full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2004/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 42	² 59	³ 72	⁴ 14	⁵ 17
⁶ 7	⁷ 21	⁸ 24	⁹ 70	¹⁰ 43	¹¹ 17	¹² 11
¹³ 45	¹⁴ 64	¹⁵ 43	¹⁶ 41	¹⁷ 50	¹⁸ 15	¹⁹ 16
²⁰ 65	²¹ 57	²² 49	²³ 53	²⁴ 50	²⁵ 26	²⁶ 13
²⁷ 25	²⁸ 42	²⁹ 33	³⁰ 18

Messages by day:

September 1 (42 messages)

[Vmyths.com ALERT] Follow-up on latest cyber-terror prediction (junkmail at barnowl.com (Rob Rosenberger))
Is this a new Trojan? (keydet89 at yahoo.com (Harlan Carvey))
MDKSA-2004:088 - Updated krb5 packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
New paper on Security and Obscurity (peter at peterswire.net (Peter Swire))
Cross-Site Scripting Vulnerability in Newtelligence DasBlog (seclists at leastprivilege.com (Dominick Baier))
Re: New paper on Security and Obscurity (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
New paper on Security and Obscurity (dave at immunitysec.com (Dave Aitel))
Viral infection via Serial Cable (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[Vmyths.com ALERT] Follow-up on latest cyber-terror prediction (3APA3A at SECURITY.NNOV.RU (3APA3A))
SUSE Security Announcement: kernel (SUSE-SA:2004:028) (thomas at suse.de (Thomas Biege))
Viral infection via Serial Cable (keydet89 at yahoo.com (Harlan Carvey))
New paper on Security and Obscurity (stephane.nasdrovisky at paradigmo.com (stephane nasdrovisky))
New paper on Security and Obscurity (stephane.nasdrovisky at paradigmo.com (stephane nasdrovisky))
New paper on Security and Obscurity (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
TorrentTrader 1.0 RC2 - SQL Injection - Proof of Concept (acidbits at hotmail.com (acidbits .))
Response to comments on Security and Obscurity (peter at peterswire.net (Peter Swire))
[ GLSA 200409-01 ] vpopmail: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Oracle exploit? Where's the beef? (mshirley at gmail.com (Mark Shirley))
[ GLSA 200409-02 ] MySQL: Insecure temporary file creation in mysqlhotcopy (koon at gentoo.org (Thierry Carrez))
Viral infection via Serial Cable (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Oracle exploit? Where's the beef? (3APA3A at SECURITY.NNOV.RU (3APA3A))
Re: New paper on Security and Obscurity (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
Viral infection via Serial Cable (keydet89 at yahoo.com (Harlan Carvey))
New security tools and papers released (shadown at gmail.com (shadown))
Response to comments on Security and Obscurity (3APA3A at SECURITY.NNOV.RU (3APA3A))
Viral infection via Serial Cable (uberguidoz at gmail.com (Über GuidoZ))
Is this a new Trojan? (Trey.Keifer at fishnetsecurity.com (Keifer, Trey))
Shellcoding Tutorial (shanna at uiuc.edu (Steve))
Response to comments on Security and Obscurity (dave at immunitysec.com (Dave Aitel))
Response to comments on Security and Obscurity (jan.m.clairmont at citigroup.com (Clairmont, Jan M))
Microsoft Update Loader msrtwd.exe (sbirl at temple.edu (S.A. Birl))
Viral infection via Serial Cable (jftucker at gmail.com (James Tucker))
Viral infection via Serial Cable (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Response to comments on Security and Obscurity (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
Response to comments on Security and Obscurity (jftucker at gmail.com (James Tucker))
Microsoft Update Loader msrtwd.exe (jftucker at gmail.com (James Tucker))
Microsoft Update Loader msrtwd.exe (jstewart at lurhq.com (Joe Stewart))
Microsoft Update Loader msrtwd.exe (toddtowles at brookshires.com (Todd Towles))
Microsoft Update Loader msrtwd.exe (keydet89 at yahoo.com (Harlan Carvey))
Response to comments on Security and Obscurity (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Microsoft Update Loader msrtwd.exe (joe at joesmith.homeip.net (joe smith))
New security tools and papers released (raize at gravito.com (raize))

September 2 (59 messages)

[SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server (shatter at appsecinc.com (SHATTER))
Viral infection via Serial Cable (uberguidoz at gmail.com (Über GuidoZ))
Viral infection via Serial Cable (stephane.nasdrovisky at paradigmo.com (stephane nasdrovisky))
Microsoft Update Loader msrtwd.exe (jan.muenther at nruns.com (Jan Muenther))
unsubsrcibe (rahulmk at gmail.com (Rahul K))
Response to comments on Security and Obscurity (yehudi at tehila.gov.il (yaakov yehudi))
Viral infection via Serial Cable (yehudi at tehila.gov.il (yaakov yehudi))
Response to comments on Security and Obscurity (3APA3A at SECURITY.NNOV.RU (3APA3A))
Response to comments on Security and Obscurity (jftucker at gmail.com (James Tucker))
Response to comments on Security and Obscurity (jftucker at gmail.com (James Tucker))
RE: Is this a new Trojan? (ismail_syed05 at yahoo.com (ismail syed))
[SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server (mshirley at gmail.com (Mark Shirley))
Response to comments on Security and Obscurity (3APA3A at SECURITY.NNOV.RU (3APA3A))
Response to comments on Security and Obscurity (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Microsoft Update Loader msrtwd.exe (sbirl at temple.edu (S.A. Birl))
Response to comments on Security and Obscurity (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Microsoft Update Loader msrtwd.exe (jstewart at lurhq.com (Joe Stewart))
Response to comments on Security and Obscurity (jftucker at gmail.com (James Tucker))
Response to comments on Security and Obscurity (jan.m.clairmont at citigroup.com (Clairmont, Jan M))
Response to comments on Security and Obscurity (jftucker at gmail.com (James Tucker))
win2kup2date.exe ? (mcw at wcd.se (bashis))
Microsoft Update Loader msrtwd.exe (toddtowles at brookshires.com (Todd Towles))
unsubsrcibe (uberguidoz at gmail.com (Über GuidoZ))
Response to comments on Security and Obscurity (3APA3A at SECURITY.NNOV.RU (3APA3A))
Security & Obscurity: First-time attacks and lawyer jokes (peter at peterswire.net (Peter Swire))
Security & Obscurity: physical-world analogies (peter at peterswire.net (Peter Swire))
Shellcoding Tutorial (visitbipin at yahoo.com (bipin gautam))
win2kup2date.exe ? (pwicks at oxygen.com (James Patterson Wicks))
win2kup2date.exe ? (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Security & Obscurity: First-time attacks and lawyer jokes (dave at immunitysec.com (Dave Aitel))
Shellcoding Tutorial (mshirley at gmail.com (Mark Shirley))
Security & Obscurity: physical-world analogies (dave at immunitysec.com (Dave Aitel))
Re: Microsoft Update Loader msrtwd.exe (etomcat at freemail.hu (Feher Tamas))
win2kup2date.exe ? (uberguidoz at gmail.com (Über GuidoZ))
[VirusTotal] Scan result (fwd) (mcw at wcd.se (bashis))
Re: New paper on Security and Obscurity (Sung.Choe at hickam.af.mil (Choe Sung Cont. PACAF CSS/SCHP))
Security & Obscurity: First-time attacks and lawyer jokes (guninski at guninski.com (Georgi Guninski))
Empirical data surrounding guards and firewalls. (evol at ruiner.halo.nu (evol@...ner.halo.nu))
Response to comments on Security and Obscurity (secfocuslist at yahoo.com (Security List))
[VirusTotal] Scan result (fwd) (uberguidoz at gmail.com (Über GuidoZ))
win2kup2date.exe ? (uberguidoz at gmail.com (Über GuidoZ))
Security & Obscurity: physical-worldanalogies (dan_20407 at msn.com (DAN MORRILL))
[ GLSA 200409-03 ] Python 2.2: Buffer overflow in getaddrinfo() (koon at gentoo.org (Thierry Carrez))
[ GLSA 200409-04 ] Squid: Denial of service when using NTLM authentication (koon at gentoo.org (Thierry Carrez))
SUSE Security Announcement: zlib (SUSE-SA:2004:029) (thomas at suse.de (Thomas Biege))
[ GLSA 200409-05 ] Gallery: Arbitrary command execution (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200409-06 ] eGroupWare: Multiple XSS vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
iDEFENSE Security Advisory 09.02.04a: Oracle Database Server dbms_system.ksdwrt Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-adviso…)
iDEFENSE Security Advisory 09.02.04b: Oracle Database Server ctxsys.driload Access Validation Vulnerability (idlabs-advisories at idefense.com (idlabs-advisori…)
[VirusTotal] Scan result (fwd) (joe at joesmith.homeip.net (joe smith))
Security & Obscurity: First-time attacks and lawyer jokes (foofus at foofus.net (Mr. Rufus Faloofus))
[OT] Re: Re: New paper on Security and Obscurity (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Re: New paper on Security and Obscurity (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
Response to comments on Security and Obscurity (jftucker at gmail.com (James Tucker))
win2kup2date.exe ? (jftucker at gmail.com (James Tucker))
Empirical data surrounding guards and firewalls. (jftucker at gmail.com (James Tucker))
Empirical data surrounding guards and firewalls. (evol at ruiner.halo.nu (evol@...ner.halo.nu))
Security & Obscurity: physical-world analogies (frank at knobbe.us (Frank Knobbe))
Empirical data surrounding guards and firewalls. (prb at lava.net (Peter Besenbruch))

September 3 (72 messages)

Empirical data surrounding guards and firewalls. (jftucker at gmail.com (James Tucker))
win2kup2date.exe ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
[VirusTotal] Scan result (fwd) (nick at virus-l.demon.co.uk (Nick FitzGerald))
Empirical data surrounding guards and firewalls. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Security & Obscurity: physical-world analogies (jftucker at gmail.com (James Tucker))
Empirical data surrounding guards and firewalls. (mnv at alumni.princeton.edu (MN Vasquez))
win2kup2date.exe ? (jftucker at gmail.com (James Tucker))
Security & Obscurity: physical-world analogies (frank at knobbe.us (Frank Knobbe))
Security & Obscurity: physical-world analogies (jftucker at gmail.com (James Tucker))
Empirical data surrounding guards and firewalls. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Empirical data surrounding guards and firewalls. (frank at knobbe.us (Frank Knobbe))
[OT] Re: Re: New paper on Security and Obscurity (bruen at coldrain.net (Stormwalker))
Where to submit a suspected trojan or virus? (scenobro at tiscali.it (Scenobro))
[VirusTotal] Scan result (fwd) (aditya.deshmukh at online.gateway.technolabs.net (Aditya Deshmukh))
Where to submit a suspected trojan or virus? (uberguidoz at gmail.com (Über GuidoZ))
win2kup2date.exe ? (uberguidoz at gmail.com (Über GuidoZ))
win2kup2date.exe ? (uberguidoz at gmail.com (Über GuidoZ))
win2kup2date.exe ? (uberguidoz at gmail.com (Über GuidoZ))
[VirusTotal] Scan result (fwd) (uberguidoz at gmail.com (Über GuidoZ))
[RE: Test scripts for NIDS] (indianz at indianz.ch (indianz@...ianz.ch))
Viral infection via Serial Cable (uberguidoz at gmail.com (Über GuidoZ))
Response to comments on Security and Obscurity (uberguidoz at gmail.com (Über GuidoZ))
Re: Microsoft Update Loader msrtwd.exe (uberguidoz at gmail.com (Über GuidoZ))
Security & Obscurity: First-time attacks and lawyer jokes (janus at volny.cz (Honza Vlach))
Re: Security & Obscurity: physical-world analogies (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
Re: Empirical data surrounding guards and firewalls. (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
UPDATE: [ GLSA 200408-22 ] Mozilla, Firefox, Thunderbird, Galeon, Epiphany: New releases fix vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[VirusTotal] Scan result (fwd) (lists at michel-messerschmidt.de (Michel Messerschmidt))
[VirusTotal] Scan result (fwd) (lists at michel-messerschmidt.de (Michel Messerschmidt))
[RE: Test scripts for NIDS] (ThomasI.Pollet at UGent.be (Thomas Pollet))
Flaws in the new security functions of SP2 - revisited (ju at heisec.de (Juergen Schmidt))
The Hacker's Manifesto Reloaded (da_entrepreneur at yahoo.com (the entrepreneur))
Re: Security & Obscurity: physical-world analogies (tigger.on at gmail.com (Tig))
Re: Empirical data surrounding guards and firewalls. (jftucker at gmail.com (James Tucker))
win2kup2date.exe ? (jftucker at gmail.com (James Tucker))
[ GLSA 200409-07 ] xv: Buffer overflows in image handling (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
The Hacker's Manifesto Reloaded (jftucker at gmail.com (James Tucker))
[OT] Re: Re: New paper on Security and Obscurity (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Empirical data surrounding guards and firewalls. (jftucker at gmail.com (James Tucker))
[VirusTotal] Scan result (fwd) (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
[VirusTotal] Scan result (fwd) (joe at joesmith.homeip.net (joe smith))
Re: Microsoft Update Loader msrtwd.exe (sbirl+full-disclourse at concept.ocis.temple.edu (S.A. Birl))
Re: Instant Messenger (ido at cs.uchicago.edu (Ido Rosen))
RES: Instant Messenger (acezar at opencs.com.br (Alexandre Cezar))
win2kup2date.exe ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
The Hacker's Manifesto Reloaded (da_entrepreneur at yahoo.com (the entrepreneur))
The Hacker's Manifesto Reloaded (infohacking at hush.com (Hugo Vazquez Carapez ))
Empirical data surrounding guards and firewalls. (seclistaddress at yahoo.com (Manohar G Singh))
Where to submit a suspected trojan or virus? (krmaxwell at gmail.com (Kyle Maxwell))
RES: Instant Messenger (uberguidoz at gmail.com (Über GuidoZ))
[VirusTotal] Scan result (fwd) (uberguidoz at gmail.com (Über GuidoZ))
Re: Microsoft Update Loader msrtwd.exe (keydet89 at yahoo.com (Harlan Carvey))
Where to submit a suspected trojan or virus? (jlacour at zonelabs.com (John LaCour))
Re: win2kup2date.exe ? (rmulraney at 3mail.com (rmulraney@...il.com))
Multi-vendor AV scanning without sending a sample (jlacour at zonelabs.com (John LaCour))
Where to submit a suspected trojan or virus? (keydet89 at yahoo.com (Harlan Carvey))
Re: Security & Obscurity: physical-world analogies (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
Re: win2kup2date.exe ? (devis at easynix.net (devis))
Where to submit a suspected trojan or virus? (pdonahue at acmicorp.com (Donahue, Pat))
About VirusTotal/Hispasec (bernardo at hispasec.com (Bernardo Quintero))
Where to submit a suspected trojan or virus? (dsardina at si.rr.com (DSardina))
[ GLSA 200409-08 ] Ruby: CGI::Session creates files insecurely (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Finger Google v1.0 released (shadown at gmail.com (shadown))
(no subject) (try using a friggin subject line...) (kf_lists at secnetops.com (KF_lists))
Where to submit a suspected trojan or virus? (scenobro at tiscali.it (Scenobro))
[SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server (xbud at g0thead.com (xbud))
Restoring a NTFS partition? (cbumpste at yahoo.com.au (Craig Bumpstead))
SV: [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server (kruse at krusesecurity.dk (Peter Kruse))
Restoring a NTFS partition? (abaker at gmail.com (ASB))
open telnet port (celox at cyber-war.org (cel0x))
[ GLSA 200409-07 ] xv: Buffer overflows in image handling (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
RE: Full-Disclosure digest (digitalchaos at gawab.com (digitalchaos))

