full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2004/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 8	² 32	³ 13
⁴ 28	⁵ 27	⁶ 48	⁷ 42	⁸ 51	⁹ 30	¹⁰ 17
¹¹ 28	¹² 61	¹³ 84	¹⁴ 46	¹⁵ 58	¹⁶ 30	¹⁷ 34
¹⁸ 54	¹⁹ 39	²⁰ 65	²¹ 76	²² 59	²³ 32	²⁴ 25
²⁵ 30	²⁶ 18	²⁷ 21	²⁸ 26	²⁹ 58	³⁰ 17	³¹ 29

Messages by day:

October 1 (8 messages)

Re: Shmoocon CFP & registration information (shmooconannounce at shmoo.com (shmooconannounce))
[ GLSA 200410-01 ] sharutils: Buffer overflows in shar.c and unshar.c (koon at gentoo.org (Thierry Carrez))
SQL Injection vulnerability in bBlog 0.7.3 (james at servers.co.nz (James McGlinn))
dbPowerAmp Buffer Overflow And Dos Vulnerabilities (security at gulftech.org (GulfTech Security))
Re: (scheidell at secnap.net (Scheidell))
EEYE: RealPlayer pnen3260.dll Heap Overflow (mmaiffret at eEye.com (Marc Maiffret))
MDKSA-2004:104 - Updated samba packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Broadcast buffer-overflow in Vypress Messenger 3.5.1 (aluigi at autistici.org (Luigi Auriemma))

October 2 (32 messages)

On Polymorphic Evasion (phantasmal at hush.ai (Phantasmal Phantasmagoria))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (visitbipin at yahoo.com (bipin gautam))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (visitbipin at yahoo.com (bipin gautam))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (uberguidoz at gmail.com (GuidoZ))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (uberguidoz at gmail.com (GuidoZ))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (visitbipin at yahoo.com (bipin gautam))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (visitbipin at yahoo.com (bipin gautam))
Re: On Polymorphic Evasion (PERFECT.MATERIAL at gmail.com (PERFECT. MATERIAL))
Re: On Polymorphic Evasion (xbud at g0thead.com (xbud))
Re: On Polymorphic Evasion (PERFECT.MATERIAL at gmail.com (PERFECT.MATERIAL))
Re: On Polymorphic Evasion (r00t3d at gmail.com (r00t3d))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (3APA3A at SECURITY.NNOV.RU (3APA3A))
Re: On Polymorphic Evasion (jftucker at gmail.com (James Tucker))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (visitbipin at yahoo.com (bipin gautam))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (visitbipin at yahoo.com (bipin gautam))
(confirm) Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (visitbipin at yahoo.com (bipin gautam))
(confirm) Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (visitbipin at yahoo.com (bipin gautam))
XP Remote Desktop Remote Activation (fixer907 at gmail.com (Fixer))
[FLSA-2004:1733] Updated squirrelmail resolves security vulnerabilities (dom at earth.li (Dominic Hargreaves))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (3APA3A at SECURITY.NNOV.RU (3APA3A))
XP Remote Desktop Remote Activation (seclists at leastprivilege.com (Dominick Baier))
On Polymorphic Evasion (zeroboy at arrakis.es (zero))
XP Remote Desktop Remote Activation (se_cur_ity at hotmail.com (morning_wood))
XP Remote Desktop Remote Activation (joel at helgeson.com (Joel R. Helgeson))
XP Remote Desktop Remote Activation (randallm at fidmail.com (RandallM))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (visitbipin at yahoo.com (bipin gautam))
XP Remote Desktop Remote Activation (larry at larryseltzer.com (Larry Seltzer))
On Polymorphic Evasion (fdisclosure at alicampbell.org.uk (Ali Campbell))
Re: On Polymorphic Evasion (vlad902 at gmail.com (Vlad902))
In-game format string in Judge Dredd vs. Death 1.01 (aluigi at autistici.org (Luigi Auriemma))
XP Remote Desktop Remote Activation (fixer907 at gmail.com (Fixer))
XP Remote Desktop Remote Activation (fixer907 at gmail.com (Fixer))

October 3 (13 messages)

[SECURITY] [DSA 556-1] New netkit-telnet packages fix invalid free (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[FLSA-2004:1372] Updated sysstat packages fix security vulnerabilities (marcdeslauriers at videotron.ca (Marc Deslauriers))
On Polymorphic Evasion (andfarm at teknovis.com (Andrew Farmer))
XP Remote Desktop Remote Activation (fdlist at digitaloffense.net (H D Moore))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (3APA3A at SECURITY.NNOV.RU (3APA3A))
XP Remote Desktop Remote Activation (fixer907 at gmail.com (Fixer))
[FLSA-2004:1325] Updated mod_python packages fix security vulnerability (dom at earth.li (Dominic Hargreaves))
Re: Thank you! (bugzilla at redhat.com (Bugzilla))
Spyware installs with no interaction in IE on fully patched XP SP2 box (iamafraud at hotmail.com (Geraldo Rivera))
Spyware installs with no interaction in IE on fully patched XP SP2 box (joel at helgeson.com (Joel R. Helgeson))
Re: Hi (ndebaggis at verizon.net (Ndebaggis))
Spyware installs with no interaction in IE on fully patched XP SP2 box (uberguidoz at gmail.com (GuidoZ))
Spyware installs with no interaction in IE on fully patched XP SP2 box (keydet89 at yahoo.com (Harlan Carvey))

October 4 (28 messages)

Re: Hello (jkuperus at planet.nl (Jkuperus))
[SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.…)
[FLSA-2004:1324] Updated libxml2 resolves security vulnerability (marcdeslauriers at videotron.ca (Marc Deslauriers))
Spyware installs with no interaction in IE on fully patched XP SP2 box (iamafraud at hotmail.com (Geraldo Rivera))
Spyware installs with no interaction in IE on fully patched XP SP2 box (rcarr at email.uky.edu (Carr, Robert))
Spyware installs with no interaction in IE on fully patched XP SP2 box (mandreko at ori.net (Matt Andreko))
Spyware installs with no interaction in IE on fully patched XP SP2 box (toddtowles at brookshires.com (Todd Towles))
Spyware installs with no interaction in IE on fully patched XP SP2 box (toddtowles at brookshires.com (Todd Towles))
Spyware installs with no interaction in IE on fully patched XP SP2 box (Michael.Simpson at inveresk.com (Michael Simpson))
Re: Spyware installs with no interaction in IE on fully patched XP SP2 box (isec at europe.com (Willem Koenings))
Spyware installs with no interaction in IE on fully patched XP SP2 box (mshirley at gmail.com (Mark Shirley))
Re: Spyware installs with no interaction in IE on fully patched XP SP2 box (toddtowles at brookshires.com (Todd Towles))
Test your windows OS (skylined at edup.tudelft.nl (Berend-Jan Wever))
Spyware installs with no interaction in IE on fully patchedXP SP2 box (isec at europe.com (Willem Koenings))
Spyware installs with no interaction in IE on fully patched XP SP2 box (gossi at abate.veritynet.net (Gossi The Dog))
Test your windows OS (kf_lists at secnetops.com (KF_lists))
Test your windows OS (alexindef at rogers.com (Alex))
[ GLSA 200410-02 ] Netpbm: Multiple temporary file issues (koon at gentoo.org (Thierry Carrez))
[suse-security] Anti-Virus Problem (bjornscorey at hotmail.com (Björn Scorey))
Test your windows OS (sean01 at accnet.com.au (Sean Crawford))
Shows when no limits are set or restricted shell or bat access (jan.m.clairmont at citigroup.com (Clairmont, Jan M))
XSS in "Spyware installs with no interaction in IE on fully patchedXP SP2 box" (contact_jamie_fisher at yahoo.co.uk (jamie fisher))
Shows when no limits are set or restricted shell or bat access (kf_lists at secnetops.com (KF_lists))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (ultor at gmx.net (Kolja Powischer))
All Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bugs. [Part IV] (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
Re: Full-Disclosure digest, Vol 1 #1947 - 18 msgs (randallm at fidmail.com (RMueller))
FreeBSD Security Advisory FreeBSD-SA-04:15.syscons (security-advisories at freebsd.org (FreeBSD Security Advisories))
Cross-Site-Scripting Vulnerability in Microsoft.com (rivgi at finjan.com (Rafel Ivgi, The-Insider))

October 5 (27 messages)

Test your windows OS (skylined at edup.tudelft.nl (Berend-Jan Wever))
Re: Spyware installs with no interaction in IE on fully patched XP SP2 box (devis at easynix.net (devis))
RE: On Polymorphic Evasion (an alphanumeric version) (mconover_001 at hotmail.com (m conover))
Re: Spyware installs with no interaction in IE on fully patched XP SP2 box (uberguidoz at gmail.com (GuidoZ))
[suse-security] Anti-Virus Problem (3APA3A at SECURITY.NNOV.RU (3APA3A))
Test your windows OS (steve at myself.gen.nz (Steve Wray))
nmapbot: using instant messaging as a remote administration tool (abe.usher at sharp-ideas.net (Abe Usher))
Spyware installs with no interaction in IE on fully patched XP SP2 box (uberguidoz at gmail.com (GuidoZ))
Spyware installs with no interaction in IE on fully patched XP SP2 box (uberguidoz at gmail.com (GuidoZ))
nmapbot: using instant messaging as a remote administration tool (3APA3A at SECURITY.NNOV.RU (3APA3A))
Test your windows OS (varcher at denyall.com (Vincent Archer))
Spyware installs with no interaction in IE on fully patched XP SP2 box (alla at scanit.be (Alla Bezroutchko))
Re: Hi (scheidell at secnap.net (Scheidell))
Spyware installs ... XP SP2 box (raize at gravito.com (raize))
[TURBOLINUX SECURITY INFO] 05/Oct/2004 (security-announce at turbolinux.co.jp (Turbolinux))
Spyware installs with no interaction in IE on fully patched XP SP2 box (ACastigliola at unumprovident.com (Castigliola, Angelo))
SUSE Security Announcement: samba (SUSE-SA:2004:035) (thomas at suse.de (Thomas Biege))
Paranid ramblings - what's the deal? Bounded variables aren't? (jan.m.clairmont at citigroup.com (Clairmont, Jan M))
SV: Spyware installs ... XP SP2 box (kruse at krusesecurity.dk (Peter Kruse))
Spyware installs ... XP SP2 box (ACastigliola at unumprovident.com (Castigliola, Angelo))
iDEFENSE Security Advisory 10.05.04a: ColdFusion MX 6.1 on IIS File Contents Disclosure (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
Re: Full-Disclosure digest, Vol 1 #1950 - 4 msgs (chris_tang at so-net.com.hk (chris_tang@...net.com.hk))
RE: On Polymorphic Evasion (attached inline this time) (mconover_001 at hotmail.com (m conover))
iDEFENSE Security Advisory 10.05.04b: Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability (idlabs-advisories at idefense.com (idlabs-advisori…)
[ GLSA 200410-03 ] NetKit-telnetd: buffer overflows in telnet and telnetd (koon at gentoo.org (Thierry Carrez))
Re: Full-Disclosure digest, Vol 1 #1950 - 4 msgs (hescominsoon at emmanuelcomputerconsulting.com (William Warren))
[MAXPATROL Security Advisories] Cross site scripting in Invision Power Board (Antipov at SecurityLab.ru (Alexander Antipov))

October 6 (48 messages)

Spyware installs ... XP SP2 box (iamafraud at hotmail.com (Geraldo Rivera))
Re: (jkuperus at planet.nl (Jkuperus))
Paranid ramblings - what's the deal? Bounded variables aren't? (uberguidoz at gmail.com (GuidoZ))
My Yahoo! Search Spam Vulnerability (xploitable at gmail.com (xploitable))
[ GLSA 200410-04 ] PHP: Memory disclosure and arbitrary location file upload (krispykringle at gentoo.org (Dan Margolis))
My Yahoo! Search Spam Vulnerability (xploitable at gmail.com (xploitable))
iDEFENSE Security Advisory 10.05.04b: Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability (visitbipin at yahoo.com (bipin gautam))
iDEFENSE Security Advisory 10.05.04b: Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability (listuser at seifried.org (Kurt Seifried))
[SECURITY] [DSA 558-1] New libapache-mod-dav packages fix potential denial of service (debian-security-announce at lists.debian.org (debian-security-announce@li…)
Truth is stranger than fiction ... Bill Gates was right (etomcat at freemail.hu (Feher Tamas))
iDEFENSE Security Advisory 10.05.04b: Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability (3APA3A at SECURITY.NNOV.RU (3APA3A))
CodeCon 2005 Call for Papers (rabbi at abditum.com (Len Sassaman))
House approves spyware legislation (randallm at fidmail.com (RandallM))
iDEFENSE Security Advisory 10.05.04b: Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability (3APA3A at SECURITY.NNOV.RU (3APA3A))
iDEFENSE Security Advisory 10.05.04b: Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability (3APA3A at SECURITY.NNOV.RU (3APA3A))
real spam from secure@...rosoft.com ? (guninski at guninski.com (Georgi Guninski))
House approves spyware legislation (ggilliss at netpublishing.com (Gregory Gilliss))
iDEFENSE Security Advisory 10.05.04b: Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability (3APA3A at SECURITY.NNOV.RU (3APA3A))
Re: real spam from secure@...rosoft.com ? (etomcat at freemail.hu (Feher Tamas))
real spam from secure@...rosoft.com ? (varcher at denyall.com (Vincent Archer))
SV: Truth is stranger than fiction ... Bill Gates was right (kruse at krusesecurity.dk (Peter Kruse))
real spam from secure@...rosoft.com ? (guninski at guninski.com (Georgi Guninski))
[SECURITY] [DSA 559-1] New net-acct packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.…)
real spam from secure@...rosoft.com ? (toddtowles at brookshires.com (Todd Towles))
Re: Thanks :) (scheidell at secnap.net (Scheidell))
House approves spyware legislation (toddtowles at brookshires.com (Todd Towles))
SUSE Security Announcement: mozilla (SUSE-SA:2004:036) (krahmer at suse.de (Sebastian Krahmer))
[Maxpatrol Security Advisory] Multiple vulnerabilities in DCP-Portal (antipov at SecurityLab.ru (Alexander Antipov))
House approves spyware legislation (michealespinola at gmail.com (Micheal Espinola Jr))
House approves spyware legislation (michealespinola at gmail.com (Micheal Espinola Jr))
Sans GDI scan says still vulnerable after patching (billybobknob at hotmail.com (BillyBobKnob))
Sans GDI scan says still vulnerable after patching (toddtowles at brookshires.com (Todd Towles))
House approves spyware legislation (jftucker at gmail.com (James Tucker))
Sans GDI scan says still vulnerable after patching (alanme at melmac.co.uk (Alan Melia (Melmac)))
House approves spyware legislation (mshirley at gmail.com (Mark Shirley))
XML firewall (n30_lists at hotmail.com (n30))
Dominos web access testing (n30_lists at hotmail.com (n30))
SV: Sans GDI scan says still vulnerable after patching (kruse at krusesecurity.dk (Peter Kruse))
House approves spyware legislation (gem at rellim.com (Gary E. Miller))
House approves spyware legislation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
MDKSA-2004:105 - Updated xine-lib packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
iDEFENSE Security Advisory 10.06.04a: MySQL MaxDB Web Agent WebDBM Server Name Denial of Service Vulnerability (idlabs-advisories at idefense.com (idlabs-advis…)
Re: real spam from secure@...rosoft.com ? (guninski at guninski.com (Georgi Guninski))
Directory traversal in Tridcomm 1.3 (aluigi at autistici.org (Luigi Auriemma))
Yahoo! Spam Attack Mailers (xploitable at gmail.com (xploitable))
House approves spyware legislation (dufresne at winternet.com (Ron DuFresne))
[GoSecure Advisory] Neoteris IVE Vulnerability (jhwang at gosecure.ca (Jian Hui Wang))
Quick JPEG/GDI test & fix (timesaver) (uberguidoz at gmail.com (GuidoZ))

