full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2004/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 33	² 36
³ 80	⁴ 48	⁵ 59	⁶ 52	⁷ 44	⁸ 20	⁹ 22
¹⁰ 35	¹¹ 83	¹² 102	¹³ 119	¹⁴ 82	¹⁵ 21	¹⁶ 24
¹⁷ 41	¹⁸ 88	¹⁹ 46	²⁰ 24	²¹ 21	²² 14	²³ 20
²⁴ 31	²⁵ 53	²⁶ 89	²⁷ 68	²⁸ 64	²⁹ 23	³⁰ 12
³¹ 6

Messages by day:

May 1 (33 messages)

Immunity Shindig Monday in NYC (dave at immunitysec.com (Dave Aitel))
morning_wood is really a blackhat (listuser at seifried.org (Kurt Seifried))
[ Full-Disclosure] A mans got to patch (randallm at fidmail.com (RandallM))
viruses welcome, one and all (john.lalla at cox.net (John Lalla))
[OBORONA-SPAM] Critical bug in Web Wiz Forum (pk95 at yandex.ru (Alexander))
morning_wood is really a blackhat (BigappleRemailer at optonline.net (Anonymous))
morning_wood is really a blackhat (frank at knobbe.us (Frank Knobbe))
morning_wood is really a blackhat (thief at bugtraq.org (Richard Johnson))
morning_wood is really a blackhat (pauls at utdallas.edu (Paul Schmehl))
viruses being sent to list (cheekypeople at sec33.com (cheekypeople@...33.com))
morning_wood is really a blackhat (isec at europe.com (Willem Koenings))
Some suspicious files (marcel_k at web.de (Marcel Krause))
OT: Turkey season (m0rtis at adelphia.net (Mortis))
Some suspicious files (cheekypeople at sec33.com (Lee))
morning_wood is really a blackhat (sixsigma98 at hotmail.com (Ray P))
LNSA-#2004-0013: Multiple Vulnerabilities in Samba (ciaglia at netwosix.org (Vincenzo Ciaglia))
LNSA-#2004-0014: X-Chat vulnerability in Socks-5 proxy (ciaglia at netwosix.org (Vincenzo Ciaglia))
Subject: Some suspicious files (marcel_k at web.de (Marcel Krause))
morning_wood is really a blackhat (myemailaccount at fastmail.fm (Jimmy))
Subject: Some suspicious files (dila at myrealbox.com (dila))
OT: Turkey season (kajunnujak at hotmail.com (Kajun Nujak))
morning_wood is really a blackhat (kajunnujak at hotmail.com (Kajun Nujak))
Bug in PaX Linux Kernel 2.6 Patches (chris at cr-secure.net (ChrisR-))
ANNOUNCE: spam research mailing list becoming public (ge at egotistical.reprehensible.net (Gadi Evron))
ANNOUNCE: spam research mailing list becoming public (chema at chema.homelinux.org (José María Mateos))
Subject: Some suspicious files (se_cur_ity at hotmail.com (morning_wood))
Subject: Some suspicious files (marcel_k at web.de (Marcel Krause))
ANNOUNCE: spam research mailing list becoming public (raymond at prolocation.net (Raymond Dijkxhoorn))
Fw: Sasser internet worm spreading (bugtracklist at freemail.hu (B$H))
New LSASS-based worm finally here (Sasser) (ben at bssc.edu.au (Ben Ryan))
New LSASS-based worm finally here (Sasser) (cheekypeople at sec33.com (Lee))
LHa buffer overflows and directory traversal problems (Ulf.Harnhammar.9485 at student.uu.se (Ulf Härnhammar))
Fw: Sasser internet worm spreading - MS - learn your OS. (mnv at alumni.princeton.edu (Mike Vasquez))

May 2 (36 messages)

Lha local stack overflow Proof Of Concept Code (narkotix at linuxmail.org (narko tix))
Fw: Sasser internet worm spreading - MS - l ea rn your OS. (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
Lha Local stack Overflow Proof Of Concept Code (narkotix at linuxmail.org (narko tix))
morning_wood is really a blackhat (xillwillx at yahoo.com (Will Image))
Macafee Stupid Little Tricks continue (chows at ozemail.com.au (Gregh))
viruses being sent to list (mikehome at kcisp.net (Mike Barushok))
SSL PCT vulnerability information (kquest at toplayer.com (kquest@...layer.com))
[SECURITY] [DSA 499-1] New rsync packages fix directory traversal bug (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA 500-1] New flim packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debi…)
viruses being sent to list (shrdlu at deaddrop.org (Etaoin Shrdlu))
Let the Sasser worm begin (support at mmicman.com (Edward W. Ray))
Innocent newbie question... (jayesh at flashmail.com (jayesh))
A rather newbie question (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
Unpacking Sasser (keetch_tw at hotmail.com (Tom K))
Innocent newbie question... (houdini+full-disclosure at clanspum.net (Bill Weiss))
Innocent newbie question... (cheekypeople at sec33.com (Lee))
Unpacking Sasser (indianz at indianz.ch (IndianZ))
Innocent newbie question... (flynngn at jmu.edu (Gary Flynn))
A rather newbie question (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow (mmaiffret at eeye.com (Marc Maiffret))
A rather newbie question (elvedin at ods.org (Elvedin Trnjanin))
Unpacking Sasser (nodialtone at comcast.net (Byron Copeland))
A rather newbie question (cheekypeople at sec33.com (Lee))
A rather newbie question (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
A rather newbie question (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
A rather newbie question (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
A rather newbie question (se_cur_ity at hotmail.com (morning_wood))
Unpacking Sasser (jabberwocky at mediasoft.net (Andrew Ruef))
A rather newbie question (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
Unpacking Sasser (dsx_news at web.de (-))
A rather newbie question (lee at seethrusec.co.uk (lee@...thrusec.co.uk))
Unpacking of malware, like Sasser (der at infowarfare.dk (Dennis Rand))
Unpacking of malware, like Sasser (gem at rellim.com (Gary E. Miller))
RE: SASSER (keetch_tw at hotmail.com (Tom K))
A rather newbie question (nobody at See.Comments.Header (Italy Anonymous Remailer))
Unpacking Sasser (cheekypeople at sec33.com (Lee))

May 3 (80 messages)

Michael J�ger/ITAmtBw/R�stung/BMVg/DE ist au�er Haus. (MichaelJaeger at bwb.org (Michael J�ger))
RE: Unpacking Sasser (Angelaix at aol.com (Angelaix@....com))
Re: Michael Jäger/ITAmtBw/Rüstung/BMVg/DE ist außer Haus. (venom at gen-x.co.nz (VeNoMouS))
Re: Michael Jäger/ITAmtBw/Rüstung/BMVg/DE ist außer Haus. (vh at helith.net (van Helsing))
Re: Re: Michael Jäger/ITAmtBw/Rüstung/BMVg/DE ist außer Haus. (andrew at virtual.net.nz (Andrew))
Unpacking Sasser (nick at virus-l.demon.co.uk (Nick FitzGerald))
RE: Re: Re: Michael Jäger/ITAmtBw/Rüstung/BMVg/DE ist außer Haus. (Robert.ODonnell at aucklandcity.govt.nz (O'Donnell, Robert))
Re: RE: Re: Re: Michael Jäger/ITAmtBw/Rüstung/BMVg/DE ist außer Haus. (blsonne at rogers.com (Byron Sonne))
Michael Jäger/ITAmtBw/Rüstung/BMVg/DE ist außer Haus. (tobias at weisserth.de (Tobias Weisserth))
Michael Jäger/ITAmtBw/Rüstung/BMVg/DE ist außer Haus. (swmike at swm.pp.se (Mikael Abrahamsson))
Get over it (Zach.Forsyth at kiandra.com (Zach Forsyth))
Unpacking Sasser (cheekypeople at sec33.com (Lee))
Determinig VMWare environment (was: Unpacking Sasser) (trik-news at gmx.de (Spiro Trikaliotis))
Determinig VMWare environment (was: Unpacking Sasser) (cheekypeople at sec33.com (Lee))
morning_wood is really a blackhat (krahmer at suse.de (Sebastian Krahmer))
Required SMTP Engine in VBS (clifton.gonsalves at patni.com (Clifton Gonsalves))
Required SMTP Engine in VBS (afischer at karmann.com (afischer@...mann.com))
Re: Approved (scottf at uark.edu (scottf@...k.edu))
Serv-U LIST -l Parameter Buffer Overflow (aviram at beyondsecurity.com (Aviram Jenik))
morning_wood is really a blackhat (keydet89 at yahoo.com (Harlan Carvey))
Agobot/Gaobot/Phatbot (indianz at indianz.ch (indianz@...ianz.ch))
Re: New LSASS-based worm finally here (Sasser) (jfernandez at germinus.com (Javier Fernandez-Sanguino))
Winnie The Pooh Hacking Squadron Strikes Again! (wtphs at hushmail.com (wtphs@...hmail.com))
Re: Microsoft's Explorer and Internet Explorer long share name buffer overflow. (vigour_vig at yahoo.com (VIGOUR))
Agobot/Gaobot/Phatbot (nick at virus-l.demon.co.uk (Nick FitzGerald))
morning_wood is really a blackhat (madsaxon at direcway.com (madsaxon))
Sasser skips 10.x.x.x Why? (shawn.cox at pcca.com (Shawn Cox))
iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (thief at bugtraq.org (Richard Johnson))
Some suspicious files (etomcat at freemail.hu (Feher Tamas))
Sasser skips 10.x.x.x Why? (tuevsec at gmx.net (Thomas Springer))
A rather newbie question (stephen.perciballi at mci.com (Stephen Perciballi))
Unpacking Sasser (alaoui_o at epita.fr (youssef ALAOUI))
iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (syzop at vulnscan.org (Bram Matthys (Syzop)))
A rather newbie question (evaughn at levithan.net (Ethan Vaughn))
Sasser skips 10.x.x.x Why? (matt.wagenknecht at quantum.com (Matt Wagenknecht))
Agobot/Gaobot/Phatbot (the_invincible at gmx.de (thE_iNviNciblE))
A rather newbie question (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
Unpacking Sasser (gem at rellim.com (Gary E. Miller))
A rather newbie question (keydet89 at yahoo.com (Harlan Carvey))
Sasser skips 10.x.x.x Why? (shawn.cox at pcca.com (Shawn Cox))
iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (boklm at mars-attacks.org (nicolas vigier))
Agobot/Gaobot/Phatbot (exibar at thelair.com (Exibar))
iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (boklm at mars-attacks.org (nicolas vigier))
iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (Richard Johnson) (msutton at iDefense.com (Michael Sutton))
dhcpsnap.exe trojan? (iso_list at yahoo.com (Rich))
iDEFENSE: Critical Multiplatform Remote Inetd Root Vulnerability (severity: critical) (msutton at iDefense.com (Michael Sutton))
Agobot/Gaobot/Phatbot (indianz at indianz.ch (IndianZ))
[Fwd: Re: iDEFENSE: Upcoming OpenSSH Security Advisory Announcement] (newslists at pessimists.net (Andy Sutton))
morning_wood is really a blackhat (discord-nobody at erisiandiscord.de (Anonymous))
Re: iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (tedu at zeitbombe.org (Ted Unangst))
A rather newbie question (evaughn at levithan.net (Ethan Vaughn))
iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (full-disclosure at nym.hush.com (full-disclosure@....hush.com))
Re: New LSASS-based worm finally here (Sasser) (jfernandez at germinus.com (Javier Fernandez-Sanguino))
Sasser skips 10.x.x.x Why? (wrust at ieee.org (Warnich Rust))
Re: New LSASS-based worm finally here (Sasser) (jfernandez at germinus.com (Javier Fernandez-Sanguino))
iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (boklm at mars-attacks.org (nicolas vigier))
Re: iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (G1udyd9rxrqfnyninf at Rv7b9llomq.ae (lamers@...trag.org))
UNSUBSCRIBE ME (doug_sampa at hotmail.com (Douglas Carvalho))
A rather newbie question (dlhane at sbcglobal.net (David Hane))
A rather newbie question (keydet89 at yahoo.com (Harlan Carvey))
Sasser skips 10.x.x.x Why? (ecchien at yahoo.com (Eric Chien))
Security Shindig Today at 5:30pm! (dave at immunitysec.com (Dave Aitel))
A rather newbie question (dlhane at sbcglobal.net (David Hane))
iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (rodrigob at suespammers.org (Rodrigo Barbosa))
A rather newbie question (evaughn at levithan.net (Ethan Vaughn))
UNSUBSCRIBE ME (tremaine.lea at sjrb.ca (Tremaine Lea))
Agobot/Gaobot/Phatbot (nick at ethicsdesign.com (Nick Jacobsen))
Sasser skips 10.x.x.x Why? (jstewart at lurhq.com (Joe Stewart))
Re: iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (tobias at weisserth.de (Tobias Weisserth))
iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (listuser at seifried.org (Kurt Seifried))
A rather newbie question (tremaine.lea at sjrb.ca (Tremaine Lea))
Sasser skips 10.x.x.x Why? (frank at knobbe.us (Frank Knobbe))
iDEFENSE: Upcoming OpenSSH Security Advisory Anno Johnson) (nobody at tatooine.homelinux.net (starwars))
Sasser skips 10.x.x.x Why? (ecchien at yahoo.com (Eric Chien))
Sasser skips 10.x.x.x Why? (rodrigob at suespammers.org (Rodrigo Barbosa))
A rather newbie question (dk at pwarchitects.com (dk))
Sasser worm and Embedded Support Partner (ESP) port 5554/tcp (agent99 at sgi.com (SGI Security Coordinator))
Agobot/Gaobot/Phatbot (poof at fansubber.com (Poof))
Re: MichaelJäger/ITAmtBw/Rüstung/BMVg/DE ist außer Haus. (venom at gen-x.co.nz (VeNoMouS))
Interesting chunk in the middle of search overflow attempt (vimages at well.com (Jim Race))

May 4 (48 messages)