September 4 (14 messages)

[SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server (cesarc56 at yahoo.com (Cesar))
The Hacker's Manifesto Reloaded (jftucker at gmail.com (James Tucker))
Restoring a NTFS partition? (kf_lists at secnetops.com (kf_lists))
[RLSA_01-2004] QNX PPPoEd local root vulnerabilities (julio at rfdslabs.com.br (Julio Cesar Fort))
Re: About VirusTotal/Hispasec (uberguidoz at gmail.com (Über GuidoZ))
Multi-vendor AV scanning without sending a sample (api at epost.de (Axel Pettinger))
The Hacker's Manifesto Reloaded (aldr1c at nildram.co.uk (aldr1c))
Restoring a NTFS partition? (docnielsen at gmail.com (Doc Nielsen))
Engenio/LSI Logic controllers denial of service/data corruption (j at pureftpd.org (Jedi/Sector One))
The Hacker's Manifesto Reloaded (da_entrepreneur at yahoo.com (the entrepreneur))
The Hacker's Manifesto Reloaded (sean01 at accnet.com.au (Sean Crawford))
OT: The Tel Aviv University Security Forum - next Sunday (12/09) (ge at linuxbox.org (Gadi Evron))
Re: DOS in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption) (j at pureftpd.org (Jedi/Sector One))
The Hacker's Manifesto Reloaded (syke at mantissecurity.net (Syke))

September 5 (17 messages)

ProxyFinder v1.0 released (shadown at gmail.com (shadown))
[SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server (thief at bugtraq.org (Richard Johnson))
Re: DOS in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption) (jan.muenther at nruns.com (Jan Muenther))
Re: DOS in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption) (j at pureftpd.org (Jedi/Sector One))
Security & Obscurity: physical-world analogies (yehudi at tehila.gov.il (Yaakov Yehudi))
Re: Security & Obscurity: physical-world analogies (abaker at gmail.com (ASB))
Security & Obscurity: First-time attacks and lawyer jokes (yehudi at tehila.gov.il (Yaakov Yehudi))
Empirical data surrounding guards and firewalls. (yehudi at tehila.gov.il (Yaakov Yehudi))
Security & Obscurity: physical-worldanalogies (yehudi at tehila.gov.il (Yaakov Yehudi))
win2kup2date.exe ? (yehudi at tehila.gov.il (Yaakov Yehudi))
Broadcast shutdown in Call of Duty 1.4 (aluigi at autistici.org (Luigi Auriemma))
Buffer Overflow in DBMS_SYSTEM.KSDWRT() in Oracle8i - 9i (ak at red-database-security.com (Kornbrust, Alexander))
SQL Injection via CTXSYS.DRILOAD in Oracle 8i/9i (ak at red-database-security.com (Kornbrust, Alexander))
Buffer Overflow in SYS_CONTEXT() in Oracle 9i Rel.2 (ak at red-database-security.com (Kornbrust, Alexander))
Buffer Overflow in DBMS_SYSTEM.KSDWRT() in Oracle8i - 9i (j at pureftpd.org (Jedi/Sector One))
Re: RES: Instant Messenger (rsnake at shocking.com (RSnake))
ProxyFinder v1.0 released (shadown at gmail.com (shadown))

September 6 (7 messages)

Gmail ... (sandeep.sengupta at gmail.com (Sandeep Sengupta))
Gmail - another one .. (sandeep.sengupta at gmail.com (Sandeep Sengupta))
Re: win2kup2date.exe (etomcat at freemail.hu (Feher Tamas))
[ GLSA 200409-09 ] MIT krb5: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
SUSE Security Announcement: apache2 (SUSE-SA:2004:030) (krahmer at suse.de (Sebastian Krahmer))
[ GLSA 200409-10 ] multi-gnome-terminal: Information leak (koon at gentoo.org (Thierry Carrez))
[ GLSA 200409-10 ] multi-gnome-terminal: Information leak (koon at gentoo.org (Thierry Carrez))

September 7 (21 messages)

mpg123 buffer overflow vulnerability (dante at alighieri.org (Davide Del Vecchio))
mpg123 buffer overflow vulnerability (thief at bugtraq.org (Richard Johnson))
RES: Instant Messenger (rnaydenov at aegis-is.com (Rossen Naydenov))
Re: mpg123 buffer overflow vulnerability (dante at alighieri.org (Davide Del Vecchio))
RES: Instant Messenger (jan.muenther at nruns.com (Jan Muenther))
Virus loading through ActiveX-Exploit [Fwd: George Bush sniper-rifle shot!] (shugal at gmx.de (Martin Stricker))
open telnet port (ismail_syed05 at yahoo.com (ismail syed))
Question about funny HTTP request (Andreas.Ames at tenovis.com (Ames Andreas (MPA/DF)))
Re: open telnet port (Dave.Ewart at cancer.org.uk (Dave Ewart))
Virus loading through ActiveX-Exploit [Fwd: George Bush sniper-rifle shot!] (alla at scanit.be (Alla Bezroutchko))
open telnet port (Rik.Bobbaers at cc.kuleuven.ac.be (harry))
Active Spam Support By Savvis Communications (measl at mfn.org (J.A. Terranson))
open telnet port (webmaster at securiteinfo.com (A.J.))
open telnet port (d.huecking at gmx.net (David Huecking))
open telnet port (pizzi at leopardus.com (Riccardo Pizzi))
Virus loading through ActiveX-Exploit [Fwd: George Bush sniper-rifle shot!] (mikx at mikx.de (mikx))
Question about funny HTTP request (uberguidoz at gmail.com (Über GuidoZ))
open telnet port (kenneth.d.ng at gmail.com (Kenneth Ng))
Re: Virus loading through ActiveX-Exploit (etomcat at freemail.hu (Feher Tamas))
Short Paper on "the warez scene" (stfunub at gmail.com (Andrew Smith))
Cerulean Studios Trillian 0.74i buffer overflow in MSN module (giocasati at interfree.it (Komrade))

September 8 (24 messages)

[ GLSA 200409-11 ] star: Suid root vulnerability (klieber at gentoo.org (Kurt Lieber))
Re: Virus loading through ActiveX-Exploit (nick at virus-l.demon.co.uk (Nick FitzGerald))
MDKSA-2004:089 - Updated imlib/imlib2 packages fix BMP crash vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:090 - Updated zlib packages fix DoS vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:091 - Updated cdrecord packages fix local root vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Teen hacker controls ebay (gaubrig at yahoo.com (Gaurang Pandya))
Teen hacker controls ebay (noddie_x at g1b50n.co.za (noddie_x))
Teen hacker controls ebay (dentonj at gmail.com (Jeffrey Denton))
Empirical data surrounding guards and firewalls. (blsonne at rogers.com (Byron L. Sonne))
Teen hacker controls ebay (fd_ml at kimmeringer.de (Lothar Kimmeringer))
Teen hacker controls ebay (bretscher at 5sl.org (Johannes Bretscher))
iDEFENSE Security Advisory 08.13.04: Adobe Acrobat/Acrobat Reader ActiveX Control Buffer Overflow Vulnerability (list at nolog.org (list@...og.org))
[ GLSA 200409-12 ] ImageMagick, imlib, imlib2: BMP decoding buffer overflows (koon at gentoo.org (Thierry Carrez))
RKDetect - behaviour based rootkit detection (updated) (offtopic at mail.ru (offtopic))
Teen hacker controls ebay (fw at deneb.enyo.de (Florian Weimer))
Teen hacker controls ebay (nick at virus-l.demon.co.uk (Nick FitzGerald))
Teen hacker controls ebay (ab at lists.gxis.de (Alexander Bochmann))
Teen hacker controls ebay (sean01 at accnet.com.au (Sean Crawford))
win2kup2date.exe ? (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
win2kup2date.exe ? (research at bugtraq.org (Bugtraq Security Systems))
win2kup2date.exe ? (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
win2kup2date.exe ? (uberguidoz at gmail.com (Über GuidoZ))
[ GLSA 200409-13 ] LHa: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Re: open telnet port (chromazine at sbcglobal.net (Steve Kudlak))

September 9 (70 messages)

