tim))
FD should block attachments (tim-security at sentinelchicken.org (Tim))
IRIX ftpd ftp_syslog issue with anonymous FTP (agent99 at sgi.com (SGI Security Coordinator))
Training & Certifications (exibar at thelair.com (Exibar))
Training & Certifications (keydet89 at yahoo.com (Harlan Carvey))
gpl winsshd, was RE: FD should block attachments (Stephen.Blass at asu.edu (Stephen Blass))
Re: [FD] FD should block attachments (se_cur_ity at hotmail.com (morning_wood))
Re: Advisory 03/2004: Multiple (13) Ethereal remote overflows (btrq at bob-n.com (Bob Niederman))
IRIX Update Some Network Drivers May Leak Data (agent99 at sgi.com (SGI Security Coordinator))

April 3 (42 messages)

Re: [FD] FD should block attachments (luke at normanonline.co.uk (Luke Norman))
Re: [FD] FD should block attachments (pauls at utdallas.edu (Schmehl, Paul L))
FD should block attachments (jsage at finchhaven.com (John Sage))
Training & Certifications (robertrepp at hotmail.com (Robert Repp))
FD should block attachments (niekbaakman at home.nl (Niek Baakman))
Re: Your archive (illectro2001 at yahoo.com (illectro2001@...oo.com))
FD should block attachments (macecil at comcast.net (Michael Cecil))
FD should block attachments (pauls at utdallas.edu (Paul Schmehl))
Thomas Scheller/DE/TNT/TPG ist außer Haus. (Thomas.Scheller at tnt.de (Thomas.Scheller@....de))
FD should block attachments (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
FD should block attachments (poof at fansubber.com (Poof))
FD should block attachments (petard at freeshell.org (petard))
FD should block attachments (niekbaakman at home.nl (Niek Baakman))
eMule v0.42d Buffer Overflow (kostya.kortchinsky at renater.fr (Kostya Kortchinsky))
Microsoft Security CD (se_cur_ity at hotmail.com (morning_wood))
Microsoft Security CD - info by patch (se_cur_ity at hotmail.com (morning_wood))
Training & Certifications (keydet89 at yahoo.com (Harlan Carvey))
Training & Certifications (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
[inbox] Re: Training & Certifications (purdy at tecman.com (Curt Purdy))
FD should block attachments (michael.gale at bluesuperman.com (Michael Gale))
Training & Certifications (keydet89 at yahoo.com (Harlan Carvey))
Automated metadata recovery for document collections (tool release) (lcamtuf at ghettot.org (Michal Zalewski))
FD should block attachments (sean01 at accnet.com.au (Sean Crawford))
erase with magnet (bugtracklist at freemail.hu (B$H))
ron1n phone home, episode one (research at bugtraq.org (Bugtraq Security Systems))
erase with magnet (313373 at gmx.net (Alexander Heidenreich))
ron1n phone home, episode one, reloaded (research at bugtraq.org (Bugtraq Security Systems))
erase with magnet (se_cur_ity at hotmail.com (morning_wood))
erase with magnet (macecil at comcast.net (Michael Cecil))
erase with magnet (fulldisc at ultratux.org (Maarten))
erase with magnet (tim-security at sentinelchicken.org (Tim))
FD should block attachments (thmaillists at yahoo.com (Troy))
erase with magnet (313373 at gmx.net (Alexander Heidenreich))
erase with magnet (caraciola at gmx.net (Caraciola))
erase with magnet (tim-security at sentinelchicken.org (Tim))
Re: erase with magnet (rsw at jfet.org (Riad S. Wahby))
Re: erase with magnet (rsw at jfet.org (Riad S. Wahby))
erase with magnet (lcamtuf at ghettot.org (Michal Zalewski))
Re: Automated metadata recovery for document collections (tool release) (lcamtuf at ghettot.org (Michal Zalewski))
erase with magnet (macecil at comcast.net (Michael Cecil))
FD should block attachments (michael.gale at bluesuperman.com (Michael Gale))
FD should block attachments (michael at bluesuperman.com (Michael Gale))

April 4 (22 messages)

erase with magnet (listuser at seifried.org (Kurt Seifried))
erase with magnet (lcamtuf at ghettot.org (Michal Zalewski))
erase with magnet (techlist at kc.rr.com (Jeff Schreiner))
Training & Certifications (dave at immunitysec.com (Dave Aitel))
[SECURITY] [DSA 472-1] New fte packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA 474-1] New squid packages fix ACL bypass (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA 460-2] New sysstat packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.d…)
[SECURITY] [DSA 473-1] New oftpd packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
FD should block attachments (nick at virus-l.demon.co.uk (Nick FitzGerald))
erase with magnet (blancher at cartel-securite.fr (Cedric Blancher))
FD should block attachments (fulldis at it97.dyndns.org (fd))
[inbox] Re: Training & Certifications (purdy at tecman.com (Curt Purdy))
[inbox] Re: Training & Certifications (purdy at tecman.com (Curt Purdy))
erase with magnet (fulldisc at ultratux.org (Maarten))
ron1n phone home, episode 2 (research at bugtraq.org (Bugtraq Security Systems))
Training & Certifications (id3nt at hush.com (id3nt@...h.com))
[inbox] Re: erase with magnet (exibar at thelair.com (Exibar))
[inbox] Re: erase with magnet (fulldisc at ultratux.org (Maarten))
ron1n phone home, episode one, reloaded (purdy at tecman.com (Curt Purdy))
Exploit release (mxb285 at bham.ac.uk (Martin Bealby))
ron1n phone home, episode 2 (se_cur_ity at hotmail.com (morning_wood))
The Return of Carolyn Meinel (was Re: ron1n phone home...) (shrdlu at deaddrop.org (Etaoin Shrdlu))

April 5 (57 messages)

[inbox] Re: erase with magnet (exibar at thelair.com (Exibar))
Automated wireless client penetration tool "hotspotter" released. (mmo at remote-exploit.org (Max Moser))
Re: [FD] FD should block attachments (mike at sane.com (Mike Smith))
[inbox] Re: erase with magnet (phased at mail.ru ("phased" ))
FD should block attachments (mike at sane.com (Mike Smith))
FD should block attachments (sean01 at accnet.com.au (Sean Crawford))
Exploit release (measl at mfn.org (J.A. Terranson))
Re: [FD] FD should block attachments (phased at mail.ru ("phased" ))
Re: [FD] FD should block attachments (mike at sane.com (Mike Smith))
The Return of Carolyn Meinel (was Re: ron1n phone home...) (madsaxon at direcway.com (madsaxon))
The Return of Carolyn Meinel (was Re: ron1n phone home...) (jan.muenther at nruns.com (jan.muenther@...ns.com))
The Return of Carolyn Meinel (was Re: ron1n phone home...) (shrdlu at deaddrop.org (Etaoin Shrdlu))
Exploit release (mxb285 at bham.ac.uk (Martin Bealby))
Texutil symlink vulnerability. (shaunige at yahoo.co.uk (Shaun Colley))
MSN\Qwest ships DSL modem with "unconfigurable" firewall (volker.tanger at detewe.de (Volker Tanger))
[SECURITY] [DSA 475-1] New Linux 2.4.18 packages fix several local root exploits (hppa) (debian-security-announce at lists.debian.org (debian-security-announce@…)
MS code leak update? (ruff.lists at edelweb.fr (Nicolas RUFF (lists)))
[newbie] Reply-to missing? (marcel_k at web.de (Marcel Krause))
erase with magnet (phaze7 at web.de (Phaze 7))
MSN\Qwest ships DSL modem with "unconfigurable" firewall (dgianndrea at comsquared.com (David Gianndrea))
MSN\Qwest ships DSL modem with "unconfigurable" firewall (volker.tanger at detewe.de (Volker Tanger))
Re: [FD] FD should block attachments (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
[OpenPKG-SA-2004.009] OpenPKG Security Advisory (mc) (openpkg at openpkg.org (OpenPKG))
ron1n phone home, episode three (research at bugtraq.org (Bugtraq Security Systems))
erase with magnet (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
probe for new vul? (bing3000 at yahoo.com (bing))
Re: Delivery Server (thor at pivx.com (thor@...x.com))
Re: [FD] FD should block attachments (pauls at utdallas.edu (Paul Schmehl))
erase with magnet (twkonefal at compt.com (Tomasz Konefal))
The Return of Carolyn Meinel (was Re: ron1n phone home...) (purdy at tecman.com (Curt Purdy))
iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
erase with magnet (seth at fogieonline.com (Seth Fogie))
RE: Text message (jkuperus at planet.nl (jkuperus@...net.nl))
probe for new vul? (pauls at utdallas.edu (Paul Schmehl))
Re: [FD] FD should block attachments (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
IE exploit going around on irc (niekbaakman at home.nl (Niek Baakman))
Advisory: Multiple Vulnerabilities in Monit (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
MCSE training question (purdy at tecman.com (Curt Purdy))
Training & Certifications (dufresne at winternet.com (Ron DuFresne))
A sucker is born every day (carolyn.meinel at techbroker.com (Carolyn Meinel))
IE exploit going around on irc (fharvey at securiweb.net (François Harvey))
Clarification of My Post RE: Bugfinder Being Indicted As Criminal in France (dcopley at eeye.com (Drew Copley))
IE exploit going around on irc (1 at malware.com (http-equiv@...ite.com))
A sucker is born every day (cmeinel at techbroker.com (Carolyn Meinel))
A sucker is born every day (purdy at tecman.com (Curt Purdy))
Re: [FD] Training & Certifications (A.J.Caines at halplant.com (Andrew J Caines))
MCSE training question (joel at helgeson.com (Joel R. Helgeson))
Format string bug in IGI 2: Covert Strike 1.3 (aluigi at altervista.org (Luigi Auriemma))
SMTP non delivery notification DoS/DDoS Attacks (stefan.frei at techzoom.net (Stefan Frei))
Re: [FD] FD should block attachments (tremaine.lea at sjrb.ca (Tremaine Lea))
Training & Certifications (exibar at thelair.com (Exibar))
(no subject) (pwicks at oxygen.com (James Patterson Wicks))
MCSE training question (exibar at thelair.com (Exibar))
A sucker is born every day (james.bliss at comcast.net (James Bliss))
Training & Certifications (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
Turkeys should not fish with dynamite (m0rtis at adelphia.net (Mortis))
Off-Topic: IKEA ownz Microsoft (daniel at wardriver.net (Daniel Berg))

April 6 (53 messages)