October 7 (42 messages)

House approves spyware legislation (randallm at fidmail.com (RandallM))
Re: Hello (jkuperus at planet.nl (Jkuperus))
real spam from secure@...rosoft.com ? (uberguidoz at gmail.com (GuidoZ))
[HV-HIGH] MS Word multiple exceptions, at least one exploitable (vuln at hexview.com (vuln@...view.com))
RE: Full-Disclosure digest, Vol 1 #1955 - 19 msgs (randallm at fidmail.com (RandallM))
Paranid ramblings - what's the deal? Bounded variables aren't? (blsonne at rogers.com (Byron L. Sonne))
House approves spyware legislation (tejani at alum.rpi.edu (Bankim J. Tejani))
Paranid ramblings - what's the deal? Bounded variables aren't? (blsonne at rogers.com (Byron L. Sonne))
Paranid ramblings - what's the deal? Bounded variables aren't? (uberguidoz at gmail.com (GuidoZ))
RE: Full-Disclosure digest, Vol 1 #1955 - 19 msgs (uberguidoz at gmail.com (GuidoZ))
RE: Full-Disclosure digest, Vol 1 #1955 - 19 msgs (list at nolog.org (list@...og.org))
Returned mail: see transcript for details (fwd) (hvdkooij at vanderkooij.org (Hugo van der Kooij))
[SECURITY] [DSA 600-1] New samba packages fix arbitrary file access (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Yet another IE aperture (guninski at guninski.com (Georgi Guninski))
RE: Full-Disclosure digest, Vol 1 #1955 - 19 msgs (randallm at fidmail.com (RandallM))
Dominos web access testing (fcharpen at xmcopartners.com (Frederic Charpentier))
[SECURITY] [DSA 560-1] New lesstif packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
[ GLSA 200410-05 ] Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities (klieber at gentoo.org (Kurt Lieber))
House approves spyware legislation (simon at xhz.ca (Simon))
House approves spyware legislation (tejani at alum.rpi.edu (Bankim J. Tejani))
House approves spyware legislation (simon at xhz.ca (Simon))
[sb] [ GLSA 200410-05 ] Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities (klieber at gentoo.org (Kurt Lieber))
House approves spyware legislation (prandal at herefordshire.gov.uk (Randal, Phil))
[ GLSA 200410-05 ] Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities (klieber at gentoo.org (Kurt Lieber))
Server crash in Flash Messaging 5.2.0g (aluigi at autistici.org (Luigi Auriemma))
UPDATED: Quick JPEG/GDI test & fix (timesaver) (uberguidoz at gmail.com (GuidoZ))
House approves spyware legislation (cab75 at comcast.net (cab75@...cast.net))
[FLSA-2004:1735] Updated cvs packages fix security vulnerabilities (dom at earth.li (Dominic Hargreaves))
Server crash in Flash Messaging 5.2.0g (aluigi at autistici.org (Luigi Auriemma))
Disclosure policy in Re: RealPlayer vulnerabilities (mviktora at kerio.com (Martin Viktora))
House approves spyware legislation (simon at xhz.ca (Simon))
House approves spyware legislation (simon at xhz.ca (Simon))
ASP.NET cannonicalization issue (Arian.Evans at fishnetsecurity.com (Evans, Arian))
RE: Disclosure policy in Re: RealPlayer vulnerabilities (dcopley at eEye.com (Drew Copley))
iDEFENSE Security Advisory 10.07.04: RealNetworks Helix Server Content-Length Denial of Service Vulnerability (idlabs-advisories at idefense.com (idlabs-adviso…)
MDKSA-2004:106 - Updated cyrus-sasl packages fix local vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
House approves spyware legislation (ggilliss at netpublishing.com (Gregory Gilliss))
House approves spyware legislation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
House approves spyware legislation (ggilliss at netpublishing.com (Gregory Gilliss))
Re: ASP.NET cannonicalization issue (australia001 at yahoo.com.au (Jelson Pat))
Re: ASP.NET cannonicalization issue (australia001 at yahoo.com.au (Jelson Pat))
ASP.NET cannonicalization issue (Arian.Evans at fishnetsecurity.com (Evans, Arian))

October 8 (51 messages)

House approves spyware legislation (simon at xhz.ca (Simon))
House approves spyware legislation (eric at arcticbears.com (Eric Paynter))
Re: Thanks :) (jkuperus at planet.nl (Jkuperus))
Symantec Security Report 1V (randallm at fidmail.com (RandallM))
House approves spyware legislation (cab75 at comcast.net (WB))
[FLSA-2004:1868] Updated php packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
House approves spyware legislation (jasonc at science.org (Jason Coombs PivX Solutions))
RE: Disclosure policy in Re: RealPlayer vulnerabilities (jasonc at science.org (Jason Coombs PivX Solutions))
[Bulk] RE: House approves spyware legislation (blsonne at rogers.com (Byron L. Sonne))
RE: Full-Disclosure digest, Vol 1 #1955 - 19 msgs (uberguidoz at gmail.com (GuidoZ))
RE: Disclosure policy in Re: RealPlayer vulnerabilities (mviktora at kerio.com (Martin Viktora))
Zeroize equipment is necessary for your server room. (etomcat at freemail.hu (Feher Tamas))
Fw: Citibank reminder: please update your data (paa-listas at argentina.com (Pablo))
[FLSA-2004:1257] Updated netpbm packages fix security vulnerabilities (dom at earth.li (Dominic Hargreaves))
RE: Disclosure policy in Re: RealPlayer vulnerabilities (dave at immunitysec.com (dave))
Fw: Citibank reminder: please update your data (loststryker at loststryker.net (Simon Lorentsen))
Fw: Citibank reminder: please update your data (loststryker at loststryker.net (Simon Lorentsen))
Fw: Citibank reminder: please update your data (d31337 at gmail.com (_ _))
Fw: Citibank reminder: please update your data (fcharpen at xmcopartners.com (Frederic Charpentier))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (jan.m.clairmont at citigroup.com (Clair…)
Second Call for Papers Workshop PRIMA 2005: Privacy Respecting Incident Management (Ulrich.Flegel at udo.edu (Ulrich Flegel))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and… (kf_lists at secnetops.com (KF_lists))
Fw: Citibank reminder: please update your data (mike at ampeisch.com (mike@...eisch.com))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and cr… (stfunub at gmail.com (Andrew Smith))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (jessevalentin at yahoo.com (Jesse Valen…)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and … (keydet89 at yahoo.com (Harlan Carvey))
Fw: Citibank reminder: please update your data (contact_jamie_fisher at yahoo.co.uk (jamie fisher))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (michealespinola at gmail.com (Micheal E…)
Fw: Citibank reminder: please update your data (dsardina at si.rr.com (DSardina))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and … (keydet89 at yahoo.com (Harlan Carvey))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and … (keydet89 at yahoo.com (Harlan Carvey))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassin g and cr… (bpope at crec.coop (Bobby Pope))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing … (hhoffman at ip-solutions.net (Harry Hof…)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (jan.m.clairmont at citigroup.com (Clair…)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing … (hades at psilanthropy.org (Anders Langw…)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (jessevalentin at yahoo.com (Jesse Valen…)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing … (Bart.Lansing at kohls.com (Bart.Lansing…)
House approves spyware legislation (dufresne at winternet.com (Ron DuFresne))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (macmanus at gmail.com (macmanus@...il.c…)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing … (dufresne at winternet.com (Ron DuFresne…)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and cr… (wiretap at gmail.com (Alen Capalik))
mysql password cracking (dlhtux at sbcglobal.net (David Hane))
Limited \secure\ buffer-overflow in some old Monolith games (aluigi at autistici.org (Luigi Auriemma))
RE: [Troll-Disclosure] The Daily Show of Network Security (Stephen.Blass at asu.edu (Stephen Blass))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (se_cur_ity at hotmail.com (morning_wood…)
mysql password cracking (hades at psilanthropy.org (Anders Langworthy))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (Will.Banta at broadwing.com (Banta, Wil…)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and cr… (stfunub at gmail.com (Andrew Smith))
Simple but Effective Spam Harvester Solutions (stfunub at gmail.com (Andrew Smith))
RE: Disclosure policy in Re: RealPlayer vulnerabilities (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and cr… (wiretap at gmail.com (Alen Capalik))

October 9 (30 messages)

Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (mlande at bellsouth.net (Mary Landesman…)
RE: Disclosure policy in Re: RealPlayer vulnerabilities (yossarian at planet.nl (yossarian))
Re: Yet another IE aperture (security at greymagic.com (GreyMagic Security))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and cr… (wiretap at gmail.com (Alen Capalik))
JPEG GDI+ (MS04-028) Exploit @ http://home.zccn.net/mm2004 (bowwow at nowhere.org (bowwow@...here.org))
Re: Thank you! (jkuperus at planet.nl (Jkuperus))
Re: Thanks :) (jkuperus at planet.nl (Jkuperus))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (mlande at bellsouth.net (Mary Landesman…)
RE: Disclosure policy in Re: RealPlayervulnerabilities (jasonc at science.org (Jason Coombs PivX Solutions))
SV: JPEG GDI+ (MS04-028) Exploit @ http://home.zccn.net/mm2004 (kruse at krusesecurity.dk (Peter Kruse))
Re: Yet another IE aperture (guninski at guninski.com (Georgi Guninski))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing … (blancher at cartel-securite.fr (Cedric …)
Re: Yet another IE aperture (avivra at gmail.com (Aviv Raff))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and cr… (vasil at ludost.net (Vasil Kolev))
[ GLSA 200410-06 ] CUPS: Leakage of sensitive information (klieber at gentoo.org (Kurt Lieber))
SV: JPEG GDI+ (MS04-028) Exploit @ http://home.zccn.net/mm2004 (isec at europe.com (Willem Koenings))
Re: Yet another IE aperture (security at greymagic.com (GreyMagic Security))
mysql password cracking (ppatters at cbnco.com (ppatters))
mysql password cracking (isec at europe.com (Willem Koenings))
SV: SV: JPEG GDI+ (MS04-028) Exploit @ http://home.zccn.net/mm2004 (kruse at krusesecurity.dk (Peter Kruse))
Re: Jkuperus <jkuperus@...net.nl> (we_hate_vince at hotmail.com (Vince Able))
Re: Jkuperus <jkuperus@...net.nl> (remko at elvandar.org (Remko Lodder))
[SPAM] Re: Re: Jkuperus <jkuperus@...net.nl> (hvdkooij at vanderkooij.org (Hugo van der Kooij))
[ GLSA 200410-07 ] ed: Insecure temporary file handling (koon at gentoo.org (Thierry Carrez))
[ GLSA 200410-08 ] ncompress: Buffer overflow (koon at gentoo.org (Thierry Carrez))
Re: Msg reply (bugzilla at redhat.com (Bugzilla))
[FLSA-2004:2068] Updated httpd packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[VIRUS!] [SPAM] Re: Msg reply (hvdkooij at vanderkooij.org (Hugo van der Kooij))
[ GLSA 200410-09 ] LessTif: Integer and stack overflows in libXpm (lewk at gentoo.org (Luke Macken))
Re: Jkuperus <jkuperus@...net.nl> (j.riden at massey.ac.nz (James Riden))

October 10 (17 messages)

Re: (jkuperus at planet.nl (Jkuperus))
List Charter (johnc at grok.org.uk (John Cartwright))
New auditor security collection 081004-01 released (max.moser at gmail.com (Max Moser))
[SECURITY] [DSA 458-3] New python2.2 packages really fix buffer overflow and restore functionality (debian-security-announce at lists.debian.org (debian-securit…)
New changes (als at thangorodrim.de (Als))
RE: Protected message (security at brvenik.com (Security))
RE: Text message (RawData at netcabo.pt (RawData))
[VIRUS!] [SPAM] RE: Text message (hvdkooij at vanderkooij.org (Hugo van der Kooij))
Please send me public hotspot provider login pages from your country (max.moser at gmail.com (Max Moser))
WWII cryptography: the dark side (etomcat at freemail.hu (Feher Tamas))
Re: Yet another IE aperture (evilninja at gmx.net (Christian))
Denial of service in KitchenAid blenders (j at pureftpd.org (Jedi/Sector One))
WWII cryptography: the dark side (christian at leber.de (Christian Leber))
Eudora 6.2.0.7 attachment spoof (psz at maths.usyd.edu.au (Paul Szabo))
[ GLSA 200410-10 ] gettext: Insecure temporary file handling (lewk at gentoo.org (Luke Macken))
Denial of service in KitchenAid blenders (danbuk at gmail.com (DanB UK))
unarj dir-transversal bug (../../../..) (doubles at hush.com (doubles@...h.com))