Empirical data surrounding guards and firewalls. (blsonne at rogers.com (Byron L. Sonne))
Empirical data surrounding guards and firewalls. (blsonne at rogers.com (Byron L. Sonne))
Re: open telnet port (list at nolog.org (list@...og.org))
[ GLSA 200409-14 ] Samba: Remote printing vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Teen hacker controls ebay (marcin at owsiany.pl (Marcin Owsiany))
Re: Re: open telnet port (Dave.Ewart at cancer.org.uk (Dave Ewart))
Re: open telnet port (webmaster at securiteinfo.com (A.J.))
Empirical data surrounding guards and firewalls. (Michael.Simpson at inveresk.com (Michael Simpson))
win2kup2date.exe ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Re: open telnet port (kbn at daimi.au.dk (Kim B. Nielsen))
Re: mpg123 buffer overflow vulnerability (thief at bugtraq.org (Richard Johnson))
win2kup2date.exe ? (thief at bugtraq.org (Richard Johnson))
win2kup2date.exe ? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Re: open telnet port (lists at ktabic.co.uk (ktabic))
Re: Re: Re: open telnet port (Dave.Ewart at cancer.org.uk (Dave Ewart))
Re: Re: open telnet port (list at nolog.org (list@...og.org))
Re: Re: open telnet port (dries at skybel.net (Dries Robberechts))
Re: Re: open telnet port (barrie at reboot-robot.net (Barrie Dempster))
Re: mpg123 buffer overflow vulnerability (dante at alighieri.org (Davide Del Vecchio))
Re: Re: Re: open telnet port (Dave.Ewart at cancer.org.uk (Dave Ewart))
Re: Re: open telnet port (ahaning at gmail.com (Andrew Haninger))
win2kup2date.exe ? (Marek.Isalski at smuht.nwest.nhs.uk (Marek Isalski))
Re: Re: Re: open telnet port (dave at horsfall.org (Dave Horsfall))
Re: Re: open telnet port (volker.tanger at detewe.de (Volker Tanger))
Re: Re: open telnet port (janus at volny.cz (Honza Vlach))
Re: Re: open telnet port (toddtowles at brookshires.com (Todd Towles))
Re: open telnet port (yakov at tehila.gov.il (Yaakov Yehudi))
Empirical data surrounding guards and firewalls. (yakov at tehila.gov.il (Yaakov Yehudi))
Re: Re: open telnet port (barrie at qnrl.com (Barrie Dempster))
Re: Re: open telnet port (proach at gmail.com (Paul W. Roach III))
Re: Re: open telnet port (kenneth.d.ng at gmail.com (Kenneth Ng))
List Charter (johnc at grok.org.uk (John Cartwright))
Re: Re: Re: open telnet port (Dave.Ewart at cancer.org.uk (Dave Ewart))
win2kup2date.exe ? (thief at bugtraq.org (Richard Johnson))
Re: Re: open telnet port (lists at ktabic.co.uk (ktabic))
Empirical data surrounding guards and firewalls. (andfarm at teknovis.com (Andrew Farmer))
Re: Re: open telnet port (andfarm at teknovis.com (Andrew Farmer))
Re: Re: open telnet port (ahaning at gmail.com (Andrew Haninger))
Re: mpg123 buffer overflow vulnerability (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Re: FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities (1 at malware.com (http-equiv@...ite.com))
Re: Re: open telnet port (toddtowles at brookshires.com (Todd Towles))
win2kup2date.exe ? (michealespinola at gmail.com (Micheal Espinola Jr))
Question about funny HTTP request (Andreas.Ames at tenovis.com (Ames Andreas (MPA/DF)))
Re: Re: open telnet port (ahaning at gmail.com (Andrew Haninger))
Virus loading through ActiveX-Exploit [Fwd: George Bush sniper-rifle shot!] (1 at malware.com (http-equiv@...ite.com))
Re: Re: open telnet port (gem at rellim.com (Gary E. Miller))
Re: Re: open telnet port (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
win2kup2date.exe ? (uberguidoz at gmail.com (Über GuidoZ))
Teen hacker controls ebay (uberguidoz at gmail.com (Über GuidoZ))
Re: Re: open telnet port (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Empirical data surrounding guards and firewalls. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
OT: gmail invites (altonj at gmail.com (Alt J))
win2kup2date.exe ? (jwatts at chatsworth.com (Watts, Jonathan))
win2kup2date.exe ? (kf_lists at secnetops.com (KF_lists))
Re: Re: open telnet port (kenneth.d.ng at gmail.com (Kenneth Ng))
win2kup2date.exe ? (labs at iDefense.com (iDefense Labs))
Re: Empirical data surrounding guards and firewalls. (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
Re: Re: open telnet port (kbn at daimi.au.dk (Kim B. Nielsen))
Re: Re: open telnet port (ahaning at gmail.com (Andrew Haninger))
Re: OT: gmail invites (rsw at jfet.org (Riad S. Wahby))
Re: OT: gmail invites (altonj at gmail.com (Alt J))
Teen hacker controls ebay (starfire at dplanet.ch (Andreas Tscharner))
Any idea about that? (manipeto at yahoo.co.uk (Syed Imran Ali))
win2kup2date.exe ? (uberguidoz at gmail.com (Über GuidoZ))
win2kup2date.exe ? (uberguidoz at gmail.com (Über GuidoZ))
iDEFENSE Security Advisory 09.09.04: F-Secure Internet Gatekeeper Content Scanning Server Denial of Service Vulnerabili… (idlabs-advisories at idefense.com (idla…)
Off-by-one bug in Halo 1.04 (aluigi at autistici.org (Luigi Auriemma))
win2kup2date.exe ? (uberguidoz at gmail.com (Über GuidoZ))
win2kup2date.exe ? (uberguidoz at gmail.com (Über GuidoZ))
win2kup2date.exe ? (uberguidoz at gmail.com (Über GuidoZ))

September 10 (43 messages)

Teen hacker controls ebay (rainer at ultra-secure.de (Rainer Duffner))
Teen hacker controls ebay (fw at deneb.enyo.de (Florian Weimer))
Teen hacker controls ebay (fw at deneb.enyo.de (Florian Weimer))
Teen hacker controls ebay (fw at deneb.enyo.de (Florian Weimer))
Any idea about that? (spamtrap2 at austarnet.com.au (James Woodcock))
Re: Re: open telnet port (raju at linux-delhi.org (Raj Mathur))
Re: OT: gmail invites (sean01 at accnet.com.au (Sean Crawford))
URGENT: 3COM CoreBuilder 9000 Vulnerabilities (fer_saldana at yahoo.com (Fernando Saldana-del-Castillo))
Any idea about that? (keydet89 at yahoo.com (Harlan Carvey))
Re: OT: gmail invites....ALL GONE!!!!! (sean01 at accnet.com.au (Sean Crawford))
gmail invites...found one more.... (sean01 at accnet.com.au (Sean Crawford))
OT: gmail invites (fredrik at quibus.se (Fredrik Leijon))
ERRATA: [ GLSA 200409-14 ] Samba: Remote printing non-vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
OT: gmail invites (andrewp at IRW.co.uk (Andrew Poodle))
OT - 6 gmail invites (richajap at fastmail.fm (richajap@...tmail.fm))
Any idea about that? (spamtrap2 at austarnet.com.au (James Woodcock))
Re: Empirical data surrounding guards and firewalls. (varcher at denyall.com (Vincent Archer))
Re: Teen hacker controls ebay (andrew-dont-tell-me at ledge.co.za (Andrew))
Re: Re: open telnet port (Robert.Moss at psinet.telstra.co.uk (Robert Moss))
Teen hacker controls ebay (karsten at rohrbach.de (Karsten W. Rohrbach))
Re: Re: open telnet port (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
OT: gmail invites (docnielsen at gmail.com (Doc Nielsen))
CAU-EX-2004-0002: cdrecord-suidshell.sh (druid at caughq.org (I)ruid))
Re: Any idea about that? (etomcat at freemail.hu (Feher Tamas))
OT: gmail invites (jlk at thrashyour.com (John Kinsella))
win2kup2date.exe ? (galt at locutus.isu.edu (John Galt))
OT - 6 gmail invites (toddtowles at brookshires.com (Todd Towles))
Does the following... (xor at insightbb.com (XOR))
win2kup2date.exe ? (kf_lists at secnetops.com (KF_lists))
Re: Re: Empirical data surrounding guards and firewalls. (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
Re: Re: Re: open telnet port (lists at ktabic.co.uk (ktabic))
Does the following... (live4java at stormcenter.net (Mister Coffee))
OT: GMail invites (richajap at fastmail.fm (richajap@...tmail.fm))
Does the following... (Tom.Chmielarski at motorola.com (Chmielarski TOM-ATC090))
Does the following... (toddtowles at brookshires.com (Todd Towles))
Does the following... (grutz at jingojango.net (grutz@...gojango.net))
Does the following... (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Does the following... (joel.esler at rcert-s.army.mil (Esler, Joel - Contractor))
Re: Re: Re: open telnet port (andfarm at teknovis.com (Andrew Farmer))
Does the following... (andfarm at teknovis.com (Andrew Farmer))
Does the following... (toddtowles at brookshires.com (Todd Towles))
Does the following... (y_avenger_y at ua.fm (nobody))
Re: Empirical data surrounding guards and firewalls. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

September 11 (17 messages)

Does the following... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Does the following... (nick at virus-l.demon.co.uk (Nick FitzGerald))
OT: GMail invites (raju at linux-delhi.org (Raj Mathur))
Re: Re: Re: open telnet port (gem at rellim.com (Gary E. Miller))
Does the following... (andfarm at teknovis.com (Andrew Farmer))
Re: Re: Re: open telnet port (andfarm at teknovis.com (Andrew Farmer))
Fw: BitDefender found an infected message (lily.pad at msa.hinet.net (MOA))
Does the following... (live4java at stormcenter.net (Mister Coffee))
Does the following... (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Re: Re: open telnet port (gem at rellim.com (Gary E. Miller))
Daily mass scan from APNIC? (jlay at ameriben.com (James Lay))
Does the following... (jftucker at gmail.com (James Tucker))
OT: GMail invites (richajap at fastmail.fm (richajap@...tmail.fm))
Please *stop* with the GMAIL invites (shrdlu at deaddrop.org (Etaoin Shrdlu))
Please *stop* with the GMAIL invites (francisco.guerreiro at gmail.com (Francisco Guerreiro))
Re: Re: Re: open telnet port (lists at ktabic.co.uk (ktabic))
Does the following... (nick at virus-l.demon.co.uk (Nick FitzGerald))

September 12 (11 messages)

drive by shooting - got hit by mysearch toolbar (fulldisclosure at wateraxe.demon.nl (fulldisclosure@...eraxe.demon.nl))
Does the following... (jftucker at gmail.com (James Tucker))
drive by shooting - got hit by mysearch toolbar (jftucker at gmail.com (James Tucker))
FW: Does the following... (cjthirteen at earthlink.net (cj thirteen))
drive by shooting - got hit by mysearch toolbar (chows at ozemail.com.au (Gregh))
Re: Re: Re: open telnet port (andfarm at teknovis.com (Andrew Farmer))
Re: Re: Re: open telnet port (gem at rellim.com (Gary E. Miller))
drive by shooting - got hit by mysearch toolbar (andrei.galca at rdsnet.ro (Andrei Galca-Vasiliu))
Please *stop* with the GMAIL invites (chema at sl-form.com (José María Mateos))
Gadu-Gadu (all versions with image-send feature) Heap Overflow (noreply at sec-labs.hack.pl (Sec-Labs Team))
[ GLSA 200409-15 ] Webmin, Usermin: Multiple vulnerabilities in Usermin (krispykringle at gentoo.org (Dan Margolis))

September 13 (45 messages)

Please *stop* with the GMAIL invites (dreamer at darkness.gr (dreamer@...kness.gr))
drive by shooting - got hit by mysearch toolbar (uberguidoz at gmail.com (Über GuidoZ))
win2kup2date.exe ? (vxdude2003 at yahoo.com (VX Dude))
win2kup2date.exe ? (uberguidoz at gmail.com (GuidoZ))
Web server passive Googleprints (offtopic at mail.ru (offtopic))
Secunia Research: StarOffice / OpenOffice Insecure Temporary File Creation (che at secunia.com (Carsten H. Eiram))
AV companies better hire good lawyers soon. (etomcat at freemail.hu (Feher Tamas))
win2kup2date.exe ? (devis at easynix.net (devis))
Corsaire Security Advisory - Multiple vendor MIME field multiple occurrence issue (advisories at corsaire.com (advisories))
Corsaire Security Advisory - Multiple vendor MIME field whitespace issue (advisories at corsaire.com (advisories))
Corsaire Security Advisory - Multiple vendor MIME field quoting issue (advisories at corsaire.com (advisories))
Corsaire Security Advisory - Multiple vendor MIME Content-Transfer-Encoding mechanism issue (advisories at corsaire.com (advisories))
Corsaire Security Advisory - Multiple vendor MIME separator issue (advisories at corsaire.com (advisories))
Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue (advisories at corsaire.com (advisories))
Corsaire Security Advisory - Multiple vendor MIME RFC2231 encoding issue (advisories at corsaire.com (advisories))
Corsaire Security Advisory - Multiple vendor MIME RFC822 comment issue (advisories at corsaire.com (advisories))
[ GLSA 200409-16 ] Samba: Denial of Service vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Correction to latest Colsaire advisories (3APA3A at SECURITY.NNOV.RU (3APA3A))
Where is security industry gng?? (n30_lists at hotmail.com (n30))
Fwd: Where is security industry gng?? (contact_jamie_fisher at yahoo.co.uk (jamie fisher))
Where is security industry gng?? (keydet89 at yahoo.com (Harlan Carvey))
Where is security industry gng?? (jan.muenther at nruns.com (Jan Muenther))
[OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos) (openpkg at openpkg.org (OpenPKG))
iDEFENSE Security Advisory 09.13.04a: Samba nmbd Invalid Length Denial of Service Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.…)
iDEFENSE Security Advisory 09.13.04b: Samba 3.x SMBD Remote Denial of Service Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
RE: RES: Instant Messenger (MurtlandJ at Grangeinsurance.com (Murtland, Jerry))
Where is the sec ind gng? (lists.inbox at gmail.com (lists.inbox))
AV companies better hire good lawyers soon. (michealespinola at gmail.com (Micheal Espinola Jr))
Where is security industry gng?? (nekramer at mindtheater.net (Nancy Kramer))
Daily mass scan from APNIC? (krmaxwell at gmail.com (Kyle Maxwell))
Where is security industry gng?? (toddtowles at brookshires.com (Todd Towles))
win2kup2date.exe ? (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Where is security industry gng?? (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
AV companies better hire good lawyers soon. (jftucker at gmail.com (James Tucker))
RE: RES: Instant Messenger (rsnake at shocking.com (RSnake))
QNX BUG FESTIVAL -- [RLSA_02-2004] QNX Photon multiple buffer overflows (julio at rfdslabs.com.br (Julio Cesar Fort))
QNX BUG FESTIVAL -- [RLSA_03-2004] QNX ftp client format string bug (julio at rfdslabs.com.br (Julio Cesar Fort))
QNX BUG FESTIVAL -- [RLSA_04-2004] QNX crrtrap possible race condition (julio at rfdslabs.com.br (Julio Cesar Fort))
Where is security industry gng?? (dufresne at winternet.com (Ron DuFresne))
Where is security industry gng?? (gshively at pivx.com (Geoff Shively))
AV companies better hire good lawyers soon. (3APA3A at SECURITY.NNOV.RU (3APA3A))
The ArpSucker is b0rn! Be yourself, be the net. (alpt at freaknet.org (Alpt))
AV companies better hire good lawyers soon. (hjtoi at comcast.net (Heikki Toivonen))
Where is security industry gng?? (chows at ozemail.com.au (Gregh))
MDKSA-2004:092 - Updated samba packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))

