full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2004/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 41	² 54	³ 21	⁴ 21	⁵ 17
⁶ 35	⁷ 43	⁸ 2	⁹ 2	¹⁰	¹¹	¹² 3
¹³ 42	¹⁴ 41	¹⁵ 35	¹⁶ 21	¹⁷ 25	¹⁸ 5	¹⁹ 11
²⁰ 27	²¹ 41	²² 50	²³ 36	²⁴ 36	²⁵ 32	²⁶ 31
²⁷ 20	²⁸ 33	²⁹ 21	³⁰ 45	³¹ 27

Messages by day:

December 1 (41 messages)

Network Sniffing (dk at pwarchitects.com (dk))
Network Sniffing (se_cur_ity at hotmail.com (morning_wood))
Network Sniffing (stefmit at gmail.com (Stef))
Network Sniffing (info-machine at magi.net.au (Unknown))
Hidden message (als at thangorodrim.de (Als))
Forum notify (security at brvenik.com (Security))
Re: Incoming Message (RawData at netcabo.pt (RawData))
amazon security contact (mikx at mikx.de (mikx))
this is fun? (brandysimon at gmail.com (Brandy Simon))
Network Sniffing (xtrecate at spymac.com (xtrecate))
MS Windows Screensaver Privilege Escalation (andrewinternational at gmail.com (Andrew Kennedy))
Remote Mercury32 Imap exploit (barbsie at gmail.com (barabas mutsonline))
SUSE Security Announcement: various kernel problems (SUSE-SA:2004:042) (meissner at suse.de (Marcus Meissner))
[USN-36-1] NFS statd vulnerability (martin.pitt at canonical.com (Martin Pitt))
amazon security contact (joshua.knarr at sap.com (Knarr, Joshua))
amazon security contact (mevanchik at relationship1.com (Michael Evanchik))
amazon security contact (constantin.hofstetter at gmail.com (Constantin Hofstetter))
[SECURITY] [DSA 603-1] New openssl packages fix insecure temporary file creation (debian-security-announce at lists.debian.org (debian-security-announce@...ts.d…)
amazon security contact (joe at joesmith.homeip.net (joe smith))
Remote Mercury32 Imap exploit (jxt.lists at gmail.com (JxT))
[Fwd: RE: Remote Mercury32 Imap exploit] (ml at portsonline.net (ports))
FW: Shadowcrew Grand Jury Indictment (andy at romnet.com (Andrew Silva))
Web Application DoS (goetzvonberlichingen at comcast.net (Goetz Von Berlichingen))
amazon security contact (hades at psilanthropy.org (Anders Langworthy))
Lycos Europe organizing a DDoS attack against spammers (kkadow at gmail.com (Kevin))
RE: Isecom.org ideahamster.org and the hackerhighschool.org (hun at hushmail.com (Hans Ulrich Niedermann))
Lycos Europe organizing a DDoS attack against spammers (stfunub at gmail.com (Andrew Smith))
Old LS Trojan? (captkras at earthlink.net (David S. Morgan))
Fwd: Kill Lycos Not Spam (xploitable at gmail.com (n3td3v))
Web Application DoS (mlachniet at sequoianet.com (Lachniet, Mark))
Web Application DoS (kingcope at gmx.net (kcope))
Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003. (reedarvin at gmail.com (Reed Arvin))
Old LS Trojan? (kf_lists at secnetops.com (Kevin Finisterre))
Old LS Trojan? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
who is the jackass? (brandysimon at gmail.com (Brandy Simon))
MS Windows Screensaver Privilege Escalation (andfarm at teknovis.com (Andrew Farmer))
Old LS Trojan? (andfarm at teknovis.com (Andrew Farmer))
Re: Kill Lycos Not Spam (xploitable at gmail.com (n3td3v))
Remote Mercury32 Imap exploit (johnh at secnetops.com (JohnH))
who is the jackass? (krmaxwell at gmail.com (Kyle Maxwell))
Old LS Trojan? (srenna at vdbmusic.com (Scott Renna))