A rather newbie question (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
H9-0001 Advisory: Sphiro HTTPD remote heap overflow (Rosiello Security) (b0fnet at yahoo.com (b0f))
RE: Full-Disclosure digest, new LSASS - Javier (randallm at fidmail.com (RandallM))
RE: Full-Disclosure YOU know what blows me away. (randallm at fidmail.com (RandallM))
SUSE Security Announcement: kernel (SuSE-SA:2004:010) (draht at suse.de (Roman Drahtmueller))
Re: Re: MichaelJäger/ITAmtBw/Rüstung/BMVg/DE ist außer Haus. (sean01 at accnet.com.au (Sean Crawford))
RE: Full-Disclosure YOU know what blows me away. (jlevitsk at joshie.com (Joshua Levitsky))
Re: New LSASS-based worm finally here (Sasser) (security at brvenik.com (Jason))
A rather newbie question (madsaxon at direcway.com (madsaxon))
IPSEC on arm-linux board (priteshshah at tataelxsi.co.in (Pritesh Harivadan Shah))
Required SMTP Engine in VBS (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Winnie The Pooh Hacking Squadron Strikes Again! (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Agobot/Gaobot/Phatbot (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
RE: New LSASS-based worm finally here (Sasser) (mmaiffret at eeye.com (Marc Maiffret))
Catching Sasser (shash at etisalat-nis.ae (Shashank Rai))
Re: New LSASS-based worm finally here (Sasser) (jfernandez at germinus.com (Javier Fernandez-Sanguino))
Agobot/Gaobot/Phatbot (plat0n at web.de (Plat0n))
Re: New LSASS-based worm finally here (Sasser) (insecure at ameritech.net (insecure))
Re: iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (boklm at mars-attacks.org (nicolas vigier))
YOU know what blows me away. (full-disclosure at nym.hush.com (full-disclosure@....hush.com))
Interesting chunk in the middle of search overflow attempt (dj at outpost24.com (David Jacoby))
morning_wood is really a blackhat (derfromme at gmx.de (Christian Fromme))
A rather newbie question (Marek.Isalski at smuht.nwest.nhs.uk (Marek Isalski))
morning_wood is really a blackhat (madsaxon at direcway.com (madsaxon))
I'm looking for information about a file called winfix3.exe (skatz at dawsoncollege.qc.ca (Stacey Katz))
morning_wood is really a blackhat (Jos at meltemi.co.uk (Jos Osborne))
morning_wood is really a blackhat (marcin at owsiany.pl (Marcin Owsiany))
morning_wood is really a blackhat (derfromme at gmx.de (Christian Fromme))
morning_wood is really a blackhat (madsaxon at direcway.com (madsaxon))
PHPNuke admin.php protection code (fala83 at libero.it (Luca Falavigna))
morning_wood is really a blackhat (derfromme at gmx.de (Christian Fromme))
I'm looking for information about a file called winfix3.exe (administrator at maginetworks.com (J. Theriault))
A FreeBSD server that is converted in a MS 2003 Server... and viceversa (netdruid at ciudad.com.ar (DrD))
I'm looking for information about a file called winfix3.exe (skatz at dawsoncollege.qc.ca (Stacey Katz))
remote root exec vulnerability in omail (thijs at dalhuijsen.com (Thijs Dalhuijsen))
I'm looking for information about a file called winfix3.exe (Jon.Dolinar at tri-c.edu (Dolinar, Jon))
I'm looking for information about a file called winfix3.exe (keydet89 at yahoo.com (Harlan Carvey))
A FreeBSD server that is converted in a MS 2003 Server... and viceversa (full-disclosure at nym.hush.com (full-disclosure@....hush.com))
I'm looking for information about a file called winfix3.exe (keydet89 at yahoo.com (Harlan Carvey))
A rather newbie question (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
IPSEC on arm-linux board (xbud at g0thead.com (xbud))
morning_wood is really a blackhat (nion at gmx.net (Nico Golde))
Re: New LSASS-based worm finally here (Sasser) (ge at linuxbox.org (Gadi Evron))
A rather newbie question (dlhane at sbcglobal.net (David Hane))
Hey, dude, it's me ^_^ :P (PFARROW at FLAMENETWORKS.CO.UK (PFARROW@...MENETWORKS.CO.UK))
A FreeBSD server that is converted in a MS 2003 Server... and viceversa (nick at ethicsdesign.com (Nick Jacobsen))
A FreeBSD server that is converted in a MS 2003 Serve viceversa (cripto at ecn.org (Anonymous))
A FreeBSD server that is converted in a MS 2003 Serve viceversa (netdruid at ciudad.com.ar (DrD))

May 5 (59 messages)

Hey, dude, it's me ^_^ :P (tobias at weisserth.de (Tobias Weisserth))
RE: Full-Disclosure digest, Catching Sasser (randallm at fidmail.com (RandallM))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : apache multiple vulnerabilities, upgraded to apache-1.3.29 (please_reply_to_security at sco.com (please_reply_to…)
Agobot/Gaobot/Phatbot (kf_lists at secnetops.com (KF (lists)))
Fw: Hey, dude, it's me ^_^ :P (pfarrow at flamenetworks.co.uk (Paul Farrow))
A FreeBSD server that is converted in a MS 2003 Server... and viceversa (nekramer at mindtheater.net (Nancy Kramer))
Few n00b questions about this phatbot thing (lists at mcallisterweb.com (Sean McAllister))
Few n00b questions about this phatbot thing (mobil at tzi.dhs.org (Thomas Zangl - Mobil))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : apache multiple vulnerabilities, upgraded to apache-1.3.29 (mail at oliver-kellermann.de (Oliver Kellermann))
Learn from history? (lennart.damm at excite.com (Lennart Damm))
Corsaire Security Advisory - Verity Ultraseek path disclosure issue (advisories at corsaire.com (advisories))
WtPHS Security Advisory 0x02 (wtphs at hushmail.com (wtphs@...hmail.com))
I'm looking for information about a file called winfix3.exe (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
A FreeBSD server that is converted in a MS 2003 Server... and viceversa (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
WtPHS Security Advisory 0x03 (wtphs at hushmail.com (wtphs@...hmail.com))
Re: New LSASS-based worm finally here (Sasser) (jfernandez at germinus.com (Javier Fernandez-Sanguino))
(no subject) (angelo at rosiello.org (Angelo Rosiello))
morning_wood is really a blackhat (jsage at finchhaven.com (John Sage))
iDEFENSE: Upcoming OpenSSH Security Advisory Announcement (lwc at vapid.ath.cx (Larry W. Cashdollar))
RE: Full-Disclosure digest, Catching Sasser (tuevsec at gmx.net (Thomas Springer))
Michael Jäger/ITAmtBw/Rüstung/BMVg/DE ist außer Haus. (boklm at mars-attacks.org (nicolas vigier))
Checkpoint ISAKMP issue? (arlen at hushmail.com (arlen))
Few n00b questions about this phatbot thing (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Titan FTP Server Aborted LIST DoS (aviram at beyondsecurity.com (Aviram Jenik))
re: Winfix3.exe file information (skatz at dawsoncollege.qc.ca (Stacey Katz))
Use of Brutus (chrisgsharp at yahoo.com (Chris Sharp))
re: Winfix3.exe file information (keydet89 at yahoo.com (Harlan Carvey))
Check Point ISAKMP (btoovey at igxglobal.com (Brian Toovey))
iDEFENSE Intelligence Report: Local-Remote Exploit for FreeBSD in the Wild (thief at bugtraq.org (Richard Johnson))
Use of Brutus (keydet89 at yahoo.com (Harlan Carvey))
[OpenPKG-SA-2004.019] OpenPKG Security Advisory (kolab) (openpkg at openpkg.org (OpenPKG))
iDEFENSE Intelligence Report: Local-Remote Exploit for FreeBSD in the Wild (keithp at corp.ptd.net (Keith A. Pachulski))
RE: Full-Disclosure digest, Catching Sasser (jwiens at nersp.nerdc.ufl.edu (Jordan Wiens))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : apache multiple vulnerabilities, upgraded to apache-1.3.29 (tim-security at sentinelchicken.org (Tim))
Learn from history? (alerta at redsegura.com (Alerta Redsegura))
re: Winfix3.exe file information (nion at gmx.net (Nico Golde))
Few n00b questions about this phatbot thing (nion at gmx.net (Nico Golde))
Fwd: [Re: cvs commit: src/sys/vm vm_map.c] (nectar at FreeBSD.org (Jacques A. Vidrine))
[waraxe-2004-SA#027 - Once again - critical vulnerabilities in PhpNuke 6.x - 7.2] (come2waraxe at yahoo.com (Janek Vind))
Checkpoint ISAKMP issue? (vventura at cesce.pt (Vitor Ventura))
RE: Full-Disclosure digest, Catching Sasser (shash at etisalat-nis.ae (Shashank Rai))
Learn from history? (svgn at orbid.be (Serge van Ginderachter (svgn)))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : apache multiple vulnerabilities, upgraded to apache-1.3.29 (rodrigob at suespammers.org (Rodrigo Barbosa))
Checkpoint ISAKMP issue? (r00t at online.ie (Mark Fagan))
Fwd: Virus Worm.Bagle.H-zippwd-1 detected in mail (info at pcsage.biz (Information Services))
Learn from history? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Cygwin whois.exe Stack Overflow (carloslistas at superig.com.br (carloslistas@...erig.com.br))
IRIX Networking Security Updates (agent99 at sgi.com (SGI Security Coordinator))
LHa repercussions: WinZip, WinRar, CommuniGate Pro McAfee plugin, blog (Ulf.Harnhammar.9485 at student.uu.se (Ulf Härnhammar))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : apache multiple vulnerabilities, upgraded to apache-1.3.29 (full-disclosure at nym.hush.com (full-disclosure@nym…)
Learn from history? (alerta at redsegura.com (Alerta Redsegura))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : apache multiple vulnerabilities, upgraded to apache-1.3.29 (dave at immunitysec.com (Dave Aitel))
Cygwin whois.exe Stack Overflow (pjfraser at netspace.net.au (Paul Fraser))
Re: Use of Brutus (nobody at tatooine.homelinux.net (starwars))
Cygwin Whois.exe version(Stack Overflow) (carloslistas at superig.com.br (carloslistas@...erig.com.br))
Learn from history? (full-disclosure at nym.hush.com (full-disclosure@....hush.com))
Advisory: Heimdal kadmind version4 remote heap overflow (demidov at gleg.net (Evgeny Demidov))
FreeBSD Security Advisory FreeBSD-SA-04:08.heimdal (security-advisories at freebsd.org (FreeBSD Security Advisories))
FreeBSD Security Advisory FreeBSD-SA-04:09.kadmind (security-advisories at freebsd.org (FreeBSD Security Advisories))

May 6 (52 messages)

Learn from history? (StuartF at datacom.co.nz (Stuart Fox (DSL AK)))
Learn from history? (StuartF at datacom.co.nz (Stuart Fox (DSL AK)))
Learn from history? (alerta at redsegura.com (Alerta Redsegura))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : apache multiple vulnerabilities, upgraded to apache-1.3.29 (mail at oliver-kellermann.de (Oliver Kellermann))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : apache multiple vulnerabilities, upgraded to apache-1.3.29 (tim-security at sentinelchicken.org (Tim))
[AppSecInc Security Alert] Microsoft Active Server Pages Cookie Retrieval Issue (anewman at appsecinc.com (Aaron C. Newman (Application Security, Inc.)))
Consistent browser crash on standard site? (axid3j1al at hotmail.com (axid3j1al axid3j1al))
Consistent browser crash on standard site? (madsaxon at direcway.com (madsaxon))
Consistent browser crash on standard site? (vh at helith.net (van Helsing))
Consistent browser crash on standard site? (b.griffin at cqu.edu.au (Brad Griffin))
Learn from history? (svgn at orbid.be (Serge van Ginderachter (svgn)))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : apache multiple vulnerabilities, upgraded to apache-1.3.29 (kefren at netbastards.org (Mihai CHELARU))
Learn from history? (R.Ferris at napier.ac.uk (Ferris, Robin))
Learn from history? (krajicek at ics.muni.cz (Ondrej Krajicek))
Buffer overflows in exim, yet still exim much better than windows (guninski at guninski.com (Georgi Guninski))
Learn from history? (steveb at nebcoinc.com (Steve Bremer))
Consistent browser crash on standard site? (sean01 at accnet.com.au (Sean Crawford))
Re: Use of Brutus (chrisgsharp at yahoo.com (Chris Sharp))
[0xbadc0ded #03] DeleGate (SSL-filter) <= 8.9.2 (je-fulldisclosure at bitnux.com (Joel Eriksson))
Learn from history? (full-disclosure at nym.hush.com (full-disclosure@....hush.com))
Learn from history? (svgn at orbid.be (Serge van Ginderachter (svgn)))
Cygwin Whois.exe version(Stack Overflow) (nion at gmx.net (Nico Golde))
Consistent browser crash on standard site? (nion at gmx.net (Nico Golde))
Learn from history? (alerta at redsegura.com (Alerta Redsegura))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : apache multiple vulnerabilities, upgraded to apache-1.3.29 (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu…)
LHa repercussions: WinZip, WinRar, CommuniGate Pro McAfee plugin, blog (cgate at cgginc.com (CommuniGate))
UnixWare 7.1.3 Open UNIX 8.0.0 UnixWare 7.1.1 : apache multiple vulnerabilities, upgraded to apache-1.3.29 (capegeo at opengroup.org (George Capehart))
Learn from history? (svgn at orbid.be (Serge van Ginderachter (svgn)))
Psexec on *NIX (chris at compucounts.com (Chris Carlson))
I think some one might have screwed-up (adam at huntrecruiting.com (Adam))
Learn from history? (alerta at redsegura.com (Alerta Redsegura))
Consistent browser crash on standard site? (sboone at pyrontechnologies.com (Steve Boone))
Psexec on *NIX (krajicek at ics.muni.cz (Ondrej Krajicek))
Psexec on *NIX (keydet89 at yahoo.com (Harlan Carvey))
Psexec on *NIX (mgargiullo at warpdrive.net (Michael Gargiullo))
Psexec on *NIX (chris at compucounts.com (Chris Carlson))
Psexec on *NIX (whiplash at despammed.com (whiplash))
Psexec on *NIX (hybriz at rego-security.com (hybriz))
Psexec on *NIX (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Learn from history? (svgn at orbid.be (Serge van Ginderachter (svgn)))
Psexec on *NIX (chris at compucounts.com (Chris Carlson))
I think some one might have screwed-up (ph1 at cogeco.ca (David))
Psexec on *NIX (mgargiullo at warpdrive.net (Michael Gargiullo))
Psexec on *NIX (swmike at swm.pp.se (Mikael Abrahamsson))
SUSE Security Announcement: Live CD 9.1 (SuSE-SA:2004:011) (draht at suse.de (Roman Drahtmueller))
Psexec on *NIX (striker at interhact.net (Jon S.))
Psexec on *NIX (security at 303underground.com (Scott Taylor))
Psexec on *NIX (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
Psexec on *NIX (frank at knobbe.us (Frank Knobbe))
Psexec on *NIX (chris at compucounts.com (Chris Carlson))
Psexec on *NIX (pauls at utdallas.edu (Paul Schmehl))
[inbox] RE: Psexec on *NIX (exibar at thelair.com (Exibar))

May 7 (44 messages)

Psexec on *NIX (Ian.Latter at mq.edu.au (Ian Latter))
Psexec on *NIX (Ian.Latter at mq.edu.au (Ian Latter))
[despammed] Re: Psexec on *NIX (whiplash at despammed.com (whiplash))
Psexec on *NIX (full-disclosure at royds.net (Bill Royds))
Get over it (Was: Psexec on *NIX) (chris at compucounts.com (Chris Carlson))
[FD]Questions about odd log entries (adam_thacker at hotmail.com (Adam T))
Eudora file URL buffer overflow (psz at maths.usyd.edu.au (Paul Szabo))
[FD]Questions about odd log entries (nick at virus-l.demon.co.uk (Nick FitzGerald))
[SECURITY] [DSA 501-1] New exim packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Psexec on *NIX (krajicek at ics.muni.cz (Ondrej Krajicek))
Psexec on *NIX (krajicek at ics.muni.cz (Ondrej Krajicek))
Psexec on *NIX (krajicek at ics.muni.cz (Ondrej Krajicek))
Psexec on *NIX (krajicek at ics.muni.cz (Ondrej Krajicek))
Psexec on *NIX (krajicek at ics.muni.cz (Ondrej Krajicek))
NTKernel Personal Firewall (krajicek at ics.muni.cz (Ondrej Krajicek))
Psexec on *NIX (Jos at meltemi.co.uk (Jos Osborne))
Psexec on *NIX (swmike at swm.pp.se (Mikael Abrahamsson))
Psexec on *NIX (Jos at meltemi.co.uk (Jos Osborne))
TINYURL - A powerful tool just got more powerful (gobus at hmj.com (gobus@....com))
Psexec on *NIX (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Psexec on *NIX (xtrecate at spymac.com (xtrecate@...mac.com))
Psexec on *NIX (sean01 at accnet.com.au (Sean Crawford))
problem with stepping stones. (jqxin at iastate.edu (jqxin@...tate.edu))
Psexec on *NIX (mgargiullo at warpdrive.net (Michael Gargiullo))
btchaos (stan at war-driving.org (Stan Johansen))
Psexec on *NIX (sean01 at accnet.com.au (Sean Crawford))
I think some one might have screwed-up (nion at gmx.net (Nico Golde))
Psexec on *NIX (nion at gmx.net (Nico Golde))
Psexec on *NIX (nion at gmx.net (Nico Golde))
Security Hole in HTTP (RFC1945) - Browser-Spoofing (nion at gmx.net (Nico Golde))
Psexec on *NIX (fharvey at securiweb.net (François Harvey))
I think some one might have screwed-up (adam at huntrecruiting.com (Adam))
KDE was hacked (pk95 at yandex.ru (Alexander))
Psexec on *NIX (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Psexec on *NIX (y_avenger_y at ua.fm (sashman))
btchaos (yossarian at planet.nl (yossarian))
Bug in IO bitmap handling? Probably exploitable (2.6.5) (peter at 7pt.net (Peter Maas))
[OpenPKG-SA-2004.020] OpenPKG Security Advisory (ssmtp) (openpkg at openpkg.org (OpenPKG))
Multiple vulnerabilities in 'pizza_party' (morrow.long at yale.edu (H. Morrow Long))
Psexec on *NIX (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
KDE was hacked (jkuperus at planet.nl (Jelmer))
KDE was hacked (seth at tautology.org (Seth Alan Woolley))
RE: problem with stepping stones. (xtrecate at spymac.com (xtrecate@...mac.com))
Psexec on *NIX (xtrecate at spymac.com (xtrecate@...mac.com))