September 14 (64 messages)

New Security paper released (shadown at gmail.com (shadown))
6 gmail invites - contact off list (joel at helgeson.com (Joel R. Helgeson))
Please *stop* with the GMAIL invites (st3ng4h at comcast.net (st3ng4h))
Illegal (agent99 at sgi.com (agent99@....com))
New Security paper released (mnv at alumni.princeton.edu (MN Vasquez))
Where is security industry gng?? (adam at huntrecruiting.com (Adam))
Where is security industry gng?? (nick at virus-l.demon.co.uk (Nick FitzGerald))
AV companies better hire good lawyers soon. (gruneberg at absamail.co.za (Jean Gruneberg))
Corsaire Security Advisory - Multiple vendor MIME field multiple occurrence issue (fw at deneb.enyo.de (Florian Weimer))
AV companies better hire good lawyers soon. (fw at deneb.enyo.de (Florian Weimer))
AV companies better hire good lawyers soon. (gruneberg at absamail.co.za (Jean Gruneberg))
drive by shooting - got hit by mysearch toolbar (iadnah at uplinklounge.com (Iadnah))
Re: The ArpSucker is b0rn! Be yourself, be the net. (Stefan.Laudat at allianztiriac.ro (Stefan.Laudat@...ianztiriac.ro))
Teen hacker controls ebay (fw at deneb.enyo.de (Florian Weimer))
AV companies better hire good lawyers soon. (fw at deneb.enyo.de (Florian Weimer))
drag and drop bug internet explorer (oleg2 at gmx.de (Oleg Khutoryansky))
AV companies better hire good lawyers soon. (fw at deneb.enyo.de (Florian Weimer))
AV companies better hire good lawyers soon. (jftucker at gmail.com (James Tucker))
ALPHA 2: Zero-tolerance (skylined at edup.tudelft.nl (Berend-Jan Wever))
Illegal (ascii at katamail.com (aScii))
Correction to latest Colsaire advisories (advisories at corsaire.com (advisories))
Re: The ArpSucker is b0rn! Be yourself, be the net. (vxdude2003 at yahoo.com (VX Dude))
Does the following... (xor at insightbb.com (XOR))
AV companies better hire good lawyers soon. (michealespinola at gmail.com (Micheal Espinola Jr))
Where is security industry gng?? (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Correction to latest Colsaire advisories (3APA3A at SECURITY.NNOV.RU (3APA3A))
Illegal (toddtowles at brookshires.com (Todd Towles))
Possible New Malware (PerrymonJ at bek.com (Perrymon, Josh L.))
Correction to latest Colsaire advisories (advisories at corsaire.com (advisories))
AV companies better hire good lawyers soon. (ajalal at bushschool.tamu.edu (ajalal@...hschool.tamu.edu))
Re: The ArpSucker is b0rn! Be yourself, be the net. (barrie at reboot-robot.net (Barrie Dempster))
[SECURITY] [DSA 544-1] New webmin packages fix insecure temporary directory (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
Correction to latest Colsaire advisories (3APA3A at SECURITY.NNOV.RU (3APA3A))
Possible New Malware (tebodell at gmail.com (Ty Bodell))
Does the following... (peter at semantico.com (Peter Hickman))
Re: The ArpSucker is b0rn! Be yourself, be the net. (karmic_nirvana at yahoo.com (nirvana))
Possible New Malware (PerrymonJ at bek.com (Perrymon, Josh L.))
Possible New Malware (uberguidoz at gmail.com (GuidoZ))
Possible New Malware (uberguidoz at gmail.com (GuidoZ))
drag and drop bug internet explorer (uberguidoz at gmail.com (GuidoZ))
Where is security industry gng?? (frank at knobbe.us (Frank Knobbe))
AV companies better hire good lawyers soon. (frank at knobbe.us (Frank Knobbe))
AV companies better hire good lawyers soon. (frank at knobbe.us (Frank Knobbe))
AV companies better hire good lawyers soon. (fw at deneb.enyo.de (Florian Weimer))
Re: AV companies better hire good lawyers soon. (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
Re: AV companies better hire good lawyers soon. (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
Possible New Malware (jessevalentin at yahoo.com (Jesse Valentin))
AV companies better hire good lawyers soon. (live4java at stormcenter.net (Mister Coffee))
Fw: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (8… (thelovenasium at hotmail.com (Anonymous…)
AV companies better hire good lawyers soon. (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Re: Sidney McAfee GroupShield Alert (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Re: The ArpSucker is b0rn! Be yourself, be the net. (syke at mantissecurity.net (Syke))
AV companies better hire good lawyers soon. (manuel at ekerazha.com (Manuel C. -aka- ekerazha))
AV companies better hire good lawyers soon. (shyyqvfpybfher at wylie.me.uk (Alan J. Wylie))
RE: The ArpSucker is b0rn! Be yourself, be the net. (RCompton at chartercom.com (Compton, Rich))
New Worm equipped with NetSniffer (jessevalentin at yahoo.com (Jesse Valentin))
[ GLSA 200409-17 ] SUS: Local root vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
AV companies better hire good lawyers soon. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[ GLSA 200409-18 ] cdrtools: Local root vulnerability in cdrecord if set SUID root (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
AV companies better hire good lawyers soon. (live4java at stormcenter.net (Mister Coffee))
Re: AV companies better hire good lawyers soon. (jftucker at gmail.com (James Tucker))
(Asp.Net Full Trust Vulnerabilities) RE: Apache VS IIS Security model question (dinis at ddplus.net (Dinis Cruz))
Where is security industry gng?? (dufresne at winternet.com (Ron DuFresne))
Research Machines(RM) Networks / Setup (stfunub at gmail.com (Andrew Smith))

September 15 (43 messages)

Re: AV companies better hire good lawyers soon. (fw at deneb.enyo.de (Florian Weimer))
AV companies better hire good lawyers soon. (frank at knobbe.us (Frank Knobbe))
Possible New Malware (nick at virus-l.demon.co.uk (Nick FitzGerald))
AV companies better hire good lawyers soon. (nick at virus-l.demon.co.uk (Nick FitzGerald))
6 gmail invites - contact off list (devilousangel at sympatico.ca (The Devilous Angel))
Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow (ndebaggis at verizon.net (Nick D.))
xor/otp (m.mohr at laposte.net (m.mohr@...oste.net))
HTMLShip encrypt (xonico at gmail.com (Nicolas Montoza))
AV companies better hire good lawyers soon. (Michael.Simpson at inveresk.com (Michael Simpson))
STG Security Advisory: [SSA-20040915-07] BBS E-Market Professional multiple vulnerabilities (advisory at stgsecurity.com (SSR Team))
Symantec labels chinese censorship-busting software a Trojan (etomcat at freemail.hu (Feher Tamas))
Re: The ArpSucker is b0rn! Be yourself, be the net. (greg at y2004.nest.cx (Gregory Steuck))
GDIPLUS VULN - MS04-028 - CRASH TEST JPEG (eflorio at edmaster.it (Elia Florio))
GDIPLUS VULN - MS04-028 - CRASH TEST JPEG [attach] (eflorio at edmaster.it (Elia Florio))
SA04-002 - Apache config file env variable buffer overflow (jonas.thambert at pts.se (jonas.thambert@....se))
[OpenPKG-SA-2004.040] OpenPKG Security Advisory (samba) (openpkg at openpkg.org (OpenPKG))
[OpenPKG-SA-2004.041] OpenPKG Security Advisory (spamassassin) (openpkg at openpkg.org (OpenPKG))
followup: xor/otp (m.mohr at laposte.net (m.mohr@...oste.net))
HTMLShip encrypt (m.mohr at laposte.net (m.mohr@...oste.net))
SUSE Security Announcement: cups (SUSE-SA:2004:031) (krahmer at suse.de (Sebastian Krahmer))
GDIPLUS VULN - MS04-028 - CRASH TEST JPEG (cmacfarlane at Drummond-Miller.co.uk (Cassidy Macfarlane))
myServer 0.7 Directory Traversal Vulnerability (webmaster at securiteinfo.com (A.J.))
MDKSA-2004:093 - Updated squid packages fix DoS vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:094 - Updated printer-drivers packages fix vulnerability in foomatic (security at linux-mandrake.com (Mandrake Linux Security Team))
[SECURITY] [DSA 545-1] New cupsys packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
MDKSA-2004:095 - Updated gdk-pixbuf packages fix image loading vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
HTMLShip encrypt (xonico at gmail.com (Nicolas Montoza))
[Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulnerability (junkmail at barnowl.com (Rob Rosenberger))
HTMLShip encrypt (dinsum666 at SAFe-mail.net (dinsum666@...e-mail.net))
[Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulnerability (kf_lists at secnetops.com (KF_lists))
MDKSA-2004:096 - Updated apache2 packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:097 - Updated cups packages fix DoS vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: [Bugtraq] McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE] (mcw at wcd.se (bashis))
NETBIOS SMB IPC$ share unicode access (snort) (nakal at web.de (Martin))
NETBIOS SMB IPC$ share unicode access (snor t) (kquest at toplayer.com (kquest@...layer.com))
[Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulnerability (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
NETBIOS SMB IPC$ share unicode access (snort) (nakal at web.de (Martin))
Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (scheidell at secnap.net (Michael Scheidell))
[OpenPKG-SA-2004.042] OpenPKG Security Advisory (aspell) (openpkg at openpkg.org (OpenPKG))
New Mozilla, Firefox and Thunderbird releases fix critical security issues (gael.delalleau+moz at m4x.org (Gaël Delalleau))
SUSE Security Announcement: apache2 (SUSE-SA:2004:032) (lnussel at suse.de (Ludwig Nussel))
Re: Correction to latest Colsaire advisories (amarx at gega-it.de (Andreas Marx))
iDEFENSE Security Advisory 09.15.04: GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability (idlabs-advisories at idefense.com (idlabs-…)

September 16 (41 messages)