Training & Certifications (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
MDKSA-2004:026 - Updated mplayer packages fix remotely exploitable vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Availability of new material for virus research (orchestra at ttnet.net.tr (Orchestra))
A sucker is born every day (pfarrow at flamenetworks.co.uk (Paul Farrow))
Off-Topic: IKEA ownz Microsoft (g0d at mrplaydoh.org (g0d))
[inbox] Re: Training & Certifications (exibar at thelair.com (Exibar))
[inbox] Re: Off-Topic: IKEA ownz Microsoft (exibar at thelair.com (Exibar))
Paper: Comparing binaries with graph isomorphisms (tsabin at razor.bindview.com (Todd Sabin))
MHH discussion forum open to the public (research at bugtraq.org (Bugtraq Security Systems))
A sucker is born every day (cmeinel at techbroker.com (Carolyn Meinel))
Training & Certifications (jsage at finchhaven.com (John Sage))
A sucker is born every day (madsaxon at direcway.com (madsaxon))
MCSE training question (se_cur_ity at hotmail.com (morning_wood))
[Fwd: Re: MCSE training question] (maclenna at cs.curtin.edu.au (Alexander MacLennan))
A sucker is born every day (kf_lists at secnetops.com (KF (lists)))
IE exploit going around on irc (bugtraq at pewp.hack.se (David Jacoby))
A sucker is born every day (epic at roothack.org (epic))
Off-Topic: IKEA ownz Microsoft (adam at huntrecruiting.com (Adam))
FAT32 input > output = null? (se_cur_ity at hotmail.com (morning_wood))
Re: Thanks! (illectro2001 at yahoo.com (illectro2001@...oo.com))
Macromedia Flash Player 7.0 r19 - Null Pointer Assignment(Remote Crash) (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
MSWebDVD Class(mswebdvd.dll) Null Pointer Assignment (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
A sucker is born every day (Jos at meltemi.co.uk (Jos Osborne))
Training & Certifications (ltaylor at relevanttechnologies.com (Laura Taylor))
Turkeys should not fish with dynamite (Jos at meltemi.co.uk (Jos Osborne))
Off-Topic: IKEA ownz Microsoft (nion at gmx.net (Nico Golde))
MCSE training question (dufresne at winternet.com (Ron DuFresne))
IE exploit going around on irc (etomcat at freemail.hu (Feher Tamas))
Off-Topic: IKEA ownz Microsoft (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Security / Privacy regulations USA/EU/AU (n30_lists at hotmail.com (n30))
hi (psirt at cisco.com (psirt@...co.com))
[ GLSA 200404-01 ] Insecure sandbox temporary lockfile vulnerabilities in Portage (plasmaroo at gentoo.org (Tim Yamin))
[SECURITY] [DSA 476-1] New heimdal packages fix cross-realm vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.o…)
Adobe Photoshop 8.0 (CS) - Local Path Disclosure and causing I.E D.O.S (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
[SECURITY] [DSA 477-1] New xine-ui packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.d…)
Off-Topic: IKEA ownz Microsoft (guninski at guninski.com (Georgi Guninski))
MCSE training question] (exibar at thelair.com (Exibar))
Security / Privacy regulations USA/EU/AU (pauls at utdallas.edu (Paul Schmehl))
IE exploit going around on irc (thor at pivx.com (Thor Larholm))
Training & Certifications (exibar at thelair.com (Exibar))
is that your privacy? (valdis.kletnieks at vt.edu (valdis.kletnieks@...edu))
[ GLSA 200404-02 ] KDE Personal Information Management Suite Remote Buffer Overflow Vulnerability (aescriva at gentoo.org (Aida Escriva-Sammer))
blaxxun3D(blaxxun Platform) 7 - Remote Buffer Overflow (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Regarding the recent Apple advisories and patches (pakkit at codepiranha.org (shawn duffy))
Panda ActiveScan 5.0 - Remote Buffer Overflow and A Crash(D.O.S) (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Re: Regarding the recent Apple advisories and patches (rsw at jfet.org (Riad S. Wahby))
Re: Regarding the recent Apple advisories and patches (pakkit at codepiranha.org (shawn duffy))
IE exploit going around on irc (jkuperus at planet.nl (Jelmer))
IE exploit going around on irc (thor at pivx.com (Thor Larholm))
IE exploit going around on irc (1 at malware.com (http-equiv@...ite.com))
IE exploit going around on irc (jkuperus at planet.nl (Jelmer))
[SECURITY] [DSA 478-1] New tcpdump packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Re: [FD] FD should block attachments (michael.gale at bluesuperman.com (Michael Gale))

April 7 (70 messages)

Another phishing attack (irwanhadi at phxby.com (Irwan Hadi))
Off-Topic: IKEA ownz Microsoft (sean01 at accnet.com.au (Sean Crawford))
re: (valdis.kletnieks at vt.edu (valdis.kletnieks@...edu))
Mcafee FreeScan - Remote Buffer Overflow and Private Information Disclosure (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Symantec Virus Detection(Free ActiveX) - Remote Buffer Overflow (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Solaris vfs_getvfssw() local kernel exploit (Sam at 0x557.org (Sam))
[TURBOLINUX SECURITY INFO] 07/Apr/2004 (security-announce at turbolinux.co.jp (Turbolinux))
Another phishing attack (etomcat at freemail.hu (Feher Tamas))
Off-Topic: IKEA ownz Microsoft (Jos at meltemi.co.uk (Jos Osborne))
Wiretap or Magic Lantern? (etomcat at freemail.hu (Feher Tamas))
Off-Topic: IKEA ownz Microsoft (sean01 at accnet.com.au (Sean Crawford))
Re: Re: Re: Your document (illectro2001 at yahoo.com (illectro2001@...oo.com))
ron1n phone home, episode 4 (research at bugtraq.org (Bugtraq Security Systems))
Wiretap or Magic Lantern? (fulldisc at ultratux.org (Maarten))
Wiretap or Magic Lantern? (adam at hif.hu (Szilveszter Adam))
Off-Topic: IKEA ownz Microsoft (vladimir at arobas.net (Vladimir Parkhaev))
Symantec, McAfee and Panda ActiveX controls (tk at secunia.com (Thomas Kristensen))
IE exploit going around on irc (lise_moorveld at hotmail.com (Lise Moorveld))
Off-Topic: IKEA ownz Microsoft (Jos at meltemi.co.uk (Jos Osborne))
Wiretap or Magic Lantern? (James.Cupps at sappi.com (James.Cupps@...pi.com))
Wiretap or Magic Lantern? (lists2 at onryou.com (Cael Abal))
Advisory: Multiple Vulnerabilities in Monit (e.legerov at s-quadra.com (Evgeny Legerov))
Off-Topic: IKEA ownz Microsoft (dufresne at winternet.com (Ron DuFresne))
Off-Topic: IKEA ownz Microsoft (guido at gvr.org (Guido van Rooij))
Symantec, McAfee and Panda ActiveX controls (cesarc56 at yahoo.com (Cesar))
Wiretap or Magic Lantern? (fulldisc at ultratux.org (Maarten))
FAT32 input > output = null? (visitbipin at yahoo.com (bipin gautam))
Wiretap or Magic Lantern? (Brent.Colflesh at Ulticom.com (Brent Colflesh))
Off-Topic: IKEA ownz Microsoft (Jos at meltemi.co.uk (Jos Osborne))
Wiretap or Magic Lantern? (Jos at meltemi.co.uk (Jos Osborne))
Symantec, McAfee and Panda ActiveX controls (3APA3A at SECURITY.NNOV.RU (3APA3A))
Wiretap or Magic Lantern? (etomcat at freemail.hu (Feher Tamas))
Wiretap or Magic Lantern? (exibar at thelair.com (Exibar))
Cisco Security Advisory: A default Username and Password in WLSE and HSE devices (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
On PGP (was: Wiretap or Magic Lantern?) (etomcat at freemail.hu (Feher Tamas))
Vulnerability response times -- MS and others (hggdh at comcast.net (hggdh))
Wiretap or Magic Lantern? (on PGP) (etomcat at freemail.hu (Feher Tamas))
Off-Topic: IKEA ownz Microsoft (madsaxon at direcway.com (madsaxon))
Off-Topic: IKEA ownz Microsoft (adam at huntrecruiting.com (Adam))
Wiretap or Magic Lantern? (nodialtone at comcast.net (Byron Copeland))
Wiretap or Magic Lantern? (fulldisc at ultratux.org (Maarten))
On PGP (was: Wiretap or Magic Lantern?) (exibar at thelair.com (Exibar))
Wiretap or Magic Lantern? (caraciola at gmx.net (Caraciola))
Cisco Security Advisory: A default Username and Password in WLSE and HSE devices (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Wiretap or Magic Lantern? (fulldisc at ultratux.org (Maarten))
Wiretap or Magic Lantern? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[inbox] [Fwd: Re: MCSE training question] (purdy at tecman.com (Curt Purdy))
Vulnerability response times -- MS and others (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Wiretap or Magic Lantern? (on PGP) (fulldisc at ultratux.org (Maarten))
Vulnerability response times -- MS and others (tim-security at sentinelchicken.org (Tim))
On PGP (was: Wiretap or Magic Lantern?) (tremaine.lea at sjrb.ca (Tremaine Lea))
On PGP (was: Wiretap or Magic Lantern?) (hoho at tacomeat.net (Colin Slater))
Wiretap or Magic Lantern? (dufresne at winternet.com (Ron DuFresne))
Wiretap or Magic Lantern? (madsaxon at direcway.com (madsaxon))
On PGP (was: Wiretap or Magic Lantern?) (James.Cupps at sappi.com (James.Cupps@...pi.com))
Wiretap or Magic Lantern? (on PGP) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
CAN-2004-0155: The KAME IKE Daemon Racoon does not verify RSA Signatures during Phase 1, allows man-in-the-middle atta… (ralf at spenneberg.net (Ralf Spenneberg…)
CAN-2004-0155: The KAME IKE Daemon Racoon does not verify RSA Signatures during Phase 1, allows man-in-the-middle atta… (lists at spenneberg.org (Ralf Spenneber…)
[OpenPKG-SA-2004.010] OpenPKG Security Advisory (tcpdump) (openpkg at openpkg.org (OpenPKG))
[OpenPKG-SA-2004.011] OpenPKG Security Advisory (sharutils) (openpkg at openpkg.org (OpenPKG))
Metasploit Framework 2.0 Released! (fdlist at digitaloffense.net (H D Moore))
McAfee Freescan ActiveX Information Disclosure [Additional Details & PoC] (sgmasood at yahoo.com (S G Masood))
Root Fu @ Defcon 12 CTF -- Team registration open (dd at ghettohackers.net (dd))
On PGP (was: Wiretap or Magic Lantern?) (kenng at kpmg.com (Ng, Kenneth (US)))
FAT32 input > output = null? (chris at defcon.org (chris))
ROSI (n30_lists at hotmail.com (n30))
Training & Certifications (purdy at tecman.com (Curt Purdy))
Vulnerability response times -- MS and others (kerry at crypt.gen.nz (Kerry Thompson))
SGI Advanced Linux Environment security update #17 (agent99 at sgi.com (SGI Security Coordinator))
FAT32 input > output = null? (hughmann at hotmail.com (Hugh Mann))

April 8 (53 messages)

Zsombor Bolyóczki/KHB/HU is out of the office. (Zsombor.Bolyoczki at khb.hu (Zsombor.Bolyoczki@....hu))
Vulnerability response times -- MS and others (alerta at redsegura.com (Alerta Redsegura))
FAT32 input > output = null? (chris at eff.org (Chris Palmer))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (bugzilla at redhat.com (bugzilla@...hat.com))
On PGP (was: Wiretap or Magic Lantern?) (Ian.Latter at mq.edu.au (Ian Latter))
[inbox] ROSI (purdy at tecman.com (Curt Purdy))
ROSI (gem at rellim.com (Gary E. Miller))
FAT32 input > output = null? (se_cur_ity at hotmail.com (morning_wood))
FAT32 input > output = null? (se_cur_ity at hotmail.com (morning_wood))
ROSI (rienzi at nimrod.com.mx (Darkslaker))
Wiretap or Magic Lantern? (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
FAT32 input > output = null? (measl at mfn.org (J.A. Terranson))
Wiretap or Magic Lantern? (adam at hif.hu (Szilveszter Adam))
On PGP (was: Wiretap or Magic Lantern?) (adam at hif.hu (Szilveszter Adam))
Vulnerability response times -- MS and others (adam at hif.hu (Szilveszter Adam))
Vulnerability response times -- MS and others (rob at sara.nl (Rob Dijkshoorn))
FAT32 input > output = null? (masterfrd at tiscali.be (Frederic Pasteleurs))
FAT32 input > output = null? (Rik.Bobbaers at cc.kuleuven.ac.be (harry))
Vulnerability response times -- MS and others (mark at awe.com (Mark J Cox))
FAT32 input > output = null? (nion at gmx.net (Nico Golde))
have you seen such a spam? (nion at gmx.net (Nico Golde))
Heap Overflow in Oracle 9iAS / 10g Application Server Web Cache (jmig at mail.gr (Ioannis Migadakis))
Re: Symantec Virus Detection(Free ActiveX) - Remote Buffer Overflow, Apr 7 2004 2:22AM (secure at symantec.com (Sym Security))
FAT32 input > output = null? (chris at defcon.org (chris))
Wiretap or Magic Lantern? (Jos at meltemi.co.uk (Jos Osborne))
have you seen such a spam? (tharbad at kaotik.org (Joao Gouveia))
PHRACK #62 CALL FOR PAPERS (rm at segfault.net (Phrack Staff))
Re: [EXPLAIN!] FAT32 input > output = null? (visitbipin at yahoo.com (bipin gautam))
Re: [EXPLAIN!] FAT32 input > output = null? (visitbipin at yahoo.com (bipin gautam))
Re: [EXPLAIN!] FAT32 input > output = null? (visitbipin at yahoo.com (bipin gautam))
Re: [EXPLAIN!] FAT32 input > output = null? (visitbipin at yahoo.com (bipin gautam))
[OpenPKG-SA-2004.012] OpenPKG Security Advisory (fetchmail) (openpkg at openpkg.org (OpenPKG))
Bugfinder Being Indicted As Criminal ("Counterfeiter") in France (nicob at nicob.net (Nicob))
have you seen such a spam? (jimmy.kuijpers at swift.com (KUIJPERS Jimmy))
[waraxe-2004-SA#014 - Cross-Site Scripting aka XSS in AzDGDatingLite] (come2waraxe at yahoo.com (Janek Vind))
[waraxe-2004-SA#015 - Multiple vulnerabilities in NukeCalendar v1.1.a] (come2waraxe at yahoo.com (Janek Vind))
FAT32 input > output = null? (jamie at arpa.com (jamie))
Cisco Security Advisory: Cisco IPSec VPN Services Module Malformed IKE Packet Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Respons…)
1 year to fix a critical vuln [WAS: Heap Overflow in Oracle 9iAS .....] (hughmann at hotmail.com (Hugh Mann))
LNSA-#2004-0009: GNU Automake symbolic link vulnerability (ciaglia at netwosix.org (Vincenzo Ciaglia))
LNSA-#2004-0010: login may leak sensitive data (ciaglia at netwosix.org (Vincenzo Ciaglia))
1 year to fix a critical vuln [WAS: Heap Overflow in Oracle 9iAS .....] (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: ROSI (jleffler at us.ibm.com (Jonathan Leffler))
Heap Overflow in Oracle 9iAS / 10g Application Server Web Cache (cesarc56 at yahoo.com (Cesar))
FAT32 input > output = null? (madsaxon at direcway.com (madsaxon))
FAT32 input > output = null? (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Re: [VulnWatch] Heap Overflow in Oracle 9iAS / 10g Application Server Web Cache (jdyson at bugtraq.org (Jay D. Dyson))
Re: ROSI (yossarian at planet.nl (yossarian))
FAT32 input > output = null? (se_cur_ity at hotmail.com (morning_wood))
ron1n phone home, episode 5 (research at bugtraq.org (Bugtraq Security Systems))
FAT32 input > output = null? (keydet89 at yahoo.com (Harlan Carvey))
ron1n phone home, episode 5 (alerta at redsegura.com (Alerta Redsegura))
[gentoo-announce] [ GLSA 200404-08 ] GNU Automake symbolic link vulnerability (klieber at gentoo.org (Kurt Lieber))