October 11 (28 messages)

Denial of service in KitchenAid blenders (larry at larryseltzer.com (Larry Seltzer))
Techniques to identify pop3 banners (fabio at crearium.com (fabio))
MonkeyShell: using XML-RPC for access to a remote shell (securitylist at sharp-ideas.net (Abe Usher))
mysql password cracking (chris at ngssoftware.com (Chris Anley))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and c… (var at deny-all.com (Vincent Archer))
Techniques to identify pop3 banners (3APA3A at SECURITY.NNOV.RU (3APA3A))
CJOverkill 4.0.3 XSS Proof of Concept (acidbits at gmail.com (aCiDBiTS))
Turbo Traffic Trader Nitro v1.0 SQL Injection & XSS Proofs of Concept (acidbits at gmail.com (aCiDBiTS))
[SECURITY] [DSA 562-1] New mysql packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
[SECURITY] [DSA 561-1] New libxpm packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
JPEG GDI+ (MS04-028) Exploit at http://www.splitinfinity.info (bowwow at nowhere.org (bowwow@...here.org))
unarj dir-transversal bug (../../../..) (umphress at gmail.com (Chris Umphress))
unarj dir-transversal bug (../../../..) (doubles at hush.com (doubles@...h.com))
JPEG GDI+ (MS04-028) Exploit at www.splitinfinity.info (etomcat at freemail.hu (Feher Tamas))
[MAxpatrol Security Advisory] Multiple vulnerabilities in GoSmart Message Board (antipov at SecurityLab.ru (Alexander Antipov))
Denial of service in KitchenAid blenders (pauls at utdallas.edu (Paul Schmehl))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing … (Bart.Lansing at kohls.com (Bart.Lansing…)
OT ? Microsoft Streets & Trips 2005 with GPS Locator on linux (kfinisterre at secnetops.com (KF))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing … (mlande at bellsouth.net (Mary Landesman…)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing … (dufresne at winternet.com (Ron DuFresne…)
OT ? Microsoft Streets & Trips 2005 with GPS Locator on linux (clocke at stratitec.com (Chris Locke))
Reverse Engineering the First Pocket PC Trojan Tutorial (contact at airscanner.com (contact@...scanner.com))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (ggilliss at netpublishing.com (Gregory …)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (jessevalentin at yahoo.com (Jesse Valen…)
[MAxpatrol Security Advisory] Multiple vulnerabilities in GoSmart Message Board (antipov at SecurityLab.ru (Alexander Antipov))
unarj dir-transversal bug (../../../..) (umphress at gmail.com (Chris Umphress))
[VIRUS!] [SPAM] RE: Text message (fabio at crearium.com (fabio))
iDEFENSE Security Advisory 10.11.04: Squid Web Proxy Cache Remote Denial of Service Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fens…)

October 12 (61 messages)

Re: (jkuperus at planet.nl (Jkuperus))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing … (jessevalentin at yahoo.com (Jesse Valen…)
[VIRUS!] [SPAM] RE: Text message (security at brvenik.com (Jason))
unarj dir-transversal bug (../../../..) (evilninja at gmx.net (evilninja))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (jessevalentin at yahoo.com (Jesse Valen…)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and crimin… (venom at gen-x.co.nz (VeNoMouS))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (giselbert at web.de (Giselbert Hinkelma…)
unarj dir-transversal bug (../../../..) (umphress at gmail.com (Chris Umphress))
DHCP Flood on inside network. HELP!! (EddieS at softhome.net (Eddie ))
DHCP Flood on inside network. HELP!! (measl at mfn.org (J.A. Terranson))
DHCP Flood on inside network. HELP!! (ggilliss at netpublishing.com (Gregory Gilliss))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and c… (var at deny-all.com (Vincent Archer))
unarj dir-transversal bug (../../../..) (doubles at hush.com (doubles@...h.com))
unarj dir-transversal bug (../../../..) (doubles at hush.com (doubles@...h.com))
Denial of service in KitchenAid blenders (Michael.Simpson at inveresk.com (Michael Simpson))
RE: ASP.NET cannonicalization issue (cmacfarlane at Drummond-Miller.co.uk (Cassidy Macfarlane))
unarj dir-transversal bug (../../../..) (evilninja at gmx.net (evilninja))
unarj dir-transversal bug (../../../..) (evilninja at gmx.net (evilninja))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (smaillist at gmail.com (Sowhat .))
[SECURITY] [DSA 563-1] New cyrus-sasl packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
unarj dir-transversal bug (../../../..) (blancher at cartel-securite.fr (Cedric Blancher))
Writing Trojans that bypass Windows XP Service Pack 2 Firewall (americanidiot at hushmail.com (americanidiot@...hmail.com))
unarj dir-transversal bug (../../../..) (evil at g-house.de (Christian Kujau))
unarj dir-transversal bug (../../../..) (umphress at gmail.com (Chris Umphress))
Adobe acrobat / Adobe Reader 6 can read local files (jkuperus at planet.nl (Jelmer))
Microsoft cabarc directory traversal (jkuperus at planet.nl (Jelmer))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing … (bkfsec at sdf.lonestar.org (Barry Fitzg…)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing … (bkfsec at sdf.lonestar.org (Barry Fitzg…)
Norton AntiVirus 2005 treats Radmin as a Virus ??! (smaillist at gmail.com (Sowhat .))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (list at nolog.org (list@...og.org))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (toddtowles at brookshires.com (Todd Towles))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (robochan at twcny.rr.com (Rob Bochan))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing an… (jessevalentin at yahoo.com (Jesse Valen…)
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and … (bruen at coldrain.net (Stormwalker))
Norton AntiVirus 2005 treats Radmin as a Vi rus ??! (Stephen.Agar at bmhcc.org (Stephen Agar))
Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and c… (var at deny-all.com (Vincent Archer))
Norton AntiVirus 2005 treats Radmin as a Vi rus ??! (ken.securitylist at gmail.com (Ken S))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (jpeaa at allstate.com (Peadro, Jeff (AIS)))
RE: x-posting--was--> ASP.NET cannonicalization issue (Arian.Evans at fishnetsecurity.com (Evans, Arian))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (smaillist at gmail.com (Sowhat .))
SV: Norton AntiVirus 2005 treats Radmin as a Virus ??! (kruse at krusesecurity.dk (Peter Kruse))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (keydet89 at yahoo.com (Harlan Carvey))
[OT] unarj dir-transversal bug (../../../..) (evilninja at gmx.net (evilninja))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (ken.securitylist at gmail.com (Ken S))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (toddtowles at brookshires.com (Todd Towles))
Microsoft Security Bulletin Summary for October, 2004 (d31337 at gmail.com (d31337))
unarj dir-transversal bug (../../../..) (rik.bobbaers at cc.kuleuven.ac.be (Harry de Grote))
Microsoft Security Bulletin Summary for October, 2004 (nocmonkey at gmail.com (Danny))
SV: Microsoft Security Bulletin Summary for October, 2004 (kruse at krusesecurity.dk (Peter Kruse))
Quicky Analysis of a Proxy/Zombie Network (lists at lowkeysoft.com (Steele))
MS Security Bulletins (jessevalentin at yahoo.com (Jesse Valentin))
Writing Trojans that bypass Windows XP Service Pack 2 Firewall (guninski at guninski.com (Georgi Guninski))
Possibly a stupid question RPC over HTTP (daniels at Ponderosatel.com (Daniel Sichel))
Re: Adobe acrobat / Adobe Reader 6 can read local files (libove at felines.org (Jay Libove))
UnixWare 7.1.3up UnixWare 7.1.4 : CUPS before 1.1.21 allows remote attackers to cause a denial of service (please_reply_to_security at sco.com (please_reply_to_…)
UnixWare 7.1.4 : Multiple Vulnerabilities in libpng (please_reply_to_security at sco.com (please_reply_to_security@....com))
Stealing DHCP Leases (macaddict at ourholm.com (Ian Holm))
Microsoft Security Bulletin Summary for October, 2004 (j.riden at massey.ac.nz (James Riden))
Quicky Analysis of a Proxy/Zombie Network (ggilliss at netpublishing.com (Gregory Gilliss))
WIN XPSP2 - is this a possible way to hack? (chows at ozemail.com.au (Gregh))
[SECURITY] [DSA 563-2] New cyrus-sasl packages really fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts…)

October 13 (84 messages)

Microsoft Security Bulletin Summary for October, 2004 (d31337 at gmail.com (d31337))
Microsoft Security Bulletin Summary for October, 2004 (eric at arcticbears.com (Eric Paynter))
WIN XPSP2 - is this a possible way to hack? (venom at gen-x.co.nz (VeNoMouS))
Microsoft Security Bulletin Summary for October, 2004 (nocmonkey at gmail.com (Danny))
Quicky Analysis of a Proxy/Zombie Network (venom at gen-x.co.nz (VeNoMouS))
SV: Norton AntiVirus 2005 treats Radmin as a Virus ??! (dufresne at winternet.com (Ron DuFresne))
WIN XPSP2 - is this a possible way to hack? (venom at gen-x.co.nz (VeNoMouS))
Re: Adobe acrobat / Adobe Reader 6 can read local files (jkuperus at planet.nl (Jelmer))
WIN XPSP2 - is this a possible way to hack? (chows at ozemail.com.au (Gregh))
SV: Norton AntiVirus 2005 treats Radmin as a Virus ??! (xillwillx at gmail.com (Ill will))
WIN XPSP2 - is this a possible way to hack? (chows at ozemail.com.au (Gregh))
WIN XPSP2 - is this a possible way to hack? (venom at gen-x.co.nz (VeNoMouS))
I detecting error in Outlook Express (eliurkis.diaz at facinf.uho.edu.cu (Eliurkis))
WIN XPSP2 - is this a possible way to hack? (kf_lists at secnetops.com (kf_lists))
Stealing DHCP Leases (TheGesus at gmail.com (TheGesus))
Quicky Analysis of a Proxy/Zombie Network (uberguidoz at gmail.com (GuidoZ))
I detecting error in Outlook Express (uberguidoz at gmail.com (GuidoZ))
WIN XPSP2 - is this a possible way to hack? (chows at ozemail.com.au (Gregh))
[HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss (vuln at hexview.com (vuln@...view.com))
EEYE: Windows VDM #UD Local Privilege Escalation (dsoeder at eeye.com (Derek Soeder))
EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability (dsoeder at eeye.com (Derek Soeder))
Stealing DHCP Leases (garth.stone at gmail.com (Garth Stone))
WIN XPSP2 - is this a possible way to hack? (mail_winter at hotpop.com (winter))
DHCP Flood on inside network. STP the problem? (EddieS at softhome.net (Eddie ))
WIN XPSP2 - is this a possible way to hack? (venom at gen-x.co.nz (VeNoMouS))
[SPAM] Stealing DHCP Leases (hvdkooij at vanderkooij.org (Hugo van der Kooij))
WIN XPSP2 - is this a possible way to hack? (irfan.syed at guoco.com (irfan.syed@...co.com))
[SPAM] Stealing DHCP Leases (venom at gen-x.co.nz (VeNoMouS))
RE: WIN XPSP2 - is this a possible way to hack? (r00t3d at gmail.com (r00t3d))
Hi (chows at ozemail.com.au (chows@...mail.com.au))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (etomcat at freemail.hu (Feher Tamas))
EEYE: Windows VDM #UD Local Privilege Escalation (paa-listas at argentina.com (Pablo))
Quicky Analysis of a Proxy/Zombie Network (venom at gen-x.co.nz (VeNoMouS))
RIM Blackberry buffer overflow, DoS, data loss (etomcat at freemail.hu (Feher Tamas))
unarj dir-transversal bug (../../../..) (doubles at hush.com (doubles@...h.com))
EEYE: Windows VDM #UD Local Privilege Escalation (b-nordquist at bethel.edu (Brent J. Nordquist))
[SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
[SECURITY] [DSA 565-1] New sox packages fix buffer overflow (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
EEYE: Windows VDM #UD Local Privilege Escalation (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
WIN XPSP2 - is this a possible way to hack? (jftucker at gmail.com (James Tucker))
[ GLSA 200410-11 ] tiff: Buffer overflows in image decoding (koon at gentoo.org (Thierry Carrez))
EEYE: Windows VDM #UD Local Privilege Escalation (kf_lists at secnetops.com (KF_lists))
EEYE: Windows VDM #UD Local Privilege Escalation (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability (jstewart at lurhq.com (Joe Stewart))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (stfunub at gmail.com (Andrew Smith))
Quicky Analysis of a Proxy/Zombie Network (stfunub at gmail.com (Andrew Smith))
Some presentations from IT-UNDERGROUND conference (dave at immunitysec.com (Dave Aitel))
Nessus experience (foofus at foofus.net (Mr. Rufus Faloofus))
MS04-030 WebDAV XML Parsing - Need Details (karmic_nirvana at yahoo.com (nirvana))
Nessus experience (jay at edgeos.com (Jay Jacobson))
Buffer-overflow in ShixxNOTE 6.net (aluigi at autistici.org (Luigi Auriemma))
Multiple Cross Site Scripting Vulnerabilities in FuseTalk (steven at lovebug.org (steven))
MS04-030 WebDAV XML Parsing - Need Details (karmic_nirvana at yahoo.com (nirvana))
Nessus experience (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
[SPAM] Nessus experience (hvdkooij at vanderkooij.org (Hugo van der Kooij))
[FLSA-2004:2102] Updated samba packages fix security vulnerability (dom at earth.li (Dominic Hargreaves))
Possibly a stupid question RPC over HTTP (dan at losangelescomputerhelp.com (Daniel H. Renner))
IISShield and ASP.NET canonicalization (thalm at void.my-bulldog.com (Tiago Halm))
[HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss (vuln at hexview.com (vuln@...view.com))
Possibly a stupid question RPC over HTTP (toddtowles at brookshires.com (Todd Towles))
Possibly a stupid question RPC over HTTP (snort at babtras.com (Cory Whitesell))
Possibly a stupid question RPC over HTTP (farrenkm at ohsu.edu (Matthew Farrenkopf))
Possibly a stupid question RPC over HTTP (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
[SPAM] Nessus experience (foofus at foofus.net (Mr. Rufus Faloofus))
Possibly a stupid question RPC over HTTP (rodrigob at suespammers.org (Rodrigo Barbosa))
Possibly a stupid question RPC over HTTP (sjohnston at cavionplus.com (Shannon Johnston))
Possibly a stupid question RPC over HTTP (mducharme at cybergeneration.com (Maxime Ducharme))
IRC spying to increase (dufresne at winternet.com (Ron DuFresne))
Possibly a stupid question RPC over HTTP (sean at idreus.com (Sean Milheim))
Stealing DHCP Leases (stefmit at gmail.com (Stef))
Possibly a stupid question RPC over HTTP (dufresne at winternet.com (Ron DuFresne))
Possibly a stupid question RPC over HTTP (abaker at gmail.com (ASB))
unzoo 4.4 directory travels (doubles at hush.com (doubles@...h.com))
Possibly a stupid question RPC over HTTP (sgmasood at yahoo.com (S G Masood))
Possibly a stupid question RPC over HTTP (sgmasood at yahoo.com (S G Masood))
Possibly a stupid question RPC over HTTP (sgmasood at yahoo.com (S G Masood))
[FLSA-2004:1833] Updated lha resolves security vulnerabilities (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2004:1737] Updated httpd packages fix a mod_proxy security vulnerability (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2004:1888] Updated mod_ssl package fixes Apache security vulnerabilities (marcdeslauriers at videotron.ca (Marc Deslauriers))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (noamr at beyondsecurity.com (Noam Rathaus))
Possibly a stupid question RPC over HTTP (wari00 at gmail.com (Roberto Gomez Bolaños))
Buffer Overflow In Microsoft Excel (brett.moore at security-assessment.com (Brett Moore))
RE: ASP.NET cannonicalization issue (noamr at beyondsecurity.com (Noam Rathaus))
IRC spying to increase (fdisclosure at alicampbell.org.uk (Ali Campbell))