RE: [Bugtraq] McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE] (francis.favorini at duke.edu (Francis Favorini))
[Bulk] Re: [Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulnerability (blsonne at rogers.com (Byron L. Sonne))
MDKSA-2004:098 - Updated libxpm4 packages fix libXpm overflow vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:099 - Updated XFree86 packages fix libXpm overflow vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
[Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulnerability (nick at virus-l.demon.co.uk (Nick FitzGerald))
RE: [Bugtraq] McAfee VirusScan Privilege Escalation Vulnerability (mcw at wcd.se (bashis))
[ GLSA 200409-19 ] Heimdal: ftpd root escalation (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[SECURITY] [DSA 546-1] New gdk-pixbuf packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
[SECURITY] [DSA 547-1] New Imagemagic packages fix buffer overflows (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Re: The ArpSucker is b0rn! Be yourself, be the net. (fdlist at digitaloffense.net (H D Moore))
Fwd: Theo's presentation on exploit prevention (bas.alberts at immunitysec.com (Bas Alberts))
[TURBOLINUX SECURITY INFO] 16/Sep/2004 (security-announce at turbolinux.co.jp (Turbolinux))
[ GLSA 200409-20 ] mpg123: Buffer overflow vulnerability (koon at gentoo.org (Thierry Carrez))
Re: Vulnerability in IBM Windows XP: default hidden password (etomcat at freemail.hu (Feher Tamas))
Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (Colin.Scott at csplc.com (Colin.Scott@...lc.com))
[SECURITY] [DSA 548-1] New imlib packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Vulnerability in IBM Windows XP: default hi dden Administrator account allows local Administrator access (Stephen.Agar at bmhcc.org (Stephen Agar))
Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (pingywon at hotmail.com (pingywon MCSE))
Vulnerability in IBM Windows XP: default hi dden Administrator account allows local Administrator access (Colin.Scott at csplc.com (Colin.Scott@...lc.com))
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (linuxguru80 at yahoo.com (Harrison Gladden))
FlowSecurity.org: Local Stack Overflow on htpasswd apache 1.3.31 advsory. (luiz.fc at gmail.com (Luiz Fernando))
[Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulnerability (guninski at guninski.com (Georgi Guninski))
Freeze in Pigeon Server 3.02.0143 (aluigi at autistici.org (Luigi Auriemma))
iDEFENSE Security Advisory 09.16.04: Ipswitch WhatsUp Gold Remote Denial of Service Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fens…)
Good Network Access Control solution using dot1x? (rsumida at csulb.edu (Ryan Sumida))
Severe exploit found, all UNIX are affected! (mr.bill.bilano at email.server.unix.bill.bilano.biz (Billy B. Bilano))
[RE]: Severe exploit found, all UNIX are affected! (Sung.Choe at hickam.af.mil (Choe Sung Cont. PACAF CSS/SCHP))
Good Network Access Control solution using dot1x? (alanme at melmac.co.uk (Alan Melia (Melmac)))
[ GLSA 200409-21 ] Apache 2, mod_dav: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
Severe exploit found, all UNIX are affected! (kf_lists at secnetops.com (KF_lists))
Severe exploit found, all UNIX are affected! (toddtowles at brookshires.com (Todd Towles))
Good Network Access Control solution using dot1x? (derek.buelna at office.xerox.com (Buelna, Derek))
Severe exploit found, all UNIX are affected! (gaubrig at yahoo.com (Gaurang Pandya))
Severe exploit found, all UNIX are affected! (gaubrig at yahoo.com (Gaurang Pandya))
[ GLSA 200409-22 ] phpGroupWare: XSS vulnerability in wiki module (klieber at gentoo.org (Kurt Lieber))
Severe exploit found, all UNIX are affected! (mr.bill.bilano at email.server.unix.bill.bilano.biz (Billy B. Bilano))
re jpeg vuln (mikieboy at hackermail.com (mike gringo))
Good Network Access Control solution using (rsumida at csulb.edu (Ryan Sumida))
Careless User = New Popup Issue (pwicks at oxygen.com (James Patterson Wicks))
Severe exploit found, all UNIX are affected! (y_avenger_y at ua.fm (nobody))

September 17 (50 messages)

Re: [Vmyths.com ALERT] Hysteria predicted for 'JPEG and windows update (randallm at fidmail.com (RandallM))
[RE]: Severe exploit found, all UNIX are affected! (se_cur_ity at hotmail.com (morning_wood))
Severe exploit found, all UNIX are affected! (adam at huntrecruiting.com (Adam))
Severe exploit found, all UNIX are affected! (measl at mfn.org (J.A. Terranson))
Careless User = New Popup Issue (jftucker at gmail.com (James Tucker))
Re: [Vmyths.com ALERT] Hysteria predicted for 'JPEG and windows update (dufresne at winternet.com (Ron DuFresne))
Shmoocon CFP & registration information (shmooconannounce at shmoo.com (shmooconannounce))
Severe exploit found, all UNIX are affected! (micah at style.net (Micah McNelly))
Severe exploit found, all UNIX are affected! (r00t3d at gmail.com (r00t3d))
[RE]: Severe exploit found, all UNIX are affected! (chromazine at sbcglobal.net (Steve Kudlak))
avoid jpeg overflow problems using on the fly conversion? (mettlers at thehive.ch (mettlers@...hive.ch))
WinXP SP2 hacks dial-up Internet users wide open? (etomcat at freemail.hu (Feher Tamas))
[exploitwatch.org] ALERT: Windows XP JPEG Buffer Overflow POC Exploit (admin at exploitwatch.org (admin@...loitwatch.org))
[SECURITY] [DSA 549-1] New gtk+2.0 packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
Re: (Asp.Net Full Trust Vulnerabilities) RE: Apache VS IIS Security model question (ken at adOpenStatic.com (Ken Schaefer))
[exploitwatch.org] ALERT: Windows XP JPEG Buffer Overflow POC Exploit (ge at linuxbox.org (Gadi Evron))
Corsaire Security Advisory - Business Objects WebIntelligence arbitrary document deletion issue (advisories at corsaire.com (advisories))
Corsaire Security Advisory - Business Objects WebIntelligence XSS issue (advisories at corsaire.com (advisories))
avoid jpeg overflow problems using on the fly conversion? (nick at virus-l.demon.co.uk (Nick FitzGerald))
avoid jpeg overflow problems using on the fly conversion? (hescominsoon at emmanuelcomputerconsulting.com (William Warren))
[ GLSA 200409-23 ] SnipSnap: HTTP response splitting (klieber at gentoo.org (Kurt Lieber))
SUSE Security Announcement: gtk2, gdk-pixbuf (SUSE-SA:2004:033) (ludwig.nussel at suse.de (Ludwig Nussel))
SUSE Security Announcement: XFree86-libs, xshared (SUSE-SA:2004:034) (thomas at suse.de (Thomas Biege))
Re: [Vmyths.com ALERT] Hysteria predicted for 'JPEG and windows update (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Severe exploit found, all UNIX are affected! (kf_lists at secnetops.com (KF_lists))
Symantec acquires @stake (dante at alighieri.org (Davide Del Vecchio))
ANNOUNCE: VulnDisco RADIUS testsuite v1.2 (demidov at gleg.net (Evgeny Demidov))
Severe exploit found, all UNIX are affected! (sean01 at accnet.com.au (Sean Crawford))
Severe exploit found, all UNIX are affected! (kf_lists at secnetops.com (KF_lists))
Symantec acquires @stake (dufresne at winternet.com (Ron DuFresne))
Severe exploit found, all UNIX are affected! (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
avoid jpeg overflow problems using on the fly conversion? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Severe exploit found, all UNIX are affected! (dufresne at winternet.com (Ron DuFresne))
Severe exploit found, all UNIX are affected! (sean01 at accnet.com.au (Sean Crawford))
Severe exploit found, all UNIX are affected! (sean01 at accnet.com.au (Sean Crawford))
Symantec acquires @stake (visitbipin at yahoo.com (bipin gautam))
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (kicktd_list at hotmail.com (Chris Norton))
Symantec acquires @stake (yossarian at planet.nl (yossarian))
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (scheidell at secnap.net (Michael Scheidell))
David Waggoner no longer works here. (David.Waggoner at instinet.com (David.Waggoner@...tinet.com))
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (scheidell at secnap.net (Michael Scheidell))
Re: Windows XP JPEG Buffer Overflow (jklemenc at fnal.gov (jklemenc@...l.gov))
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (mwwilson at navo.hpc.mil (Michael Wilson, Contracto…)
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (mwwilson at navo.hpc.mil (Michael Wilson, Contracto…)
MDKSA-2004:095-1 - Updated gdk-pixbuf and gtk+2 packages fix image loading vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Severe exploit found, all UNIX are affected! (bucky at speakeasy.org (David Klotz))
ZIP Attachment (nodialtone at comcast.net (Byron Copeland))
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (pingywon at hotmail.com (pingywon MCSE))
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (mwwilson at navo.hpc.mil (Michael Wilson, Contracto…)
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (kicktd_list at hotmail.com (Chris Norton))

September 18 (15 messages)

Severe exploit found, all UNIX are affected! (hhoffman at ip-solutions.net (Harry Hoffman))
Re: [exploitwatch.org] ALERT: Windows XP JPEG Buffer Overflow POCExploit (Dan.Clemens at healthsouth.com (Clemens, Dan))
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (prp17 at adelphia.net (Phillip R. Paradis))
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (prp17 at adelphia.net (Phillip R. Paradis))
avoid jpeg overflow problems using on the fly conversion? (mettlers at thehive.ch (Sascha Mettler))
Cisco, Microsoft in security showdown (gaubrig at yahoo.com (Gaurang Pandya))
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (smcmahon at eiv.com (Shawn McMahon))
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (scheidell at secnap.net (Michael Scheidell))
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (scheidell at secnap.net (Michael Scheidell))
ZIP Attachment (uberguidoz at gmail.com (GuidoZ))
Re: GoogleToolbar:About -- Allows Script Injection (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (smcmahon at eiv.com (Shawn McMahon))
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (scheidell at secnap.net (Michael Scheidell))
Debian netkit telnetd vulnerability (lcamtuf at ghettot.org (Michal Zalewski))
Virus exploits workaround in Windows Mobile/Pocket PC architecture (Includes Source Code) (contact at airscanner.com (contact@...scanner.com))

September 19 (16 messages)

ZIP Attachment (nick at virus-l.demon.co.uk (Nick FitzGerald))
ZIP Attachment (uberguidoz at gmail.com (GuidoZ))
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (randallm at fidmail.com (RandallM))
ZIP Attachment (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: GoogleToolbar:About -- Allows Script Injection (liudieyu at umbrella.name (Liu Die Yu))
Re: GoogleToolbar:About -- Allows Script Injection (viper31337 at yahoo.co.in (ViPeR))
The remote Openssh User-Level-Denial-Of-Service (alpt at freaknet.org (Alpt))
Local root compromise possible with getmail (baikie at ehwhat.freeserve.co.uk (David Watson))
Cisco, Microsoft in security showdown (abaker at gmail.com (ASB))
ZIP Attachment (uberguidoz at gmail.com (GuidoZ))
The remote Openssh User-Level-Denial-Of-Service (3APA3A at SECURITY.NNOV.RU (3APA3A))
Crash in Lords of the Realm III 1.01 (aluigi at autistici.org (Luigi Auriemma))
ZIP Attachment (nick at virus-l.demon.co.uk (Nick FitzGerald))
Tool announcement: fakebust (lcamtuf at ghettot.org (Michal Zalewski))
ZIP Attachment (randallm at fidmail.com (RandallM))
Buliding computer security infrastructure for a country. (chriswhite at gentoo.org (Chris White))

September 20 (65 messages)