April 9 (30 messages)

MDKSA-2004:027 - Updated ipsec-tools packages fix vulnerability in racoon (security at linux-mandrake.com (Mandrake Linux Security Team))
ron1n phone home, episode 5 (madsaxon at direcway.com (madsaxon))
Netsky Variants (nodialtone at comcast.net (Byron Copeland))
ron1n phone home, episode 5 (nodialtone at comcast.net (Byron Copeland))
Re: ron1n phone home, episode 5 (jason.full-disclosure at compnski.com (jason.full-disclosure@...pnski.com))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (webmaster at securiteinfo.com (webmaster@...uriteinfo.com))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (john_sec_lists at hotmail.com (john_sec_lists@...mail.com))
ron1n phone home, episode 6 (research at bugtraq.org (Bugtraq Security Systems))
FAT32 input > output = null? (nion at gmx.net (Nico Golde))
[ GLSA 200404-11 ] Multiple Vulnerabilities in pwlib (aescriva at gentoo.org (Aida Escriva-Sammer))
List Charter (johnc at grok.org.uk (John Cartwright))
have you seen such a spam? (nion at gmx.net (Nico Golde))
Browser bugs [DoS] ... where will you draw a line? (visitbipin at yahoo.com (bipin gautam))
ron1n phone home, episode 5 (jsage at finchhaven.com (John Sage))
DoS in Crackalaka 1.0.8 (fdonato at autistici.org (Donato Ferrante))
DoS in Rsniff 1.0 (aluigi at altervista.org (Luigi Auriemma))
ron1n phone home, episode 5 (madsaxon at direcway.com (madsaxon))
Re: DoS in Rsniff 1.0 (aluigi at altervista.org (Luigi Auriemma))
Trojan Horse for Mac OS X (alerta at redsegura.com (Alerta Redsegura))
Browser bugs [DoS] ... where will you draw a line? (hjtoi at comcast.net (Heikki Toivonen))
Trojan Horse for Mac OS X (thomasv at mac.com (Thomas Vincent))
Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (hggdh at comcast.net (hggdh))
Re: ANNOUNCE: SecLegal mailing list (hggdh at comcast.net (hggdh))
Trojan Horse for Mac OS X (jlevitsk at joshie.com (Joshua Levitsky))
Trojan Horse for Mac OS X (jlevitsk at joshie.com (Joshua Levitsky))
Trojan Horse for Mac OS X (thomasv at mac.com (Thomas Vincent))
Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...) (nicob at nicob.net (Nicob))
Trojan Horse for Mac OS X (larry at larryseltzer.com (Larry Seltzer))
[gentoo-announce] [ GLSA 200404-09 ] Cross-realm trust vulnerability in Heimdal (klieber at gentoo.org (Kurt Lieber))
[gentoo-announce] [ GLSA 200404-12 ] Scorched 3D server chat box format string vulnerability (klieber at gentoo.org (Kurt Lieber))

April 10 (12 messages)

Trojan Horse for Mac OS X (jlevitsk at joshie.com (Joshua Levitsky))
Trojan Horse for Mac OS X (larry at larryseltzer.com (Larry Seltzer))
Trojan Horse for Mac OS X (mlande at bellsouth.net (Mary Landesman))
Trojan Horse for Mac OS X (jlevitsk at joshie.com (Joshua Levitsky))
Trojan Horse for Mac OS X (larry at larryseltzer.com (Larry Seltzer))
Trojan Horse for Mac OS X (mlande at bellsouth.net (Mary Landesman))
Browser bugs [DoS] ... where will you draw a line? (visitbipin at yahoo.com (bipin gautam))
Trojan Horse for Mac OS X (thomasv at mac.com (Thomas Vincent))
Fwd: Warning again (webmaster at securiteinfo.com (webmaster@...uriteinfo.com))
Trojan Horse for Mac OS X (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
Debunking the threat of the Mac OS X Trojan (thomasv at mac.com (Thomas Vincent))
Debunking the threat of the Mac OS X Trojan (thomasv at mac.com (Thomas Vincent))

April 11 (9 messages)

Listas de Seguridad (alerta at redsegura.com (Alerta Redsegura))
Cisco LEAP exploit tool... (joel at helgeson.com (Joel R. Helgeson))
Cisco LEAP exploit tool... (PerrymonJ at bek.com (Perrymon, Josh L.))
Cisco LEAP exploit tool... (rafaelnunez at cantv.net (Rafael Núñez))
Browser bugs [DoS] - Do they bite? (se_cur_ity at hotmail.com (morning_wood))
Cisco LEAP exploit tool... (mmo at remote-exploit.org (mmo@...ote-exploit.org))
msblast variants (isec at europe.com (Willem Koenings))
[inbox] msblast variants (exibar at thelair.com (Exibar))
Monit <= 4.2 Remote Root Exploit (eos-india at linuxmail.org (Eye on Security India))

April 12 (7 messages)

Re: Failure (jeffrey.adams at hqda.army.mil (jeffrey.adams@...a.army.mil))
BS7799 Gap Analysis (rizwanalikhan74 at yahoo.com (Rizwan Ali Khan))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (hobbit at avian.org (hobbit@...an.org))
UPDATE: Cisco Security Notice: Dictionary Attack on Cisco LEAP Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
EXPLOIT for eMule <= 0.42d IRC Buffer Overflow ! (elvi52001 at yahoo.com (- ElviS -))
.Net Version of Cisco Tool (pwicks at oxygen.com (James Patterson Wicks))
.Net Version of Cisco Tool (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

April 13 (19 messages)

Yahoo! Messenger 5.6 & Trillian (All Versions) - User Credential Disclosure Vulnerability (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
.Net Version of Cisco Tool (otter_e at yahoo.com (Otter E))
For Astronautics Day: Scam - a truly cosmic problem (etomcat at freemail.hu (Feher Tamas))
Which worm? (bobsagart500 at hotmail.com (bob sagart))
Yahoo! Messenger 5.6 & Trillian (All Versions) - User Credential Disclosure Vulnerability (3APA3A at SECURITY.NNOV.RU (3APA3A))
Which worm? (jlacour at zonelabs.com (John LaCour))
Which worm? (api at epost.de (Axel Pettinger))
Decode Messenger conversations from logs (dispacct at hotmail.com (Dean))
Decode Messenger conversations from logs (rms at computerbytesman.com (Richard M. Smith))
Which worm? (mducharme at cybergeneration.com (Maxime Ducharme))
iDEFENSE Security Advisory 04.13.04 - Microsoft Help and Support Center Argument Injection Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@…)
New Microsoft Patches have just been published on the web! (exibar at thelair.com (Exibar))
Microsoft Help and Support Center argument injection vulnerability (jouko at iki.fi (Jouko Pynnonen))
ron1n phone home, episode 7 (research at bugtraq.org (Bugtraq Security Systems))
EEYE: Microsoft DCOM RPC Race Condition (mmaiffret at eeye.com (Marc Maiffret))
EEYE: Windows Expand-Down Data Segment Local Privilege Escalation (mmaiffret at eeye.com (Marc Maiffret))
EEYE: Windows Local Security Authority Service Remote Buffer Overflow (mmaiffret at eeye.com (Marc Maiffret))
EEYE: Windows VDM TIB Local Privilege Escalation (mmaiffret at eeye.com (Marc Maiffret))
EEYE: Microsoft DCOM RPC Memory Leak (mmaiffret at eeye.com (Marc Maiffret))

April 14 (63 messages)