October 14 (46 messages)

EEYE: Windows VDM #UD Local Privilege Escalation (dmaynor at gmail.com (David Maynor))
Possibly a stupid question RPC over HTTP (mail_winter at hotpop.com (winter))
Possibly a stupid question RPC over HTTP (blsonne at rogers.com (Byron L. Sonne))
IRC spying to increase (xploitable at gmail.com (xploitable))
EEYE: Windows VDM #UD Local Privilege Escalation (kf_lists at secnetops.com (kf_lists))
Hxxp://mercylane.com/ Exploit code (peterharvey at emergency.qld.gov.au (Peter B. Harvey (Information Security)))
Possibly a stupid question RPC over HTTP (KKadow at gmail.com (Kevin))
Bypass of Antivirus software with GDI+ bug exploit Mutations (andrey at hiddenbit.org (Andrey Bayora))
Nessus experience (samir at teknotrends.com (Samir Kelekar))
my first orgasem (sgmasood at yahoo.com (\\"S G Masood\\"))
my first orgasem (marcdeslauriers at videotron.ca (Marc Deslauriers))
my first orgasem (sgmasood at yahoo.com (S G Masood))
SetWindowLong Shatter Attacks (brett.moore at security-assessment.com (Brett Moore))
[SPAM] Nessus experience (zeleni at yahoo.com (zeleni@...oo.com))
Bypass of Antivirus software with GDI+ bug exploit Mutations (andrey at hiddenbit.org (Andrey Bayora))
my first orgasem (marcdeslauriers at videotron.ca (Marc Deslauriers))
[ GLSA 200410-12 ] WordPress: HTTP response splitting and XSS vulnerabilities (lewk at gentoo.org (Luke Macken))
Bypass of Antivirus software with GDI+ bug exploit Mutations (toddtowles at brookshires.com (Todd Towles))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (xillwillx at gmail.com (Ill will))
EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability (visitbipin at yahoo.com (bipin gautam))
[SECURITY] [DSA 563-3] New cyrus-sasl packages fix arbitrary code execution on sparc and arm (debian-security-announce at lists.debian.org (debian-security-anno…)
Administrivia: Retirement (len at netsys.com (Len Rose))
[SECURITY] [DSA 566-1] New CUPS packages fix information leak (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Bypass of Antivirus software with GDI+ bug exploit Mutations (cmacfarlane at Drummond-Miller.co.uk (Cassidy Macfarlane))
Bypass of Antivirus software with GDI+ bug exploit Mutations (toddtowles at brookshires.com (Todd Towles))
IRC spying to increase (allan.vanleeuwen at orangemail.nl (allan.vanleeuwen@...ngemail.nl))
Possibly a stupid question RPC over HTTP (james.burnes at gwl.com (Burnes, James))
FDA Approves Use of Chip in Patients ? HIPAA woes? (jessevalentin at yahoo.com (Jesse Valentin))
IRC spying to increase (james.burnes at gwl.com (Burnes, James))
[OpenPKG-SA-2004.043] OpenPKG Security Advisory (tiff) (openpkg at openpkg.org (OpenPKG))
IRC spying to increase (kf_lists at secnetops.com (KF_lists))
FDA Approves Use of Chip in Patients ? HIPAA woes? (insecure at ameritech.net (insecure))
IRC spying on EEYE! (rap1st at darksaber.org (rap1st))
FDA Approves Use of Chip in Patients ? HIPAA woes? (kf_lists at secnetops.com (KF_lists))
IRC spying to increase (aschultz at echo-inc.com (Alex Schultz))
Nessus experience (tate at ClearNetSec.com (Tate Hansen))
[SPAM] Nessus experience (andfarm at teknovis.com (Andrew Farmer))
Administrivia: Retirement (measl at mfn.org (J.A. Terranson))
Norton AntiVirus 2005 treats Radmin as a Virus ??! (nick at virus-l.demon.co.uk (Nick FitzGerald))
why o why did NASA do this. (deigodude at aol.com (Deigo Dude))
IRC spying to increase (xploitable at gmail.com (xploitable))
IRC spying on EEYE! (xploitable at gmail.com (xploitable))
IRC spying to increase (loststryker at loststryker.net (Simon Lorentsen))
IRC spying to increase (fdisclosure at alicampbell.org.uk (Ali Campbell))
IRC spying to increase (fdisclosure at alicampbell.org.uk (Ali Campbell))
IE is just as safe as FireFox (rivgi at finjan.com (Rafel Ivgi, The-Insider))

October 15 (58 messages)

(no subject) (randallm at fidmail.com (RandallM))
my first orgasem (frlinux at gmail.com (FRLinux))
Outlook "cid:" handling - Request for Information (jftucker at gmail.com (James Tucker))
Windows file I/O not internationalized (psz at maths.usyd.edu.au (Paul Szabo))
[FLSA-2004:2102] Updated samba packages fix security vulnerability [updated] (dom at earth.li (Dominic Hargreaves))
IRC spying to increase (loststryker at loststryker.net (Simon Lorentsen))
my first orgasem (frlinux at gmail.com (FRLinux))
Nessus experience (samir at teknotrends.com (Samir Kelekar))
Hidden message (thor at pivx.com (Thor))
Re: Why o why did NASA do this? (etomcat at freemail.hu (Feher Tamas))
WORM-BAGLE found in email. (virus at hexstream.eu.org (Hexstream Virus Alert))
Re: Insecure Default Service DACL's in Windows 2003 (jbm at hsc.fr (Jean-Baptiste Marchand))
Re: Why o why did NASA do this? (fulldisc at ultratux.org (Maarten))
FDA Approves Use of Chip in Patients ? HIPAA woes? (Michael.Simpson at inveresk.com (Michael Simpson))
Re: Why o why did NASA do this? (karmic_nirvana at yahoo.com (nirvana))
FDA Approves Use of Chip in Patients ? HIPAA woes? (Simon.Richter at hogyros.de (Simon Richter))
IRC spying to increase (avalon at cairo.anu.edu.au (Darren Reed))
IRC spying to increase (avalon at cairo.anu.edu.au (Darren Reed))
[ GLSA 200410-13 ] BNC: Input validation flaw (koon at gentoo.org (Thierry Carrez))
why o why did NASA do this. (papp_geza1 at axelero.hu (Geza Papp dr (Axelero)))
Google Desktop Search (dogobrazil at spymac.com (DogoBrazil))
Google Desktop Search (nikopol59 at yahoo.com (Dogo))
Need Security Contact Info (tommy at providesecurity.com (tommy@...videsecurity.com))
Google Desktop Search (krstic at fas.harvard.edu (Ivan Krstic))
FDA Approves Use of Chip in Patients ? HIPAA woes? (jessevalentin at yahoo.com (Jesse Valentin))
Google Desktop Search (shrdlu at deaddrop.org (Etaoin Shrdlu))
Google Desktop Search (davefd at davewking.com (Dave King))
Google Desktop Search (dan_20407 at msn.com (DAN MORRILL))
Norton AntiVirus 2004 Script Blocking Failure (Rant and PoC enclosed) (dmilisic at myrealbox.com (Daniel Milisic))
Google Desktop Search (xploitable at gmail.com (xploitable))
Google Desktop Search (mlande at bellsouth.net (Mary Landesman))
FDA Approves Use of Chip in Patients ? HIPAA woes? (Michael.Simpson at inveresk.com (Michael Simpson))
Re: Why o why did NASA do this? (exibar at thelair.com (Exibar))
Google Desktop Search (rodrigob at suespammers.org (Rodrigo Barbosa))
[OpenPKG-SA-2004.044] OpenPKG Security Advisory (modssl) (openpkg at openpkg.org (OpenPKG))
Google Desktop Search (mike at ampeisch.com (mike@...eisch.com))
Google Desktop Search (visitbipin at yahoo.com (bipin gautam))
Google Desktop Search (exibar at thelair.com (Exibar))
[SECURITY] [DSA 567-1] New libtiff packages fix remote code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
shadowcrew.com (mjm at svsu.edu (Mark J. Miller))
why o why did NASA do this. (cdevoney at u.washington.edu (Chris DeVoney))
shadowcrew.com (mlists at arhont.com (Konstantin V. Gavrilenko))
Google Desktop Search (davefd at davewking.com (Dave King))
Writing Trojans that bypass Windows XP Service Pack 2 Firewall (dotsecure at gmail.com (Martin Mkrtchian))
Re: Why o why did NASA do this? (dotsecure at gmail.com (Martin Mkrtchian))
Google Desktop Search (jftucker at gmail.com (James Tucker))
shadowcrew.com (keydet89 at yahoo.com (Harlan Carvey))
shadowcrew.com (lists at lowkeysoft.com (Steele))
Need Kerio security contact (cesarc56 at yahoo.com (Cesar))
RE: Possibly a stupid question RPC over HTTP (daniels at Ponderosatel.com (Daniel Sichel))
Need Kerio security contact (admin at infosecnyc.com (ISNYC))
Directory traversal in Yak! 2.1.2 (aluigi at autistici.org (Luigi Auriemma))
Google Desktop Search (mike at ampeisch.com (mike@...eisch.com))
Re: Writing Trojans that bypass Windows XP Service Pack 2 Firewall (mrinfosec at hushmail.com (mrinfosec@...hmail.com))
Re: Bypass of Antivirus software with GDI+ bug exploit Mutations (ennis at mts.net (ennis@....net))
Re: Why o why did NASA do this? (ponders at arcor.de (Christoph Jeschke))
Need Kerio security contact (papp_geza1 at axelero.hu (Geza Papp dr (Axelero)))
Any update on SSH brute force attempts? (libove at felines.org (Jay Libove))

October 16 (30 messages)

Norton AntiVirus 2004 Script Blocking Failure (Rant and PoC enclosed) (garth.stone at gmail.com (Garth Stone))
Any update on SSH brute force attempts? (j.riden at massey.ac.nz (James Riden))
Any update on SSH brute force attempts? (KKadow at gmail.com (Kevin))
Writing Trojans that bypass Windows XP Service Pack 2 Firewall (devis at easynix.net (devis))
[SECURITY] [DSA 568-1] New cyrus-sasl-mit packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.de…)
Re: Any update on SSH brute force attempts? (libove-fulldisc at felines.org (Jay Libove))
Senior M$ member says stop using passwords completely! (randallm at fidmail.com (RandallM))
Re: Any update on SSH brute force attempts? (tim-security at sentinelchicken.org (Tim))
Re: Any update on SSH brute force attempts? (sean01 at accnet.com.au (Sean Crawford))
Senior M$ member says stop using passwords completely! (tim-security at sentinelchicken.org (Tim))
Senior M$ member says stop using passwords completely! (avivra at 012.net.il (Aviv Raff))
bmon exploit (idanna at bk.ru (Idan Nahoum))
Senior M$ member says stop using passwords completely! (michealespinola at gmail.com (Micheal Espinola Jr))
Senior M$ member says stop using passwords completely! (randallm at fidmail.com (RandallM))
Your daily internet traffic report (randallm at fidmail.com (RandallM))
Any update on SSH brute force attempts? (frank at knobbe.us (Frank Knobbe))
Senior M$ member says stop using passwords completely! (frank at knobbe.us (Frank Knobbe))
Senior M$ member says stop using passwords completely! (frank at knobbe.us (Frank Knobbe))
[SPAM] Your daily internet traffic report (hvdkooij at vanderkooij.org (Hugo van der Kooij))
[FLSA-2004:2072] Updated CUPS packages fix security vulnerability (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2004:1237] Updated gaim package resolves security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[SPAM] Your daily internet traffic report (shrdlu at deaddrop.org (Etaoin Shrdlu))
Google Desktop Search (rem at fabrika.lv (rem))
Re: [IE 6 SP2] Possible URL Spoofing (1 at malware.com (http-equiv@...ite.com))
Outlook "cid:" handling - Request for Information (1 at malware.com (http-equiv@...ite.com))
[SPAM] Your daily internet traffic report (isec at europe.com (Willem Koenings))
Google Desktop Search (xploitable at gmail.com (yahoo@...alhost))
Full-Disclosure Posts (xploitable at gmail.com (yahoo@...alhost))
[SPAM] Re: [SPAM] Your daily internet traffic report (hvdkooij at vanderkooij.org (Hugo van der Kooij))
Full-Disclosure Posts (1 at malware.com (Sir Robert Mortimer Thrip))