OT: Re: ZIP Attachment (security at brvenik.com (Jason))
ZIP Attachment (dufresne at winternet.com (Ron DuFresne))
OT: Re: ZIP Attachment (xillwillx at gmail.com (Ill will))
Sandeep Sengupta: Another Gmail Link (sandeep.sengupta at gmail.com (Sandeep Sengupta))
Buliding computer security infrastructure for a country. (z_ooman at hotmail.com (First Last))
ZIP Attachment (uberguidoz at gmail.com (GuidoZ))
OT: Re: ZIP Attachment (uberguidoz at gmail.com (GuidoZ))
Gmail kickban (skylined at edup.tudelft.nl (Berend-Jan Wever))
Gmail kickban (ph0enix at layertwo.net (ph0enix))
Scandal: IT Security firm hires the author of Sasser worm (etomcat at freemail.hu (Feher Tamas))
Re: Buliding computer security infrastructure for a country. (etomcat at freemail.hu (Feher Tamas))
Re: Buliding computer security infrastructure for a country. (cmacfarlane at Drummond-Miller.co.uk (Cassidy Macfarlane))
[Full Disclosure] *HACKERS COSTING ENTERPRISES BILLIONS (randallm at fidmail.com (RandallM))
Re: Buliding computer security infrastructure for a country. (mettlers at thehive.ch (mettlers@...hive.ch))
JPG worm! (visitbipin at yahoo.com (bipin gautam))
SV: JPG worm! (visitbipin at yahoo.com (bipin gautam))
Scandal: IT Security firm hires the author of Sasser worm (Rainer-Peter.Feller at mail.physnet.uni-hamburg.de (Rainer P. Feller))
Scandal: IT Security firm hires the author of Sasser worm (adf at code511.com (adf--at--Code511.com))
Scandal: IT Security firm hires the author of Sasser worm (dispacct at hotmail.com (bb))
Re: Buliding computer security infrastructure for a country. (mnv at alumni.princeton.edu (MN Vasquez))
Re: [CAUGHT!] Buliding computer security infrastructure for a country. (visitbipin at yahoo.com (bipin gautam))
Re: [CAUGHT!] Buliding computer security infrastructure for a country. (visitbipin at yahoo.com (bipin gautam))
Re: [CAUGHT!] Buliding computer security infrastructure for a country. (visitbipin at yahoo.com (bipin gautam))
Scandal: IT Security firm hires the author of Sasser worm (stilist at gmail.com (stilist))
Scandal: IT Security firm hires the author of Sasser worm (nick at ethicsdesign.com (Nick Jacobsen))
Scandal: IT Security firm hires the author of Sasser worm (toddtowles at brookshires.com (Todd Towles))
[ GLSA 200409-24 ] Foomatic: Arbitrary command execution in foomatic-rip filter (condordes at gentoo.org (Joshua J. Berry))
Scandal: IT Security firm hires the author of Sasser worm (var at deny-all.com (Vincent Archer))
Scandal: IT Security firm hires the author of Sasser worm (jonathan at xcorps.net (Jonathan Rickman))
Scandal: IT Security firm hires the author of Sasser worm (lists at ktabic.co.uk (ktabic))
Scandal: IT Security firm hires the author of Sasser worm (nick at ethicsdesign.com (Nick Jacobsen))
Scandal: IT Security firm hires the author of Sasser worm (abaker at gmail.com (ASB))
Scandal: IT Security firm hires the author of Sasser worm (Michael.Simpson at inveresk.com (Michael Simpson))
Scandal: IT Security firm hires the author of Sasser worm (samir at teknotrends.com (Samir Kelekar))
FreeBSD Security Advisory FreeBSD-SA-04:14.cvs (security-advisories at freebsd.org (FreeBSD Security Advisories))
Default username/password pairs in ON Command CCM 5.x database backend (jonas.olsson at takeit.se (Jonas Olsson))
Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (lists at e-lsd.com (Larry Mitchell))
RE: [SPAM] - Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access… (scheidell at secnap.net (Michael Scheid…)
Scandal: IT Security firm hires the author of Sasser worm (kf_lists at secnetops.com (KF_lists))
@Stake Aquired by Symantec (frogman at skspeed.com (frogman))
[SECURITY] [DSA 550-1] New wv packages fix arbitrary command execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Scandal: IT Security firm hires the author of Sasser worm (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Scandal: IT Security firm hires... (keydet89 at yahoo.com (Harlan Carvey))
@Stake Aquired by Symantec (keydet89 at yahoo.com (Harlan Carvey))
@Stake Aquired by Symantec (vesselen.mironov at hush.ai (vesselen.mironov@...h.ai))
Scandal: IT Security firm hires the author of Sasser worm (keydet89 at yahoo.com (Harlan Carvey))
Scandal: IT Security firm hires the author of Sasser worm (fbnewtz at houston.rr.com (Fred Newtz))
Scandal: IT Security firm hires the author of Sasser worm (fbnewtz at houston.rr.com (Fred Newtz))
Scandal: IT Security firm hires... (Glenn_Everhart at bankone.com (Glenn_Everhart@...kone.com))
Scandal: IT Security firm hires the author of Sasser worm (fdisclosure at alicampbell.org.uk (Ali Campbell))
Scandal: IT Security firm hires the author of Sasser worm (toddtowles at brookshires.com (Todd Towles))
Scandal: IT Security firm hires the author of Sasser worm (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Scandal: IT Security firm hires the author of Sasser worm (guninski at guninski.com (Georgi Guninski))
Scandal: IT Security firm hires the author of Sasser worm (larry at larryseltzer.com (Larry Seltzer))
[ GLSA 200409-25 ] CUPS: Denial of service vulnerability (koon at gentoo.org (Thierry Carrez))
[ GLSA 200409-26 ] Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities (koon at gentoo.org (Thierry Carrez))
Scandal: IT Security firm hires the author of Sasser worm (jrepenning at collab.net (Jack Repenning))
Scandal: IT Security firm hires the author of Sasser worm (pauls at utdallas.edu (Paul Schmehl))
Sick of stupid analogies (stryc9 at gmail.com (Stryc9 _))
JPG worm! (anthrax101 at gmail.com (Aaron Horst))
Sick of stupid analogies (nodialtone at comcast.net (Byron Copeland))
Scandal: IT Security firm hires the author of Sasser worm (se_cur_ity at hotmail.com (morning_wood))
Scandal: IT Security firm hires the author of Sasser worm (vimages at well.com (Jim Race))
OpenBSD radius authentication vulnerability (E.Bos at reseau.nl (E.Bos@...eau.nl))
Scandal: IT Security firm hires the author of Sasser worm (matthias.andree at gmx.de (Matthias Andree))

September 21 (57 messages)

Buliding computer security infrastructure for a country. (jftucker at gmail.com (James Tucker))
[sb] [ GLSA 200409-26 ] Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities (koon at gentoo.org (Thierry Carrez))
Scandal: IT Security firm hires the author of Sasser worm (xillwillx at yahoo.com (Will Image))
Sick of stupid analogies (dentonj at gmail.com (Jeffrey Denton))
Severe exploit found, all UNIX are affected! (galt at locutus.isu.edu (John Galt))
Scandal: IT Security firm hires the author of Sasser worm (eballen1 at qwest.net (Bruce Ediger))
Scandal: IT Security firm hires the author of Sasser worm (samir at teknotrends.com (Samir Kelekar))
Scandal: IT Security firm hires the author of Sasser worm (galt at locutus.isu.edu (John Galt))
Scandal: IT Security firm hires the author of Sasser worm (ggilliss at netpublishing.com (Gregory A. Gilliss))
Sick of stupid analogies (listbot at mailandnews.com (listbot))
Re: IT Security firm hires the author of Sasser worm (brudy at bruderer-research.com (Peter Bruderer))
Re: IT Security firm hires the author of Sasser worm -just a thought- (frankdewit at home.nl (Frank de Wit))
Scandal: IT Security firm hires... (lists at ktabic.co.uk (ktabic))
Scandal: IT Security firm hires... (charles.heselton at gmail.com (Charles Heselton))
Re: IT Security firm hires the author of Sasser worm (r00t3d at gmail.com (Syke))
Scandal: IT Security firm hires the author of Sasser worm (lists at ktabic.co.uk (ktabic))
Scandal: IT Security firm hires the author of Sasser worm (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
Scandal: IT Security firm hires the author of Sasser worm (lists at ktabic.co.uk (ktabic))
Re: IT Security firm hires the author of Sasser worm (venom at gen-x.co.nz (VeNoMouS))
Scandal: IT Security firm hires the author of Sasser worm (vxdude2003 at yahoo.com (VX Dude))
Scandal: IT Security firm hires the authorof Sasser worm (fangoitia at pandasoftware.es (Felipe Angoitia))
Scandal: IT Security firm hires the author of Sasser worm (lists at ktabic.co.uk (ktabic))
Scandal: IT Security firm hires the author of Sasser worm (keydet89 at yahoo.com (Harlan Carvey))
Scandal: IT Security firm hires the authorof Sasser worm (jftucker at gmail.com (James Tucker))
Scandal: IT Security firm hires the author of Sasser worm (lists at ktabic.co.uk (ktabic))
Re: IT Security firm hires the author of Sasser worm (kf_lists at secnetops.com (KF_lists))
Scandal: IT Security firm hires the author of Sasser worm (contact_jamie_fisher at yahoo.co.uk (jamie fisher))
[SECURITY] [DSA 551-1] New lukemftpd packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
Scandal: IT Security firm hires the author of Sasser worm (ph0enix at layertwo.net (ph0enix))
A correction to "UNIRAS ALERT - 34/04" (Ulf.Harnhammar.9485 at student.uu.se (Ulf Härnhammar))
Scandal: IT Security firm hires the author of Sasser worm (fbnewtz at houston.rr.com (Fred Newtz))
Scandal: IT Security firm hires the author of Sasser worm (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Scandal: IT Security firm hires the author of Sasser worm (larry at larryseltzer.com (Larry Seltzer))
Secure I&A and data transfer on Solaris 2.5.1 (staylo at agccs.lmco.com (Stephen Taylor))
Broadcast crash in Popmessenger 1.60 (before 20 Sep 2004) (aluigi at autistici.org (Luigi Auriemma))
Scandal: IT Security firm hires the author of Sasser worm (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Scandal: IT Security firm hires the author of Sasser worm (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Scandal: IT Security firm hires the author of Sasser worm (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Scandal: IT Security firm hires the author of Sasser worm (jonathan at xcorps.net (Jonathan Rickman))
Lots of traffic on port 1472 from explorer (milicia at brics.dk (Giuseppe Milicia))
Scandal: IT Security firm hires the author of Sasser worm (vh at helith.net (van Helsing))
Scandal: IT Security firm hires the author of Sasser worm (pingywon at hotmail.com (pingywon MCSE))
Scandal: IT Security firm hires the author of Sasser worm (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Scandal: IT Security firm hires the author of Sasser worm (nix at syndicalist.net (Henrik Persson))
Lots of traffic on port 1472 from explorer (brent.colflesh at ulticom.com (Brent Colflesh))
Secure I&A and data transfer on Solaris 2.5.1 (krmaxwell at gmail.com (Kyle Maxwell))
[ GLSA 200409-27 ] glFTPd: Local buffer overflow vulnerability (koon at gentoo.org (Thierry Carrez))
Lots of traffic on port 1472 from explorer (Michael.Sottile at 53.com (Sottile, Michael))
[ GLSA 200409-28 ] GTK+ 2, gdk-pixbuf: Multiple image decoding vulnerabilities (koon at gentoo.org (Thierry Carrez))
Lots of traffic on port 1472 from explorer (keydet89 at yahoo.com (Harlan Carvey))
Secure I&A and data transfer on Solaris 2.5.1 (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Lots of traffic on port 1472 from explorer (uberguidoz at gmail.com (GuidoZ))
Lots of traffic on port 1472 from explorer (milicia at brics.dk (Giuseppe Milicia))
RE: [Owasp-dotnet] Re: (Asp.Net Full Trust Vulnerabilities) RE: Apache VS IIS Security model question (dinis at ddplus.net (Dinis Cruz))
Pinnacle ShowCenter Skin Denial of Service (marc.ruef at computec.ch (Marc Ruef))
RE: Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...ed…)
Broadcast crash in Popmessenger 1.60 (before 20 Sep 2004) (aluigi at autistici.org (Luigi Auriemma))

September 22 (49 messages)

Scandal: IT Security firm hires the author of Sasser worm (dufresne at winternet.com (Ron DuFresne))
Control EDX/EAX in JPG Heap Overflow (MS04-028) (eflorio at edmaster.it (Elia Florio))
Lots of traffic on port 1472 from explorer (keydet89 at yahoo.com (Harlan Carvey))
Scandal: IT Security firm hires the author of Sasser worm (b.griffin at cqu.edu.au (Brad Griffin))
Scandal: IT Security firm hires the author of Sasser worm (b.griffin at cqu.edu.au (Brad Griffin))
Lots of traffic on port 1472 from explorer (seclistaddress at yahoo.com (Manohar G Singh))
Scandal: IT Security firm hires the author of Sasser worm (b.griffin at cqu.edu.au (Brad Griffin))
Control EDX/EAX in JPG Heap Overflow (MS04-028) (PERFECT.MATERIAL at gmail.com (Anonymous User))
Scandal: IT Security firm hires the author of Sasser worm (dufresne at winternet.com (Ron DuFresne))
Scandal: IT Security firm hires the author of Sasser worm (mis at seiden.com (mis@...den.com))
Lots of traffic on port 1472 from explorer (uberguidoz at gmail.com (GuidoZ))
Scandal: IT Security firm hires the author of Sasser worm (se_cur_ity at hotmail.com (morning_wood))
Scandal: IT Security firm hires the author of Sasser worm (Michael.Simpson at inveresk.com (Michael Simpson))
Lots of traffic on port 1472 from explorer (milicia at brics.dk (Giuseppe Milicia))
Scandal: IT Security firm hires the author of Sasser worm (barrie at reboot-robot.net (Barrie Dempster))
[ GLSA 200409-29 ] FreeRADIUS: Multiple Denial of Service vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Scandal: IT Security firm hires the author of Sasser worm (vh at helith.net (van Helsing))
Scandal: IT Security firm hires the author of Sasser worm (vh at helith.net (van Helsing))
Scandal: IT Security firm hires the author of Sasser worm (vh at helith.net (van Helsing))
Control EDX/EAX in JPG Heap Overflow (MS04-028) (jerome.athias at caramail.com (jerome.athias@...amail.com))
Scandal: IT Security firm hires the author of Sasser worm (dries at skybel.net (Dries Robberechts))
GNU sharutils <= 4.2.1 Format String POC (narkotix at linuxmail.org (narko tix))
Control EDX/EAX in JPG Heap Overflow (MS04-028) (toddtowles at brookshires.com (Todd Towles))
Administrivia: Noise (len at netsys.com (Len Rose))
Amazing but true Scandal: IT Security firm hires the author of Sasser worm (jan.m.clairmont at citigroup.com (Clairmont, Jan M))
Scandal: IT Security firm hires the author of Sasser worm (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Scandal: IT Security firm hires the author of Sasser worm (dufresne at winternet.com (Ron DuFresne))
Scandal: IT Security firm hires the author of Sasser worm (dufresne at winternet.com (Ron DuFresne))
[SECURITY] [DSA 552-1] New imlib2 packages fix potential arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.…)
Lots of traffic on port 1472 from explorer (uberguidoz at gmail.com (GuidoZ))
Computer security and Sex (chunky at lhqi.com (chunky@...i.com))
Computer security and Sex (hhoffman at ip-solutions.net (Harry Hoffman))
JPG worm! (xonico at gmail.com (Nicolas Montoza))
New GDI exploit (joshuaperrymon at gmail.com (Josh L. Perrymon))
Remote buffer overflow in MDaemon IMAP and SMTP server (pigrelax at yandex.ru (pigrelax))
Re:Hiring a worm writer to do computer security (daniels at Ponderosatel.com (Daniel Sichel))
Re:Hiring a worm writer to do computer security (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: New GDI exploit (joshuaperrymon at gmail.com (Josh L. Perrymon))
[ GLSA 200409-30 ] xine-lib: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
New GDI exploit (se_cur_ity at hotmail.com (morning_wood))
MDKSA-2004:100 - Updated mpg123 packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MS04-028 Shell Exploit (toddtowles at brookshires.com (Todd Towles))
MDKSA-2004:101 - Updated webmin packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:102 - Updated ImageMagick packages fix arbitray code execution vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
ALPHA2 C Source (skylined at edup.tudelft.nl (Berend-Jan Wever))
Microsoft Windows MS04-028 JPEG Overflow Shellcoded Exploit (elvi52001 at yahoo.com (ElviS .de))
MS04-028 Shell Exploit (andy at romnet.com (Andy Silva))
Windows MS04-028 JPEG Overflow Shellcoded Exploit (elvi52001 at yahoo.com (ElviS .de))
Re: [DARKLAB] ALPHA2 C Source, but deviance of topic is common. (vecna at s0ftpj.org (Claudio))