4 new Microsoft patches to close 20 vulnerabilities (thor at pivx.com (Thor Larholm))
Decode Messenger conversations from logs (full-disclosure at royds.net (Bill Royds))
LSASS.EXE Remote Buffer Overflow Investigation (r_i_c_h_lists at btopenworld.com (Richard Maudsley))
Eudora 6.0.3 nested MIME DoS (psz at maths.usyd.edu.au (Paul Szabo))
Which worm? (bobsagart500 at hotmail.com (bob sagart))
Cisco LEAP exploit tool... (TheTom at unixisnot4dummies.org (Thomas))
Cisco LEAP exploit tool... (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Decode Messenger conversations from logs (dispacct at hotmail.com (Dean))
NSFOCUS SA2004-01 : DoS Vulnerability in Microsoft Windows SPNEGO Protocol Decoding (security at nsfocus.com (NSFOCUS Security Team))
DEF CON 12 WarDriving Contest Announced (chris at defcon.org (chris))
MS04-011 SSL Remote DoS PoC (dbarroso at s21sec.com (David Barroso Berrueta))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (support at mmicman.com (Edward W. Ray))
[RHSA-2004:154-01] Updated CVS packages fix security issue (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2004:158-01] Updated cadaver package fixes security vulnerability in neon (bugzilla at redhat.com (bugzilla@...hat.com))
Cisco LEAP exploit tool... (dufresne at winternet.com (Ron DuFresne))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (draht at suse.de (Roman Drahtmueller))
[SECURITY] [DSA 479-1] New Linux 2.4.18 packages fix local root exploit (source+alpha+i386+powerpc) (debian-security-announce at lists.debian.org (debian-securi…)
[inbox] Re: Cisco LEAP exploit tool... (purdy at tecman.com (Curt Purdy))
[SECURITY] [DSA 480-1] New Linux 2.4.17 and 2.4.18 packages fix local root exploit (hppa) (debian-security-announce at lists.debian.org (debian-security-announc…)
[inbox] Re: Cisco LEAP exploit tool... (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
[SECURITY] [DSA 481-1] New Linux 2.4.17 packages fix local root exploit (ia64) (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
The new Microsoft math: 1 patch for 14 vul nerabilities, MS04-011 (Kim.Oppalfens at azlan.be (Kim Oppalfens))
[SECURITY] [DSA 482-1] New Linux 2.4.17 packages fix local root exploit (source+powerpc/apus+s390) (debian-security-announce at lists.debian.org (debian-securit…)
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (support at mmicman.com (Edward W. Ray))
[SECURITY] [DSA 483-1] New mysql packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (exibar at thelair.com (Exibar))
SUSE Security Announcement: cvs (SuSE-SA:2004:008) (krahmer at suse.de (Sebastian Krahmer))
SUSE Security Announcement: Linux Kernel (SuSE-SA:2004:009) (thomas at suse.de (Thomas Biege))
1 patch for 1 vulnerabiliy for Linux and BSD? gunna try and sell us a bridge now too? (exibar at thelair.com (Exibar))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (tim-security at sentinelchicken.org (Tim))
MDKSA-2004:028 - Updated cvs packages fix remotely exploitable vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (dhollis at davehollis.com (David T Hollis))
MDKSA-2004:029 - Updated kernel packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (purdy at tecman.com (Curt Purdy))
[inbox] Re: Cisco LEAP exploit tool... (kenng at kpmg.com (Ng, Kenneth (US)))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (james.burnes at gwl.com (Burnes, James))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (exibar at thelair.com (Exibar))
Cisco LEAP exploit tool... (pauls at utdallas.edu (Paul Schmehl))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (jsage at finchhaven.com (John Sage))
1 patch for 1 vulnerabiliy for Linux and BSD? gunna try and sell us a bridge now too? (jsage at finchhaven.com (John Sage))
The new Microsoft math: 1 patch for 14 vul nerabilities, MS04-011 (esper at sherohman.org (Dave Sherohman))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (seth at tautology.org (Seth Alan Woolley))
[OpenPKG-SA-2004.013] OpenPKG Security Advisory (cvs) (openpkg at openpkg.org (OpenPKG))
Cisco LEAP exploit tool... (WilliamsJonathan at JohnDeere.com (Williams Jon))
Cisco LEAP exploit tool... (mmo at remote-exploit.org (mmo@...ote-exploit.org))
The new Microsoft math: 1 patch for 14 vul nerabilities, MS04-011 (tremaine.lea at sjrb.ca (Tremaine Lea))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (madsaxon at direcway.com (madsaxon))
1 patch for 1 vulnerabiliy for Linux and BSD? gunna try and sell us a bridge now too? (exibar at thelair.com (Exibar))
Cisco LEAP exploit tool... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Cisco LEAP exploit tool... (dufresne at winternet.com (Ron DuFresne))
The new Microsoft math: 1 patch for 14 vul nerabilities, MS04-011 (dufresne at winternet.com (Ron DuFresne))
The new Microsoft math: 1 patch for 14 vul nerabilities, MS04-011 (tremaine.lea at sjrb.ca (Tremaine Lea))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (pauls at utdallas.edu (Paul Schmehl))
Cisco LEAP exploit tool... (pauls at utdallas.edu (Paul Schmehl))
1 patch for 1 vulnerabiliy for Linux and BSD? gunna try and sell us a bridge now too? (jluehr at gmx.net (Jan Lühr))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (exibar at thelair.com (Exibar))
[OpenPKG-SA-2004.014] OpenPKG Security Advisory (mysql) (openpkg at openpkg.org (OpenPKG))
iDEFENSE Security Advisory 04.14.04: Buffer Overflow in ISO9660 File System Component of Linux Kernel (idlabs-advisories at idefense.com (idlabs-advisories@ide…)
Cisco LEAP exploit tool... (dufresne at winternet.com (Ron DuFresne))
[SECURITY] [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386) (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
Re: 1 patch for 1 vulnerabiliy for Linux and BSD? gunna try and sell us a bridge now too? (madduck at madduck.net (martin f krafft))
[SCAN Associates Sdn Bhd Security Advisory] Postnuke v 0.726 and below SQL injection (pokleyzz at scan-associates.net (pokley))
[gentoo-announce] [ GLSA 200404-13 ] CVS Server and Client Vulnerabilities (klieber at gentoo.org (Kurt Lieber))

April 15 (58 messages)

LSASS.EXE Remote Buffer Overflow Investigation (techlist at kc.rr.com (Jeff Schreiner))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (geoincidents at getinfo.org (Geoincidents))
Cisco LEAP exploit tool... (techlist at kc.rr.com (Jeff Schreiner))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (dave at horsfall.org (Dave Horsfall))
Utility Manager - Failure to drop system privileges (brett.moore at security-assessment.com (Brett Moore))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (dave at immunitysec.com (Dave Aitel))
the bot 200.106.25.197 (marcchabot at marcchabot.com (Marc Chabot))
MDKSA-2004:030 - Updated tcpdump packages fix several vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (ben at lanwest.com.au (Benjamin Meade))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (dislists at updegrove.net (Rick Updegrove))
Cisco LEAP exploit tool... (dufresne at winternet.com (Ron DuFresne))
Cisco LEAP exploit tool... (dave at horsfall.org (Dave Horsfall))
[SECURITY] [DSA 484-1] New xonix packages fix failure to drop privileges (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (geoincidents at getinfo.org (Geoincidents))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (nodialtone at comcast.net (Byron Copeland))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (support at mmicman.com (Edward W. Ray))
RE: 1 patch for 1 vulnerabiliy for Linux and BSD? gunna try and sell us a bridge now too? (support at mmicman.com (Edward W. Ray))
Cisco LEAP exploit tool... (techlist at kc.rr.com (Jeff Schreiner))
Cisco LEAP exploit tool... (kf_lists at secnetops.com (KF (lists)))
[SECURITY] [DSA 485-1] New ssmtp packages fix format string vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
The new Microsoft math: 1 patch for 14 vulnerabilities, (bugtraq at cgisecurity.net (bugtraq@...security.net))
Cisco LEAP exploit tool... (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Cisco LEAP exploit tool... (id3nt at hush.com (id3nt@...h.com))
RainbowCrack patch for Mac OS X (bgt at chrootlabs.org (bgt))
Cisco LEAP exploit tool... (nodialtone at comcast.net (Byron Copeland))
Cisco LEAP exploit tool... (frank at knobbe.us (Frank Knobbe))
Cisco LEAP exploit tool... (nodialtone at comcast.net (Byron Copeland))
Cisco LEAP clueless exploit tool... (se_cur_ity at hotmail.com (morning_wood))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (hughmann at hotmail.com (Hugh Mann))
Cisco LEAP exploit tool... (b.griffin at cqu.edu.au (Brad Griffin))
Cisco LEAP exploit tool... (sxpert at esitcom.org (Amaury Jacquot))
Cisco LEAP exploit tool... (chris at improbable.org (Chris Adams))
YAWN (Was Microsoft math) (andrew at dev.bigfishinternet.co.uk (Andrew Aris))
[RHSA-2004:159-01] Updated Subversion packages fix security vulnerability in neon (bugzilla at redhat.com (bugzilla@...hat.com))
exploiting off by one (J.Hickory at gmx.net (Joe Hickory))
RE: Risk between discovery and patch (was: The new Microsoft math) (ben at iagu.net (Ben Nagy))
AW: YAWN (Was Microsoft math) (sascha.mettler at rtc.ch (Mettler Sascha))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (geoincidents at getinfo.org (Geoincidents))
RE: Risk between discovery and patch (dave at immunitysec.com (Dave Aitel))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (ageddyn at minitru.org (Dkr. Armand Geddyn))
Which worm? (isec at europe.com (Willem Koenings))
exploiting off by one (Jason.Deckard at webmd.net (Deckard, Jason))
The new Microsoft math: 1 patch for 14 vul nerabilities, MS04-011 (kenng at kpmg.com (Ng, Kenneth (US)))
Which worm? (mducharme at cybergeneration.com (Maxime Ducharme))
re: Which worm? (isec at europe.com (Willem Koenings))
[SHATTER Team Security Alert] Microsoft Windows Utility Manager Vulnerability (vrathod at appsecinc.com (Vivek Rathod (Application Security, Inc.)))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (nicob at nicob.net (Nicob))
SCT javascript execution vulnerability (spiffomatic64 at hotmail.com (spiffomatic 64))
[inbox] Re: Cisco LEAP exploit tool... (purdy at tecman.com (Curt Purdy))
Cisco Security Notice: Cisco IPsec VPN Implementation Group Password Usage Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Response T…)
[inbox] RE: Cisco LEAP exploit tool... (purdy at tecman.com (Curt Purdy))
iDEFENSE Security Advisory 04.15.04: RealNetworks Helix Universal Server Denial of Service Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@…)
FreeBSD Security Advisory FreeBSD-SA-04:07.cvs (security-advisories at freebsd.org (FreeBSD Security Advisories))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (fiorellino at despammed.com (FlowerPower))
Which worm? (ws at informatik.uni-bremen.de (Wolfram Schroeder))
Cisco LEAP exploit tool... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Which worm? (se_cur_ity at hotmail.com (morning_wood))
the bot 200.106.25.197 (nion at gmx.net (Nico Golde))

April 16 (76 messages)

RE: The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (coley at mitre.org (Steven M. Christey))
Which worm? (hughmann at hotmail.com (Hugh Mann))
Cisco LEAP exploit tool... (dave at horsfall.org (Dave Horsfall))
Cisco LEAP exploit tool... (techlist at kc.rr.com (Jeff Schreiner))
Mambo 4.5 4.6 eaea xploit (varf at gulbcs.org (Yo_Soy))
I think I have the new RPC Dcom sploit. (SirSlappy at cox-internet.com (Jarrod SMith))
omg! (SirSlappy at cox-internet.com (Jarrod SMith))
Cisco LEAP exploit tool... (raistlin at tacorp.net (Jason Slagle))
omg! (c4isr at shell.reverse.net (s0le))
omg! (SirSlappy at cox-internet.com (Jarrod SMith))
UPDATE: Cisco Security Notice: Dictionary Attack on Cisco LEAP Vulnerability (christoph.gruber at wave-solutions.com (Christoph Gruber))
mi2g.com - trivial vulnerabilities (mi2g at hushmail.com (mi2g@...hmail.com))
I think I have the new RPC Dcom sploit. (dbailey27 at ameritech.net (Don Bailey))
Ms Patch 837001 - problems? (Jos at meltemi.co.uk (Jos Osborne))
The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011 (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Hi! Antiviruses Comparison - A Little Research Results (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
(no subject) (dkumar at sapient.com (Dinesh Kumar))
OT microsoft "feature" (dante at alighieri.org (Davide Del Vecchio))
OT microsoft "feature" (oconstantin at bitdefender.com (Ovidiu Constantin))
OT microsoft "feature" (steve at energistic.com (Steve Ames))
OT microsoft "feature" (full-disclosure at camperquake.de (Ralf Ertzinger))
OT microsoft "feature" (svgn at orbid.be (Serge van Ginderachter (svgn)))
Hi! Antiviruses Comparison - A Little Research Results (etomcat at freemail.hu (Feher Tamas))
OT microsoft "feature" (jeffdick at covirt.com (Jeffrey A.K. Dick))
OT microsoft "feature" (John.Herbert at ins.com (John.Herbert@....com))
OT microsoft "feature" (fw at deneb.enyo.de (Florian Weimer))
Hi! Antiviruses Comparison - A Little Research Results (3APA3A at SECURITY.NNOV.RU (3APA3A))
OT microsoft "feature" (sacha-fulldisclosure at sjbcom.com (Sacha J. Bernstein))
OT microsoft "feature" (research at bugtraq.org (Bugtraq Security Systems))
OT microsoft "feature" (raymond at dyn.org (Raymond Morsman))
OT microsoft "feature" (bjshedwick at yahoo.com (Bradford Shedwick))
OT microsoft "feature" (blancher at cartel-securite.fr (Cedric Blancher))
SCT javascript execution vulnerability (spiffomatic64 at hotmail.com (spiffomatic64@...mail.com))
Hi! Antiviruses Comparison - A Little Research Results (sean01 at accnet.com.au (Sean Crawford))
OT microsoft "feature" (lyne.bourque at senecac.on.ca (Lyne Bourque))
omg! (SirSlappy at cox-internet.com (Jarrod SMith))
OT microsoft "feature" (lcamtuf at ghettot.org (Michal Zalewski))
Hi! Antiviruses Comparison - A Little Research Results (3APA3A at SECURITY.NNOV.RU (3APA3A))
OT microsoft "feature" (security at centrodiascolto.it (Paolo Mattiangeli))
OT microsoft "feature" (lists at g-clef.net (Aaron Gee-Clough))
OT microsoft "feature" (bjshedwick at yahoo.com (Bradford Shedwick))
OT microsoft "feature" (tbond at webmethods.com (Tim Bond))
[OpenPKG-SA-2004.015] OpenPKG Security Advisory (ethereal) (openpkg at openpkg.org (OpenPKG))
OT microsoft "feature" (Jason.Ross at GlobalCrossing.com (Ross, Jason))
OT microsoft "feature" (rgerhards at hq.adiscon.com (Rainer Gerhards))
Hi! Antiviruses Comparison - A Little Research Results (exibar at thelair.com (Exibar))
OT microsoft "feature" (t_ellinghaus at gmx.de (Tobias Ellinghaus))
Re: Hi! Antiviruses Comparison - A Little Research Results (etomcat at freemail.hu (Feher Tamas))
OT microsoft "feature" (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Cisco LEAP exploit tool... (ka at pacific.net (Ken Anderson (Pacific Internet)))
omg! (dufresne at winternet.com (Ron DuFresne))
Hi! Antiviruses Comparison - A Little Research Results (tobias at weisserth.de (Tobias Weisserth))
[OpenPKG-SA-2004.016] OpenPKG Security Advisory (neon) (openpkg at openpkg.org (OpenPKG))
Cisco Security Notice (malacoda23 at hushmail.com (malacoda23@...hmail.com))
MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003 (technoboy at packetswar.org (Technoboy))
OT microsoft "feature" (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
[inbox] Re: Hi! Antiviruses Comparison - A Little Research Results (purdy at tecman.com (Curt Purdy))
[inbox] Hi! Antiviruses Comparison - A Little Research Results (purdy at tecman.com (Curt Purdy))
*plonk* omg! (jsage at finchhaven.com (John Sage))
[inbox] RE: Cisco LEAP exploit tool... (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
[inbox] RE: Cisco LEAP exploit tool... (purdy at tecman.com (Curt Purdy))
Antivirus Comparison (javier_falbo at hotmail.com (javier_falbo@...mail.com))
OT microsoft "feature" (root at energistic.com (Charlie Root))
MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003 (Mike at MichaelEvanchik.com (Michael Evanchik))
Re: "Delete anti-virus and firewall software" --Microsoft (hggdh at comcast.net (hggdh))
Office XP Update: March 23, 2004 (insecure at ameritech.net (insecure))
MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003 (boklm at mars-attacks.org (nicolas vigier))
NEW backdoor in X-Micro WLAN 11b Broadband Router (xmicro at risko.hu (RISKO Gergely))
Office XP Update: March 23, 2004 (frank at knobbe.us (Frank Knobbe))
Re: "Delete anti-virus and firewall software" --Microsoft (tharbad at kaotik.org (Joao Gouveia))
SCT javascript execution vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
OT microsoft "feature" (ggilliss at netpublishing.com (Gregory A. Gilliss))
Hi! Antiviruses Comparison - A Little Research Results (ggilliss at netpublishing.com (Gregory A. Gilliss))
RE: MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003 (thor at pivx.com (Thor Larholm))
[inbox] RE: Cisco LEAP exploit tool... (piranha at dixinet.com (marc))
void.at - neon format string bugs (greuff at void.at (Thomas Wana))