October 17 (34 messages)

TCP / IP (geggam692000 at yahoo.com (D B))
Full-Disclosure Posts (xploitable at gmail.com (Mister Xploitable Gmail))
Senior M$ member says stop using passwords completely! (tim-security at sentinelchicken.org (Tim))
Full-Disclosure Posts (mikehome at kcisp.net (Mike Barushok))
Google Desktop Search (mike at ampeisch.com (mike@...eisch.com))
Full-Disclosure Posts (yossarian at planet.nl (yossarian))
Full-Disclosure Posts (shrdlu at deaddrop.org (Etaoin Shrdlu))
Nessus experience (tate at ClearNetSec.com (Tate Hansen))
[SPAM] Your daily internet traffic report (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
TCP / IP (geggam692000 at yahoo.com (D B))
Full-Disclosure Posts (matthew at textbox.net (404))
TCP / IP (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
why o why did NASA do this. (mdiehl at dominion.dyndns.org (Mike Diehl (Encrypted email preferred)))
Microsoft Windows Huge Text Processing Instability (Admin at SecureTarget.Net (Kaveh Mofidi))
TCP / IP (janus at volny.cz (Honza Vlach))
[SPAM] Re: [SPAM] Your daily internet traffic report (hvdkooij at vanderkooij.org (Hugo van der Kooij))
[SPAM] Your daily internet traffic report (frankdewit at home.nl (Frank de Wit))
[SPAM] Your daily internet traffic report (dave at horsfall.org (Dave Horsfall))
why o why did NASA do this. (stfunub at gmail.com (Andrew Smith))
Full-Disclosure Posts (xploitable at gmail.com (yahoo@...alhost))
MS Security Bulletins (enune at fribble.net (Calum Power))
why o why did NASA do this. (papp_geza1 at axelero.hu (Geza Papp dr (Axelero)))
why o why did NASA do this. (stfunub at gmail.com (Andrew Smith))
why o why did NASA do this. (ajones1 at gmail.com (Adam Jones))
[SPAM] Your daily internet traffic report (lcamtuf at coredump.cx (Michal Zalewski))
[SPAM] Your daily internet traffic report (isec at europe.com (Willem Koenings))
Full-Disclosure Posts (toddtowles at brookshires.com (Todd Towles))
why o why did NASA do this. (toddtowles at brookshires.com (Todd Towles))
ICMP (was: daily internet traffic report) (frankdewit at home.nl (Frank de Wit))
Full-Disclosure Posts (xploitable at gmail.com (backyard@...oo-inc))
ICMP (was: daily internet traffic report) (hackerwacker at cybermesa.com (James Edwards))
ICMP (was: daily internet traffic report) (blancher at cartel-securite.fr (Cedric Blancher))
ICMP (was: daily internet traffic report) (hackerwacker at cybermesa.com (James Edwards))
Senior M$ member says stop using passwords completely! (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))

October 18 (54 messages)

Full-Disclosure Posts (yossarian at planet.nl (yossarian))
[SPAM] Your daily internet traffic report (gem at rellim.com (Gary E. Miller))
[SPAM] Re: Full-Disclosure Posts (hvdkooij at vanderkooij.org (Hugo van der Kooij))
ICMP (was: daily internet traffic report) (blancher at cartel-securite.fr (Cedric Blancher))
ICMP (was: daily internet traffic report) (dufresne at winternet.com (Ron DuFresne))
Full-Disclosure Posts (xploitable at gmail.com (xploitable))
[SECURITY] [DSA 569-1] New netkit-telnet-ssl packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
[SPAM] Re: Full-Disclosure Posts (xploitable at gmail.com (xploitable))
libkmp in Cisco vpn and Oracle pki ? (bonemach at sdf.lonestar.org (BoneMachine))
Patch Integration Engine (PIE) alpha release (ben.hawkes at paradise.net.nz (Ben Hawkes))
why o why did NASA do this. (rik.bobbaers at cc.kuleuven.ac.be (Harry de Grote))
Re: Any update on SSH brute force attempts? (Dave.Ewart at cancer.org.uk (Dave Ewart))
ICMP (was: daily internet traffic report) (barrie at reboot-robot.net (Barrie Dempster))
[SECURITY] [DSA 556-2] New netkit-telnet packages really fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.deb…)
Microsoft Windows Huge Text Processing Instability (jftucker at gmail.com (James Tucker))
[FLSA-2004:1804] Updated kernel resolves security vulnerabilities (dom at earth.li (Dominic Hargreaves))
cPanel hardlink backup issue (appelast at drumnbass.art.pl (Karol Więsek))
cPanel hardlink chown issue (appelast at drumnbass.art.pl (Karol Więsek))
cPanel symlink chmod issue (appelast at drumnbass.art.pl (Karol Więsek))
Re: Any update on SSH brute force attempts? (dufresne at winternet.com (Ron DuFresne))
[ GLSA 200410-14 ] phpMyAdmin: Vulnerability in MIME-based transformation system (koon at gentoo.org (Thierry Carrez))
3COM 3crwe754g72-a Information Disclosure, Logs manipulation ... (cb-lse at ifrance.com (Cyrille Barthelemy))
Senior M$ member says stop using passwords completely! (mvp at joeware.net (joe))
3COM 3crwe754g72-a Administration interface code injection (DHCP) (cb-publicbox at ifrance.com (Cyrille Barthelemy))
Full-Disclosure Posts (toddtowles at brookshires.com (Todd Towles))
Re: Re: Any update on SSH brute force attempts? (Dave.Ewart at cancer.org.uk (Dave Ewart))
Re: Any update on SSH brute force attempts? (barrie at reboot-robot.net (Barrie Dempster))
Mutiple AntiVirus Reserved Device Name Handling Vulnerability (smaillist at gmail.com (Sowhat .))
why o why did NASA do this. (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
why o why did NASA do this. (kf_lists at secnetops.com (KF_lists))
Web browsers - a mini-farce (lcamtuf at ghettot.org (Michal Zalewski))
Multiple vulnerabilities in Sage Saleslogix (carl at agenda-security.co.uk (Carl))
RE: Open the doors to hell hire a hicker Full-Disclosure Posts (jan.m.clairmont at citigroup.com (Clairmont, Jan M))
why o why did NASA do this. (sean01 at accnet.com.au (Sean Crawford))
Re: Re: Any update on SSH brute force attempts? (barrie at reboot-robot.net (Barrie Dempster))
ICMP (was: daily internet traffic report) (hackerwacker at cybermesa.com (james edwards))
Re: Any update on SSH brute force attempts? (raju at linux-delhi.org (Raj Mathur))
iDEFENSE Security Advisory 10.18.04: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@…)
why o why did NASA do this. (toddtowles at brookshires.com (Todd Towles))
Full-disclosure newsgroup? (mark_young at hotmail.com (Mark Young))
ICMP (was: daily internet traffic report) (blancher at cartel-securite.fr (Cedric Blancher))
ICMP (was: daily internet traffic report) (frankdewit at home.nl (Frank de Wit))
why o why did NASA do this. (eric at arcticbears.com (Eric Paynter))
Full-Disclosure Posts (yossarian at planet.nl (yossarian))
Senior M$ member says stop using passwords completely! (eric at arcticbears.com (Eric Paynter))
Re: Any update on SSH brute force attempts? (barrie at reboot-robot.net (Barrie Dempster))
ICMP - Today India, Samoa, and Iran are in the tank - back to orginal thread DDoS, or No DDoS? (vigilaro at gmx.net (vigilaro@....net))
why o why did NASA do this. (papp_geza1 at axelero.hu (Geza Papp dr (Axelero)))
[ GLSA 200410-15 ] Squid: Remote DoS vulnerability (lewk at gentoo.org (Luke Macken))
HOSEIX (xploitable at gmail.com (xploitable))
[ GLSA 200410-16 ] PostgreSQL: Insecure temporary file use in make_oidjoins_check (koon at gentoo.org (Thierry Carrez))
HOSEIX (xploitable at gmail.com (xploitable))
RE: Open the doors to hell hire a hicker Full-Disclosure Posts (KKadow at gmail.com (Kevin))
UnixWare 7.1.4 UnixWare 7.1.3 : The error handling in the inflate and inflateBack functions in ZLib compression library … (please_reply_to_security at sco.com (pl…)

October 19 (39 messages)

RE: Open the doors to hell hire a hicker Full-Disclosure Posts (michealespinola at gmail.com (Micheal Espinola Jr))
RE: Open the doors to hell hire a hicker Full-Disclosure Posts (KKadow at gmail.com (Kevin))
Re: Any update on SSH brute force attempts? (dufresne at winternet.com (Ron DuFresne))
RE: Incoming Msg (thor at pivx.com (Thor))
Reply: Microsoft Windows Huge Text Processing Instability (Admin at SecureTarget.Net (Kaveh Mofidi))
why o why did NASA do this. (uberguidoz at gmail.com (GuidoZ))
WORM-BAGLE found in email. (virus at hexstream.eu.org (Hexstream Virus Alert))
Re: Re: Any update on SSH brute force attempts? (ronny.adsetts at amazinginternet.com (Ronny Adsetts))
Major Client Crash in 3D FTP (bakchodiya at yahoo.com (Bakchodiya))
Re: Re: Any update on SSH brute force attempts? (barrie at reboot-robot.net (Barrie Dempster))
Full-disclosure newsgroup? (guninski at guninski.com (Georgi Guninski))
why o why did NASA do this. (toddtowles at brookshires.com (Todd Towles))
RE: Open the doors to hell hire a hicker Full-Disclosure Posts (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Remote Rootkit Scanner for Windows (atarasco at sia.es (Andres Tarasco))
Windows Time Synchronization - Best Practices (bernardo at ish.com.br (Bernardo Santos Wernesback))
Broadcast crash in Vypress Tonecast 1.3 (aluigi at autistici.org (Luigi Auriemma))
Windows Time Synchronization - Best Practices (gem at rellim.com (Gary E. Miller))
Full-disclosure newsgroup? (kilian.cavalotti at crans.org (Kilian CAVALOTTI))
RE: Open the doors to hell hire a hicker Full-Disclosure Posts (xploitable at gmail.com (Joe Random))
why o why did NASA do this. (uberguidoz at gmail.com (GuidoZ))
Windows Time Synchronization - Best Practices (richard at tccnet.co.uk (Richard Stevens))
RES: Windows Time Synchronization - Best Practices (bernardo at ish.com.br (Bernardo Santos Wernesback))
why o why did NASA do this. (toddtowles at brookshires.com (Todd Towles))
Enterprise Access Log Scanning Tools (michael.cullen at umusic.com (Cullen, Michael))
Windows Time Synchronization - Best Practices (toddtowles at brookshires.com (Todd Towles))
Windows Time Synchronization - Best Practices (poof at fansubber.com (Poof))
Windows Time Synchronization - Best Practices (keithp at corp.ptd.net (Keith Pachulski))
Enterprise Access Log Scanning Tools (JBrown at thrupoint.net (Brown, James (Jim)))
Senior M$ member says stop using passwords completely! (Will.Banta at broadwing.com (Banta, Will))
Re: Web browsers - a mini-farce (guninski at guninski.com (Georgi Guninski))
Senior M$ member says stop using passwords completely! (toddtowles at brookshires.com (Todd Towles))
Re: Stupid idea (xploitable at gmail.com (Joe Random))
Re: Web browsers - a mini-farce (michealespinola at gmail.com (Micheal Espinola Jr))
Re: Stupid idea (blsonne at rogers.com (Byron L. Sonne))
Re: Stupid idea (xploitable at gmail.com (Joe Random))
Re: Stupid idea (dmaynor at gmail.com (David Maynor))
Senior M$ member says stop using passwords completely! (frank at knobbe.us (Frank Knobbe))
Re: Web browsers - a mini-farce (rainer at ultra-secure.de (Rainer Duffner))
Re: Web browsers - a mini-farce (blsonne at rogers.com (Byron L. Sonne))

October 20 (65 messages)