September 23 (53 messages)

MS04-028 Exploit PoC II - Shellcode=CreateUser X in Administrators Group (eflorio at edmaster.it (Elia Florio))
MS04-028 Shell Exploit (mlist at iwasdot.com (Mailing Lists))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (xillwillx at yahoo.com (Will Image))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (uberguidoz at gmail.com (GuidoZ))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (matt at systemlinux.net (Matt))
Another Gmail Link (sandeep.sengupta at gmail.com (Sandeep Sengupta))
Motorola Wireless Router WR850G Authentication Circumvention (list at fabiand.net (Daniel Fabian))
[ GLSA 200409-31 ] jabberd 1.x: Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Rootkit For Spyware? Hide your adware from (avalon at cairo.anu.edu.au (Darren Reed))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (James.Cupps at sappi.com (James.Cupps@...pi.com))
Rootkit For Spyware? Hide your adware from (James.Cupps at sappi.com (James.Cupps@...pi.com))
MS04-028 Shell Exploit (andy at romnet.com (Andy Silva))
MS04-028 Shell Exploit[Scanned] (andy at romnet.com (Andy Silva))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (keydet89 at yahoo.com (Harlan Carvey))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (toddtowles at brookshires.com (Todd Towles))
Rootkit For Spyware? Hide your adware from (keydet89 at yahoo.com (Harlan Carvey))
Rootkit For Spyware? Hide your adware from (James.Cupps at sappi.com (James.Cupps@...pi.com))
MS04-028 Shell Exploit[Scanned] (toddtowles at brookshires.com (Todd Towles))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (James.Cupps at sappi.com (James.Cupps@...pi.com))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (James.Cupps at sappi.com (James.Cupps@...pi.com))
Rootkit For Spyware? Hide your adware from (James.Cupps at sappi.com (James.Cupps@...pi.com))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (keydet89 at yahoo.com (Harlan Carvey))
MS04-028 Shell Exploit[Scanned] (toddtowles at brookshires.com (Todd Towles))
MS04-028 Shell Exploit[Scanned] (toddtowles at brookshires.com (Todd Towles))
MS04-028 Shell Exploit[Scanned] (toddtowles at brookshires.com (Todd Towles))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (uberguidoz at gmail.com (GuidoZ))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (uberguidoz at gmail.com (GuidoZ))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (jftucker at gmail.com (James Tucker))
Multiple vulnerabilities in ActivePost Standard 3.1 (aluigi at autistici.org (Luigi Auriemma))
unknown backdoor: 220 StnyFtpd 0wns j0 (rsumida at csulb.edu (Ryan Sumida))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (keydet89 at yahoo.com (Harlan Carvey))
unknown backdoor: 220 StnyFtpd 0wns j0 (James_Elliott at sra.com (Elliott, James))
unknown backdoor: 220 StnyFtpd 0wns j0 (keydet89 at yahoo.com (Harlan Carvey))
Re: Computer security and Sex (steve_r125 at yahoo.co.uk (Steve R))
unknown backdoor: 220 StnyFtpd 0wns j0 (toddtowles at brookshires.com (Todd Towles))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (macmanus at gmail.com (macmanus@...il.com))
unknown backdoor: 220 StnyFtpd 0wns j0 (joe at joesmith.homeip.net (joe smith))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (toddtowles at brookshires.com (Todd Towles))
unknown backdoor: 220 StnyFtpd 0wns j0 (ngiles at hushmail.com (mike king))
unknown backdoor: 220 StnyFtpd 0wns j0 (mike.fowler at guidancesoftware.com (Fowler, Mike))
"tired of spam? time to fight back!" or fightspam.nm.ru (devilousangel at sympatico.ca (The Devilous Angel))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (uberguidoz at gmail.com (GuidoZ))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (uberguidoz at gmail.com (GuidoZ))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (James.Cupps at sappi.com (James.Cupps@...pi.com))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (uberguidoz at gmail.com (GuidoZ))
"tired of spam? time to fight back!" or fightspam.nm.ru (jlk at thrashyour.com (John Kinsella))
unknown backdoor: 220 StnyFtpd 0wns j0 (rsumida at csulb.edu (Ryan Sumida))
Re: Computer security and Sex (xillwillx at gmail.com (Ill will))
[ GLSA 200409-32 ] getmail: Filesystem overwrite vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
unknown backdoor: 220 StnyFtpd 0wns j0 (iglesias at draco.acs.uci.edu (Mike Iglesias))
unknown backdoor: 220 StnyFtpd 0wns j0 (joe at joesmith.homeip.net (joe smith))
"tired of spam? time to fight back!" or fightspam.nm.ru (weinert at sys2.de (Michael Weinert))
[ GLSA 200409-31 ] jabberd 1.x: Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))

September 24 (50 messages)

Re: Computer security and Sex (uberguidoz at gmail.com (GuidoZ))
Re: Computer security and Sex (stilist at gmail.com (stilist))
Re: Computer security and Sex (uberguidoz at gmail.com (GuidoZ))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (keydet89 at yahoo.com (Harlan Carvey))
Re: Computer security and Sex (krmaxwell at gmail.com (Kyle Maxwell))
Yahoo! Store Security Advisory (smoore.fd at securityglobal.net (Stuart Moore))
Re: Computer security and Sex (uberguidoz at gmail.com (GuidoZ))
[ GLSA 200409-33 ] Apache: Exposure of protected directories (krispykringle at gentoo.org (Dan Margolis))
Windoze almost managed to 200x repeat 9/11 (etomcat at freemail.hu (Feher Tamas))
unknown backdoor: 220 StnyFtpd 0wns j0 (alex.constantinidis at csfb.com (Constantinidis, Alex))
Windoze almost managed to 200x repeat 9/11 (niceman at att.net (Mike Nice))
Windoze almost managed to 200x repeat 9/11 (abaker at gmail.com (ASB))
Windoze almost managed to 200x repeat 9/11 (fdisclosure at alicampbell.org.uk (Ali Campbell))
"tired of spam? time to fight back!" or fightspam.nm.ru (contact_jamie_fisher at yahoo.co.uk (jamie fisher))
Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))
Windoze almost managed to 200x repeat 9/11 (frank at knobbe.us (Frank Knobbe))
Windoze almost managed to 200x repeat 9/11 (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Windoze almost managed to 200x repeat 9/11 (toddtowles at brookshires.com (Todd Towles))
Windoze almost managed to 200x repeat 9/11 (niceman at att.net (Mike Nice))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (toddtowles at brookshires.com (Todd Towles))
Windoze almost managed to 200x repeat 9/11 (guninski at guninski.com (Georgi Guninski))
Windoze almost managed to 200x repeat 9/11 (frank at knobbe.us (Frank Knobbe))
Windoze almost managed to 200x repeat 9/11 (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Windoze almost managed to 200x repeat 9/11 (geoincidents at nls.net (Geo.))
Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))
Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))
Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))
Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))
Windoze almost managed to 200x repeat 9/11 (toddtowles at brookshires.com (Todd Towles))
Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))
Windoze almost managed to 200x repeat 9/11 (abaker at gmail.com (ASB))
Windoze almost managed to 200x repeat 9/11 (pingywon at hotmail.com (pingywon MCSE))
Windoze almost managed to 200x repeat 9/11 (lcamtuf at ghettot.org (Michal Zalewski))
Strange FTP log messages (ken at spinlink.com (ken))
Windoze almost managed to 200x repeat 9/11 (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Strange FTP log messages (bunker at fastwebnet.it (Andrea Purificato - bunker))
Windoze almost managed to 200x repeat 9/11 (toddtowles at brookshires.com (Todd Towles))
Windoze almost managed to 200x repeat 9/11 (blsonne at rogers.com (Byron L. Sonne))
Windoze almost managed to 200x repeat 9/11 (guninski at guninski.com (Georgi Guninski))
Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))
Windoze almost managed to 200x repeat 9/11 (guninski at guninski.com (Georgi Guninski))
Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))
America Online Groups@AOL Feature - Multiple Issues (steven at lovebug.org (steven@...ebug.org))
Windoze almost managed to 200x repeat 9/11 (dufresne at winternet.com (Ron DuFresne))
Windoze almost managed to 200x repeat 9/11 (frank at knobbe.us (Frank Knobbe))
Windoze almost managed to 200x repeat 9/11 (lcamtuf at ghettot.org (Michal Zalewski))
Windoze almost managed to 200x repeat 9/11 (mcw at wcd.se (bashis))
Microsoft GDIPlus.DLL JPEG Parsing Engine B uffer Overflow (kquest at toplayer.com (kquest@...layer.com))
Re: Rootkit For Spyware? Hide your adware from (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
Windoze almost managed to 200x repeat 9/11 (mcw at wcd.se (bashis))

September 25 (26 messages)

Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))
Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))
"tired of spam? time to fight back!" or fightspam.nm.ru (vordhosbn at gmail.com (vord))
Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))
Windoze almost managed to 200x repeat 9/11 (sixsigma98 at hotmail.com (Ray P))
Windoze almost managed to 200x repeat 9/11 (dufresne at winternet.com (Ron DuFresne))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (mikehome at kcisp.net (Mike Barushok))
Strange FTP log messages (mikehome at kcisp.net (Mike Barushok))
Windoze almost managed to 200x repeat 9/11 (nekramer at mindtheater.net (Nancy Kramer))
Rootkit For Spyware? Hide your adware from all Adware removers and Anti-viruses (uberguidoz at gmail.com (GuidoZ))
Strange FTP log messages (chromazine at sbcglobal.net (Steve Kudlak))
MS04-028 Jpeg EXPLOIT with Reverse and Bind shell ... (elvi52001 at yahoo.com (ElviS .de))
MS04-028 Jpeg EXPLOIT with Reverse and Bind shell ... (fdisclosure at alicampbell.org.uk (Ali Campbell))
Windoze almost managed to 200x repeat 9/11 (jftucker at gmail.com (James Tucker))
Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))
MS04-028 Jpeg EXPLOIT with Reverse and Bind shell ... (raza at raza.demon.co.uk (raza))
Re: Computer security and Sex (misiu_ at gmx.de (misiu_))
Windoze almost managed to 200x repeat 9/11 (devis at easynix.net (devis))
MS04-028 Jpeg EXPLOIT with Reverse and Bind shell ... (se_cur_ity at hotmail.com (morning_wood))
MS04-028 Jpeg EXPLOIT with Reverse and Bind shell ... (filbert at pandora.be (Filbert))
Windoze almost managed to 200x repeat 9/11 (gimmespam at gmail.com (Troy))
Windoze almost managed to 200x repeat 9/11 (gtb at slac.stanford.edu (Buhrmaster, Gary))
Yahoo! Store Security Advisory (xploitable at gmail.com (xploitable))
Yahoo! Store Security Advisory (xploitable at gmail.com (xploitable))
Windoze almost managed to 200x repeat 9/11 (dufresne at winternet.com (Ron DuFresne))
Windoze almost managed to 200x repeat 9/11 (dufresne at winternet.com (Ron DuFresne))