May 8 (20 messages)

Multiple vulnerabilities in 'pizza_party' (xillwillx at yahoo.com (Will Image))
Pound <=1.5 Remote Exploit (Format string bug) (eos-india at linuxmail.org (Eye on Security India))
Multiple vulnerabilities in 'pizza_party' (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Multiple vulnerabilities in 'pizza_party' (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
KDE was hacked (3APA3A at SECURITY.NNOV.RU (3APA3A))
Victory day - Sasser surrenders (etomcat at freemail.hu (Feher Tamas))
Victory day - Sasser surrenders (rainer at ultra-secure.de (Rainer Duffner))
Victory day - Sasser surrenders (arny at ats.s.bawue.de (Thilo Schulz))
Victory day - Sasser surrenders (j at pureftpd.org (Jedi/Sector One))
Victory day - Sasser surrenders (mailinglists at saaboteur.net (Tilo Eilers))
Victory day - Sasser surrenders (poof at fansubber.com (Poof))
I think some one might have screwed-up (runowsk at a.cs.okstate.edu (Rick Runowski))
Victory day - Sasser surrenders (tobias at weisserth.de (Tobias Weisserth))
Re: Hello (ben at bssc.edu.au (Ben))
Victory day - Sasser surrenders (james.bliss at comcast.net (james.bliss@...cast.net))
btchaos (collin at betaversion.net (Collin R. Mulliner))
Victory day - Sasser surrenders (gshively at pivx.com (Geoff Shively))
[waraxe-2004-SA#028 - Multiple vulnerabilities in NukeJokes module for PhpNuke] (come2waraxe at yahoo.com (Janek Vind))
Victory day - Sasser surrenders (guninski at guninski.com (Georgi Guninski))
DEEP SEA PHISHING: Internet Explorer / Outlook Express (1 at malware.com (http-equiv@...ite.com))

May 9 (22 messages)

Registry Watcher (randallm at fidmail.com (RandallM))
Registry Watcher (m.garg at tcs.com (m.garg@....com))
Registry Watcher (marcel_k at web.de (Marcel Krause))
Registry Watcher (cporter at gmail.com (Chris Porter))
Registry Watcher (ph1 at cogeco.ca (David))
registry watcher (onestepto at yahoo.com.au (Paul))
Victory day - Sasser surrenders (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Registry Watcher (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Registry Watcher (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Victory day - Sasser surrenders (poof at fansubber.com (Poof))
Registry Watcher (robertk at home.nl (Robert Kok))
Registry Watcher (smenard at nbnet.nb.ca (Steve Menard))
Registry Watcher (alanme at melmac.co.uk (Alan Melia (Melmac)))
Icecast 2.0.0 preauth overflow (nd at felinemenace.org (ned))
Victory day - Sasser surrenders (rlanguy at hotmail.com (Lan Guy))
Victory day - Sasser surrenders (jkuperus at planet.nl (Jelmer))
List Charter (johnc at grok.org.uk (John Cartwright))
[ GLSA 200405-01 ] Multiple format string vulnerabilities in neon 0.24.4 and earlier (klieber at gentoo.org (Kurt Lieber))
[ GLSA 200405-02 ] Multiple vulnerabilities in LHa (koon at gentoo.org (Thierry Carrez))
Registry Watcher (j.riden at massey.ac.nz (James Riden))
Policy measurement and compliance tools (n30_lists at hotmail.com (n30))
[gentoo-announce] [ GLSA 200405-01 ] Multiple format string vulnerabilities in neon 0.24.4 and earlier (klieber at gentoo.org (Kurt Lieber))

May 10 (35 messages)

CSA-200402-1: Previous Open Webmail vulnerability is exploitable (michel at cycom.se (Michel Blomgren))
OUTLOOK 2003: OuchLook (1 at malware.com (http-equiv@...ite.com))
PaX DoS proof-of-concept (michel at cycom.se (Michel Blomgren))
Monit 4.1 remote shell exploit (HTTP) (michel at cycom.se (Michel Blomgren))
KDE was hacked (thief at bugtraq.org (Richard Johnson))
Windows IPS personal use (n30_lists at hotmail.com (n30))
KDE was hacked (listuser at seifried.org (Kurt Seifried))
KDE was hacked (jasonc at science.org (Jason Coombs))
Victory day - Sasser surrenders (bugtraq at war-driving.org (Marcus Specht))
Windows IPS personal use (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
KDE was hacked (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Sasser Worm ftpd Remote Buffer Overflow Exploit (port 5554) (elvi52001 at yahoo.com (ElviS .de))
Victory day - Sasser surrenders (fulldis at it97.dyndns.org (fd))
Learn from history? (kenng at kpmg.com (Ng, Kenneth (US)))
iDEFENSE: Security Whitepaper on Trusted Computing Platforms (thief at bugtraq.org (Richard Johnson))
iDEFENSE: Security Whitepaper on Trusted Computing Platforms (chris.rs at xtra.co.nz (Chris Smith))
Learn from history? (alerta at redsegura.com (Alerta Redsegura))
iDEFENSE: Security Whitepaper on Trusted Computing Platforms (adam at hif.hu (Szilveszter Adam))
iDEFENSE: Security Whitepaper on Trusted Computing Platforms (thief at bugtraq.org (Richard Johnson))
Learn from history? (lcamtuf at ghettot.org (Michal Zalewski))
Emule 0.42e Remote Denial Of Service Exploit (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon Refresh (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Learn from history? (alerta at redsegura.com (Alerta Redsegura))
msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon Refresh (scottp at dreamwright.com (Scott Phelps))
Re: iDEFENSE: Security Whitepaper on Trusted Computing Platforms (fulldis at it97.dyndns.org (fd))
iDEFENSE: Security Whitepaper on Trusted Computing Platforms (nion at gmx.net (Nico Golde))
Psexec on *NIX (dufresne at winternet.com (Ron DuFresne))
Psexec on *NIX (dufresne at winternet.com (Ron DuFresne))
New IT security magazine (international at dmpfrance.com (Hackademy))
iDEFENSE: Security Whitepaper on Trusted Computing Platforms (thief at bugtraq.org (Richard Johnson))
Registry Watcher (djsnm at djsnm.com (Scott Manley))
Learn from history? (gwen at reptiles.org (Gwendolynn ferch Elydyr))
Learn from history? (lcamtuf at ghettot.org (Michal Zalewski))
Learn from history? (j.riden at massey.ac.nz (James Riden))
Get over it (Was: Psexec on *NIX) (maxvalde at fis.unam.mx (Max Valdez))

May 11 (83 messages)

Advisory 04/2004: Net(Free)BSD Systrace local root vulnerabilitiy (s.esser at e-matters.de (Stefan Esser))
OpenServer 5.0.5 OpenServer 5.0.6 OpenServer 5.0.7 : X sessions which are not started by scologin cannot use the X autho… (please_reply_to_security at sco.com (pl…)
UPDATED OpenServer 5.0.5 OpenServer 5.0.6 OpenServer 5.0.7 : X sessions which are not started by scologin cannot use the… (please_reply_to_security at sco.com (pl…)
MDKSA-2004:042 - Updated rsync packages fixes potential to write outside of directory tree. (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:043 - Updated apache2 packages fixes a denial of service vulnerability in mod_ssl (security at linux-mandrake.com (Mandrake Linux Security Team))
iDEFENSE: Security Whitepaper on Trusted Computing Platforms (list at geeksamazing.com (Al Reust))
Victory day - Sasser surrenders (jworkman at pimpworks.org (Jeff Workman))
outta site outta mind. (kf_lists at secnetops.com (KF (lists)))
outta site outta mind. (jworkman at pimpworks.org (Jeff Workman))
Re: Advisory 04/2004: Net(Free)BSD Systrace local root vulnerability (spender at grsecurity.net (spender@...ecurity.net))
Learn from history? (kluge at fujitsu.com.au (Steffen Kluge))
Registry Watcher (solo at dok.org (Troy Solo))
Vulnerabilites on a network (danielegiuseppe.carlucci at studenti.polito.it (Daniele Carlucci))
Learn from history? (full-disclosure at umtstrial.co.uk (Calum))
Vulnerabilites on a network (mail at oliver-kellermann.de (Oliver Kellermann))
Learn from history? (Jos at meltemi.co.uk (Jos Osborne))
Calcuating Loss (mbs at mistrealm.com (Michael Schaefer))
Calcuating Loss (Jos at meltemi.co.uk (Jos Osborne))
msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon Refresh (3APA3A at SECURITY.NNOV.RU (3APA3A))
Calcuating Loss (keydet89 at yahoo.com (Harlan Carvey))
[SECURITY] [DSA 502-1] New exim-tls packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
iDEFENSE: Security Whitepaper on Trusted Computing Platforms (nion at gmx.net (Nico Golde))
Victory day - Sasser surrenders (rob at cyber-worx.co.uk (Rob Clark))
Calcuating Loss (clint at secureconsulting.com (Clint Bodungen))
Calcuating Loss (Jos at meltemi.co.uk (Jos Osborne))
Victory day - Sasser surrenders (p00p at instable.net (p00p@...table.net))
info on JRE < 1.4.2_04 vulnerability (mark at dolphtech.com (Mark W. Webb))
Victory day - Sasser surrenders (alerta at redsegura.com (Alerta Redsegura))
JRE < 1.4.2_04 vulnerability (dolphsec at dolphtech.com (Dolphsec))
Calcuating Loss (keydet89 at yahoo.com (Harlan Carvey))
Victory day - Sasser surrenders (mducharme at cybergeneration.com (Maxime Ducharme))
PING: Outlook 2003 Spam (1 at malware.com (http-equiv@...ite.com))
JRE < 1.4.2_02 vulnerability (dolphsec at dolphtech.com (Dolphsec))
Calcuating Loss (ggilliss at netpublishing.com (Gregory A. Gilliss))
Calcuating Loss (clint at secureconsulting.com (Clint Bodungen))
Calcuating Loss (hdw at kallisti.se (Anders B Jansson))
JRE < 1.4.2_04 vulnerability (full-disclosure at nym.hush.com (full-disclosure@....hush.com))
Victory day - Sasser surrenders (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Locking up Internet Explorer (godwulf at gmx.net (godwulf@....net))
Calcuating Loss (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Calcuating Loss (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Locking up Internet Explorer (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
Calcuating Loss (madsaxon at direcway.com (madsaxon))
info on JRE < 1.4.2_04 vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Wireless ISPs (geggam692000 at yahoo.com (D B))
MS04-015 - Windows Help Center - Dvdupgrade (se_cur_ity at hotmail.com (morning_wood))
Calcuating Loss (keydet89 at yahoo.com (Harlan Carvey))
Linux Kernel sctp_setsockopt() Integer Overflow (shaunige at yahoo.co.uk (Shaun Colley))
Wireless ISPs (geggam692000 at yahoo.com (D B))
Locking up Internet Explorer (scottp at dreamwright.com (Scott Phelps))
[ GLSA 200405-03 ] ClamAV VirusEvent parameter vulnerability (koon at gentoo.org (Thierry Carrez))
Wireless ISPs (geggam692000 at yahoo.com (D B))
Calcuating Loss (kurtbuff at spro.net (Kurt))
Learn from history? (dufresne at winternet.com (Ron DuFresne))
iDEFENSE: Security Whitepaper on Trusted Computing Platforms (dufresne at winternet.com (Ron DuFresne))
Wireless ISPs (sean at idreus.com (Sean Milheim))
Calcuating Loss (keydet89 at yahoo.com (Harlan Carvey))
Wireless ISPs (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
Wireless ISPs (frank at knobbe.us (Frank Knobbe))
Calcuating Loss (frank at knobbe.us (Frank Knobbe))
Calcuating Loss (kurtbuff at spro.net (Kurt))
[ GLSA 200405-04 ] OpenOffice.org vulnerability when using DAV servers (koon at gentoo.org (Thierry Carrez))
Wireless ISPs (security at 303underground.com (Scott Taylor))
Wireless ISPs (amilabs at optonline.net (amilabs))
surfboard1.1.6 local exploit. (nobody at paranoici.org (Anonymous))
Calcuating Loss (jay at bastille-linux.org (Jay Beale))
Wireless ISPs (geggam692000 at yahoo.com (D B))
Wireless ISPs (frank at knobbe.us (Frank Knobbe))
Wireless ISPs (frank at knobbe.us (Frank Knobbe))
Wireless ISPs (geggam692000 at yahoo.com (D B))
Wireless ISPs (mlists at arhont.com (Konstantin Gavrilenko))
Calcuating Loss (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
NetBSD local root PoC? (chrislist at de-punkt.de (Christopher Kunz))
Wireless ISPs (jworkman at pimpworks.org (Jeff Workman))
Linux Kernel sctp_setsockopt() Integer Overflow (trini at kernel.crashing.org (Tom Rini))
Wireless ISPs (jworkman at pimpworks.org (Jeff Workman))
Wireless ISPs (fulldisc at ultratux.org (Maarten))
Wireless ISPs (fulldisc at ultratux.org (Maarten))
Wireless ISPs (security at 303underground.com (Scott Taylor))
Calcuating Loss (seth at tautology.org (Seth Alan Woolley))
Wireless ISPs (sean at idreus.com (Sean Milheim))
[gentoo-announce] [ GLSA 200405-03 ] ClamAV VirusEvent parameter vulnerability (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200405-04 ] OpenOffice.org vulnerability when using DAV servers (koon at gentoo.org (Thierry Carrez))

May 12 (102 messages)