Windows covert channel (jazper at cox.net (jazper))
Re: Web browsers - a mini-farce (michealespinola at gmail.com (Micheal Espinola Jr))
Re: Web browsers - a mini-farce (michealespinola at gmail.com (Micheal Espinola Jr))
Web browsers - a mini-farce (nakal at nurfuerspam.de (Martin))
Re: Web browsers - a mini-farce (kf_lists at secnetops.com (kf_lists))
Sending remote procedure calls through e-mail (RPC-Mail) (securitylist at sharp-ideas.net (Abe Usher))
How to Break Windows XP SP2 + Internet Explorer 6 SP2 (1 at malware.com (http-equiv@...ite.com ))
MDKSA-2004:107 - Updated mozilla packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:108 - Updated cvs packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:109 - Updated libtiff packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Changes.. (thor at pivx.com (Thor))
Re: Web browsers - a mini-farce (tcleary2 at csc.com.au (tcleary2@....com.au))
Senior M$ member says stop using passwords completely! (avivra at 012.net.il (Aviv Raff))
America Online Webmail Cross Site Scripting Vulnerability (sadair at vt.edu (Steven Adair))
Netscape Webmail Cross Site Scripting Vulnerability (sadair at vt.edu (Steven Adair))
Re: Web browsers - a mini-farce (guninski at guninski.com (Georgi Guninski))
WORM-BAGLE found in email. (virus at hexstream.eu.org (Hexstream Virus Alert))
Senior M$ member says stop using passwords completely! (stephane.nasdrovisky at paradigmo.com (stephane nasdrovisky))
Windows Time Synchronization - Best Practices (hackerwacker at cybermesa.com (James Edwards))
Senior M$ member says stop using passwords completely! (James.McKinlay at cnm.co.uk (James.McKinlay@....co.uk))
Re: Web browsers - a mini-farce (lcamtuf at ghettot.org (Michal Zalewski))
Web browsers - a mini-farce (lcamtuf at ghettot.org (Michal Zalewski))
Re: Re: Any update on SSH brute force attempts? (ronny.adsetts at amazinginternet.com (Ronny Adsetts))
Re: Stupid idea (xploitable at gmail.com (Home Security))
Web browsers - a mini-farce (paa-listas at argentina.com (Pablo))
Sending remote procedure calls through e-mail (RPC-Mail) (barrie at reboot-robot.net (Barrie Dempster))
Re: IE bugs (Was: Web browsers - a mini-farce) (skylined at edup.tudelft.nl (Berend-Jan Wever))
Sending remote procedure calls through e-mail (RPC-Mail) (michael at puffin.tamucc.edu (michael williamson))
Secunia Research: Multiple Browsers Tabbed Browsing Vulnerabilities (jb at secunia.com (Jakob Balle))
Sending remote procedure calls through e-mail (RPC-Mail) (zeedo at reboot-robot.net (zeedo))
Senior M$ member says stop using passwords completely! (guninski at guninski.com (Georgi Guninski))
Senior M$ member says stop using passwords completely! (toddtowles at brookshires.com (Todd Towles))
RE: Open the doors to hell hire a hicker Full-Disclosure Posts (jessevalentin at yahoo.com (Jesse Valentin))
Senior M$ member says stop using passwords completely! (nocmonkey at gmail.com (Danny))
RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2 (thor at pivx.com (Thor Larholm))
Senior M$ member says stop using passwordscompletely! (Will.Banta at broadwing.com (Banta, Will))
Senior M$ member says stop using passwords completely! (tgoreilly at cmsenergy.com (Thomas G O'Reilly))
[SECURITY] [DSA 570-1] New libpng packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Sending remote procedure calls through e-mail (RPC-Mail) (michael at puffin.tamucc.edu (Michael Williamson))
interesting trojan found (richard at tccnet.co.uk (Richard Stevens))
interesting trojan found (richard at tccnet.co.uk (Richard Stevens))
Re: IE bugs (Was: Web browsers - a mini-farce) (avivra at 012.net.il (Aviv Raff))
Buffer-overflow in Age of Sail II 1.04.151 (aluigi at autistici.org (Luigi Auriemma))
[SECURITY] [DSA 571-1] New libpng3 packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
Senior M$ member says stop using passwords completely! (fulldisc at ultratux.org (Maarten))
RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2 (fulldisc at ultratux.org (Maarten))
Senior M$ member says stop using passwords completely! (andfarm at teknovis.com (Andrew Farmer))
Google Desktop Search (andfarm at teknovis.com (Andrew Farmer))
interesting trojan found (nocmonkey at gmail.com (Danny))
RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2 (thor at pivx.com (Thor Larholm))
MS04-032 Exploit for Microsoft Windows Metafile (.emf) Heap Overflow (alf1num3rik at yahoo.com (Stephen Jimson))
Norton AntiVirus 2004/2005 Script Blocking Redux (dmilisic at myrealbox.com (Daniel Milisic))
WMF/EMF exploit in cooperation with outlook CID: stuff (max.moser at gmail.com (Max Moser))
interesting trojan found (seclists at stratitec.com (defiance))
RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2 (kf_lists at secnetops.com (KF_lists))
interesting trojan found (jtheveno at purdue.edu (Jordan T-H))
Web browsers - a mini-farce (dveditz at cruzio.com (Daniel Veditz))
interesting trojan found (toddtowles at brookshires.com (Todd Towles))
Re: [Unpatched] New 0day exploit for XPSP2 (ju at heisec.de (Juergen Schmidt))
Re: Mozilla crashes (dveditz at cruzio.com (Daniel Veditz))
[ GLSA 200410-18 ] Ghostscript: Insecure temporary file use in multiple scripts (koon at gentoo.org (Thierry Carrez))
[ GLSA 200410-17 ] OpenOffice.org: Temporary files disclosure (koon at gentoo.org (Thierry Carrez))
new cyber criminal available for employment, perhaps after serving some time; (dufresne at winternet.com (Ron DuFresne))
interesting trojan found (richard at tccnet.co.uk (Richard Stevens))
interesting trojan found (richard at tccnet.co.uk (Richard Stevens))

October 21 (76 messages)

Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (jasonc at science.org (Jason Coombs PivX Solutions))
Will a vote for John Kerry be counted by a HartInterCivic eSlate3000 in Honolulu? (chows at ozemail.com.au (Gregh))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (larry at larryseltzer.com (Larry Seltzer))
[SPAM] Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (jeff at misterunix.com (Jeff Price))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (measl at mfn.org (J.A. Terranson))
Will a vote for John Kerry be counted by a HartInterCivic eSlate3000 in Honolulu? (measl at mfn.org (J.A. Terranson))
Will a vote for John Kerry be counted by aHartInterCivic eSlate3000 in Honolulu? - OT (chows at ozemail.com.au (Gregh))
Will a vote for John Kerry be counted by a HartInterCivic eSlate3000 in Honolulu? (caferace at well.com (Jim Race))
[SPAM] RE: interesting trojan found (hvdkooij at vanderkooij.org (Hugo van der Kooij))
basic exploit coding on solaris sparc (fabio at crearium.com (Fabio))
basic exploit coding on solaris sparc (dunceor at gmail.com (Dunceor .))
basic exploit coding on solaris sparc (meder at areopag.net (Meder Kydyraliev))
SuSE Security Announcement: kernel (SUSE-SA:2004:037) (meissner at suse.de (Marcus Meissner))
RE: Full-Disclosure digest, Vol 1 #1991 - 41 msgs (Wayne_Dawson at inventuresolutions.com (Wayne Dawson))
[SECURITY] [DSA 572-1] New ecartis packages fix unauthorised access to admin interface (debian-security-announce at lists.debian.org (debian-security-announce@l…)
interesting trojan found (Christian.Loretan at swisstopo.ch (Christian.Loretan@...sstopo.ch))
Will a vote for John Kerry be counted by aHartInterCivic eSlate3000 in Honolulu? - OT (nick at virus-l.demon.co.uk (Nick FitzGerald))
Possibly a stupid question RPC over HTTP (John.Airey at rnib.org.uk (Airey, John))
Will a vote for John Kerry be counted by aHartInterCivic eSlate3000 in Honolulu? - OT (joe.hood at gmail.com (Joe Hood))
Will a vote for John Kerry be counted byaHartInterCivic eSlate3000 in Honolulu? - OT (chows at ozemail.com.au (Gregh))
[ GLSA 200410-19 ] glibc: Insecure tempfile handling in catchsegv script (lewk at gentoo.org (Luke Macken))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (seclists at stratitec.com (defiance))
[SPAM] RE: interesting trojan found (toddtowles at brookshires.com (Todd Towles))
NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability (security at nsfocus.com (NSFOCUS Security Team))
[SECURITY] [DSA 573-1] New cupsys packages fix arbitrary code execution (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org…)
interesting trojan found (isec at europe.com (Willem Koenings))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (exibar at thelair.com (Exibar))
[ GLSA 200410-20 ] Xpdf, CUPS: Multiple integer overflows (koon at gentoo.org (Thierry Carrez))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (dave.cawley at adelphia.com (Dave D. Cawley))
Senior M$ member says stop using passwords completely! (mvp at joeware.net (joe))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (HBoegh at gmail.com (Henrik Boegh))
Working GDI+ JPEG exploit code? (Trey.Keifer at fishnetsecurity.com (Keifer, Trey))
Exploit code Available for previously announced MS Vulnerabilities (jessevalentin at yahoo.com (Jesse Valentin))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (myuu at pojo.com (Collin))
Will a vote for John Kerry be counted by a HartInterCivic eSlate3000 in Honolu (jcreegan at questarweb.com (John Creegan))
[in] Re: Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (purdy at tecman.com (Curt Purdy))
cPanel check only the first 8 characters of webmail password (andrey at hiddenbit.org (Andrey Bayora))
Exploit code Available for previously announced MS Vulnerabilities (alf1num3rik at yahoo.com (Stephen Jimson))
SV: [SPAM] RE: interesting trojan found (kruse at krusesecurity.dk (Peter Kruse))
[SPAM] RE: interesting trojan found (toddtowles at brookshires.com (Todd Towles))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (fdisclosure at alicampbell.org.uk (Ali Campbell))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (nathan2 at pinn.net (Nathan McGuirt))
Windows Time Synchronization - Best Practices (David.Cushing at hitachisoftware.com (Cushing, David))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (mole at morris.net (Paul J. Morris))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (kf_lists at secnetops.com (KF_lists))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (devon at lithiumnode.com (Person))
Possibly a stupid question RPC over HTTP (krmaxwell at gmail.com (Kyle Maxwell))
[in] Re: Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (exibar at thelair.com (Exibar))
Senior M$ member says stop using passwords completely! (exibar at thelair.com (Exibar))
Anti-Bot utility (etomcat at freemail.hu (Feher Tamas))
Websphere 3.5 (alerta at redsegura.com (Alerta Redsegura))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (brian at tbresner.com (Brian Smith-Sweeney))
[SPAM] RE: interesting trojan found (j.riden at massey.ac.nz (James Riden))
[in] Re: Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (exibar at thelair.com (Exibar))
OT: Opening for Security Researcher, Maryland USA (david.r.stein at gmail.com (David Stein))
Windows Time Synchronization - Best Practices (gem at rellim.com (Gary E. Miller))
[in] Re: Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (krispykringle at gmail.com (KrispyKringle))
SQL Injection in UBB.threads 3.4.x (florianrock at web.de (Florian Rock))
MDKSA-2004:110 - Updated gaim packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Will a vote for John Kerry be counted by a HartInterCivic eSlate3000 in Honolulu? (pauls at utdallas.edu (Paul Schmehl))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (pauls at utdallas.edu (Paul Schmehl))
Will a vote for John Kerry be counted by aHartInterCivic eSlate3000 in Honolulu? - OT (pauls at utdallas.edu (Paul Schmehl))
MDKSA-2004:111 - Updated wxGTK2 packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Senior M$ member says stop using passwords completely! (guninski at guninski.com (Georgi Guninski))
MDKSA-2004:112 - Updated squid packages fix SNMP processing vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Senior M$ member says stop using passwords completely! (nocmonkey at gmail.com (Danny))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (toddtowles at brookshires.com (Todd Towles))
[ GLSA 200410-21 ] Apache 2, mod_ssl: Bypass of SSLCipherSuite directive (klieber at gentoo.org (Kurt Lieber))
OT: Opening for Security Researcher, Maryland USA (david.r.stein at gmail.com (David Stein))
[in] Re: Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (blsonne at rogers.com (Byron L. Sonne))
cPanel check only the first 8 characters of webmail password (linux at digipix.org (Evert Daman))
[in] Re: Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (dufresne at winternet.com (Ron DuFresne))
OT: Opening for Security Researcher, Maryland USA (toddtowles at brookshires.com (Todd Towles))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (dufresne at winternet.com (Ron DuFresne))
To anybody who's offended by my disclosure policy-GET THIS GUYS (rivgi at finjan.com (Rafel Ivgi, The-Insider))

October 22 (59 messages)