April 17 (21 messages)

Cisco LEAP exploit tool... (dufresne at winternet.com (Ron DuFresne))
RE: MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003 (technoboy at packetswar.org (Technoboy))
Re: SCT javascript execution vulnerability (jnielsen at sct.com (jnielsen@....com))
While we're on the subject of Microsoft and their patches... (lists2 at onryou.com (Cael Abal))
OT microsoft "feature" (aehlers at comcast.net (Austin Ehlers))
[SECURITY] [DSA 486-1] New cvs packages fix multiple vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA 487-1] New neon packages fix format string vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
[SECURITY] [DSA 488-1] New logcheck packages fix insecure temporary directory (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
[SECURITY] [DSA 431-2] New perl packages fix information leak in suidperl (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.o…)
[inbox] Re: Hi! Antiviruses Comparison - A Little Research Results (3APA3A at SECURITY.NNOV.RU (3APA3A))
[SCSA-028] Nuked-Klan Multiple Vulnerabilities (advisory at security-corporation.com (advisory@...urity-corporation.com))
Network Intelligence Advisory - Denial of Service Vulnerability in ColdFusion MX (cto at nii.co.in (K. K. Mookhey))
Internet Explorer XSS published unpatched in SP1 AND SP2 (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
[inbox] Re: Hi! Antiviruses Comparison - A Little Research Results (purdy at tecman.com (Curt Purdy))
Norton AntiVirus nested file manual scan bypass..... (visitbipin at yahoo.com (bipin gautam))
[SECURITY] [DSA 489-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel) (debian-security-announce at lists.debian.org (debian-security-announce@li…)
Suse 9.0 Multiple gid = 20(games) vulnz (narkotix at linuxmail.org (narko tix))
[SECURITY] [DSA 490-1] New Zope packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA 491-1] New Linux 2.4.19 packages fix local root exploit (mips) (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
Hi! Antiviruses Comparison - A Little Research Results (dan at losangelescomputerhelp.com (Daniel H. Renner))
Re: "Delete anti-virus and firewall software" --Microsoft (dan at losangelescomputerhelp.com (Daniel H. Renner))

April 18 (23 messages)

Norton AntiVirus nested file manual scan bypass.....[silent patch???] (visitbipin at yahoo.com (bipin gautam))
Super Worm (lists at itsecurity3.its.uiowa.edu (lists@...ecurity3.its.uiowa.edu))
Super Worm (jsage at finchhaven.com (John Sage))
Super Worm (visitbipin at yahoo.com (bipin gautam))
Super Worm (hescominsoon at emmanuelcomputerconsulting.com (William Warren))
Super Worm (isec at europe.com (Willem Koenings))
Super Worm (isec at europe.com (Willem Koenings))
Super Worm (sean01 at accnet.com.au (Sean Crawford))
Super Worm (niekbaakman at home.nl (Niek Baakman))
LNSA-#2004-0011: CVS Server and Client Vulnerabilities (ciaglia at netwosix.org (Vincenzo Ciaglia))
LNSA-#2004-0012: Multiple format string vulnerabilities in neon (ciaglia at netwosix.org (Vincenzo Ciaglia))
Any thoughts on War-Googling? (full-disclosure at illuminated.nl (Aschwin Wesselius))
Any thoughts on War-Googling? (indianz at indianz.ch (IndianZ))
[BUG-CORRECTION] IISShield "Server" header costumization (thalm at netcabo.pt (Tiago Halm))
RE: Full-Disclosure Super Worm (randallm at fidmail.com (RandallM))
Re: Any thoughts on War-Googling? (long and inflammatory) (lcamtuf at ghettot.org (Michal Zalewski))
Any thoughts on War-Googling? (fabio_weissert at hotmail.com (Fabio Weissert))
Any thoughts on War-Googling? (yossarian at planet.nl (yossarian))
Any thoughts on War-Googling? (ggilliss at netpublishing.com (Gregory A. Gilliss))
Any thoughts on War-Googling? (r00t at online.ie (Mark Fagan))
[waraxe-2004-SA#019 - Critical sql injection bug in Phorum 3.4.7] (come2waraxe at yahoo.com (Janek Vind))
[waraxe-2004-SA#020 - Multiple vulnerabilities in PostNuke 0.726 Phoenix] (come2waraxe at yahoo.com (Janek Vind))
Hi! Antiviruses Comparison - A Little ResearchResults (chows at ozemail.com.au (Gregh))

April 19 (31 messages)

Any thoughts on War-Googling? (full-disclosure at illuminated.nl (Aschwin Wesselius))
Any thoughts on War-Googling? (get at illuminated.nl (Aschwin Wesselius))
Super Worm (bruno_fob at bellsouth.net (bruno_fob))
Any thoughts on War-Googling? (jeremiah at nur.net (Jeremiah Cornelius))
[SECURITY] [DSA 492-1] New iproute packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
RE: Any thoughts on War-Googling? (fd at postmaster.co.uk (jay jay))
Super Worm (prandal at herefordshire.gov.uk (Randal, Phil))
Any thoughts on War-Googling? (tyler at r4nt.com (Tyler Thomson))
RE: MS04-011 Break SSL support in IE 6.0.3790.0 with Windows 2003 (Jos at meltemi.co.uk (Jos Osborne))
Super Worm (sean01 at accnet.com.au (Sean Crawford))
Zaep AntiSpam Cross Site Scripting (aviram at beyondsecurity.com (Aviram Jenik))
Super Worm (full-disclosure at illuminated.nl (Aschwin Wesselius))
KPhone STUN DoS (Malformed STUN Packets) (aviram at beyondsecurity.com (Aviram Jenik))
BitDefender Scan Online(ActiveX) - Remote File Download & Execute & Private Information Disclosure (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Any thoughts on War-Googling? (jayjayjay at gmx.de (J.J.))
DoS in NETFile FTP/Web Server (fdonato at autistici.org (Donato Ferrante))
Norton AntiVirus nested file manual scan bypass..... (lists at natch.net (natch))
Super Worm (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
MDKSA-2004:031 - Updated utempter packages fix several vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Super Worm (purdy at tecman.com (Curt Purdy))
Super Worm (obdasklappt at yahoo.de (Sven Fischer))
Super Worm (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Super Worm (r_i_c_h_lists at btopenworld.com (Richard Maudsley))
Re: [FD] Super Worm (A.J.Caines at halplant.com (Andrew J Caines))
Eudora 6.1 is evil (psz at maths.usyd.edu.au (Paul Szabo))
Re: [FD] Super Worm (A.J.Caines at halplant.com (Andrew J Caines))
Super Worm (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Super Worm (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[gentoo-announce] [ GLSA 200404-15 ] XChat 2.0.x SOCKS5 Vulnerability (klieber at gentoo.org (Kurt Lieber))
[gentoo-announce] [ GLSA 200404-16 ] Multiple new security vulnerabilities in monit (klieber at gentoo.org (Kurt Lieber))
[gentoo-announce] [ GLSA 200404-14 ] Multiple format string vulnerabilities in cadaver (klieber at gentoo.org (Kurt Lieber))

April 20 (46 messages)

Super Worm (full-disclosure at illuminated.nl (Aschwin Wesselius))
Re: [FD] Super Worm (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
MDKSA-2004:032 - Updated libneon packages fix temporary file insecurities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:033 - Updated xine-ui packages fix temporary file insecurities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:034 - Updated MySQL packages fix temporary file insecurities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:035 - Updated samba packages fix privilege escalation vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
RE: Squirrelmail Chpasswod bof (alerta at redsegura.com (Alerta Redsegura))
Super Worm (pauls at utdallas.edu (Paul Schmehl))
Re: [FD] Super Worm (ggilliss at netpublishing.com (Gregory A. Gilliss))
Re: [FD] Super Worm (dave at horsfall.org (Dave Horsfall))
BitDefender Scan Online(ActiveX) - Remote File Download & Execute & Private Information Disclosure (oconstantin at bitdefender.com (Ovidiu Constantin))
Linux kernel setsockopt MCAST_MSFILTER integer overflow (cliph at isec.pl (Wojciech Purczynski))
Serial Console brute force (James at vortechhosting.com (James Ashton))
Serial Console brute force (Simon.Hailstone at orthogonsystems.com (Simon Hailstone))
Serial Console brute force (andrewg at d2.net.au (andrewg@...net.au))
Super Worm (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Re: [FD] Super Worm (eballen1 at qwest.net (Bruce Ediger))
Serial Console brute force (James at vortechhosting.com (James Ashton))
Re: [FD] Super Worm (dave at horsfall.org (Dave Horsfall))
Super Worm (Jos at meltemi.co.uk (Jos Osborne))
Legacy secure token service (fclark at lanl.gov (Clark Frank T.))
Hotmail & Passport (.NET Accounts) Vulnerability (careverga7 at hotmail.com (fernando escobar))
Core Internet Vulnerable - News at 11:00 (cristjc at comcast.net (Crist J. Clark))
Passwords for Chocolate! (jeremiah at nur.net (Jeremiah Cornelius))
Core Internet Vulnerable - News at 11:00 (david.vincent at mightyoaks.com (David Vincent))
Core Internet Vulnerable - News at 11:00 (exibar at thelair.com (Exibar))
Core Internet Vulnerable - News at 11:00 (dave.cawley at adelphia.com (Dave D. Cawley))
Core Internet Vulnerable - News at 11:00 (SturmM at honi.com (SturmM))
Core Internet Vulnerable - News at 11:00 (lcamtuf at ghettot.org (Michal Zalewski))
Hotmail & Passport (.NET Accounts) Vulnerability (jbistogood at hotmail.com (Jon))
Passwords for Chocolate! (cheekypeople at sec33.com (Lee))
NISCC Vulnerability Advisory 236929: Vulnerability Issues in TCP (was Re: Core Internet Vulnerable - News at 11:00) (chrislist at sinetimore.com (Chris McCullo…)
Hotmail & Passport (.NET Accounts) Vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Core Internet Vulnerable - News at 11:00 (mbs at mistrealm.com (Michael Schaefer))
Core Internet Vulnerable - News at 11:00 (RCompton at chartercom.com (Compton, Rich))
Core Internet Vulnerable - News at 11:00 (exibar at thelair.com (Exibar))
Core Internet Vulnerable - News at 11:00 (hackerwacker at cybermesa.com (james))
Core Internet Vulnerable - News at 11:00 (alerta at redsegura.com (Alerta Redsegura))
Core Internet Vulnerable - News at 11:00 (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
Core Internet Vulnerable - News at 11:00 (frank at knobbe.us (Frank Knobbe))
Re: Full-Disclosure -- confirmation of subscription -- request 462110 (wlurie at hotmail.com (Warren Hotmail))
Core Internet Vulnerable - News at 11:00 (ggilliss at netpublishing.com (Gregory A. Gilliss))
IETF Draft - Fix for TCP vulnerability (dbounds at intrusense.com (Darren Bounds))
Cisco Security Advisory: TCP Vulnerabilities in Multiple IOS Based Cisco Products (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Cisco Security Advisory: TCP Vulnerabilities in Multiple Non-IOS-Based Cisco Products (psirt at cisco.com (Cisco Systems Product Security Incident Response Team…)
Cisco Security Advisory: Vulnerabilities in SNMP Message Processing (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))