Wireless ISPs (mlists at arhont.com (Konstantin Gavrilenko))
Wireless ISPs (b.griffin at cqu.edu.au (Brad Griffin))
Victory day - Sasser surrenders (Ian.Latter at mq.edu.au (Ian Latter))
Wireless ISPs (listuser at seifried.org (Kurt Seifried))
Wireless ISPs (fulldisc at ultratux.org (Maarten))
Wireless ISPs (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Linux Kernel sctp_setsockopt() Integer Overflow (s.esser at e-matters.de (Stefan Esser))
Wireless ISPs (geggam692000 at yahoo.com (D B))
Wireless ISPs (mgargiullo at warpdrive.net (Michael Gargiullo))
NTP Vulnerabilities (dante at forethought.net (Dante))
Calcuating Loss (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
removing sasser (marcel_k at web.de (Marcel Krause))
Wireless ISPs (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Wireless ISPs (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Officescan 5.5.6 authentication bug? (casey at networkit.com.au (Casey Ellis))
Remote DoS IE Memory Access Violation (forwarded from bugtraq) (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
NTP Vulnerabilities (kf_lists at secnetops.com (KF (lists)))
Wireless ISPs (nodialtone at comcast.net (Byron Copeland))
Wireless ISPs (julian.ho at sensecurity.org (Julian Ho))
[Fwd: Re: Wireless ISPs] (maclenna at cs.curtin.edu.au (Alexander Maclennan))
Wireless ISPs (chris at improbable.org (Chris Adams))
Wireless ISPs (b.griffin at cqu.edu.au (Brad Griffin))
Mdaemon 7.0.1 IMAP overflow. (nd at felinemenace.org (ned))
Wireless ISPs (geggam692000 at yahoo.com (D B))
Re: Advisory 04/2004: Net(Free)BSD Systrace local root vulnerability (abhilash_scit at rediffmail.com (abhilash verma))
Re: Full-Disclosure digest, Vol 1 #1638 - 32 msgs (doc at docnielsen.dk (Doc Nielsen))
Re: removing sasser (netsys at docnielsen.dk (Doc Nielsen))
removing sasser (tom.koehler at gmx.net (Tom Koehler))
Calcuating Loss (als at thangorodrim.de (Alexander Schreiber))
removing sasser (krajicek at ics.muni.cz (Ondrej Krajicek))
leaking (fangoitia at pandasoftware.es (Felipe Angoitia))
MS Exchange message lost (I.D.S at gmx.de (I.D.S@....de))
Wireless ISPs (jimmy.kuijpers at swift.com (KUIJPERS Jimmy))
leaking (jimmy.kuijpers at swift.com (KUIJPERS Jimmy))
leaking (dave at horsfall.org (Dave Horsfall))
Wireless ISPs (kiwi at oav.net (Xavier Beaudouin))
CHANNEL FREQ'S (ggtyler at foodlion.com (Tyler, Grayling))
leaking (dave at horsfall.org (Dave Horsfall))
leaking? (fangoitia at pandasoftware.es (Felipe Angoitia))
CHANNEL FREQ'S (mlists at arhont.com (Konstantin Gavrilenko))
[OpenPKG-SA-2004.021] OpenPKG Security Advisory (apache) (openpkg at openpkg.org (OpenPKG))
CHANNEL FREQ'S (cta at hcsin.net (Bernie, CTA))
leaking (fangoitia at pandasoftware.es (Felipe Angoitia))
Victory day - Sasser surrenders (rob at cyber-worx.co.uk (Rob Clark))
leaking (Marek.Isalski at smuht.nwest.nhs.uk (Marek Isalski))
leaking (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
leaking (alerta at redsegura.com (Alerta Redsegura))
leaking (jimmy.kuijpers at swift.com (KUIJPERS Jimmy))
leaking (fangoitia at pandasoftware.es (Felipe Angoitia))
leaking (alerta at redsegura.com (Alerta Redsegura))
Wireless ISPs (dufresne at winternet.com (Ron DuFresne))
Wireless ISPs (dufresne at winternet.com (Ron DuFresne))
Microsoft SP2 code demos for developers (helmut_hauser at hotmail.com (Helmut Hauser))
Calcuating Loss (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
Calcuating Loss (frank at knobbe.us (Frank Knobbe))
Wireless ISPs (live4java at stormcenter.net (Mister Coffee))
Calcuating Loss (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
leaking (gem at rellim.com (Gary E. Miller))
leaking (john.duquette at eds.com (Duquette, John))
iDEFENSE: Security Whitepaper on Trusted Computing Platforms (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Registry Watcher (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Wireless ISPs (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Locking up Internet Explorer (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Calcuating Loss (gem at rellim.com (Gary E. Miller))
leaking? (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Wireless ISPs (geggam692000 at yahoo.com (D B))
My Signature (nion at gmx.net (Nico Golde))
Locking up Internet Explorer (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Calcuating Loss (als at thangorodrim.de ('Alexander Schreiber'))
Wireless ISPs (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
what CMS to use for a CERT? (koen4security at hotmail.com (Koen))
iDEFENSE: Security Whitepaper on Trusted Computing Platforms (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Registry Watcher (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Sweex 802.11g router/accesspoint config disclosure / remote config (maniac at maniac.nl (Mark Janssen))
Wireless ISPs (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
Calcuating Loss (frank at knobbe.us (Frank Knobbe))
leaking (nekramer at mindtheater.net (Nancy Kramer))
leaking (nekramer at mindtheater.net (Nancy Kramer))
leaking (sith at sithender.com (sith@...hender.com))
lha vuln from last week (btoovey at igxglobal.com (Brian Toovey))
Calcuating Loss (security at 303underground.com (Scott Taylor))
Calcuating Loss (j.riden at massey.ac.nz (James Riden))
what CMS to use for a CERT? (JBrown at thrupoint.net (Brown, James (Jim)))
leaking (arutha at gmx.de (Alexander Gretencord))
Calcuating Loss (gem at rellim.com (Gary E. Miller))
Wireless ISPs (craig.soderland at sap.com (Soderland, Craig))
Locking up Internet Explorer (thor at pivx.com (Thor Larholm))
Wireless ISPs (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
leaking (alerta at redsegura.com (Alerta Redsegura))
Calcuating Loss (mgargiullo at warpdrive.net (Michael Gargiullo))
Security Warning (king at danger.org (Farrukh Hussain))
NetBSD Security Advisory 2004-007: Systrace systrace_exit() local root (security-officer at netbsd.org (NetBSD Security-Officer))
Avoiding traceability (was: Calculating Loss) (frank at knobbe.us (Frank Knobbe))
Wireless ISPs (security at 303underground.com (Scott Taylor))
Calcuating Loss (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
Wireless ISPs (djsnm at djsnm.com (Scott Manley))
leaking (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
leaking (gem at rellim.com (Gary E. Miller))
leaking? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
3 more messages

May 13 (119 messages)

leaking (sith at sithender.com (sith@...hender.com))
removing sasser (marcel_k at web.de (Marcel Krause))
EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service (mmaiffret at eeye.com (Marc Maiffret))
EEYE: Symantec Multiple Firewall NBNS Response Processing Stack Overflow (mmaiffret at eeye.com (Marc Maiffret))
EEYE: Symantec Multiple Firewall Remote DNS KERNEL Overflow (mmaiffret at eeye.com (Marc Maiffret))
EEYE: Symantec Multiple Firewall NBNS Response Remote Heap Corruption (mmaiffret at eeye.com (Marc Maiffret))
leaking (dave at horsfall.org (Dave Horsfall))
leaking (dave at horsfall.org (Dave Horsfall))
leaking (dave at horsfall.org (Dave Horsfall))
RE: Full-Disclosure MS Exchange message lost-so lets post how (randallm at fidmail.com (RandallM))
FW: Unique Logo demonstrates Personality of Your Business (jlay at ameriben.com (James Lay))
leaking (dave at horsfall.org (Dave Horsfall))
leaking (alerta at redsegura.com (Alerta Redsegura))
RE: Full-Disclosure MS Exchange message lost-so lets post how (manipeto at yahoo.co.uk (Syed Imran Ali))
leaking (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
(AUSCERT AA-2004.02) AUSCERT Advisory - Denial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd) (sean at coombs.anu.edu.au (Sean Batt))
(AUSCERT AA-2004.02) AUSCERT Advisory - Denial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd) (Ian.Latter at mq.edu.au (Ian Latter))
RKDetect - behaviour based rootkit detection utility (offtopic at mail.ru ("offtopic" ))
Symantec Multiple Firewall Remote DNS KERNEL Overflow (jcan at FOA.DK (Jens Andersson))
(CLEAN 0069) ..EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service (jeremy.dhoinne at netasq.com (Jeremy D'Hoinne))
Re: (AUSCERT AA-2004.02) AUSCERT Advisory - Denial of Service Vulnerability (trik-news at gmx.de (Spiro Trikaliotis))
leaking? (fangoitia at pandasoftware.es (Felipe Angoitia))
leaking (fangoitia at pandasoftware.es (Felipe Angoitia))
EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service (jeremy.dhoinne at netasq.com (Jeremy D'Hoinne))
RE: Full-Disclosure MS Exchange message lost-so lets post how (rlanguy at hotmail.com (Lan Guy))
802.11b (others) single packet DoS (michaeltone1975 at telstra.com (michaeltone1975))
[Fwd: Support the Sasser-author fund started] (maclenna at cs.curtin.edu.au (Alexander Maclennan))
leaking (Marek.Isalski at smuht.nwest.nhs.uk (Marek Isalski))
RE: Full-Disclosure MS Exchange message lost-so lets post how (gerhard at fugro-jason.com (Gerhard den Hollander))
Support the Sasser-author fund started (tobias at weisserth.de (Tobias Weisserth))
[Fwd: Support the Sasser-author fund started] (Marek.Isalski at smuht.nwest.nhs.uk (Marek Isalski))
iDEFENSE Security Advisory 05.12.04: Opera Telnet URI Handler File Creation/Truncation Vulnerability (jb at secunia.com (Jakob Balle))
Biometric website authentication (werner.gillmer at enerweb.co.za (Werner Gillmer))
Support the Sasser-author fund started (krajicek at ics.muni.cz (Ondrej Krajicek))
Re: surfboard1.1.6 local exploit. (meredydd at everybuddy.com (Meredydd))
Biometric website authentication (volker.tanger at detewe.de (Volker Tanger))
Support the Sasser-author fund started (Rik.Bobbaers at cc.kuleuven.ac.be (harry))
Support the Sasser-author fund started (ISSecurity at lifenet.org (Ron Jackson))
what CMS to use for a CERT? (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Sasser author (Earl.Keyser at wayzata.k12.mn.us (Earl Keyser))
Security Warning (David.Cushing at hitachisoftware.com (Cushing, David))
Sasser author (keydet89 at yahoo.com (Harlan Carvey))
Support the Sasser-author fund started (john.duquette at eds.com (Duquette, John))
iDEFENSE Security Advisory 05.12.04: Opera Telnet URI Handler File Creation/Truncation Vulnerability (thief at bugtraq.org (Richard Johnson))
Support the Sasser-author fund started (tobias at weisserth.de (Tobias Weisserth))
what CMS to use for a CERT? (tobias at weisserth.de (Tobias Weisserth))
Sasser author (husky_cat at yahoo.com (Andrew Morris))
(AUSCERT AA-2004.02) AUSCERT Advisory - Denial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd) (Jerome.Poggi at hsc.fr (Jerome Poggi))
Sasser author (svgn at orbid.be (Serge van Ginderachter (svgn)))
Calcuating Loss (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Support the Sasser-author fund started (exibar at thelair.com (Exibar))
(AUSCERT AA-2004.02) AUSCERT Advisory - Denial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@vt.…)
Support the Sasser-author fund started (ISSecurity at lifenet.org (Ron Jackson))
Sasser author (larry at larryseltzer.com (Larry Seltzer))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Sasser author (keydet89 at yahoo.com (Harlan Carvey))
what CMS to use for a CERT? (h1o at arago.de (Oliver Heinz))
Support the Sasser-author fund started (mschlosser at eschelon.com (Matthew Schlosser))
Support the Sasser-author fund started (root at transientimages.com (Oliver Raymond))
[SECURITY] [DSA 503-1] New mah-jong packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Sasser author (mail at oliver-kellermann.de (Oliver Kellermann))
Support the Sasser-author fund started (Thierry at Sniff-em.com (Thierry))
Support the Sasser-author fund started (lists at g-clef.net (Aaron Gee-Clough))
(AUSCERT AA-2004.02) AUSCERT Advisory - Den ial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd) (kenng at kpmg.com (Ng, Kenneth (US)))
(AUSCERT AA-2004.02) AUSCERT Advisory - Den ial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@vt…)
[ GLSA 200405-05 ] Utempter symlink vulnerability (klieber at gentoo.org (Kurt Lieber))
Sasser author (keydet89 at yahoo.com (Harlan Carvey))
Avoiding traceability (was: Calculating Loss) (dufresne at winternet.com (Ron DuFresne))
Support the Sasser-author fund started (micah at style.net (Micah McNelly))
(AUSCERT AA-2004.02) AUSCERT Advisory - Denial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd) (gunter.lists at haxor.be (Gunter Luyten))
Sasser author (Thierry at Sniff-em.com (Thierry))
leaking (dufresne at winternet.com (Ron DuFresne))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Support the Sasser-author fund started (partysan_FFF at gmx.net (partysan_FFF@....net))
Support the Sasser-author fund started (merlyn at stonehenge.com (Randal L. Schwartz))
iDEFENSE Security Advisory 05.12.04: Opera Telnet URI Handler File Creation/Truncation Vulnerability (tedu at stanford.edu (Ted Unangst))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Sasser author (sebastian.rother at jpberlin.de (Sebastian Rother))
Support the Sasser-author fund started (exibar at thelair.com (Exibar))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Sasser author (vh at helith.net (van Helsing))
Support the Sasser-author fund started (live4java at stormcenter.net (Mister Coffee))
Sasser author (se_cur_ity at hotmail.com (morning_wood))
Sasser author (rodrigob at suespammers.org (Rodrigo Barbosa))
Sasser author (rodrigob at suespammers.org (Rodrigo Barbosa))
FW: Unique Logo demonstrates Personality of Your Business (jlay at ameriben.com (James Lay))
Support the Sasser-author fund started (keydet89 at yahoo.com (Harlan Carvey))
(AUSCERT AA-2004.02) AUSCERT Advisory - Den ial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd) (seth at tautology.org (Seth Alan Woolley))
(AUSCERT AA-2004.02) AUSCERT Advisory - Denial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd) (exibar at thelair.com (Exibar))
Support the Sasser-author fund started (exibar at thelair.com (Exibar))
Support the Sasser-author fund started (bruen at host49.duncable.cust.sover.net (Stormwalker))
Support the Sasser-author fund started (j.riden at massey.ac.nz (James Riden))
Sasser author (keydet89 at yahoo.com (Harlan Carvey))
Support the Sasser-author fund started (guninski at guninski.com (Georgi Guninski))
POA: Outlook Expresss 6.00 (1 at malware.com (http-equiv@...ite.com))
Support the Sasser-author fund started (j.riden at massey.ac.nz (James Riden))
Sasser author (keydet89 at yahoo.com (Harlan Carvey))
Sasser author (tobias at weisserth.de (Tobias Weisserth))
20 more messages

May 14 (82 messages)