September 26 (13 messages)

Yahoo! Store Security Advisory (blsonne at rogers.com (Byron L. Sonne))
Windoze almost managed to 200x repeat 9/11 (devis at easynix.net (devis))
Re: MS04-028 Jpeg EXPLOIT - msn (fulldis at it97.dyndns.org (i.t ))
Windoze almost managed to 200x repeat 9/11 (abaker at gmail.com (ASB))
[inbox] Re: Windoze almost managed to 200x repeat 9/11 (exibar at thelair.com (Exibar))
[inbox] Re: Windoze almost managed to 200x repeat 9/11 (dufresne at winternet.com (Ron DuFresne))
RE: Full-Disclosure: JEPG Hype or Hope? (randallm at fidmail.com (RandallM))
SANS GDIscan (mcw at wcd.se (bashis))
HTTP Response Splitting and SQL injection in megabbs forum (pigrelax at yandex.ru (pigrelax))
SQL injection in BroadBoard Instant ASP Message Board (pigrelax at yandex.ru (pigrelax))
Re: HTTP Response Splitting and SQL injection in megabbs forum (info at pd9soft.com (PD9 Software))
Re: HTTP Response Splitting and SQL injection in megabbs forum (danbuk at gmail.com (DanB UK))
Windoze almost managed to 200x repeat 9/11 (mvp at joeware.net (joe))

September 27 (25 messages)

Windoze almost managed to 200x repeat 9/11 (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Windoze almost managed to 200x repeat 9/11 (we_hate_vince at hotmail.com (Vince Able))
Windoze almost managed to 200x repeat 9/11 (abaker at gmail.com (ASB))
RE: Full-Disclosure: JEPG Hype or Hope? (r00t3d at gmail.com (r00t3d))
Re: Msg reply (elvi52001 at yahoo.com (Elvi))
[ GLSA 200409-34 ] X.org, XFree86: Integer and stack overflows in libXpm (koon at gentoo.org (Thierry Carrez))
[SECURITY] [DSA 553-1] New getmail packages fix root compromise (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Strange FTP log messages (lhand at co.la.ca.us (Larry Hand))
Re: Yahoo! Store Security Advisory (Stuart Moore) (timoguin at gmail.com (Tim O'Guin))
New virus? (bernardo at ish.com.br (Bernardo Santos Wernesback))
[SECURITY] [DSA 554-1] New sendmail packages fix potential open relay (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
New virus? (keydet89 at yahoo.com (Harlan Carvey))
New virus? (the.rxmr at gmail.com (the rxmr))
New virus? (the.rxmr at gmail.com (the rxmr))
New virus? (exibar at thelair.com (Exibar))
New virus? (toddtowles at brookshires.com (Todd Towles))
New virus? (toddtowles at brookshires.com (Todd Towles))
MS04-028 Jpeg EXPLOIT with Reverse and Bind shell ... (ACastigliola at unumprovident.com (Castigliola, Angelo))
SANS GDIscan (PerrymonJ at bek.com (Perrymon, Josh L.))
New virus? (adam at gotlinux.us (Adam Jacob Muller))
MS04-028 Jpeg EXPLOIT with Reverse and Bind shell ... (toddtowles at brookshires.com (Todd Towles))
Automatically passing NTLM authentication credentials on Windows XP (urity_friday at hotmail.com (Hidenobu Seki))
Re: Full-Disclosure digest, Vol 1 #1933 - 20 msgs (milw0rm at gmail.com (milw0rm Inc.))
Broadcast crash in Chatman 1.5.1 RC1 (aluigi at autistici.org (Luigi Auriemma))
OT: The Tel Aviv University Security Forum - 17/10/04 (ge at linuxbox.org (Gadi Evron))

September 28 (42 messages)

New virus? (we_hate_vince at hotmail.com (Vince is a dickhead))
JPEG Virus (joel at helgeson.com (Joel R. Helgeson))
JPEG Virus (peterharvey at emergency.qld.gov.au (Peter B. Harvey (Information Security)))
MDKSA-2004:011-1 - Updated NetPBM packages fix a number of temporary file bugs. (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:103 - Updated OpenOffice.org packages fix temporary file vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
JPEG Virus (dave at horsfall.org (Dave Horsfall))
Serendipity 0.7-beta1 SQL Injection PoC (acidbits at gmail.com (aCiDBiTS))
JPEG Virus (dave at horsfall.org (Dave Horsfall))
Automatically passing NTLM authentication credentials on Windows XP (3APA3A at SECURITY.NNOV.RU (3APA3A))
Automatically passing NTLM authentication credentials on Windows XP (barrie at reboot-robot.net (Barrie Dempster))
JPEG Virus (chromazine at sbcglobal.net (Steve Kudlak))
How to obtain hostname lists (fabio at crearium.com (fabio))
Re: Full-Disclosure digest, Vol 1 #1933 - 20 msgs (danbuk at gmail.com (DanB UK))
How to obtain hostname lists (fabio at crearium.com (fabio))
How to obtain hostname lists (keydet89 at yahoo.com (Harlan Carvey))
Yahoo! Spam Filter Vulnerability (xploitable at gmail.com (xploitable))
Re: Full-Disclosure digest, Vol 1 #1933 - 20 msgs (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
How to obtain hostname lists (keydet89 at yahoo.com (Harlan Carvey))
How to obtain hostname lists (str0ke at milw0rm.com (str0ke@...w0rm.com))
JPEG GDI (str0ke at milw0rm.com (str0ke@...w0rm.com))
How to obtain hostname lists (pingywon at hotmail.com (pingywon MCSE))
Re: Full-Disclosure digest, Vol 1 #1933 - 20 (geoincidents at nls.net (Geo.))
JPEG GDI (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Windoze almost managed to 200x repeat 9/11 (guninski at guninski.com (Georgi Guninski))
Re: Full-Disclosure digest, Vol 1 #1933 - 20 (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
FW: JPEG AV Detection (toddtowles at brookshires.com (Todd Towles))
Re: Full-Disclosure digest, Vol 1 #1933 - 20 (toddtowles at brookshires.com (Todd Towles))
Michael Stift/IT/apss/at ist außer Haus. (Michael.Stift at apss.at (Michael Stift))
FW: JPEG AV Detection (anthrax101 at gmail.com (Aaron Horst))
JPEG GDI (barrie at reboot-robot.net (Barrie Dempster))
FW: JPEG AV Detection (toddtowles at brookshires.com (Todd Towles))
FW: JPEG AV Detection (GEisenhaur at Cisco.com (Gerry Eisenhaur))
JPEG GDI (toddtowles at brookshires.com (Todd Towles))
FW: [Fwd: How one can become a terrorist?] (toddtowles at brookshires.com (Todd Towles))
RE: [Fwd: How one can become a terrorist?] (toddtowles at brookshires.com (Todd Towles))
How to obtain hostname lists (randallm at fidmail.com (RandallM))
WinXP Application Layer Gateway Service (randallm at fidmail.com (RandallM))
Wireless client attacking tool hotspotter 0.4 released (mmo at remote-exploit.org (Max Moser))
RE: FW: [Fwd: How one can become a terrorist?] (r00t3d at gmail.com (r00t3d))
Code execution in Icecast 2.0.1 (aluigi at autistici.org (Luigi Auriemma))
directory traversal in ParaChat Server 5.5 (fdonato at autistici.org (Donato Ferrante))
Re: Full-Disclosure digest, Vol 1 #1933 - 20 msgs (toddtowles at brookshires.com (Todd Towles))

September 29 (33 messages)

FW: [Fwd: How one can become a terrorist?] (kf_lists at secnetops.com (kf_lists))
Need layman terms for jpeg exploit (randallm at fidmail.com (RandallM))
Need layman terms for jpeg exploit (uberguidoz at gmail.com (GuidoZ))
JPEG GDI (uberguidoz at gmail.com (GuidoZ))
MS04-028 Jpeg EXPLOIT with Reverse and Bind shell ... (uberguidoz at gmail.com (GuidoZ))
Automatically passing NTLM authentication credentials on Windows XP (urity_friday at hotmail.com (Hidenobu Seki))
RE: FW: [Fwd: How one can become a terrorist?] (krmaxwell at gmail.com (Kyle Maxwell))
RE: FW: [Fwd: How one can become a terrorist?] (toddtowles at brookshires.com (Todd Towles))
RE: FW: [Fwd: How one can become a terrorist?] (r00t3d at gmail.com (r00t3d))
Resources for exploit coding on Solaris (fabio at crearium.com (fabio))
MS04-028 Jpeg EXPLOIT with Reverse and Bind shell ... (r00t3d at gmail.com (r00t3d))
FW: [Fwd: How one can become a terrorist?] (shyyqvfpybfher at wylie.me.uk (Alan J. Wylie))
Automatically passing NTLM authentication credentials on Windows XP (3APA3A at SECURITY.NNOV.RU (3APA3A))
JPEG AV Detection (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))
Automatically passing NTLM authentication credentials on Windows XP (urity_friday at hotmail.com (Hidenobu Seki))
Re: Full-Disclosure digest, Vol 1 #1933 - 20 msgs (danbuk at gmail.com (DanB UK))
Re: (scheidell at secnap.net (Scheidell))
RE: FW: [Fwd: How one can become a terrorist?] (seclistaddress at yahoo.com (Manohar G Singh))
Spyware? Worm? Trojan? "face license free bait" (ensiferum at hispeed.ch (eNs!feRuM*))
[FLSA-2004:1468] Updated tcpdump packages that fix multiple security vulnerabilities (dom at earth.li (Dominic Hargreaves))
[FLSA-2004:1552] Updated cadaver packages that fix security vulnerabilities (dom at earth.li (Dominic Hargreaves))
[SPAM:####] Re: FW: [Fwd: How one can become a terrorist?] (andfarm at teknovis.com (Andrew Farmer))
Spyware? Worm? Trojan? "face license free bait" ==> Everything is OK.. (ensiferum at hispeed.ch (eNs!feRuM*))
Spyware? Worm? Trojan? "face license free bait" (keydet89 at yahoo.com (Harlan Carvey))
How to terrorist spam (rslade at vcn.bc.ca (Robert Michael Slade))
FW: Re: Full-Disclosure digest, Vol 1 #1933 - 20 msgs (toddtowles at brookshires.com (Todd Towles))
Re: Full-Disclosure digest, Vol 1 #1933 - 20 msgs (uberguidoz at gmail.com (GuidoZ))
Re: Full-Disclosure digest, Vol 1 #1939 - 2 msgs (randallm at fidmail.com (RMueller))
[ GLSA 200409-35 ] Subversion: Metadata information leak (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Re: directory traversal in ParaChat Server 5.5 (fdonato at autistici.org (Donato Ferrante))
jpg problem is the o'l hourse and cart problem (randallm at fidmail.com (RandallM))
Include() Issues... I did try (danbuk at gmail.com (DanB UK))
[FLSA-2004:1468] Updated tcpdump packages that fix multiple security vulnerabilities (dom at earth.li (Dominic Hargreaves))

September 30 (18 messages)

Resources for exploit coding on Solaris (jftucker at gmail.com (James Tucker))
Spyware? Worm? Trojan? "face license free bait" (jthibeault at gmail.com (Jason Thibeault))
Re: Resources for exploit coding on Solaris (garbanzo_the_great at yahoo.com (Great Garbanzo))
Yahoo! Spam Filter Vulnerability (xploitable at gmail.com (xploitable))
Re: Document (elvi52001 at yahoo.com (Elvi))
[SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
[FLSA-2004:2003] Updated rsync package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2004:1840] Updated Ethereal packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
RE: horse before cart...I take it back (randallm at fidmail.com (RandallM))
Multiple vulnerabilities in w-agora forum (antipov at SecurityLab.ru (Alexander Antipov))
[FLSA-2004:1549] Updated xchat packages fix security vulnerability (dom at earth.li (Dominic Hargreaves))
[FLSA-2004:1581] Updated flim packages fix security vulnerability (dom at earth.li (Dominic Hargreaves))
iDEFENSE Security Advisory 09.29.04 - Macromedia JRun 4 mod_jrun Apache Module Buffer Overflow Vulnerability (customerservice at idefense.com (customer service …)
Multiple vulnerabilities in w-agora forum (antipov at SecurityLab.ru (Alexander Antipov))
Re: Hi (scheidell at secnap.net (Scheidell))
Re: Hi (scheidell at secnap.net (Scheidell))
iDEFENSE Security Advisory 09.30.04: Samba Arbitrary File Access Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
Multiple vulnerabilities in w-agora forum (antipov at SecurityLab.ru (Alexander Antipov))

1102 messages