April 21 (30 messages)

Core Internet Vulnerable - News at 11:00 (jade.deane at riven.net (Jade E. Deane))
Linux kernel setsockopt MCAST_MSFILTER integer overflow proof of concept code (spam at cr0.org (Julien TINNES))
Passwords for Chocolate! (nodialtone at comcast.net (Byron Copeland))
was Core Internet Vulnerable - News at 11:00 -= Your message to Full-Disclosure awaits moderator approval (smenard at nbnet.nb.ca (Steve Menard))
was Core Internet Vulnerable - News at 11:00 -= Your message to Full-Disclosure awaits moderator approval (nodialtone at comcast.net (Byron Copeland))
Re: Hotmail & Passport (.NET Accounts) Vulnerability (bhattsharma at yahoo.co.in (anirudh bhatt))
Passwords for Chocolate! (adam at hif.hu (Szilveszter Adam))
Core Internet Vulnerable - News at 11:00 (full-disclosure at FreiNet.de (Alexander Bochmann))
Core Internet Vulnerable - IETF Draft Fix for RFC793 (etomcat at freemail.hu (Feher Tamas))
.hash= (fulldis at it97.dyndns.org (fd))
Core Internet Vulnerable - News at 11:00 (Jos at meltemi.co.uk (Jos Osborne))
答复: Core Internet Vulnerable - IETF Draft Fix for RFC793 (Jie_Tang at Dell.com (Jie_Tang@...l.com))
[SECURITY] [DSA 493-1] New xchat packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
THCIISSLame exploit (johncybpk at gmx.net (johncybpk@....net))
was Core Internet Vulnerable - News at 11:00 -= Your message to Full-Disclosure awaits moderator approval (m0rtis at adelphia.net (Mortis))
NetStumbler 0.4.0 Released (fwd) (chris at defcon.org (chris))
TCP vulnerability details link (husky_cat at yahoo.com (Andrew Morris))
.hash= (fulld-j at digitaldefense.be (Joris De Donder))
fake (psirt at cisco.com (psirt@...co.com))
[RHSA-2004:166-01] Updated kernel packages resolve security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
Site changes (bugzilla at redhat.com (bugzilla@...hat.com))
NetBSD Security Advisory 2004-005: Denial of service vulnerabilities in OpenSSL (security-officer at netbsd.org (NetBSD Security-Officer))
NetBSD Security Advisory 2004-006: TCP protocol and implementation vulnerability (security-officer at netbsd.org (NetBSD Security-Officer))
EEYE: Yahoo! Mail Account Filter Overflow Hijack (dcopley at eeye.com (Drew Copley))
Vulnerabilities in long-lived TCP connections on SGI systems (agent99 at sgi.com (SGI Security Coordinator))
[waraxe-2004-SA#021 - Multiple vulnerabilities in phprofession 2.5 module for PostNuke] (come2waraxe at yahoo.com (Janek Vind))
[waraxe-2004-SA#022 - Multiple vulnerabilities in PostNuke 0.726 Phoenix - part 2] (come2waraxe at yahoo.com (Janek Vind))
Core Internet Vulnerable - IETF Draft Fix for RFC793 (bla at darton.edu (Brian Anderson))
MDKSA-2004:036 - Updated xchat packages fix remote vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:031-1 - Updated utempter packages fix several vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))

April 22 (27 messages)

SGI Advanced Linux Environment security update #18 (agent99 at sgi.com (SGI Security Coordinator))
RE: ZA Security Hole (Product-Security at zonelabs.com (Zone Labs Product Security))
pisg XSS (shr3kst3r at hushmail.com (shr3kst3r@...hmail.com))
TCP/BGP vulnerability (clarke at craftedpackets.net (Nigel Clarke))
Norton AntiVirus nested file manual scan bypass..... (secemf at yahoo.com.ar (Esteban Martínez Fayó))
Re: Outbreak of a virus on campus, scanning tcp 80/6129/1025/3127 (janus at volny.cz (Honza Vlach))
[SECURITY] [DSA 494-1] New ident2 packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Yahoo! Messenger 5.6 - Multiple Remote Crashes(yinsthelper.dll) (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
RE : Hotmail & Passport (.NET Accounts) Vulnerability (ihsan.rehman at DIT24.COM.PK (Ihsan-ur-Rehman))
RE: Hotmail & Passport (.NET Accounts) Vulnerability (ihsan.rehman at DIT24.COM.PK (Ihsan-ur-Rehman))
THCIISSLame v0.2 - connectback shell support (johncybpk at gmx.net (johncybpk@....net))
TCP/BGP EXPLOIT & Snort Signature (australia001 at yahoo.com.au (Jelson Pat))
THCIISSLame exploit (etomcat at freemail.hu (Feher Tamas))
SSL IIS Remote Root (agabriel at otenet.gr (Gabriel Alexandros))
ip_setsockopt() sploit (bugtracklist at freemail.hu (B$H))
THCIISSLame exploit (johncybpk at gmx.net (johncybpk@....net))
THCIISSLame exploit (etomcat at freemail.hu (Feher Tamas))
ip_setsockopt() sploit (noamr at beyondsecurity.com (Noam Rathaus))
SSL IIS Remote Root (noamr at beyondsecurity.com (Noam Rathaus))
Arbitrary file overwriting in Unreal engine through UMOD (aluigi at altervista.org (Luigi Auriemma))
[Research Paper] DNS Cache Snooping (luis.grangeia at sidestep.pt (Luis Grangeia))
THCIISSLame exploit (hughmann at hotmail.com (Hugh Mann))
Linux kernel exploits (integer at hushmail.com (integer@...hmail.com))
THCIISSLame exploit (xillwillx at yahoo.com (Will Image))
THCIISSLame exploit (kernelpenguin at hot.ee (Elver Loho))
First Report : New Blaster? (ojraymond at hotmail.com (Oliver Raymond))
THCIISSLame exploit (adam at huntrecruiting.com (Adam))

April 23 (48 messages)

THCIISSLame exploit (orochford at beefed.org (Oliver.C.Rochford))
THCIISSLame exploit (xillwillx at yahoo.com (Will Image))
THCIISSLame exploit (kernelpenguin at hot.ee (Elver Loho))
TCP Reset Attacks: Paper and Code Now Availble (sullo at cirt.net (sullo@...t.net))
THCIISSLame exploit (adam at huntrecruiting.com (Adam))
THCIISSLame exploit (b.griffin at cqu.edu.au (Brad Griffin))
THCIISSLame exploit (orochford at beefed.org (Oliver.C.Rochford))
Cross Site Scripting fusion news (k1ll3rb0y at hotmail.com (k1LL3r B0y))
THCIISSLame exploit (xbud at g0thead.com (Orlando Padilla))
THCIISSLame exploit (nodialtone at comcast.net (Byron Copeland))
Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble (listuser at seifried.org (Kurt Seifried))
THCIISSLame exploit - now without binary (johncybpk at gmx.net (johnny cyberpunk))
THCIISSLame exploit (krahmer at suse.de (Sebastian Krahmer))
Re: Outbreak of a virus on campus, scanning tcp 80/6129/1025/3127 (tomokazu444 at hotmail.com (Tomokazu Suzuki))
Linux kernel exploits (alex at eclipse.org.il (Alex Behar))
Perl code exploiting TCP window vuln. (KsPecial at blazemail.com (K sPecial))
Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble (sullo at cirt.net (sullo@...t.net))
Re: Outbreak of a virus on campus, scanning tcp 80/6129/1025/3127 (jstewart at lurhq.com (Joe Stewart))
re: First Report : New Blaster? (isec at europe.com (Willem Koenings))
Re: [VulnDiscuss] Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble (Weimer at CERT.Uni-Stuttgart.DE (Florian Weimer))
Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble (Brent.Wolfram at tsx.com (Brent.Wolfram@....com))
re: First Report : New Blaster? (jstewart at lurhq.com (Joe Stewart))
Security Sites (polsen at westchestercapital.com (Patrick Olsen))
Re: [VulnDiscuss] Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble (listuser at seifried.org (Kurt Seifried))
Re: [VulnDiscuss] Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble (id3nt at hush.com (id3nt@...h.com))
Wireless legal to eavesdrop (geggam692000 at yahoo.com (D B))
Security Sites (pk95 at yandex.ru (Alexander))
Re: Outbreak of a virus on campus, scanning tcp 80/6129/1025/3127 (isec at europe.com (Willem Koenings))
THCIISSLame exploit - now without binary (marklist at comcast.net (Mark))
Potential Microsoft PCT worm (MS04-011) (advisories at corsaire.com (advisories))
Re: [VulnDiscuss] Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble (ggilliss at netpublishing.com (Gregory A. Gilliss))
Security Sites (andrews at mis-cds.com (Andrew Simmons))
Security Sites (pmcassel at ncsu.edu (Paul Cassell))
Wireless legal to eavesdrop (mgargiullo at warpdrive.net (Michael Gargiullo))
Security Sites (keydet89 at yahoo.com (Harlan Carvey))
Wireless legal to eavesdrop (live4java at stormcenter.net (Mister Coffee))
Security Sites (tebodell at email.com (Ty Bodell))
EEYE: Symantec Multiple Firewall TCP Options Denial of Service (dsoeder at eeye.com (Derek Soeder))
Cisco Survey Information Disclosure (id3nt at hush.com (id3nt@...h.com))
Security Sites (se_cur_ity at hotmail.com (Morning Wood))
Security Sites (keydet89 at yahoo.com (Harlan Carvey))
THCIISSLame exploit - now without binary (zumbita00 at yahoo.es (Yofumo Mimoto))
Potential Microsoft PCT worm (MS04-011) (ge at egotistical.reprehensible.net (Gadi Evron))
Potential Microsoft PCT worm (MS04-011) (ge at egotistical.reprehensible.net (Gadi Evron))
Potential Microsoft PCT worm (MS04-011) (insecure at ameritech.net (insecure))
Potential Microsoft PCT worm (MS04-011) (1 at malware.com (http-equiv@...ite.com))
Potential Microsoft PCT worm (MS04-011) (tremaine.lea at sjrb.ca (Tremaine Lea))
Wireless legal to eavesdrop (geggam692000 at yahoo.com (D B))

April 24 (23 messages)