Support the Sasser-author fund started (chows at ozemail.com.au (Gregh))
Sasser author (mail at oliver-kellermann.de (Oliver Kellermann))
RE: Full-Disclosure digest, Vol 1 #1643 - 30 msgs (randallm at fidmail.com (RandallM))
Support the Sasser-author fund started (nick at virus-l.demon.co.uk (Nick FitzGerald))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Support the Sasser-author fund started (Planz235 at hotmail.com (Planz))
RE: Sasser Author (mail at oliver-kellermann.de (Oliver Kellermann))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Support the Sasser-author fund started (measl at mfn.org (J.A. Terranson))
Re: (AUSCERT AA-2004.02) AUSCERT Advisory - Denial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd) (trik-news at gmx.de (Spiro Trikaliotis))
Support the Sasser-author fund started (yand at seabak.com (Yan Doldonov))
Support the Sasser-author fund started (caelyx at gmail.com (Sim Brown))
Call for Participation Workshop DIMVA 2004 (thomas at suse.de (Thomas Biege))
Sasser author (list at nolog.org (list@...og.org))
Sasser author (hdw at kallisti.se (Anders B Jansson))
Re: Support the Sasser-author fund started (charlie at peopleandplanet.org (Charlie Harvey))
DOE updated cybersecurity //no code or 0day sploits// just info (lowdownhaxor at hotmail.com (System Administrator))
Worm of the worm? (rnavarro at tusprofesionales.es (Roberto Navarro - TusProfesionales.es))
(AUSCERT AA-2004.02) AUSCERT Advisory - Denial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd) (gunter.lists at haxor.be (Gunter Luyten))
RE: Full-Disclosure digest, Vol 1 #1643 - 30 msgs (Rik.Bobbaers at cc.kuleuven.ac.be (harry))
Worm of the worm? (prandal at herefordshire.gov.uk (Randal, Phil))
cyberwar against US ? (fcharpen at xmcopartners.com (Frederic Charpentier))
Sasser author (nils.ketelsen at kuehne-nagel.com (Nils Ketelsen))
IE Crash - Anyone Seen This Before? (cryptic_mauler at linuxmail.org (Mike Mauler))
Worm of the worm? (mducharme at cybergeneration.com (Maxime Ducharme))
SUSE Security Announcement: mc (SuSE-SA:2004:012) (thomas at suse.de (Thomas Biege))
cyberwar against US ? (raymond at prolocation.net (Raymond Dijkxhoorn))
Worm of the worm? (frank at knobbe.us (Frank Knobbe))
Sasser author (list at nolog.org (list@...og.org))
Sasser author (tobias at weisserth.de (Tobias Weisserth))
cyberwar against US ? (andrews at mis-cds.com (Andrew Simmons))
Worm of the worm? (andrews at mis-cds.com (Andrew Simmons))
New therad: sasser, costs, support etc alltogether (rms at telekom.yu (Radule Soskic))
Support the Sasser-author fund started (mlists at arhont.com (Konstantin Gavrilenko))
Sasser author (live4java at stormcenter.net (Mister Coffee))
Worm of the worm? (exibar at thelair.com (Exibar))
Support the Sasser-author fund started (dufresne at winternet.com (Ron DuFresne))
Sasser (Author) worm thread (rodrigob at suespammers.org (Rodrigo Barbosa))
Worm of the worm? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
cyberwar against US ? (clint at secureconsulting.com (Clint Bodungen))
cyberwar against US ? (paul at shorttermwhat.com (Paul Bauer))
New therad: sasser, costs, support etc alltogether (larry at larryseltzer.com (Larry Seltzer))
cyberwar against US ? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
cyberwar against US ? (fcharpentier at xmcopartners.com (Frederic Charpentier))
cyberwar against US ? (rnunez at cpiu.us (Rafael Nuñez))
Sasser author (pamatt at centrodiascolto.it (Paolo Mattiangeli))
cyberwar against US ? (raymond at prolocation.net (Raymond Dijkxhoorn))
Sasser & Hackers Against America (bjshedwick at yahoo.com (Bradford Shedwick))
Symantec Multiple Firewall DNS Response Denial-of-Service (PoC) (pk95 at yandex.ru (Alexander))
cyberwar against US ? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Sasser author ( off thread post about duplicate emails ) (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Support the Sasser-author fund started (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Support the Sasser-author fund started (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Orkut fake in the wild (jlacour at zonelabs.com (John LaCour))
Support the Sasser-author fund started (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Support the Sasser-author fund started (tobias at weisserth.de (Tobias Weisserth))
cyberwar against US ? (paul at shorttermwhat.com (Paul Bauer))
cyberwar against US ? (paul at shorttermwhat.com (Paul Bauer))
New therad: sasser, costs, support etc alltogether (tobias at weisserth.de (Tobias Weisserth))
Fw: Sasser author (security at centrodiascolto.it (Paolo Mattiangeli))
New therad: sasser, costs, support etc alltogether (mihai at cs.wisc.edu (Mihai Christodorescu))
New therad: sasser, costs, support etc alltogether (ggilliss at netpublishing.com (Gregory A. Gilliss))
cyberwar against US ? (ggilliss at netpublishing.com (Gregory A. Gilliss))
New therad: sasser, costs, support etc alltogether (clocke at stratitec.com (Chris Locke))
New therad: sasser, costs, support etc alltogether (exibar at thelair.com (Exibar))
Support the Sasser-author fund started (exibar at thelair.com (Exibar))
[ GLSA 200405-07 ] Exim verify=header_syntax buffer overflow (koon at gentoo.org (Thierry Carrez))
Support the Sasser-author fund started - Please stop this thread (m.garg at tcs.com (m.garg@....com))
Orkut fake in the wild (nion at gmx.net (Nico Golde))
Fw: Sasser author (hescominsoon at emmanuelcomputerconsulting.com (William Warren))
IDS/IPS Info (mangomartini2005 at yahoo.com (Debbie))
Re: IDS/IPS Info (mangomartini2005 at yahoo.com (Debbie))
Re: unknown (aunt_sue1 at yahoo.com (aunt_sue1@...oo.com))
No gimmicks here, just great ratsx (gatewft at shawcable.net (Don))
Re: List (mark at youngladies.com (mark@...ngladies.com))
Sasser author ( off thread post about duplicate emails ) (raymond at prolocation.net (Raymond Dijkxhoorn))
Sasser author (hdw at kallisti.se (Anders B Jansson))
New therad: sasser, costs, support etc alltogether (full-disclosure at royds.net (Bill Royds))
[ GLSA 200405-06 ] libpng denial of service vulnerability (koon at gentoo.org (Thierry Carrez))
Support the Sasser-author fund started (guninski at guninski.com (Georgi Guninski))
[gentoo-announce] [ GLSA 200405-07 ] Exim verify=header_syntax buffer overflow (koon at gentoo.org (Thierry Carrez))

May 15 (21 messages)

Fwd: Want Pills XAn@x ' V|@grA ~ Va|ium ( V |Soma| \ :P:ntermin ywrsdazhdyuo (fortney_alyssa at netvision.net.il (alyssa fortney))
[inbox] Re: Fw: Sasser author (exibar at thelair.com (Exibar))
Fw: Sasser author (nick at virus-l.demon.co.uk (Nick FitzGerald))
RE: Full-Disclosure New therad: sasser, costs, support etc alltogether (randallm at fidmail.com (RandallM))
Re: IDS/IPS Info (cheekypeople at sec33.com (Lee))
worms wanted (_ at r4k.net (Stephanie Wehner))
Support the Sasser-author fund started (mlists at arhont.com (Konstantin Gavrilenko))
IE Crash - Anyone Seen This Before? (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
Data about security incidents (mz at sea.uni-linz.ac.at (Markus Zeilinger))
CiSCO IOS 12.* source code stolen? (pk95 at yandex.ru (Alexander))
Support the Sasser-author fund started (derfromme at gmx.de (Christian Fromme))
Orkut fake in the wild (chema at chema.homelinux.org (José María Mateos))
Re: Linux Kernel sctp_setsockopt() Integer Overflow (mjt at tls.msk.ru (Michael Tokarev))
New therad: sasser, costs, support etc alltogether (guninski at guninski.com (Georgi Guninski))
RE: Still Vulnerable in MSIE (jkuperus at planet.nl (Jelmer))
New therad: sasser, costs, support etc alltogether (nekramer at mindtheater.net (Nancy Kramer))
Worm of the worm? (eballen1 at qwest.net (Bruce Ediger))
Re: Linux Kernel sctp_setsockopt() Integer Overflow (jikos at jikos.cz (Jirka Kosina))
Re: Linux Kernel sctp_setsockopt() Integer Overflow (s.esser at e-matters.de (Stefan Esser))
Re: lha buffer overflow(s) again (Ulf.Harnhammar.9485 at student.uu.se (Ulf Härnhammar))
Vuln. MacOSX/Safari: Remote help-call, execute scripts (troelsbay at troelsbay.dk (Troels Bay))

May 16 (24 messages)

Re: Linux Kernel sctp_setsockopt() Integer Overflow (demidov at gleg.net (Evgeny Demidov))
New therad: sasser, costs, support etc alltogether (james.bliss at comcast.net (James Bliss))
Support the Sasser-author fund started (shage at optonline.net (Shane C. Hage))
New therad: sasser, costs, support etc alltogether (rms at telekom.yu (cikasole))
Support the Sasser-author fund started (blsonne at rogers.com (Byron L. Sonne))
Support the Sasser-author fund started (blsonne at rogers.com (Byron L. Sonne))
Support the Sasser-author fund started (mroetto at cox.net (Mike Roetto))
[inbox] Re: Support the Sasser-author fund started (exibar at thelair.com (Exibar))
Support the Sasser-author fund started (james.bliss at comcast.net (James Bliss))
Re: Support the Sasser-author fund started (fulldis at it97.dyndns.org (fd))
Re: Support the Sasser-author fund started (stefan at engelbert.de (Stefan Engelbert))
Re: Support the Sasser-author fund started (listuser at seifried.org (Kurt Seifried))
Fwd: Vuln. MacOSX/Safari: Remote help-call, execute scripts (troelsbay at troelsbay.dk (Troels Bay))
Vuln. MacOSX/Safari: Remote help-call, execute scripts (troelsbay at troelsbay.dk (Troels Bay))
Support the Sasser-author fund started (seth at positivism.org (Seth Alan Woolley))
Support the Sasser-author fund started (dufresne at winternet.com (Ron DuFresne))
Support the Sasser-author fund started (pauls at utdallas.edu (Paul Schmehl))
Support the Sasser-author fund started (npguy at websurfer.com.np (npguy))
RE: Full-Disclosure digest, Vol 1 #1651 - 1 msg (zbd at u.washington.edu (Brian P. Donohue))
Support the Sasser-author fund started (bancroft at america.net (Vic Bancroft))
Support the Sasser-author fund started (guninski at guninski.com (Georgi Guninski))
DefCon 12 WarDriving Contest Registration Now Open (chris at defcon.org (chris))
Support the Sasser-author fund started (scosol at scosol.org (scosol@...sol.org))
[inbox] Re: Support the Sasser-author fund started (blsonne at rogers.com (Byron L. Sonne))

May 17 (41 messages)

Support the Sasser-author fund started (full-disclosure at royds.net (Bill Royds))
iDEFENSE Security Advisory 05.12.04: Opera Telnet URI Handler File Creation/Truncation Vulnerability (chorchert at veedev.de (Christian Horchert))
Support the Sasser-author fund started (StuartF at datacom.co.nz (Stuart Fox (DSL AK)))
WebCT: Cross Site Scripting Vulnerability (spiffomatic64 at hotmail.com (spiffomatic 64))
Worm of the worm? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Sasser author (list at nolog.org (list@...og.org))
Support the Sasser-author fund started (scosol at scosol.org (scosol@...sol.org))
Support the Sasser-author fund started (krajicek at ics.muni.cz (Ondrej Krajicek))
mod_ssl ssl_util_uuencode_binary potential problem (guninski at guninski.com (Georgi Guninski))
New therad: sasser, costs, support etcalltogether (sforrest at hsdwdc.com (Scott Forrest))
Support the Sasser-author fund started (Jos at meltemi.co.uk (Jos Osborne))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Support the Sasser-author fund started (krajicek at ics.muni.cz (Ondrej Krajicek))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
New therad: sasser, costs, support etcalltogether (id3nt at hush.com (id3nt@...h.com))
RE: Still Vulnerable in MSIE (Greg.Kujawa at DiamondCellar.com (Kujawa, Greg))
OpenBSD procfs (advisories at deprotect.com (Deprotect Advisories))
New therad: sasser, costs, support etcalltogether (madsaxon at direcway.com (madsaxon))
[waraxe-2004-SA#029 - Possible remote file inclusion in PhpNuke 6.x - 7.3] (come2waraxe at yahoo.com (Janek Vind))
[waraxe-2004-SA#030 - Multiple vulnerabilities in PhpNuke 6.x - 7.3] (come2waraxe at yahoo.com (Janek Vind))
Outlook 2003 listening on udp/3088 (krajicek at ics.muni.cz (Ondrej Krajicek))
New therad: sasser, costs, support etcalltogether (mgargiullo at warpdrive.net (Michael Gargiullo))
New therad: sasser, costs, support etcalltogether (gem at rellim.com (Gary E. Miller))
New therad: sasser, costs, support etcalltogether (dufresne at winternet.com (Ron DuFresne))
Buffer Overflow in ActivePerl ? (Oliver at greyhat.de (Oliver@...yhat.de))
Support the Sasser-author fund started (shage at optonline.net (Shane C. Hage))
Outlook 2003 listening on udp/3088 (root at transientimages.com (Oliver Raymond))
Outlook 2003 listening on udp/3088 (insecure at ameritech.net (insecure))
New therad: sasser, costs, support etcalltogether (mgargiullo at warpdrive.net (Michael Gargiullo))
Buffer Overflow in ActivePerl ? (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
ROCKET SCIENCE: Outllook 2003 (1 at malware.com (http-equiv@...ite.com))
MDKSA-2004:044 - Updated libuser packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:045 - Updated passwd packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Which XP svchost service listens on port 1025 ? (billybobknob at hotmail.com (BillyBobKnob))
MDKSA-2004:046 - Updated apache packages fix a number of vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Support the Sasser-author fund started (j.riden at massey.ac.nz (James Riden))
Outlook 2003 listening on udp/3088 (r_i_c_h_lists at btopenworld.com (Richard Maudsley))
Support the Sasser-author fund started (bruen at host49.duncable.cust.sover.net (Stormwalker))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Buffer Overflow in ActivePerl ? (se_cur_ity at hotmail.com (morning_wood))

May 18 (88 messages)