[HV-LOW] Unsafe WAV header handling can cause DoS on Windows (vuln at hexview.com (vuln@...view.com))
Windows Time Synchronization - Best Practices (prp17 at adelphia.net (Phillip R. Paradis))
MDKSA-2004:113 - Updated xpdf packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:114 - Updated gpdf packages fix DoS vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:115 - Updated kdegraphics packages fix DoS vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:116 - Updated cups packages fix DoS vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Windows Time Synchronization - Best Practices (frank at knobbe.us (Frank Knobbe))
Will a vote for John Kerry be counted by a HartInterCivic eSlate3000 in Honolulu? (measl at mfn.org (J.A. Terranson))
Will a vote for John Kerry be counted by a HartInterCivic eSlate3000 in Honolulu? (kewl at phear.org (Tristan Schmurr))
Owned by an iPod (rosalina at linuxmail.org (Rosalina Hamar))
Advisory: Design flaw in human communication (hvdkooij at vanderkooij.org (Hugo van der Kooij))
regex vs hash (michael.gale at bluesuperman.com (Michael Gale))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (krispykringle at gmail.com (KrispyKringle))
Windows Time Synchronization - Best Practices (michealespinola at gmail.com (Micheal Espinola Jr))
ms backup schedule (reccob at hsl.eu.com (Recco Bucceri))
Advisory: Design flaw in human communication (Michael.Simpson at inveresk.com (Michael Simpson))
Advisory: Design flaw in human communication (jasonc at science.org (Jason Coombs PivX Solutions))
Virus/Trojan trying to connect external:445 and 212.175.149.149.6667 (mbicer at gmail.com (Murat Bicer))
ms backup schedule (danbuk at gmail.com (DanB UK))
regex vs hash (upbupb at gmail.com (upb))
Protected message (als at thangorodrim.de (Als))
Notification (security at brvenik.com (Security))
Fax Message Received (RawData at netcabo.pt (RawData))
J2ME security vulnerabilities (zupa at man.poznan.pl (Adam Gowdiak))
Virus/Trojan trying to connect external:445 and 212.175.149.149.6667 (toddtowles at brookshires.com (Todd Towles))
Websphere 3.5 (yossarian at planet.nl (yossarian@...net.nl))
[in] Re: Will a vote for John Kerry be countedby a Hart InterCivic eSlate3000 in Honolulu? (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Windows Time Synchronization - Best Practices (mvp at joeware.net (joe))
regex vs hash (BennettMan at gmail.com (Zach Bennett))
Possibly a stupid question RPC over HTTP (John.Airey at rnib.org.uk (Airey, John))
Virus/Trojan trying to connect external:445 and 212.175.149.149.6667 (elcamino74ss at gmail.com (darren windham))
Working GDI+ JPEG exploit code? (kquest at toplayer.com (kquest@...layer.com))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Will a vote for John Kerry be counted by aHartInterCivic eSlate3000 in Honolulu? - OT (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Will a vote for John Kerry be counted by a HartInterCivic eSlate3000 in Honolulu? (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Altiris Carbon Copy Remote Control local SYSTEM exploitation. (kf_lists at secnetops.com (KF_lists))
SuSE Security Announcement: libtiff (SUSE-SA:2004:038) (meissner at suse.de (Marcus Meissner))
[in] Re: Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
WSDL / UDDI scanner (n30_lists at hotmail.com (n30))
Q: Linux Command Line Encryption (fdisclosure at alicampbell.org.uk (Ali Campbell))
Senior M$ member says stop using passwords completely! (MarkC at mtbaker.wednet.edu (Mark Challender))
Q: Linux Command Line Encryption (mike at sentex.net (Mike Tancsa))
Owned by an iPod (dr at kyx.net (Dragos Ruiu))
Windows 2000 Remote Buffer Overflow by class101 (sk3tch at sk3tch.net (sk3tch@...tch.net))
Possibly a stupid question RPC over HTTP (andfarm at teknovis.com (Andrew Farmer))
Windows 2000 Remote Buffer Overflow by class101 (nocmonkey at gmail.com (Danny))
Q: Linux Command Line Encryption (blancher at cartel-securite.fr (Cedric Blancher))
Q: Linux Command Line Encryption (michael4447 at gmail.com (Michael Rutledge))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (pauls at utdallas.edu (Paul Schmehl))
Windows DoS in certain pGina configurations (sadair at vt.edu (Steven Adair))
iDEFENSE Security Advisory 10.22.04: Novell SuSe Linux LibTIFF Heap Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
Q: Linux Command Line Encryption (alex at bofh.net.pl (Janusz A. Urbanowicz))
Will a vote for John Kerry be counted by a Hart InterCivic eSlate3000 in Honolulu? (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
Q: Linux Command Line Encryption (js at axxs.net (Joe Szilagyi))
AOL Journals BlogID incrementing discloses account names and e-mail (steven at lovebug.org (Steven))
Re: Windows 2000 Remote Buffer Overflow by class101 (class101 at phreaker.net (class 101))
Crypto and Primes (daniels at Ponderosatel.com (Daniel Sichel))
Q: Linux Command Line Encryption (twebster at daksoft.com (twebster@...soft.com))
Undetectable Virus from CANADA ISP 69.197.83.68 (king at danger.org (Farrukh Hussain))

October 23 (32 messages)

Windows 2000 Remote Buffer Overflow by class101 (kf_lists at secnetops.com (kf_lists))
Update: Web browsers - a mini-farce (MSIE gives in) (lcamtuf at ghettot.org (Michal Zalewski))
Q: Linux Command Line Encryption (kf_lists at secnetops.com (kf_lists))
Undetectable Virus from CANADA ISP 69.197.83.68 (stfunub at gmail.com (Andrew Smith))
AW: Undetectable Virus from CANADA ISP 69.197.83.68 (ph0enix at layertwo.net (ph0enix))
Undetectable Virus from CANADA ISP 69.197.83.68 (pauls at utdallas.edu (Paul Schmehl))
Undetectable Virus from CANADA ISP 69.197.83.68 (jlevitsk at joshie.com (Joshua Levitsky))
[USN-1-1] PNG library vulnerabilities (mdz at canonical.com (Matt Zimmerman))
Crypto and Primes (requiem at praetor.org (Jeremy Bishop))
[USN-2-1] xpdf vulnerabilities (mdz at canonical.com (Matt Zimmerman))
[SPAM] AW: Undetectable Virus from CANADA ISP 69.197.83.68 (jeff at misterunix.com (Jeff Price))
Undetectable Virus from CANADA ISP 69.197.83.68 (nocmonkey at gmail.com (Danny))
Protected message (als at thangorodrim.de (Als))
RE: Incoming Msg (security at brvenik.com (Security))
Re: Incoming Message (RawData at netcabo.pt (RawData))
Undetectable Virus from CANADA ISP 69.197.83.68 (barrie at reboot-robot.net (Barrie Dempster))
Undetectable Virus from CANADA ISP 69.197.83.68 (nick at virus-l.demon.co.uk (Nick FitzGerald))
Owned by an iPod (mattj at tartarus.uwa.edu.au (Matt Johnston))
[FLSA-2004:1719] Updated Tripwire packages fix security flaw (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2004:1947] Updated glibc packages fix flaws (marcdeslauriers at videotron.ca (Marc Deslauriers))
Help, possible rootkit (billybobknob at hotmail.com (BillyBob))
Undetectable Virus from CANADA ISP 69.197.83.68 (isshogei at isshogei.de (Isshogei))
Undetectable Virus from CANADA ISP 69.197.83.68 (isshogei at isshogei.de (Isshogei))
(no subject) (patrickh at ats-tech.net (patrickh@...-tech.net))
Help, possible rootkit (michael4447 at gmail.com (Michael Rutledge))
Windows 2000 Remote Buffer Overflow by class101 (measl at mfn.org (J.A. Terranson))
Help, possible rootkit (admin at infosecnyc.com (ISNYC))
Crypto and Primes (notes at shaw.ca (Andrew))
Help, possible rootkit (alanme at melmac.co.uk (Alan Melia (Melmac)))
Help, possible rootkit (billybobknob at hotmail.com (BillyBob))
[inbox] Re: Help, possible rootkit (exibar at thelair.com (Exibar))
Undetectable Virus from CANADA ISP 69.197.83.68 (barrie at reboot-robot.net (Barrie Dempster))

October 24 (25 messages)

Help, possible rootkit (mnv at alumni.princeton.edu (MN Vasquez))
Undetectable Virus from CANADA ISP 69.197.83.68 (Azerail at supersecretninjaskills.com (Azerail))
Help, possible rootkit (Azerail at supersecretninjaskills.com (Azerail))
Help, possible rootkit (mnv at alumni.princeton.edu (MN Vasquez))
Re: Any update on SSH brute force attempts? (miriamchan at geocities.com (Miriam Chan))
Help, possible rootkit (chows at ozemail.com.au (Gregh))
python does mangleme (with IE bugs!) (nd at felinemenace.org (ned))
Update: Web browsers - a mini-farce (MSIE gives in) (dveditz at cruzio.com (Daniel Veditz))
RE: Full-Disclosure digest (blancher at cartel-securite.fr (Cedric Blancher))
RE: Full-Disclosure digest (janus at volny.cz (Honza Vlach))
xpire.info & splitinfinity.info - exploits in the wild (eflorio at edmaster.it (Elia Florio))
Help, possible rootkit (fdisclosure at alicampbell.org.uk (Ali Campbell))
Q: Linux Command Line Encryption (bruno at wolff.to (Bruno Wolff III))
Undetectable Virus from CANADA ISP 69.197.83.68 (devis at easynix.net (devis))
[ GLSA 200410-22 ] MySQL: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
xpire.info & splitinfinity.info - exploits in the wild (bowwow at nowhere.org (bowwow@...here.org))
confixx e-mail bug (bugtraq at int80h.de (Igor Buchmueller))
xpire.info & splitinfinity.info - exploits in the wild (KKadow at gmail.com (Kevin))
[ GLSA 200410-23 ] Gaim: Multiple vulnerabilities (vorlon at gentoo.org (Matthias Geerdsen))
xpire.info & splitinfinity.info - exploits in the wild (eflorio at edmaster.it (Elia Florio))
Mozilla Thunderbird 0.8 / Firefox 0.9.3 temporary files (local) (broadcast at ptraced.net (Martin))
Help, possible rootkit (randallm at fidmail.com (RandallM))
XSS vulnerabilities in several german communities + aol search (habonator at gmail.com (Habonator _))
Re: Any update on SSH brute force attempts? (libove at felines.org (Jay Libove))
FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" (hvdkooij at vanderkooij.org (Hugo van der Kooij))

October 25 (30 messages)

xpire.info & splitinfinity.info - exploits in the wild (nick at virus-l.demon.co.uk (Nick FitzGerald))
FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" (hhoffman at ip-solutions.net (Harry Hoffman))
FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" (andfarm at teknovis.com (Andrew Farmer))
Q: Linux Command Line Encryption (alex at bofh.net.pl (Janusz A. Urbanowicz))
Crypto and Primes (alex at bofh.net.pl (Janusz A. Urbanowicz))
Windows Time Synchronization - Best Practices (gem at rellim.com (Gary E. Miller))
python does mangleme (with IE bugs!) (skylined at edup.tudelft.nl (Berend-Jan Wever))
STG Security Advisory: [SSA-20041022-08] MoniWiki XSS vulnerability (advisory at stgsecurity.com (SSR Team))
STG Security Advisory: [SSA-20041022-08] MoniWiki XSS vulnerability (advisory at stgsecurity.com (SSR Team))
Possibly a stupid question RPC over HTTP (krmaxwell at gmail.com (Kyle Maxwell))
Help, possible rootkit (rik.bobbaers at cc.kuleuven.ac.be (Harry de Grote))
FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" (var at deny-all.com (Vincent Archer))
Help, possible rootkit (alanme at melmac.co.uk (Alan Melia (Melmac)))
FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" (etomcat at freemail.hu (Feher Tamas))
Mozilla Thunderbird 0.8 / Firefox 0.9.3 temporary files (local) (dveditz at cruzio.com (Daniel Veditz))
re: How to Break Windows XP SP2 + Internet Explorer 6 SP2 (Mike at MichaelEvanchik.com (Michael Evanchik))
RE: Full-Disclosure digest (toddtowles at brookshires.com (Todd Towles))
[ GLSA 200410-24 ] MIT krb5: Insecure temporary file use in send-pr.sh (koon at gentoo.org (Thierry Carrez))
RE: Full-Disclosure digest (smenard at nbnet.nb.ca (steve menard))
Q: Linux Command Line Encryption (denis at dimick.net (Denis Dimick))
[ GLSA 200410-25 ] Netatalk: Insecure tempfile handling in etc2ps.sh (lewk at gentoo.org (Luke Macken))
[ GLSA 200410-26 ] socat: Format string vulnerability (lewk at gentoo.org (Luke Macken))
Rendering binary file as HTML makes Mozilla Firefox stop responding or crash (kruse at krusesecurity.dk (Peter Kruse))
Re: [lists] python does mangleme (with IE bugs!) (ecb29 at cornell.edu (Elliott Bäck))
Q: Linux Command Line Encryption (mhoye at neon.polkaroo.net (Mike Hoye))
Windows Time Synchronization - Best Practices (andfarm at teknovis.com (Andrew Farmer))
xpire.info & splitinfinity.info - exploits in the wild (dufresne at winternet.com (Ron DuFresne))
RE: Full-Disclosure digest, Vol 1 #2001 - 32 msgs (daniels at Ponderosatel.com (Daniel Sichel))
Q: Linux Command Line Encryption (mhoye at neon.polkaroo.net (Mike Hoye))
[security] Re: FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" (brett at custom-tech.net (Brett Campbell))

October 26 (18 messages)

Q: Linux Command Line Encryption (anthrax101 at gmail.com (Aaron Horst))
Posting w/o checking facts (hhoffman at ip-solutions.net (Harry Hoffman))
Kaffeine Media Player Conteny Type overflow (kfinisterre at secnetops.biz (KF))
PTms04-030 (pigrelax at yandex.ru (pigrelax))
FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" (alf1num3rik at yahoo.com (Stephen Jimson))
SUSE Security Announcement: xpdf, gpdf, kpdf, pdftohtml, cups (SUSE-SA:2004:039) (thomas at suse.de (Thomas Biege))
Windows Time Synchronization - Best Practices (John.Airey at rnib.org.uk (Airey, John))
Q: Linux Command Line Encryption (fdisclosure at alicampbell.org.uk (Ali Campbell))
Possibly a stupid question RPC over HTTP (John.Airey at rnib.org.uk (Airey, John))
Presentation / Paper : Demystifying Penetration Testing (mail at hackingspirits.com (Debasis Mohanty))
Rendering binary file as HTML makes Mozilla Firefox stop responding or crash (visitbipin at yahoo.com (bipin gautam))
Multiple AV DoS (part v) (visitbipin at yahoo.com (bipin gautam))
SV: Rendering binary file as HTML makes Mozilla Firefox stop responding or crash (kruse at krusesecurity.dk (Peter Kruse))
Php Nuke Hack's (darkydelphi at gmail.com (.:: DarkDelphi ::.))
Php Nuke Hack's (str0ke at milw0rm.com (str0ke@...w0rm.com))
Php Nuke Hack's (ntx0f at seteuid.com (ntx0f))
Php Nuke Hack's (bugfree at gmail.com (bug free))
PTms04-030 (pigrelax at yandex.ru (pigrelax))

October 27 (21 messages)

xpire.info & splitinfinity.info - exploits in the wild (eflorio at edmaster.it (Elia Florio))
[USN-3-1] GhostScript utility script vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-5-1] gettext vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-7-1] imagemagick vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-8-1] gaim vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Possibly a stupid question RPC over HTTP (KKadow at gmail.com (Kevin))
[SPAM] Re: xpire.info & splitinfinity.info - exploits in the wild (hvdkooij at vanderkooij.org (Hugo van der Kooij))
xpire.info & splitinfinity.info - exploits in the wild (eflorio at edmaster.it (Elia Florio))
[FLSA-2004:2089] Updated mozilla packages fix security vulnerabilities (dom at earth.li (Dominic Hargreaves))
[ GLSA 200410-27 ] mpg123: Buffer overflow vulnerabilities (klieber at gentoo.org (Kurt Lieber))
KDE 3.2.2 (sarge) Konqueror suffers XSS vuln. (yanosz at gmx.net (Yanosz))
Re: KDE 3.2.2 (sarge) Konqueror suffers XSS vuln. (yanosz at gmx.net (Yanosz))
Re: Bug#278518: KDE 3.2.2 (sarge) Konqueror suffers XSS vuln. (asp16 at alu.ua.es (Adeodato Simó))
[ GLSA 200410-28 ] rssh: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
Re: Bug#278518: KDE 3.2.2 (sarge) Konqueror suffers XSS vuln. (yanosz at gmx.net (Yanosz))
iDEFENSE Security Advisory 10.27.04: PuTTY SSH2_MSG_DEBUG Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
Crashs in Master of Orion III 1.2.5 (aluigi at autistici.org (Luigi Auriemma))
[SPAM] Re: xpire.info & splitinfinity.info - exploits in the wild (hvdkooij at vanderkooij.org (Hugo van der Kooij))
EEYE: RealPlayer Zipped Skin File Buffer Overflow (mmaiffret at eeye.com (Marc Maiffret))
[ GLSA 200410-29 ] PuTTY: Pre-authentication buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[USN-8-1] gaim vulnerabilities (martin.pitt at canonical.com (Martin Pitt))