Security Sites (sean01 at accnet.com.au (Sean Crawford))
[inbox] Re: Potential Microsoft PCT worm (MS04-011) (exibar at thelair.com (Exibar))
Potential Microsoft PCT worm (MS04-011) (alerta at redsegura.com (Alerta Redsegura))
Potential Microsoft PCT worm (MS04-011) (alerta at redsegura.com (Alerta Redsegura))
Wireless legal to eavesdrop (sidhayn at buckeye-express.com (Richard Farina))
Re: Outbreak of a virus on campus, scanning tcp 80/6129/1025/3127 (Ian.Latter at mq.edu.au (Ian Latter))
Security Sites (cheekypeople at sec33.com (cheekypeople@...33.com))
Re: Security Sites (remko at elvandar.org (Remko Lodder))
AW: Security Sites (fulldisclosure-security at vplace.de (@4u))
Metasploit Microsoft IIS SSL PCT Module (fdlist at digitaloffense.net (H D Moore))
Que es mas macho, SCRIPTES o TABLESPOON? (orchestra at ttnet.net.tr (Orchestra))
Apache - all versions vulnerability in OLD procesors. (pi3ki31ny at wp.pl (Adam Zabrocki))
Re: Outbreak of a virus on campus (mueller at fidnet.com (RMueller))
Firewall solution for Windows 2003 Server (krajicek at ics.muni.cz (Ondrej Krajicek))
Re: Outbreak of a virus on campus (se_cur_ity at hotmail.com (Morning Wood))
Gambling machines (kager.thomas at aon.at (Kager))
Microsoft IIS SSL PCT vulnerability (kquest at toplayer.com (kquest@...layer.com))
Firewall solution for Windows 2003 Server (irwanhadi at phxby.com (Irwan Hadi))
Firewall solution for Windows 2003 Server (cheekypeople at sec33.com (Lee))
Firewall solution for Windows 2003 Server (niekbaakman at home.nl (Niek Baakman))
Firewall solution for Windows 2003 Server (irwanhadi at phxby.com (Irwan Hadi))
Re: Outbreak of a virus on campus (isec at europe.com (Willem Koenings))
Firewall solution for Windows 2003 Server (kf_lists at secnetops.com (KF (lists)))

April 25 (13 messages)

Looking for BKDR_IRCFLOOD.X (chris at compucounts.com (Chris Carlson))
Looking for BKDR_IRCFLOOD.X (cheekypeople at sec33.com (Lee))
Re: Outbreak of a virus on campus (ddh at mtu.edu (David Hale))
Re: Outbreak of a virus on campus (ddh at mtu.edu (David Hale))
Firewall solution for Windows 2003 Server (cscott at fluidsmgmt.com (Chris Scott))
Firewall solution for Windows 2003 Server (krajicek at ics.muni.cz (Ondrej Krajicek))
[despammed] Firewall solution for Windows 2003 Server (krajicek at ics.muni.cz (Ondrej Krajicek))
Windows Lsasrv lsass Remote EXPLOIT (MS04-011) (elvi52001 at yahoo.com (- ElviS -))
Microsoft IIS SSL PCT vulnerability (amic at beyondsecurity.com (Ami Chayun))
Microsoft IIS SSL PCT vulnerability (kquest at toplayer.com (kquest@...layer.com))
Microsoft's Explorer and Internet Explorer long share name buffer overflow. (rodrigo at intellicomp.cl (Rodrigo Gutierrez))
RE: Microsoft's Explorer and Internet Explorer long share name buffer overflow. (rodrigo at intellicomp.cl (Rodrigo Gutierrez))
Microsoft's Explorer and Internet Explorer long share name buffer overflow. (rodrigo at intellicomp.cl (Rodrigo Gutierrez))

April 26 (13 messages)

Snort Signature Database.... Sort of (James at vortechhosting.com (James Ashton))
Snort Signature Database.... Sort of (matt at infotex.com (Matthew Jonkman))
Re: [VulnDiscuss] Re: [VulnWatch] TCP Reset Attacks: Paper and (C ode Now Available)? (Richard.Starnes at cwcom.cwplc.com (Starnes, Richard))
iDEFENSE: Critical Multiplatform Remote Inetd Root Vulnerability (severity: critical) (thief at bugtraq.org (Richard Johnson))
Re: [VulnDiscuss] Re: [VulnWatch] TCP Reset Attacks: Paper and (C ode Now Available)? (se_cur_ity at hotmail.com (Morning Wood))
[SECURITY] [DSA 495-1] New Linux 2.4.16 packages fix local root exploit (arm) (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
Update on explorer/ iexplorer vuln (rodrigo at intellicomp.cl (Rodrigo Gutierrez))
Linux kernel exploits (nion at gmx.net (Nico Golde))
RE: Microsoft's Explorer and Internet Explorer long share name buffer overflow. (rodrigo at intellicomp.cl (Rodrigo Gutierrez))
Windows Lsasrv.dll RPC buffer overflow Remote Exploit (MS04-011) (jackhammer at gmail.com (Paul Tinsley))
Re: Microsoft's Explorer and Internet Explorer long share name buffer overflow. (dan57170 at yahoo.com (Daniel Regalado Arias))
Multiple vulnerabilities PHP-Nuke Video Gallery Module for PHP-Nuke (k1ll3rb0y at hotmail.com (k1LL3r B0y))
[ GLSA 200404-18 ] Multiple Vulnerabilities in ssmtp (condordes at gentoo.org (Joshua J. Berry))

April 27 (46 messages)

RE: Full-Disclosure digest, Vol 1 #1605 - 14 msgs (randallm at fidmail.com (RandallM))
Re: Microsoft's Explorer and Internet Explorer long share name buffer overflow. (rodrigo at intellicomp.cl (Rodrigo Gutierrez))
RE: Full-Disclosure digest, Vol 1 #1605 - 14 msgs (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Microsoft's Explorer and Internet Explorer long share name buffer overflow. (t4c at ghcif.de (Milan 't4c' Berger))
RE: Microsoft's Explorer and Internet Explorer long share name buffer overflow. (dan57170 at yahoo.com (Daniel Regalado Arias))
Microsoft's Explorer and Internet Explorer long share name buffer overflow. (kf_lists at secnetops.com (KF (lists)))
[ GLSA 200404-19 ] Buffer overflows and format string vulnerabilities in LCDproc (condordes at gentoo.org (Joshua J. Berry))
[ GLSA 200404-20 ] Multiple vulnerabilities in xine (condordes at gentoo.org (Joshua J. Berry))
[ GLSA 200404-19 ] Buffer overflows and format string (condordes at gentoo.org (Joshua J. Berry))
Windows Lsasrv.dll RPC buffer overflow Remote Exploit (MS04-011) (elvi52001 at yahoo.com (- ElviS -))
Microsoft's Explorer and Internet Explorer long share name buffer overflow. (jan.muenther at nruns.com (jan.muenther@...ns.com))
in2cable login client for linux (netsec at email.com (mat dillon))
lynx with the proxy support (netsec at email.com (mat dillon))
lynx with the proxy support (skylazart at core.cx (Felipe Cerqueira - skylazart))
Windows Lsasrv.dll RPC buffer overflow Remo te Exploit (MS04-011) (James.Cupps at sappi.com (James.Cupps@...pi.com))
lynx with the proxy support (boklm at mars-attacks.org (nicolas vigier))
no more public exploits (johncybpk at gmx.net (johnny cyberpunk))
Phenoelit Advisory <wir-haben-auch-mal-was-gefunden #0815 ++++> (ftr at phenoelit.de (ftr))
no more public exploits (yabby at softhome.net (Yabby))
MDKSA-2004:037 - Updated kernel packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
no more public exploits (john.duquette at eds.com (Duquette, John))
AW: no more public exploits (stefan.baum at eds.com (Baum, Stefan))
no more public exploits (doug_sampa at hotmail.com (Douglas Carvalho))
no more public exploits (purdy at tecman.com (Curt Purdy))
no more public exploits and general PoC gui de lines (kquest at toplayer.com (kquest@...layer.com))
no more public exploits (esper at sherohman.org (Dave Sherohman))
Decompression (geggam692000 at yahoo.com (D B))
AW: no more public exploits (nodialtone at comcast.net (Byron Copeland))
no more public exploits (kenng at kpmg.com (Ng, Kenneth (US)))
no more public exploits (exibar at thelair.com (Exibar))
no more public exploits (kenng at kpmg.com (Ng, Kenneth (US)))
no more public exploits and general PoC gui de lines (keydet89 at yahoo.com (Harlan Carvey))
no more public exploits (yabby at softhome.net (Yabby))
no more public exploits and general PoC gui de lines (kquest at toplayer.com (kquest@...layer.com))
programming (polsen at westchestercapital.com (Patrick Olsen))
Decompression (purdy at tecman.com (Curt Purdy))
AW: no more public exploits (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
SGI ProPack v2.4: Kernel update #3 (agent99 at sgi.com (SGI Security Coordinator))
no more public exploits (dave at immunitysec.com (Dave Aitel))
programming (alexander.s at mccd.edu (Steven Alexander))
SMC Routers have remote administration enabled by default (user86 at earthlink.net (user86))
no more public exploits and general PoC gui de lines (j at pureftpd.org (Jedi/Sector One))
programming (nion at gmx.net (Nico Golde))
lynx with the proxy support (nion at gmx.net (Nico Golde))
no more public exploits (chris at cr-secure.net (chris))
no more public exploits and general PoC gui de lines (poof at fansubber.com (Poof))

April 28 (57 messages)

no more public exploits (boklm at mars-attacks.org (nicolas vigier))
no more public exploits (hackerwacker at cybermesa.com (james))
no more public exploits and general PoC gui de lines (j.riden at massey.ac.nz (James Riden))
no more public exploits (dave at immunitysec.com (Dave Aitel))
LSASS exploit win32 binary (Q.Long at city.ac.uk (Q.Long@...y.ac.uk))
programming (full-disclosure at lists.netsys.com (full-disclosure@...ts.netsys.com))
SMC Routers have remote administration enabled by default (user86 at earthlink.net (user86))
ezine (boklm at mars-attacks.org (nicolas vigier))
no more public exploits and general PoC gui de lines (venom at gen-x.co.nz (VeNoMouS))
LSASS exploit win32 binary (cscott at fluidsmgmt.com (Chris Scott))
no more public exploits: just a n00bie view (randallm at fidmail.com (RandallM))
AW: no more public exploits (lists2 at onryou.com (Cael Abal))
LSASS exploit win32 binary (bosborne at caltex.com.au (bosborne@...tex.com.au))
Firewall solution for Windows 2003 Server (bsd at pal3.org (Asenchi))
Firewall solution for Windows 2003 Server (krajicek at ics.muni.cz (Ondrej Krajicek))
Top 15 Reasons Why Admins Use Security Scanners (joel at helgeson.com (Joel R. Helgeson))
ezine (sandro at gfi.com (Sandro Gauci))
AW: no more public exploits (tcleary2 at csc.com.au (tcleary2@....com.au))
no more public exploits (demidov at gleg.net (Evgeny Demidov))
no more public exploits (list at nolog.org (list@...og.org))
no more public exploits (xavier.poli at infratech.fr (xavier.poli@...ratech.fr))
no more public exploits (rd at segfault.net (rd))
no more public exploits (skylazart at core.cx (Felipe Cerqueira - skylazart))
XSS in cookie (offtopic at mail.ru ("offtopic" ))
no more public exploits (demidov at gleg.net (Evgeny Demidov))
no more public exploits and general PoC gui de lines (inouk at igt.net (Eric LeBlanc))
no more public exploits (gcb33 at dial.pipex.com (gcb33@...l.pipex.com))
no more public exploits and general PoC gui de lines (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[ESA-20040428-004] 'kernel' Several security and bug fixes (security at guardiandigital.com (EnGarde Secure Linux))
no more public exploits and general PoC gui de lines (inouk at igt.net (Eric LeBlanc))
mozilla firefox 0.8 - linux (probably mozilla too) cut/paste (semi) vulnerability (mwilliamson at falcon.tamucc.edu (Michael Williamson))
mozilla firefox 0.8 - linux (probably mozilla too) cut/paste (semi) vulnerability (nix at syndicalist.net (Henrik Persson))
no more public exploits and general PoC gui de lines (kenng at kpmg.com (Ng, Kenneth (US)))
SGI Advanced Linux Environment security update #19 (agent99 at sgi.com (SGI Security Coordinator))
Top 15 Reasons Why Admins Use Security Scanners (joe.user at shaw.ca (Joe User))
mozilla firefox 0.8 - linux (probably mozilla too) cut/paste (semi) vulnerability (boklm at mars-attacks.org (nicolas vigier))
no more public exploits and general PoC gui de lines (gem at rellim.com (Gary E. Miller))
Top 15 Reasons Why Admins Use Security Scanners (keydet89 at yahoo.com (Harlan Carvey))
Detecting newly added Windows Services (was: no more public exploits) (marcel_k at web.de (Marcel Krause))
AW: no more public exploits (bduffy at gmail.com (Bernard J. Duffy))
Top 15 Reasons Why Admins Use Security Scan ners (keydet89 at yahoo.com (Harlan Carvey))
AW: no more public exploits (craig.soderland at sap.com (Soderland, Craig))
Top 15 Reasons Why Admins Use Security Scanners (codex at bogus.net (Codex))
Top 15 Reasons Why Admins Use Security Scan ners (CHRISTOPHER.D.STARFORD at saic.com (Starford, Christopher D.))
Top 15 Reasons Why Admins Use Security Scan ners (CHRISTOPHER.D.STARFORD at saic.com (Starford, Christopher D.))
Microsoft's Explorer and Internet Explorer long share name buffer overflow. (bporter at heart.net (Bryce Porter))
Top 15 Reasons Why Admins Use Security Scan ners (kenng at kpmg.com (Ng, Kenneth (US)))
Top 15 Reasons Why Admins Use Security Scan ners (StuartF at datacom.co.nz (Stuart Fox (DSL AK)))
AW: no more public exploits (kenng at kpmg.com (Ng, Kenneth (US)))
Top 15 Reasons Why Admins Use Security Scan ners (keydet89 at yahoo.com (Harlan Carvey))
Top 15 Reasons Why Admins Use Security Scan ners (StuartF at datacom.co.nz (Stuart Fox (DSL AK)))
MDKSA-2004:038 - Updated sysklogd packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
AW: no more public exploits (bwiedman at iconsinc.com (Blake Wiedman))
Top 15 Reasons Why Admins Use Security Scan ners (StuartF at datacom.co.nz (Stuart Fox (DSL AK)))
Top 15 Reasons Why Admins Use Security Scanners (boklm at mars-attacks.org (nicolas vigier))
Microsoft's Explorer and Internet Explorer long share name buffer overflow. (psz at maths.usyd.edu.au (Paul Szabo))
Re: Hello (exibar at thelair.com (Exibar))