IRIX 6.5.24 rpc.mountd infinte loop (agent99 at sgi.com (SGI Security Coordinator))
Starting a "Kick the Sasser Kid's Ass" Fund (smacdougall at idanalytics.com (MacDougall, Shane))
mod_ssl ssl_util_uuencode_binary potential problem (blsonne at rogers.com (Byron L. Sonne))
Buffer Overflow in ActivePerl ? (troelsbay at troelsbay.dk (Troels Bay))
Starting a "Kick the Sasser Kid's Ass" Fund (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Support the Sasser-author fund started (nick at virus-l.demon.co.uk (Nick FitzGerald))
Starting a "Kick the Sasser Kid's Ass" Fund (sean01 at accnet.com.au (Sean Crawford))
Support the Sasser-author fund started (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
OpenBSD procfs (tedu at stanford.edu (Ted Unangst))
Re: Buffer Overflow in ActivePerl ? (rich.sf at lclogic.com (rich.sf@...ogic.com))
Support the Sasser-author fund started (full-disclosure at royds.net (Bill Royds))
Re: Support the Sasser-author fund started (galt at locutus.isu.edu (John Galt))
OUTLOOK 2003: OuchLook (spectral at myrealbox.com (spectral@...ealbox.com))
Buffer Overflow in ActivePerl ? (stefmit at comcast.net (Stef))
Re: Support the Sasser-author fund started (madsaxon at direcway.com (madsaxon))
Support the Sasser-author fund started (als at thangorodrim.de (Alexander Schreiber))
Buffer Overflow in ActivePerl ? (3APA3A at SECURITY.NNOV.RU (3APA3A))
Agobot author is a pacifist? (etomcat at freemail.hu (Feher Tamas))
Advisory 05/2004: phpMyFAQ local file inclusion vulnerability (s.esser at e-matters.de (Stefan Esser))
Agobot author is a pacifist? (listuser at seifried.org (Kurt Seifried))
Agobot author is a pacifist? (larry at larryseltzer.com (Larry Seltzer))
Agobot author is a pacifist? (jan.muenther at nruns.com (jan.muenther@...ns.com))
Support the Sasser-author fund started (nick at virus-l.demon.co.uk (Nick FitzGerald))
Support the Sasser-author fund started (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Buffer Overflow in ActivePerl ? (full-disclosure at royds.net (Bill Royds))
Buffer Overflow in ActivePerl ? (troelsbay at troelsbay.dk (Troels Bay))
Agobot author is a pacifist? (tobias at weisserth.de (Tobias Weisserth))
Re: Buffer Overflow in ActivePerl? (beckert at ecos.de (Axel Beckert))
[SECURITY] [DSA 504-1] New heimdal packages fix potential buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.o…)
Agobot author is a pacifist? (Jos at meltemi.co.uk (Jos Osborne))
Re: Support the Sasser-author fund started (galt at locutus.isu.edu (John Galt))
Agobot author is a pacifist? (larry at larryseltzer.com (Larry Seltzer))
Outlook 2003 listening on udp/3088 (krajicek at ics.muni.cz (Ondrej Krajicek))
Agobot author is a pacifist? (tobias at weisserth.de (Tobias Weisserth))
Outlook 2003 listening on udp/3088 (ageddyn at minitru.org (ageddyn@...itru.org))
[SECURITY] [DSA 504-1] New heimdal packages fix potential buffer overflow (dave at immunitysec.com (Dave Aitel))
Re: Buffer Overflow in ActivePerl? (volker.tanger at detewe.de (Volker Tanger))
Port 5000 (geoincidents at nls.net (Geo.))
Strange ldap Behavior. (craig.soderland at sap.com (Soderland, Craig))
Agobot author is a pacifist? (mailinglists at saaboteur.net (Tilo Eilers))
Re: Buffer Overflow in ActivePerl ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Port 5000 (frank at knobbe.us (Frank Knobbe))
Agobot author is a pacifist? (godsmoke at godsmoke.com (Christopher Blume))
User bypass privs for Mysql?? (joel.esler at rcert-s.army.mil (Esler, Joel - Contractor))
Re: Buffer Overflow in ActivePerl? (igetspam at bigfoot.com (Frederic Krueger))
Buffer Overflow in ActivePerl ? (igetspam at bigfoot.com (Frederic Krueger))
Agobot author is a pacifist? (frank at knobbe.us (Frank Knobbe))
Port 5000 (doj at solar-nexus.com (Dave Ockwell-Jenner))
Port 5000 (administrator at maginetworks.com (J. Theriault))
Strange ldap Behavior. (Simon.Hailstone at orthogonsystems.com (Simon Hailstone))
Re: Buffer Overflow in ActivePerl ? (npguy at websurfer.com.np (npguy))
Port 5000 (fdraven at ehugin.com (FD Raven))
User bypass privs for Mysql?? (james.bliss at comcast.net (James Bliss))
Agobot author is a pacifist? (richard at tccnet.co.uk (Richard Stevens))
User bypass privs for Mysql?? (lists at venom600.org (Ben Nelson))
WebCT: XSS vulnerability (spiffomatic64 at hotmail.com (spiffomatic 64))
User bypass privs for Mysql?? (joel.esler at rcert-s.army.mil (Esler, Joel - Contractor))
Slowly down the drain (pauls at utdallas.edu (Paul Schmehl))
User bypass privs for Mysql?? (remko at elvandar.org (Remko Lodder))
Re: Buffer Overflow in ActivePerl ? (se_cur_ity at hotmail.com (morning_wood))
Support the Sasser-author fund started (als at thangorodrim.de (Alexander Schreiber))
Re: Thanks :) (cm at coretec.at (Cm))
User bypass privs for Mysql?? (mgargiullo at warpdrive.net (Michael Gargiullo))
User bypass privs for Mysql?? (fulldisc at ultratux.org (Maarten))
Slowly down the drain (jeremiah at nur.net (Jeremiah Cornelius))
Strange ldap Behavior. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Port 5000 (joel.esler at rcert-s.army.mil (Esler, Joel - Contractor))
User bypass privs for Mysql?? (joel.esler at rcert-s.army.mil (Esler, Joel - Contractor))
User bypass privs for Mysql?? (lists at venom600.org (Ben Nelson))
Strange ldap Behavior. (craig.soderland at sap.com (Soderland, Craig))
Slowly down the drain (david.vincent at mightyoaks.com (David Vincent))
Slowly down the drain (frank at knobbe.us (Frank Knobbe))
[ GLSA 200405-08 ] Pound format string vulnerability (koon at gentoo.org (Thierry Carrez))
Port 5000 (georger at nls.net (Geo.))
Strange ldap Behavior. (stephane.nasdrovisky at paradigmo.com (stephane nasdrovisky))
RE: Still Vulnerable in MSIE (skid at attglobal.net (skid))
Re: Buffer Overflow in ActivePerl ? (overlord_q at hotmail.com (overlord_q@...mail.com))
Strange ldap Behavior. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Reading WEP-Key from Win 2000 Network Config (marcel_k at web.de (Marcel Krause))
Support the Sasser-author fund started (lists at ktabic.co.uk (ktabic))
MDKSA-2004:047 - Updated kdelibs packages fix URI handling vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
C# Web application security scanner (securityguru at earthlink.net (securityguru@...thlink.net))
Re: Buffer Overflow in ActivePerl ? (rich.sf at lclogic.com (rich.sf@...ogic.com))
(no subject) (steven.mcdonald at insightbb.com (steven.mcdonald))
Port 5000 (jf at probe-networks.de (Jonas Frey (Probe Networks)))
Agobot author is a pacifist? (caspar at cbothmer.org (Caspar Bothmer))
Re: Buffer Overflow in ActivePerl ? (pbruland at kkbr.com (Petter O. Bruland))
Re: Buffer Overflow in ActivePerl? (beckert at ecos.de (Axel Beckert))

May 19 (46 messages)

RE: Still Vulnerable in MSIE (jkuperus at planet.nl (Jelmer))
Strange ldap Behavior. (Webmaster at PhatOrWhack.com (Steele))
User bypass privs for Mysql?? (npguy at websurfer.com.np (npguy))
Re: Document (cm at coretec.at (Cm))
Slowly down the drain (jasonc at science.org (Jason Coombs))
Advisory 06/2004: libneon date parsing vulnerability (s.esser at e-matters.de (Stefan Esser))
Advisory 07/2004: CVS remote vulnerability (s.esser at e-matters.de (Stefan Esser))
Advisory 08/2004: Subversion remote vulnerability (s.esser at e-matters.de (Stefan Esser))
[SECURITY] [DSA 505-1] New cvs packages fix remote exploit (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA 506-1] New neon packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
FreeBSD Security Advisory FreeBSD-SA-04:10.cvs (security-advisories at freebsd.org (FreeBSD Security Advisories))
Re: Buffer Overflow in ActivePerl ? (cjs at cynic.net (Curt Sampson))
SUSE Security Announcement: cvs (SuSE-SA:2004:013) (krahmer at suse.de (Sebastian Krahmer))
[SECURITY] [DSA 507-1] New cadaver packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[ GLSA 200405-09 ] ProFTPD Access Control List bypass vulnerability (klieber at gentoo.org (Kurt Lieber))
I Got Hacked. Now What Do I Do? (adolfohermosin at yahoo.es (A.H.))
I Got Hacked. Now What Do I Do? (troelsbay at troelsbay.dk (Troels Bay))
I Got Hacked. Now What Do I Do? (pjfraser at netspace.net.au (Paul Fraser))
Strange ldap Behavior. (lists at g-clef.net (Aaron Gee-Clough))
I Got Hacked. Now What Do I Do? (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
I Got Hacked. Now What Do I Do? (troelsbay at troelsbay.dk (Troels Bay))
I Got Hacked. Now What Do I Do? (keydet89 at yahoo.com (Harlan Carvey))
Is there any open source project support virtual machines (jqxin at iastate.edu (Jianqiang Xin))
Ph0rum phorum_uriauth replay attack (mlists at arhont.com (Konstantin Gavrilenko))
Is there any open source project support virtual machines (mducharme at cybergeneration.com (Maxime Ducharme))
Agobot author is a pacifist? (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Slowly down the drain (full-disclosure at umtstrial.co.uk (Calum))
Is there any open source project support virtual machines (p00p at instable.net (p00p@...table.net))
[ GLSA 200405-10 ] Icecast denial of service vulnerability (koon at gentoo.org (Thierry Carrez))
I Got Hacked. Now What Do I Do? (adolfohermosin at yahoo.es (A.H.))
Strange ldap Behavior. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Slowly down the drain (security at centrodiascolto.it (Paolo Mattiangeli))
MDKSA-2004:048 - Updated cvs packages fix remotely exploitable vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:049 - Updated libneon packages fix heap variable overflow issues (security at linux-mandrake.com (Mandrake Linux Security Team))
[ GLSA 200405-11 ] KDE URI Handler Vulnerabilities (koon at gentoo.org (Thierry Carrez))
agobot source code (asp at webexc.com (Ben Timby))
Is there any open source project support virtual machines (full-disclosure at nym.hush.com (full-disclosure@....hush.com))
[OpenPKG-SA-2004.022] OpenPKG Security Advisory (cvs) (openpkg at openpkg.org (OpenPKG))
[OpenPKG-SA-2004.023] OpenPKG Security Advisory (subversion) (openpkg at openpkg.org (OpenPKG))
Is there any open source project support virtual machines (vladimir at arobas.net (Vladimir Parkhaev))
SGI ProPack 3: Kernel Update #1 - Security and other fixes (agent99 at sgi.com (SGI Security Coordinator))
SGI ProPack v2.4: Kernel Update #4 - Security and other fixes (agent99 at sgi.com (SGI Security Coordinator))
C# Web application security scanner (mbs at mistrealm.com (Michael Schaefer))
Is there any open source project support virtual machines (ryan at nym.hush.com (ryan@....hush.com))
[OpenPKG-SA-2004.024] OpenPKG Security Advisory (neon) (openpkg at openpkg.org (OpenPKG))
SV: Is there any open source project support virtual machines (mail at mightypalm.dk (Anders Palm))

May 20 (24 messages)

agobot source code (nick at virus-l.demon.co.uk (Nick FitzGerald))
C# Web application security scanner (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
MDKSA-2004:046-1 - apache-mod_perl packages are now available (security at linux-mandrake.com (Mandrake Linux Security Team))
Is there any open source project support virtual machines (rainer at ultra-secure.de (Rainer Duffner))
Is there any open source project support virtual machines (nion at gmx.net (Nico Golde))
C# Web application security scanner (nion at gmx.net (Nico Golde))
C# Web application security scanner (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
CVS security fix (alerta at redsegura.com (Alerta Redsegura))
C# Web application security scanner (prp17 at adelphia.net (Phillip R. Paradis))
C# Web application security scanner (dotsecure at gmail.com (Martin Mkrtchian))
[ GLSA 200405-12 ] CVS heap overflow vulnerability (koon at gentoo.org (Thierry Carrez))
[ GLSA 200405-13 ] neon heap-based buffer overflow (koon at gentoo.org (Thierry Carrez))
[ GLSA 200405-14 ] Buffer overflow in Subversion (condordes at gentoo.org (Joshua J. Berry))
[ GLSA 200405-15 ] cadaver heap-based buffer overflow (koon at gentoo.org (Thierry Carrez))
ActivePerl Perl2Exe [was] Buffer Overflow in ActivePerl ? (se_cur_ity at hotmail.com (morning_wood))
C# Web application security scanner (securityguru at earthlink.net (securityguru@...thlink.net))
ActivePerl Perl2Exe [was] Buffer Overflow in ActivePerl ? (clint at secureconsulting.com (Clint Bodungen))
C# Web application security scanner (dufresne at winternet.com (Ron DuFresne))
C# Web application security scanner (dotsecure at gmail.com (Martin Mkrtchian))
C# Web application security scanner (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Auditor security collection released - The Swiss Army Knife for security assessments (mmo at remote-exploit.org (Max))
Auditor security collection released - a swiss army knife for security assessments. (mmo at remote-exploit.org (Max))
ActivePerl Perl2Exe [was] Buffer Overflow in ActivePerl ? (Stephen.Blass at asu.edu (Stephen Blass))
RE: Vuln. MacOSX/Safari: Remote help-call, execute scripts (axora at myrealbox.com (Jose Commins))

May 21 (21 messages)

C# Web application security scanner (sean01 at accnet.com.au (Sean Crawford))
Eudora 6.1.1 attachment spoof, LaunchProtect (psz at maths.usyd.edu.au (Paul Szabo))
RE: Internet explorer .clsid vulnerability (thor at pivx.com (Thor Larholm))
Gnumeric and Applix can modify locked Excel files? (dave at horsfall.org (Dave Horsfall))
Auditor security collection released - The Swiss Army Knife for security assessments (vladimir at arobas.net (Vladimir Parkhaev))
Gnumeric and Applix can modify locked Excel files? (psz at maths.usyd.edu.au (Paul Szabo))
Gnumeric and Applix can modify locked Excel files? (dave at horsfall.org (Dave Horsfall))
Web interface for full-disclosure and others (vertex at securitytrap.com (vertex))
ActivePerl Perl2Exe [was] Buffer Overflow in ActivePerl ? (se_cur_ity at hotmail.com (morning_wood))
[TURBOLINUX SECURITY INFO] 21/May/2004 (security-announce at turbolinux.co.jp (Turbolinux))
Web interface for full-disclosure and others (hescominsoon at emmanuelcomputerconsulting.com (William Warren))
Stupid Phishing Tricks (1 at malware.com (http-equiv@...ite.com))
Web interface for full-disclosure and others (vertex at securitytrap.com (vertex))
C# Web application security scanner (live4java at stormcenter.net (Mister Coffee))
[OpenPKG-SA-2004.025] OpenPKG Security Advisory (rsync) (openpkg at openpkg.org (OpenPKG))
C# Web application security scanner (dufresne at winternet.com (Ron DuFresne))
C# Web application security scanner (denis at dimick.net (Denis Dimick))
C# Web application security scanner (sean01 at accnet.com.au (Sean Crawford))
CVS Entry Line Overflow EXPLOIT ... (elvi52001 at yahoo.com (ElviS .de))
[ GLSA 200405-17 ] Multiple vulnerabilities in metamail (koon at gentoo.org (Thierry Carrez))
[ GLSA 200405-16 ] Multiple XSS Vulnerabilities in SquirrelMail (rajiv at gentoo.org (Rajiv Aaron Manglani))

May 22 (14 messages)

Remember the subject about posting the exploit? (randallm at fidmail.com (RandallM))
BNBT BitTorrent Tracker Denial Of Service (badpack3t at security-protocols.com (badpack3t))
[inbox] Remember the subject about posting the exploit? (exibar at thelair.com (Exibar))
Password in the Activations Email (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Password in the Activations Email (kye at lewislan.id.au (Kye Lewis))
MDKSA-2004:050 - Updated kernel packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Allegro RomPager/2.10 DoS exploit (seth at tautology.org (Seth Alan Woolley))
Exploit different (rosalina at linuxmail.org (Rosalina Hamar))
Exploit different (chorchert at veedev.de (Christian Horchert))
ha ha ha (securityguru at vp.pl (securityguru@...pl))
The "Alexis de Tocqueville Institution" (1 at malware.com (http-equiv@...ite.com))
not interesting irc log (securityguru at vp.pl (securityguru@...pl))
ha ha ha (vxdude2003 at yahoo.com (VX Dude))
not interesting irc log (vxdude2003 at yahoo.com (VX Dude))

May 23 (20 messages)