October 28 (26 messages)

Death Notice: Matt Heckaman (measl at mfn.org (J.A. Terranson))
[SECURITY] [DSA 574-1] New cabextract packages fix unintended directory traversal (debian-security-announce at lists.debian.org (debian-security-announce@...ts.…)
[ GLSA 200410-30 ] GPdf, KPDF, KOffice: Vulnerabilities in included xpdf (koon at gentoo.org (Thierry Carrez))
Re: Death Notice: Matt Heckaman (kline at tao.thought.org (Gary Kline))
[USN-4-1] Standard C library script vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-9-1] tetex-bin vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Presentation: Bypassing client application protection techniques with notepad (3APA3A at SECURITY.NNOV.RU (3APA3A))
Re: getting administrator rights on win2003 machine? (hoebel at gmail.com (Valentin Höbel))
Re: getting administrator rights on win2003 machine? (rik.bobbaers at cc.kuleuven.ac.be (Harry de Grote))
Re: getting administrator rights on win2003 machine? (randomisedletters at hotmail.com (Random Letters))
Re: getting administrator rights on win2003 machine? (andrewp at IRW.co.uk (Andrew Poodle))
Hackers of [xpire.info] use an unknown Apache 1.3.27 exploit??? (eflorio at edmaster.it (Elia Florio))
Re: getting administrator rights on win2003 machine? (janus at volny.cz (Honza Vlach))
Re: getting administrator rights on win2003 machine? (michel at mitch-it.com (Michel van der Klei))
Re: getting administrator rights on win2003 machine? (epic at roothack.org (Robert Allinson))
Re: getting administrator rights on win2003 machine? (kf_lists at secnetops.com (KF_lists))
Re: getting administrator rights on win2003 machine? (rik.bobbaers at cc.kuleuven.ac.be (Harry de Grote))
PuTTY IPv6 0.56 also updated (jeroen at unfix.org (Jeroen Massar))
Re: getting administrator rights on win2003 machine? (toddtowles at brookshires.com (Todd Towles))
Re: getting administrator rights on win2003 machine? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: getting administrator rights on win2003 machine? (niceman at att.net (Mike Nice))
[SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian…)
Re: getting administrator rights on win2003 machine? (kenneth.d.ng at gmail.com (Kenneth Ng))
Re: getting administrator rights on win2003 machine? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: getting administrator rights on win2003 machine? (elcamino74ss at gmail.com (darren windham))
Re: getting administrator rights on win2003 machine? (hades at psilanthropy.org (Anders Langworthy))

October 29 (58 messages)

Heh...30 minutes of SSH login attempts...not the standard root an d user attempts either (jlay at ameriben.com (James Lay))
[SECURITY] [DSA 576-1] New Squid packages fix several vulnerabilities (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
why o why did NASA do this. (uberguidoz at gmail.com (GuidoZ))
Re: Re: getting administrator rights on win2003 machine? (nikon at xillioncomputers.com (Nick Eoannidis))
Re: Thank you! (nick at virus-l.demon.co.uk (Nick))
Joke.cpl ??? (patrykgod at wp.pl (altmann))
Beagle.AT spreading - the end is nigh! (etomcat at freemail.hu (Feher Tamas))
Joke.cpl ??? (dab at heise.de (Daniel Bachfeld))
[SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.or…)
Joke.cpl ??? (mnovitchi at bitdefender.com (Mihai Novitchi))
Joke.cpl ??? (dab at heise.de (Daniel Bachfeld))
Joke.cpl ??? (sec-alert at gmx.net (Tom Meier))
Hackers of [xpire.info] use an unknown Apache 1.3.27 exploit??? (eflorio at edmaster.it (Elia Florio))
Slightly off-topic: www.georgewbush.com (skylined at edup.tudelft.nl (Berend-Jan Wever))
Joke.cpl ??? (raymond at prolocation.net (Raymond Dijkxhoorn))
Joke.cpl ??? (papp_geza1 at axelero.hu (Geza Papp dr (Axelero)))
Slightly off-topic: www.georgewbush.com (stefmit at gmail.com (Stef))
Slightly off-topic: www.georgewbush.com (andrewp at IRW.co.uk (Andrew Poodle))
Fw: Joke.cpl ??? (dab at heise.de (Daniel Bachfeld))
[USN-11-1] libgd2 vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Versandbest�tigung : AW : [SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability (kraatz at becker-international.com (dirk))
[USN-12-1] ppp Denial of Service (martin.pitt at canonical.com (Martin Pitt))
Slightly off-topic: www.georgewbush.com (dhill+fulldisc at cricalix.net (Duncan Hill))
Hackers of [xpire.info] use an unknown Apache 1.3.27 exploit??? (thierry.haven at xmcopartners.com (Thierry Haven))
Re: Hello (david.vincent at mightyoaks.com (David.vincent))
[SPAM] Fw: Joke.cpl ??? (hvdkooij at vanderkooij.org (Hugo van der Kooij))
Fw: Joke.cpl ??? (eduard.warkentin at ldc.de (Eduard Warkentin))
[ GLSA 200410-31 ] Archive::Zip: Virus detection evasion (koon at gentoo.org (Thierry Carrez))
Counteroffensive help on bruteforce attacks on SSHD (andrewp at IRW.co.uk (Andrew Poodle))
Versandbest�tigung : AW : Re: [SPAM] Fw: Joke.cpl ??? (kraatz at becker-international.com (dirk))
Slightly off-topic: www.georgewbush.com (toddtowles at brookshires.com (Todd Towles))
Fw: Joke.cpl ??? (dave at horsfall.org (Dave Horsfall))
[moderator!] Re: Versandbestдtigung : AW : Re: [SPAM] Fw: Joke.cpl ??? (y_avenger_y at ua.fm (Alex V. Lukyanenko))
[SPAM] Fw: Joke.cpl ??? (toddtowles at brookshires.com (Todd Towles))
Re: getting administrator rights on win2003 machine? (TheGesus at gmail.com (TheGesus))
Slightly off-topic: www.georgewbush.com (andrewp at IRW.co.uk (Andrew Poodle))
Slightly off-topic: www.georgewbush.com (bkfsec at sdf.lonestar.org (Barry Fitzgerald))
[OpenPKG-SA-2004.046] OpenPKG Security Advisory (postgresql) (openpkg at openpkg.org (OpenPKG))
[OpenPKG-SA-2004.047] OpenPKG Security Advisory (apache) (openpkg at openpkg.org (OpenPKG))
[OpenPKG-SA-2004.048] OpenPKG Security Advisory (squid) (openpkg at openpkg.org (OpenPKG))
Re: getting administrator rights on win2003 machine? (dufresne at winternet.com (Ron DuFresne))
Counteroffensive help on bruteforce attacks on SSHD (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Hi (mattmurphy at kc.rr.com (Mattmurphy))
Apache 1.3.33 local buffer overflow in apache 1.3.31 not fixed in .33? (lwc at vapid.dhs.org (Larry Cashdollar))
[moderator!] Re: Versandbest�tigung : AW : Re: [SPAM] Fw: Joke.cpl ??? (johnc at grok.org.uk (John Cartwright))
local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33? (lwc at vapid.ath.cx (Larry Cashdollar))
Code-Crafters Ability FTPd v2.34 - New Exploit Attached (david-jungerson at web.de (David Jungerson))
UncleChunky's guide to going legit and getting paid (chunky at lhqi.com (chunky@...i.com))
UNSUBSCRIBE (bypass at secured.org (ByPasS))
Fwd: Re: RE: Slightly off-topic: www.georgewbush.com (ruiper at shaw.ca (RUI PEREIRA))
Re: [moderator!] Re: Versandbestдtigung : AW : Re: [SPAM] Fw: Joke.cpl ??? (uberguidoz at gmail.com (GuidoZ))
Who Wrote Sobig? (author_travis at yahoo.com (Author Travis))
Re: GWB.COM - Wassupwitdat? (ericscher at mac.com (Eric Scher))
Gmail Accounts Vulnerable to XSS Exploit (toddtowles at brookshires.com (Todd Towles))
Who wrote Sobig? (author_travis at hotmail.com (Author Travis))
Who Wrote Sobig? (author_travis at yahoo.com (Author Travis))
Heh...30 minutes of SSH login attempts...not the standard root an d user attempts either (Dragos.S.Pamparau at rdsnet.ro (Dragos Stefan Pamparau))
UNSUBSCRIBE (uberguidoz at gmail.com (GuidoZ))

October 30 (17 messages)

Re: GWB.COM - Wassupwitdat? (support at sleepdeprived.ca (David Vincent))
Slightly off-topic: www.georgewbush.com (measl at mfn.org (J.A. Terranson))
Slightly off-topic: www.georgewbush.com (patryn at schimmetje.com (patryn))
Hello (lsawyer at gci.com (lsawyer@....com))
Re: Thanks :) (mattmurphy at kc.rr.com (Mattmurphy))
Slashdot: Gmail Accounts Vulnerable to XSS Exploit (xslf at xslf.com (Shoshannah Forbes))
Slashdot: Gmail Accounts Vulnerable to XSS Exploit (xploitable at gmail.com (n3td3v))
Slightly off-topic: www.georgewbush.com (xploitable at gmail.com (n3td3v))
[OpenPKG-SA-2004.049] OpenPKG Security Advisory (gd) (openpkg at openpkg.org (OpenPKG))
[OpenPKG-SA-2004.045] OpenPKG Security Advisory (mysql) (openpkg at openpkg.org (OpenPKG))
Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33? (lwc at vapid.ath.cx (Larry Cashdollar))
bogofilter-SA-2004-01: RFC 2047 Denial-of-service in 0.17.4 <= bogofilter <= 0.92.7 (matthias.andree at gmx.de (Matthias Andree))
Slightly off-topic: www.georgewbush.com (xploitable at gmail.com (n3td3v))
Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33? (nd at perlig.de (André Malo))
Slightly off-topic: www.georgewbush.com (kedves at attglobal.net (Jean-Marie Monnier))
Slightly off-topic: www.georgewbush.com (xploitable at gmail.com (n3td3v))
Slightly off-topic: www.georgewbush.com (xploitable at gmail.com (n3td3v))

October 31 (29 messages)

Slashdot: Gmail Accounts Vulnerable to XSS Exploit (enune at fribble.net (Calum Power))
Slightly off-topic: www.georgewbush.com (uberguidoz at gmail.com (GuidoZ))
Slightly off-topic: www.georgewbush.com (pauls at utdallas.edu (Paul Schmehl))
Slashdot: Gmail Accounts Vulnerable to XSS Exploit (se_cur_ity at hotmail.com (morning_wood))
Re: I will be awaiting your immediate response. (xploitable at gmail.com (n3td3v))
Slightly off-topic: www.georgewbush.com (se_cur_ity at hotmail.com (morning_wood))
Slashdot: Gmail Accounts Vulnerable to XSS Exploit (enune at fribble.net (Calum Power))
Slashdot: Gmail Accounts Vulnerable to XSS Exploit (se_cur_ity at hotmail.com (morning_wood))
Re: I will be awaiting your immediate response. (xploitable at gmail.com (n3td3v))
Slightly off-topic: www.georgewbush.com (security at brvenik.com (Jason))
Slashdot: Gmail Accounts Vulnerable to XSS Exploit (xploitable at gmail.com (n3td3v))
Re: I will be awaiting your immediate response. (xploitable at gmail.com (n3td3v))
Elect Homer Simpson (james.bliss at comcast.net (James Bliss))
Re: I will be awaiting your immediate response. (uberguidoz at gmail.com (GuidoZ))
Slashdot: Gmail Accounts Vulnerable to XSS Exploit (jruderma at cs.hmc.edu (Jesse Ruderman))
Slashdot: Gmail Accounts Vulnerable to XSS Exploit (nekramer at mindtheater.net (Nancy Kramer))
[SPAM] Re: Re: I will be awaiting your immediate response. (hvdkooij at vanderkooij.org (Hugo van der Kooij))
Slightly off-topic: www.georgewbush.com (yossarian at planet.nl (yossarian))
Slashdot: Gmail Accounts Vulnerable to XSS Exploit (xploitable at gmail.com (n3td3v))
Re: I will be awaiting your immediate response. (xploitable at gmail.com (n3td3v))
Slightly off-topic: www.georgewbush.com (OGoencz at ghi.com (Goencz, Otto))
[OpenPKG-SA-2004.050] OpenPKG Security Advisory (libxml) (openpkg at openpkg.org (OpenPKG))
Update: Web browsers - a mini-farce (MSIE gives in) (guninski at guninski.com (Georgi Guninski))
[SPAM] Re: Re: I will be awaiting your immediate response. (uberguidoz at gmail.com (GuidoZ))
Re: I will be awaiting your immediate response. (uberguidoz at gmail.com (GuidoZ))
Spam sent via spambots? (nick at virus-l.demon.co.uk (Nick FitzGerald))
Rigged Electronic Voting Machines (jei at cc.hut.fi (Jei))
Spam sent via spambots? (xploitable at gmail.com (n3td3v))
The Tel Aviv University Security Forum - meeting #5 -14/11/04 (ge at linuxbox.org (Gadi Evron))

1186 messages