April 29 (51 messages)

Top 15 Reasons Why Admins Use Security Scan ners (frank at knobbe.us (Frank Knobbe))
Microsoft's Explorer and Internet Explorer long share name buffer overflow. (kf_lists at secnetops.com (KF (lists)))
Top 15 Reasons Why Admins Use Security Scanners (dislists at updegrove.net (Rick Updegrove))
mozilla firefox 0.8 - linux (probably mozilla too) cut/paste (semi) vulnerability (mwilliamson at falcon.tamucc.edu (Michael Williamson))
Top 15 Reasons Why Admins Use Security Scan ners (VanishP at datacom.co.nz (Vanish Pattni (DSL AK)))
Top 15 Reasons Why Admins Use Security Scanners (jeremiah at nur.net (Jeremiah Cornelius))
Top 15 Reasons Why Admins Use Security Scan ners (jeremiah at nur.net (Jeremiah Cornelius))
LSASS exploit win32 binary (cscott at fluidsmgmt.com (Chris Scott))
LSASS exploit win32 binary (jackhammer at gmail.com (Paul Tinsley))
Microsoft's Explorer and Internet Explorer long share name buffer overflow. (rlanguy at hotmail.com (Lan Guy))
Microsoft's Explorer and Internet Explorer long share name buffer overflow. (3APA3A at SECURITY.NNOV.RU (3APA3A))
[SECURITY] [DSA 496-1] New eterm packages fix indirect arbitrary command execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts…)
Heads up: Possible lsass worm in the wild (se_cur_ity at hotmail.com (morning_wood))
Heads up: Possible lsass worm in the wild (etomcat at freemail.hu (Feher Tamas))
Re: Document (pauls at utdallas.edu (Pauls))
Exploit Identification Request (root at transientimages.com (System Administrator))
Zonet ZSR1104WE Router problem (jwachtel at homelogic.com (J Wachtel))
Heads up: Possible lsass worm in the wild (prandal at herefordshire.gov.uk (Randal, Phil))
agobot and 1025 (isec at europe.com (Willem Koenings))
Phenoelit Advisory <wir-haben-auch-mal-was-gefunden #0815 ++++> (michael.guenther at nruns.com (Michael Guenther))
Exploit Identification Request (blancher at cartel-securite.fr (Cedric Blancher))
Heads up: Possible lsass worm in the wild (insecure at ameritech.net (insecure))
Exploit Identification Request (thorolf at grid.einherjar.de (Thorolf))
Exploit Identification Request (root at transientimages.com (Oliver Raymond))
Re: [0day] Heads up: Possible lsass worm in the wild (dbounds at intrusense.com (Darren Bounds))
no more public exploits (helmut_hauser at hotmail.com (Helmut Hauser))
MS04011 Lsasrv.dll RPC buffer overflow remote exploit (PoC) with Universal targets (pk95 at yandex.ru (Alexander))
Paper Release (ihcteam at altern.org (IHC team))
Malformed dns (tmayr at kitcon.net (Thorsten Mayr))
Paper Release (blancher at cartel-securite.fr (Cedric Blancher))
Site changes (ge at egotistical.reprehensible.net (Ge))
Paper Release (ihcteam at altern.org (IHC team))
viruses being sent to list (john.lalla at cox.net (John Lalla))
Heads up: Possible lsass worm in the wild (se_cur_ity at hotmail.com (morning_wood))
i'm searching for good and big dictionaries (the_invincible at gmx.de (thE_iNviNciblE))
[SECURITY] [DSA 497-1] New mc packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
viruses being sent to list (tobias at weisserth.de (Tobias Weisserth))
Paper Release (ams67 at ihug.co.nz (ams67))
[ GLSA 200404-21 ] Multiple Vulnerabilities in Samba (condordes at gentoo.org (Joshua J. Berry))
viruses being sent to list (john.lalla at cox.net (John Lalla))
3com NBX VOIP NetSet Denial of Service Attack (scheidell at secnap.net (Michael Scheidell))
Heads up: Possible lsass worm in the wild (jackhammer at gmail.com (Paul Tinsley))
viruses being sent to list (gem at rellim.com (Gary E. Miller))
i'm searching for good and big dictionaries (dila at myrealbox.com (dila))
[OpenPKG-SA-2004.017] OpenPKG Security Advisory (png) (openpkg at openpkg.org (OpenPKG))
i'm searching for good and big dictionaries (jeremiah at nur.net (Jeremiah Cornelius))
forgotten credit (johncybpk at gmx.net (johnny cyberpunk))
Microsoft's Explorer and Internet Explorer long share name buffer overflow. (kf_lists at secnetops.com (KF (lists)))
H9-0001 Advisory: Sphiro HTTPD remote heap overflow (Rosiello Security) (slotto at gmail.com (Slotto Corleone))
viruses being sent to list (gurney at cotse.net (gurney@...se.net))
[gentoo-announce] [ GLSA 200404-21 ] Multiple Vulnerabilities in Samba (condordes at gentoo.org (Joshua J. Berry))

April 30 (53 messages)

RE: Message Notify (helmut.hauser at intraplan.de (Helmut.hauser))
H9-0001 Advisory: Sphiro HTTPD remote heap overflow (Rosiello Security) (slotto at gmail.com (Slotto Corleone))
MDKSA-2004:039 - Updated mc packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:040 - Updated libpng packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Security and Vulnerabilities on VoIP equipment (mark-security at hush.com (mark-security@...h.com))
H9-0001 Advisory: Sphiro HTTPD remote heap overflow (Rosiello Security) (thief at bugtraq.org (Richard Johnson))
LSASS exploit win32 binary (StuartF at datacom.co.nz (Stuart Fox (DSL AK)))
H9-0001 Advisory: Sphiro HTTPD remote heap overflow (Rosiello Security) (se_cur_ity at hotmail.com (morning_wood))
Paper Release (lionel.ferette at belnet.be (Lionel Ferette))
[RHSA-2004:177-01] An updated X-Chat package fixes vulnerability in Socks-5 proxy (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2004:179-01] An updated LHA package fixes security vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2004:182-01] Updated httpd packages fix mod_ssl security issue (bugzilla at redhat.com (bugzilla@...hat.com))
Virus spoofed my e-mail address (helmut_hauser at hotmail.com (Helmut Hauser))
McAfee Website XSS (se_cur_ity at hotmail.com (morning_wood))
viruses being sent to list (etomcat at freemail.hu (Feher Tamas))
i'm searching for good and big dictionaries (the_invincible at gmx.de (thE_iNviNciblE))
forgotten credit (research at bugtraq.org (Bugtraq Security Systems))
Heads up: Possible lsass worm in the wild (etomcat at freemail.hu (Feher Tamas))
Heads up: Possible lsass worm in the wild (etomcat at freemail.hu (Feher Tamas))
viruses being sent to list (se_cur_ity at hotmail.com (morning_wood))
H9-0001 Advisory: Sphiro HTTPD remote heap overflow (Rosiello Security) (slotto at gmail.com (Slotto Corleone))
[SECURITY] [DSA 498-1] New libpng packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[OpenPKG-SA-2004.018] OpenPKG Security Advisory (proftpd) (openpkg at openpkg.org (OpenPKG))
SECURITY.NNOV: Sambar security quest (3APA3A at SECURITY.NNOV.RU (3APA3A))
ReportingWebService.asmx - message.real.com (fulldis at it97.dyndns.org (fd))
Re: Out of Office (fulldis at it97.dyndns.org (fd))
H9-0001 Advisory: Sphiro HTTPD remote heap overflow (Rosiello Security) (se_cur_ity at hotmail.com (morning_wood))
i'm searching for good and big dictionaries (clint at secureconsulting.com (Clint Bodungen))
viruses being sent to list (alerta at redsegura.com (Alerta Redsegura))
H9-0001 Advisory: Sphiro HTTPD remote heap overflow (Rosiello Security) (3APA3A at SECURITY.NNOV.RU (3APA3A))
Top 15 Reasons Why Admins Use Security Scan ners (dufresne at winternet.com (Ron DuFresne))
Top 15 Reasons Why Admins Use Security Scan ners (dufresne at winternet.com (Ron DuFresne))
[waraxe-2004-SA#026 - Multiple vulnerabilities in Coppermine Photo Gallery for PhpNuke] (come2waraxe at yahoo.com (Janek Vind))
RE: Incoming Msg (technoboy at packetswar.org (Technoboy))
viruses being sent to list (gem at rellim.com (Gary E. Miller))
Top 15 Reasons Why Admins Use Security Scan ners (dufresne at winternet.com (Ron DuFresne))
Encoding (ggtyler at foodlion.com (Tyler, Grayling))
Encoding (mducharme at cybergeneration.com (Maxime Ducharme))
Encoding (exibar at thelair.com (Exibar))
H9-0001 Advisory: Sphiro HTTPD remote heap overflow (Rosiello Security) (slotto at gmail.com (Slotto Corleone))
Critical bug in Web Wiz Forum (pk95 at yandex.ru (Alexander))
H9-0001 Advisory: Sphiro HTTPD remote heap overflow (Rosiello Security) (slotto at gmail.com (Slotto Corleone))
[RHSA-2004:175-01] Updated utempter package fixes vulnerability (bugzilla at redhat.com (bugzilla@...hat.com))
[RHSA-2004:181-01] Updated libpng packages fix crash (bugzilla at redhat.com (bugzilla@...hat.com))
Encoding (mducharme at cybergeneration.com (Maxime Ducharme))
viruses being sent to list (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Hidden message (Zach.Forsyth at kiandra.com (Zach.Forsyth))
Encoding (isec at europe.com (Willem Koenings))
[RHSA-2004:163-01] Updated OpenOffice packages fix security vulnerability in neon (bugzilla at redhat.com (bugzilla@...hat.com))
MDKSA-2004:041 - Updated ProFTPD packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Top 15 Reasons Why Admins Use Security Scan ners (CHRISTOPHER.D.STARFORD at saic.com (Starford, Christopher D.))
[RHSA-2004:173-00] Updated mc packages resolve several vulnerabilities (bugzilla at redhat.com (bugzilla@...hat.com))
morning_wood is really a blackhat (slotto at gmail.com (Slotto Corleone))

1163 messages