Re: ha ha ha (madduck at madduck.net (martin f krafft))
New changes (bugzilla at redhat.com (Bugzilla))
ha ha ha (micah at style.net (Micah McNelly))
Password in the Activations Email (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
CVS Entry Line Overflow EXPLOIT ... (npguy at websurfer.com.np (npguy))
[ GLSA 200405-18 ] Buffer Overflow in Firebird (koon at gentoo.org (Thierry Carrez))
browser hijack by apache sites (filbert at pandora.be (Filbert))
C# Web application security scanner (krajicek at ics.muni.cz (Ondrej Krajicek))
[SECURITY] [DSA 508-1] New xpcd packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Gentoo-announce flood (chema at chema.homelinux.org (José María Mateos))
browser hijack by apache sites (geggam692000 at yahoo.com (D B))
Gentoo-announce flood (tobias at weisserth.de (Tobias Weisserth))
Gentoo-announce flood (kf_lists at secnetops.com (KF (lists)))
Gentoo-announce flood (luke at normanonline.co.uk (Luke Norman))
Gentoo-announce flood (kf_lists at secnetops.com (KF (lists)))
The "Alexis de Tocqueville Institution" (d.huecking at gmx.net (David Huecking))
Gentoo-announce flood (hggdh at comcast.net (hggdh))
Support the Sasser-author fund started (chows at ozemail.com.au (Gregh))
!! Conference Program Computer Security Mexico 2004 !! (cguel at seguridad.unam.mx (Juan Carlos Guel Lopez))
!! Conference Program Computer Security Mexico 2004 !! (seguridad at seguridad.unam.mx (Seguridad en Computo - UNAM))

May 24 (31 messages)

browser hijack by apache sites (Ian.Latter at mq.edu.au (Ian Latter))
RE: Incoming Msg (bugzilla at redhat.com (Bugzilla))
Off topic (geggam692000 at yahoo.com (D B))
Re: Hi (cm at coretec.at (Cm))
irc over ssl (legian at otenet.gr (Giannakis Eleftherios))
irc over ssl (fulldisc at ultratux.org (Maarten))
Netgear RP114 URL filter fails if URL is too long (marc.ruef at computec.ch (Marc Ruef))
irc over ssl (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
browser hijack by apache sites (etomcat at freemail.hu (Feher Tamas))
irc over ssl (m0rtis at adelphia.net (Mortis))
browser hijack by apache sites (filbert at pandora.be (Filbert))
Bobax and Kibuv (joe at joesmith.homeip.net (joe smith))
SSH URI handler remote arbitrary code execution (kang at insecure.ws (kang))
Bobax and Kibuv (tobias at weisserth.de (Tobias Weisserth))
irc over ssl (dsolaro at coffeehaus.com (Denis Solaro))
C# Web application security scanner (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Bobax and Kibuv (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
irc over ssl (dufresne at winternet.com (Ron DuFresne))
DoS in Vocaltec VoIP gateway in ASN.1/H.323/H.225 stack (pk95 at yandex.ru (Alexander))
irc over ssl (ragingsolitude at insightbb.com (adam))
Michael Stift/IT/apss/at ist außer Haus. (Michael.Stift at apss.at (Michael Stift))
irc over ssl (rthompson at rrmm.net (Rick Thompson))
irc over ssl (ragingsolitude at insightbb.com (adam))
MSN Contact Blacklisting (dispacct at hotmail.com (Dean))
irc over ssl (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
irc over ssl (fulldisc at ultratux.org (Maarten))
Notification (mfrd at attitudex.com (Mfrd))
Microsoft Defaced ( again ) (se_cur_ity at hotmail.com (morning_wood))
MSN Contact Blacklisting (jbistogood at hotmail.com (Jon))
irc over ssl (dufresne at winternet.com (Ron DuFresne))
irc over ssl (dsolaro at freenet.de (Denis Solaro))

May 25 (53 messages)

irc over ssl (dsolaro at coffeehaus.com (Denis Solaro))
MSN Contact Blacklisting (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
irc over ssl (lionelhendricks at cox.net (Lionel Hendricks))
irc over ssl (dufresne at winternet.com (Ron DuFresne))
irc over ssl (dufresne at winternet.com (Ron DuFresne))
Fwd: Notification (myuu at pojo.com (Collin))
Securitytrap updated (vertex at securitytrap.com (vertex))
SSL compliant IRCd's? (ge at egotistical.reprehensible.net (Gadi Evron))
irc over ssl (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Cisco's stolen code (bugtracklist at freemail.hu (B$H))
Fwd: Notification (smenard at nbnet.nb.ca (Steve Menard))
irc over ssl (fangoitia at pandasoftware.es (Felipe Angoitia))
Cisco's stolen code (tobias at weisserth.de (Tobias Weisserth))
Cisco's stolen code (Simon.Hailstone at orthogonsystems.com (Simon Hailstone))
irc over ssl (dsolaro at freenet.de (Denis Solaro))
SSL compliant IRCd's? (dsolaro at freenet.de (Denis Solaro))
SSL compliant IRCd's? (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Cisco's stolen code (vxdude2003 at yahoo.com (VX Dude))
SSL compliant IRCd's? (arny at ats.s.bawue.de (Thilo Schulz))
irc over ssl (DaveHowe at cmn.sharp-uk.co.uk (Dave Howe))
Odd packet? (chows at ozemail.com.au (Gregh))
Odd packet? (full-disclosure at nym.hush.com (full-disclosure@....hush.com))
SSL compliant IRCd's? (full-disclosure at nospam.wafel.org (Jorrit Kronjee))
Odd packet? (dufresne at winternet.com (Ron DuFresne))
irc over ssl (dufresne at winternet.com (Ron DuFresne))
SSL compliant IRCd's? (petard at freeshell.org (petard))
Cisco's stolen code (btoovey at igxglobal.com (Brian Toovey))
[ GLSA 200405-19 ] Opera telnet URI handler file creation/truncation vulnerability (klieber at gentoo.org (Kurt Lieber))
Cisco's stolen code (tobias at weisserth.de (Tobias Weisserth))
WiredRed E/Pop (joshua at vologic.com (Joshua Bright))
Cisco's stolen code (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Cisco's stolen code (nbates at wpni.com (Nathan Bates))
Cisco's stolen code (keydet89 at yahoo.com (Harlan Carvey))
Cisco's stolen code (btoovey at igxglobal.com (Brian Toovey))
Cisco's stolen code (seth at tautology.org (Seth Alan Woolley))
ERRATA: [ GLSA 200405-16 ] Multiple XSS Vulnerabilities in SquirrelMail (klieber at gentoo.org (Kurt Lieber))
Cisco's stolen code (madsaxon at direcway.com (madsaxon))
Cisco's stolen code (kenng at kpmg.com (Ng, Kenneth (US)))
irc over ssl (kenng at kpmg.com (Ng, Kenneth (US)))
Cisco's stolen code (keydet89 at yahoo.com (Harlan Carvey))
Cisco's stolen code (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Odd packet? (fulldisc at ultratux.org (Maarten))
[ GLSA 200405-20 ] Insecure Temporary File Creation In MySQL (koon at gentoo.org (Thierry Carrez))
Cisco's stolen code (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Odd packet? (chows at ozemail.com.au (Gregh))
Odd packet? (ouz at people.it (Valentino Squilloni - Ouz))
Cisco's stolen code (vxdude2003 at yahoo.com (VX Dude))
Odd packet? (fulldisc at ultratux.org (Maarten))
Cisco's stolen code (dufresne at winternet.com (Ron DuFresne))
New security ezine released (ihcteam at altern.org (IHC team))
Odd packet? (ssch at wheel.dk (Steffen Schumacher))
defamatory joe job attack by botnet (kedves at attglobal.net (Jean-Marie Monnier))
defamatory joe job attack by botnet (kedves at attglobal.net (Jean-Marie Monnier))

May 26 (89 messages)

Odd packet? (fulldisc at ultratux.org (Maarten))
Cisco's stolen code (fulldisc at ultratux.org (Maarten))
Re: Cisco's stolen code (ericscher at mac.com (Eric Scher))
Re: Cisco's stolen code (hackerwacker at cybermesa.com (James Edwards))
IDS WIth TCP Reset and SPAN (daind at qwest.net (Dain Deutschman))
browser hijack by apache sites (thijs at dalhuijsen.com (Matthijs Dalhuijsen))
Re: Cisco's stolen code (tcleary2 at csc.com.au (tcleary2@....com.au))
Re: Cisco's stolen code (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Re: Cisco's stolen code (x30n at digrev.org (x30n@...rev.org))
Orenosv HTTP/FTP Server Denial Of Service (badpack3t at security-protocols.com (badpack3t))
Re: Cisco's stolen code (hackerwacker at cybermesa.com (James Edwards))
Re: Cisco's stolen code (adam at hif.hu (Adam Szilveszter))
Cisco's stolen code (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
Cisco's stolen code (tobias at weisserth.de (Tobias Weisserth))
Odd packet? (ouz at people.it (Valentino Squilloni - Ouz))
Re: Cisco's stolen code (tobias at weisserth.de (Tobias Weisserth))
Who watches your steps? Big Brother 'n' da alienz! (etomcat at freemail.hu (Feher Tamas))
Odd packet? (ouz at people.it (Valentino Squilloni - Ouz))
Re: Cisco's stolen code (Marek.Isalski at smuht.nwest.nhs.uk (Marek Isalski))
Cisco's stolen code (dave at horsfall.org (Dave Horsfall))
MSN Contact Blacklisting (krajicek at ics.muni.cz (Ondrej Krajicek))
RE: [ GLSA 200405-18 ] Buffer Overflow in Firebird (b0fnet at yahoo.com (b0f))
Cisco's stolen code (lists at ktabic.co.uk (ktabic))
Cisco's stolen code (fulldisc at sun.consumer.org.il (Shachar Shemesh))
Cisco's stolen code (lksi.pikett at rtc.ch (Pikett/LKSI))
New security ezine released (nicob at nicob.net (Nicob))
Odd packet? (ssch at wheel.dk (Steffen Schumacher))
Re: Cisco's stolen code (coldfire at shady.org (Cold Fire))
SUSE Security Announcement: kdelibs (SuSE-SA:2004:014) (krahmer at suse.de (Sebastian Krahmer))
Nocooking ezine (ihcteam at altern.org (IHC team))
MSN Contact Blacklisting (j at pureftpd.org (Jedi/Sector One))
IEBUG : All Information Related to Internet Explorer and Outlook (liudieyu at umbrella.name (liudieyu@...rella.name))
FreeBSD Security Advisory FreeBSD-SA-04:11.msync (security-advisories at freebsd.org (FreeBSD Security Advisories))
Cisco's stolen code (tobias at weisserth.de (Tobias Weisserth))
Odd packet? (full-disclosure at nym.hush.com (full-disclosure@....hush.com))
Vendor casual towards vulnerability found in product (stevenr at mastek.com (stevenr@...tek.com))
Odd packet? (mklinke at futzin.com (Mike Klinke))
Re: Cisco's stolen code (ericscher at mac.com (Eric Scher))
DoS in MiniShare 1.3.2 (fdonato at autistici.org (Donato Ferrante))
Vendor casual towards vulnerability found in product (keydet89 at yahoo.com (Harlan Carvey))
Re: Cisco's stolen code (Glenn_Everhart at bankone.com (Glenn_Everhart@...kone.com))
Re: Msg reply (shaunige at yahoo.co.uk (Shaunige))
Vendor casual towards vulnerability found in product (ge at egotistical.reprehensible.net (Gadi Evron))
Re: Cisco's stolen code (live4java at stormcenter.net (Mister Coffee))
Vendor casual towards vulnerability found in product (se_cur_ity at hotmail.com (morning_wood))
Re: Cisco's stolen code (tobias at weisserth.de (Tobias Weisserth))
Vendor casual towards vulnerability found in product (stevenr at mastek.com (stevenr@...tek.com))
Odd packet? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Cisco's stolen code (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Odd packet? (ssch at wheel.dk (Steffen Schumacher))
iDEFENSE Security Advisory 05.26.04: 3Com OfficeConnect Remote 812 ADSL Router Telnet Protocol Denial of Service Vulner… (idlabs-advisories at idefense.com (idla…)
Cisco IOS Source Code For Sale (cisc0guru2004 at yahoo.com (CiscoGuru))
SGI Advanced Linux Environment 3 Security Update #1 (agent99 at sgi.com (SGI Security Coordinator))
Re: Cisco's stolen code (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[ GLSA 200405-21 ] Midnight Commander: Multiple vulnerabilities (klieber at gentoo.org (Kurt Lieber))
[ GLSA 200405-22 ] Apache 1.3: Multiple vulnerabilities (klieber at gentoo.org (Kurt Lieber))
Re: Cisco's stolen code (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
IRIX libcpr vulnerability (agent99 at sgi.com (SGI Security Coordinator))
Vendor casual towards vulnerability found in product (keydet89 at yahoo.com (Harlan Carvey))
Re: Cisco's stolen code (jbdubbs at jbdubbs.com (Jason Weisberger))
Odd packet? (jeff-kell at utc.edu (Jeff Kell))
Odd packet? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Odd packet? (ssch at wheel.dk (Steffen Schumacher))
Re: Cisco's stolen code (fulldisc at ultratux.org (Maarten))
Imaging Operating Systems (mbs at mistrealm.com (Michael Schaefer))
New security ezine released (chris at roothell.org (Christian Ney))
Re: IRIX libcpr vulnerability (jschauma at netmeister.org (Jan Schaumann))
Re: Cisco's stolen code (live4java at stormcenter.net (Mister Coffee))
Odd packet? (skip at duckwall.net (Skip Duckwall))
The author of the Randex Worm family Busted !! (elvi52001 at yahoo.com (ElviS .de))
Re: Cisco's stolen code (security at centrodiascolto.it (Paolo Mattiangeli))
Re: Cisco's stolen code (rodrigo at intellicomp.cl (Rodrigo Gutierrez))
Question About International Disclosure (tommy at providesecurity.com (Tom))
Re: Cisco's stolen code (live4java at stormcenter.net (Mister Coffee))
Cisco's stolen code (seth at tautology.org (Seth Alan Woolley))
Imaging Operating Systems (charles.schmidt at cs-is.biz (Charles Schmidt (CSIS)))
Re: Cisco's stolen code (dufresne at winternet.com (Ron DuFresne))
Question About International Disclosure (dufresne at winternet.com (Ron DuFresne))
Imaging Operating Systems (shawn.cox at pcca.com (Shawn Cox))
Imaging Operating Systems (j.riden at massey.ac.nz (James Riden))
Re: Cisco's stolen code (benjamin at seattlefenix.net (Benjamin Krueger))
Re: Cisco's stolen code (live4java at stormcenter.net (Mister Coffee))
Imaging Operating Systems (sgmasood at yahoo.com (S G Masood))
Imaging Operating Systems (PerrymonJ at bek.com (Perrymon, Josh L.))
Imaging Operating Systems (mlachniet at sequoianet.com (Lachniet, Mark))
Imaging Operating Systems (sam at fireburst.co.uk (Sam Sharpe))
Imaging Operating Systems (lionelhendricks at cox.net (Lionel Hendricks))
[sb] [ GLSA 200405-22 ] Apache 1.3: Multiple vulnerabilities (klieber at gentoo.org (Kurt Lieber))
Cisco's stolen code (b.griffin at cqu.edu.au (Brad Griffin))

May 27 (68 messages)

Imaging Operating Systems (vertex at securitytrap.com (vertex))
Imaging Operating Systems (Zach.Forsyth at kiandra.com (Zach Forsyth))
Re: Cisco's stolen code (dufresne at winternet.com (Ron DuFresne))
Imaging Operating Systems (seclists at stratitec.com (defiance))
MDKA-2004:027 - Updated mandrake-doc packages are available (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKA-2004:028 - Updated postfix packages provide minor bugfixes and new documentation (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:051 - Updated mailman packages fix password retrieval vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:052 - Updated kolab-server package fixes world readable file vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: Cisco's stolen code (live4java at stormcenter.net (Mister Coffee))
Re: Cisco's stolen code (dufresne at winternet.com (Ron DuFresne))
Re: Cisco's stolen code (tcleary2 at csc.com.au (tcleary2@....com.au))
Re: Cisco's stolen code (tcleary2 at csc.com.au (tcleary2@....com.au))
Re: Cisco's stolen code (tcleary2 at csc.com.au (tcleary2@....com.au))
Vendor casual towards vulnerability found in product (capegeo at opengroup.org (George Capehart))
Vendor casual towards vulnerability found in product (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Odd packet? (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
IDS WIth TCP Reset and SPAN (dila at myrealbox.com (dila))
Re: [ GLSA 200405-18 ] Buffer Overflow in Firebird (kf_lists at secnetops.com (KF (lists)))
Re: [ GLSA 200405-18 ] Buffer Overflow in Firebird (kf_lists at secnetops.com (KF (lists)))
Cisco IOS Source Code For Sale (pb+sp4mmers at mlsub.buehler.net (Philipp Buehler))
Cisco's stolen code (seth at tautology.org (Seth Alan Woolley))
Imaging Operating Systems (krajicek at ics.muni.cz (Ondrej Krajicek))
Cisco's stolen code (b.griffin at cqu.edu.au (Brad Griffin))
full-disclosure search engine (irado at hotpop.com (irado))
full-disclosure search engine (administrator at maginetworks.com (J. Theriault))
Cisco's stolen code (Azerail at supersecretninjaskills.com (Azerail))
Cisco's stolen code (Azerail at supersecretninjaskills.com (Azerail))
Watchguard Firebox 500 {Scan=clean} (chad at qpalzm.com (Chad Frerer))
Odd packet? (ssch at wheel.dk (Steffen Schumacher))
[ GLSA 200405-23 ] Heimdal: Kerberos 4 buffer overflow in kadmin (klieber at gentoo.org (Kurt Lieber))
Cisco's stolen code (kenng at kpmg.com (Ng, Kenneth (US)))
New security ezine released (nick at virus-l.demon.co.uk (Nick FitzGerald))
Imaging Operating Systems (nick at virus-l.demon.co.uk (Nick FitzGerald))
Imaging Operating Systems (Tom.Chmielarski at motorola.com (Chmielarski TOM-ATC090))
Re: Cisco's stolen code (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[OpenPKG-SA-2004.026] OpenPKG Security Advisory (apache) (openpkg at openpkg.org (OpenPKG))
not interesting irc log (sschlesi at chello.at (sschlesi@...llo.at))
Imaging Operating Systems (fulldisc at ultratux.org (Maarten))
FW: Re: Cisco's stolen code (fulldisc at ultratux.org (Maarten))
Rogers Cable Canada (1 at malware.com (http-equiv@...ite.com))
IDS WIth TCP Reset and SPAN (dufresne at winternet.com (Ron DuFresne))
Looking for some input (sjohnston at libertysite.com (Shannon Johnston))
Imaging Operating Systems (fulldisc at ultratux.org (Maarten))
Imaging Operating Systems (kmc at eircom.net (Kevin Connolly))
iDEFENSE Security Advisory 05.27.04: 3Com OfficeConnect Remote 812 ADSL Router Authentication Bypass Vulnerability (idlabs-advisories at idefense.com (idlabs-a…)
Imaging Operating Systems (krajicek at ics.muni.cz (Ondrej Krajicek))
The Dangers of Cross-Site-Scripting: Rogers Hi-Speed Internet Network [Canada] (1 at malware.com (http-equiv@...ite.com))
IDS WIth TCP Reset and SPAN (security at brvenik.com (Jason))
Imaging Operating Systems (fulldisc at ultratux.org (Maarten))
Imaging Operating Systems (Glenn_Everhart at bankone.com (Glenn_Everhart@...kone.com))
Cisco's stolen code (seth at positivism.org (Seth Alan Woolley))
Odd packet? (ouz at people.it (Valentino Squilloni - Ouz))
Imaging Operating Systems (WilliamsJonathan at JohnDeere.com (Williams Jon))
IDS WIth TCP Reset and SPAN (Robert.MacDonald at Haworth.com (Robert MacDonald))
Looking for some input (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
iDEFENSE Security Advisory 05.27.04: 3Com OfficeConnect Remote 812 ADSL Router Authentication Bypass Vulnerability (seth at tautology.org (Seth Alan Woolley))
Imaging Operating Systems (epic at hack3r.com (Epic))
Cisco IOS Source Code For Sale (michael at puffin.tamucc.edu (Michael Williamson))
Re: Linux Kernel sctp_setsockopt() Integer Overflow (mjt at tls.msk.ru (Michael Tokarev))
IDS WIth TCP Reset and SPAN (phathat at hushmail.com (Phathat))
Bypassing "smart" IDSes with misdirected frames? (long and boring) (lcamtuf at ghettot.org (Michal Zalewski))
IDS WIth TCP Reset and SPAN (dufresne at winternet.com (Ron DuFresne))
lists, autoresponders, and netiquette (michael at puffin.tamucc.edu (Michael Williamson))
full-disclosure search engine (alex at gossamer-threads.com (Alex Krohn))
Bypassing "smart" IDSes with misdirected frames? (cuttergo at gmx.net (Alexander E. Cuttergo))
Re: Linux Kernel sctp_setsockopt() Integer Overflow (mjt at tls.msk.ru (Michael Tokarev))
Re: Linux Kernel sctp_setsockopt() Integer Overflow (mjt at tls.msk.ru (Michael Tokarev))
Bypassing "smart" IDSes with misdirected frames? (long and boring) (lcamtuf at ghettot.org (Michal Zalewski))

May 28 (64 messages)

lists, autoresponders, and netiquette (hackerwacker at cybermesa.com (James Edwards))
Re: Cisco's stolen code (JBrown at thrupoint.net (Brown, James (Jim)))
lists, autoresponders, and netiquette (SkyLined at edup.tudelft.nl (Berend-Jan Wever))
Notification (Carsten.Truckenbrodt at Bertelsmann.de (Carsten.Truckenbrodt))
Bypassing "smart" IDSes with misdirected frames? (security at brvenik.com (Jason))
[Fwd: Re: CST160201426ID - RE:Microsoft.Com ContactUS] (maclenna at cs.curtin.edu.au (Alexander MacLennan))
Re: Bypassing "smart" IDSes with misdirected frames? (lcamtuf at coredump.cx (Michal Zalewski))
Hotmail & Passport (.NET Accounts) Vulnerability (esteramoni at hotmail.com (este ramoni))
Hotmail & Passport (.NET Accounts) Vulnerability (esteramoni at hotmail.com (este ramoni))
full-disclosure search engine (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
Hotmail & Passport (.NET Accounts) Vulnerability (tcleary2 at csc.com.au (tcleary2@....com.au))
full-disclosure search engine (textbox at gmail.com (404))
Bypassing "smart" IDSes with misdirected frames? (long and boring) (synfinatic at gmail.com (Aaron Turner))
Imaging Operating Systems (volker.tanger at detewe.de (Volker Tanger))
lists, autoresponders, and netiquette (sid at mindless.co.uk (Siraj 'Sid' Rakhada))
First known 64-bit virus threat found (bugtracklist at freemail.hu (Kovács László))
[TURBOLINUX SECURITY INFO] 28/May/2004 (security-announce at turbolinux.co.jp (Turbolinux))
FW: Re: Cisco's stolen code (ktabic at ktabic.co.uk (ktabic))
Imaging Operating Systems (prp17 at adelphia.net (Phillip R. Paradis))
Imaging Operating Systems (nick at virus-l.demon.co.uk (Nick FitzGerald))
RE: Full-Disclosure digest, Vol 1 #1675 - 32 msgs (randallm at fidmail.com (RandallM))
un-subscribe (netsec at email.com (funn2oosh .))
Breaking Laws Cisco's stolen code (charlie at peopleandplanet.org (Charlie Harvey ))
Odd packet? (full-disclosure at nym.hush.com (full-disclosure@....hush.com))
Odd packet? (full-disclosure at nym.hush.com (full-disclosure@....hush.com))
Breaking Laws Cisco's stolen code (charlie at peopleandplanet.org (Charlie Harvey))
Re: Bypassing "smart" IDSes with misdirected frames? (long and boring) (jfbauer at nfr.com (Jim Bauer))
lists, autoresponders, and netiquette (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Imaging Operating Systems (purdy at tecman.com (Curt Purdy))
un-subscribe (dufresne at winternet.com (Ron DuFresne))
Breaking Laws Cisco's stolen code (dufresne at winternet.com (Ron DuFresne))
Imaging Operating Systems (frank at knobbe.us (Frank Knobbe))
Re: Bypassing "smart" IDSes with misdirected frames? (long and boring) (lcamtuf at ghettot.org (Michal Zalewski))
Wireless ISP DNS (geggam692000 at yahoo.com (D B))
[ GLSA 200405-24 ] MPlayer, xine-lib: vulnerabilities in RTSP stream handling (koon at gentoo.org (Thierry Carrez))
Breaking Laws Cisco's stolen code (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
SGI Advanced Linux Environment 3 Security Update #2 (agent99 at sgi.com (SGI Security Coordinator))
SGI Advanced Linux Environment security update #20 (agent99 at sgi.com (SGI Security Coordinator))
http://www.chase.com/ vulnerability (perry at piermont.com (Perry E. Metzger))
Re: Bypassing "smart" IDSes with misdirected frames? (long and boring) (oliver_friedrichs at symantec.com (Oliver Friedrichs))
Printer Buffer Security?? (trhoades at bbn.com (Tiger Rhoades))
Re: Bypassing "smart" IDSes with misdirected frames? (long and boring) (jfbauer at nfr.com (Jim Bauer))
Breaking Laws Cisco's stolen code (madsaxon at direcway.com (madsaxon))
Wireless ISP DNS (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
http://www.chase.com/ vulnerability (Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.))
new rsync :) exploit rsync-too-open (haxor at mac.hush.com (haxor@....hush.com))
http://www.chase.com/ vulnerability (perry at piermont.com (Perry E. Metzger))
Re: Linux Kernel sctp_setsockopt() Integer Overflow (mjt at tls.msk.ru (Michael Tokarev))
Re: Bypassing "smart" IDSes with misdirected frames? (long and boring) (frantzen at nfr.com (Mike Frantzen))
http://www.chase.com/ vulnerability (b_buckley at comcast.net (Brandon))
Breaking Laws Cisco's stolen code (dk at pwarchitects.com (dk))
http://www.chase.com/ vulnerability (gauntlet at nym.hush.com (gauntlet@....hush.com))
http://www.chase.com/ vulnerability (perry at piermont.com (Perry E. Metzger))
Breaking Laws Cisco's stolen code (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Printer Buffer Security?? (dave at immunitysec.com (Dave Aitel))
Breaking Laws Cisco's stolen code (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Breaking Laws Cisco's stolen code (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Breaking Laws Cisco's stolen code (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Re: Bypassing "smart" IDSes with misdirected frames? (long and boring) (srao at intotoinc.com (Srini))
Breaking Laws Cisco's stolen code (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
new rsync :) exploit rsync-too-open (phlox at freeshell.org (phlox))
Re: Bypassing "smart" IDSes with misdirected frames? (long and boring) (lcamtuf at ghettot.org (Michal Zalewski))
Re: Bypassing "smart" IDSes with misdirected frames? (long and boring) (lcamtuf at ghettot.org (Michal Zalewski))
Bypassing "smart" IDSes with misdirected frames? (long and boring) (synfinatic at gmail.com (Aaron Turner))

May 29 (23 messages)

new rsync :) exploit rsync-too-open (dk.dbox2 at gmx.net (dkey))
RE: Message Notify (bugzilla at redhat.com (Bugzilla))
http://www.chase.com/ vulnerability (Dark-Avenger at comcast.net (Dark-Avenger))
new rsync :) exploit rsync-too-open (BlueBoar at thievco.com (Blue Boar))
Re: Linux Kernel sctp_setsockopt() Integer Overflow (jikos at jikos.cz (Jirka Kosina))
An anatomy of a PGP Joe Job (ge at egotistical.reprehensible.net (Gadi Evron))
Pentesting an IDP-System (ph03n1x at gmx.net (ph03n1x))
Pentesting an IDP-System (Oliver at greyhat.de (Oliver@...yhat.de))
Pentesting an IDP-System (marcin at owsiany.pl (Marcin Owsiany))
rsynd-too-open.c posted on fd is backdoored. Don't run it!!! (downbload at hotmail.com (DownBload / Illegal Instruction Labs))
Printer Buffer Security?? (shrdlu at deaddrop.org (Etaoin Shrdlu))
http://www.chase.com/ vulnerability (pwicks at oxygen.com (James Patterson Wicks))
Re: rsynd-too-open.c posted on fd is backdoored. Don't run it!!! (lists2 at onryou.com (Cory Donnelly))
http://www.chase.com/ vulnerability (perry at piermont.com (Perry E. Metzger))
Pentesting an IDP-System (evilninja at gmx.net (evilninja))
http://www.chase.com/ vulnerability (1 at malware.com (http-equiv@...ite.com))
Pentesting an IDP-System (fdlist at digitaloffense.net (H D Moore))
[waraxe-2004-SA#031 - Multiple vulnerabilities in e107 version 0.615] (come2waraxe at yahoo.com (Janek Vind))
[SECURITY] [DSA 509-1] New gatos packages fix privilege escalation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Pentesting an IDP-System (davedf at davewking.com (Dave King))
Re: EnderUNIX Security Anouncement (Isoqlog and Spamguard) (aycan at core.gen.tr (Aycan iRiCAN))
[SECURITY] [DSA 510-1] New jftpgw packages fix format string vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
Pentesting an IDP-System (dbounds at intrusense.com (Darren Bounds))

May 30 (12 messages)

Pentesting an IDP-System (blancher at cartel-securite.fr (Cedric Blancher))
Re: EnderUNIX Security Anouncement (Isoqlog and Spamguard) (s.lorentsen at iracks.com (Simon Lorentsen))
RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability (roman at rs-labs.com (Roman Medina))
An anatomy of a PGP Joe Job (aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [Aditya Lalit Deshmukh]))
difference ;) (bugtracklist at freemail.hu (Kovács László))
SecurityLab.Ru Report: The Top 10 Most Critical Vulnerabilities in May 2004 (pk95 at yandex.ru (Alexander))
Pentesting an IDP-System (jay at bastille-linux.org (Jay Beale))
request for help dealing with a netware outbreak (ge at egotistical.reprehensible.net (Gadi Evron))
Pentesting an IDP-System (ph03n1x at gmx.net (ph03n1x))
[SECURITY] [DSA 511-1] New ethereal packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[ GLSA 200405-25 ] tla: Heap-based buffer overflow in included libneon (koon at gentoo.org (Thierry Carrez))
Possible bug in PHPNuke and other CMS (fala83 at libero.it (Luca Falavigna))

May 31 (6 messages)

RE: Incoming Msg (bugzilla at redhat.com (Bugzilla))
Printer Buffer Security?? (techlist at kc.rr.com (Jeff Schreiner))
Cleanining viruses from netware (dowlingg at sullcrom.com (Dowling, Gabrielle))
new rsync :) exploit rsync-too-open (listreader at proseq.net (listreader))
Cleanining viruses from netware (ge at egotistical.reprehensible.net (Gadi Evron))
Cleanining viruses from netware (ge at egotistical.reprehensible.net (Gadi Evron))

1460 messages