December 2 (54 messages)

FreeBSD Security Advisory FreeBSD-SA-04:17.procfs (security-advisories at freebsd.org (FreeBSD Security Advisories))
who is the jackass? (michael4447 at gmail.com (Michael Rutledge))
Official IFRAME patch - make sure it installs correctly (skylined at edup.tudelft.nl (Berend-Jan Wever))
Old LS Trojan? (colinm at clientsecure.net (colinm@...entsecure.net))
Fwd: How many backbones here are filtering the makelovenotspam screensaver site? (xploitable at gmail.com (n3td3v))
If Lycos can attack spammer sites, can we all start doing it? (xploitable at gmail.com (n3td3v))
Old LS Trojan? (measl at mfn.org (J.A. Terranson))
overburning edit of molded cdroms feasible? (elven_org_backup at yahoo.com (Saber Taylor))
If Lycos can attack spammer sites, can we all start doing it? (xploitable at gmail.com (n3td3v))
[inbox] Re: overturning edit of molded cdroms feasible? (exibar at thelair.com (Exibar))
If Lycos can attack spammer sites, can we all start doing it? (krispykringle at gmail.com (KrispyKringle))
Official IFRAME patch - make sure it installs correctly (kkadow at gmail.com (Kevin))
Network Sniffing (streck at papafloh.de (Florian Streck))
FW: Shadowcrew Grand Jury Indictment (vordhosbn at gmail.com (vord))
Official IFRAME patch - make sure it installs correctly (se_cur_ity at hotmail.com (morning_wood))
If Lycos can attack spammer sites, can we all start doing it? (adam at adamchallis.co.uk (Adam Challis))
Re: Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003. (lsaplai-list at telus.net (Laurent Saplairoles))
Official IFRAME patch - make sure it installs correctly (des_ward at o2.co.uk (Des Ward))
(no subject) (serg_stepanov at zeto.ru (Stepanov Serg))
If Lycos can attack spammer sites, can we all start doing it? (ansgar at thphy.uni-duesseldorf.de (Ansgar Esztermann))
Official IFRAME patch - make sure it installs correctly (lionel.ferette at belnet.be (Lionel Ferette))
If Lycos can attack spammer sites, can we all start doing it? (constantin.hofstetter at gmail.com (Constantin Hofstetter))
Network Sniffing (infsec at gmail.com (Willem Koenings))
Official IFRAME patch - make sure it installs correctly (billybobknob at hotmail.com (BillyBob))
[USN-37-1] cyrus21-imapd vulnerability (martin.pitt at canonical.com (Martin Pitt))
Official IFRAME patch - make sure it installs correctly (toddtowles at brookshires.com (Todd Towles))
If Lycos can attack spammer sites, can we all start doing it? (krmaxwell at gmail.com (Kyle Maxwell))
Official IFRAME patch - make sure it instal ls correctly (prandal at herefordshire.gov.uk (Randal, Phil))
Official IFRAME patch - make sure it installs correctly (des_ward at o2.co.uk (Des Ward))
Official IFRAME patch - make sure it installs correctly (daniel_clemens at autism.birmingham-infragard.org (daniel uriah clemens))
Cisco Security Advisory: Cisco CNS Network Registrar Denial of Service Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Official IFRAME patch - make sure it installs correctly (raoul at elforsoft.com (Raoul Nakhmanson-Kulish))
Re: Thank you! (koon at gentoo.org (Koon))
If Lycos can attack spammer sites, can we all start doing it? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
If Lycos can attack spammer sites, can we all start doing it? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: Isecom.org ideahamster.org and the hackerhighschool.org (your_momma at hushmail.com (your_momma@...hmail.com))
If Lycos can attack spammer sites, can we all start doing it? (jasonc at science.org (Jason Coombs))
If Lycos can attack spammer sites, can we all start doing it? (bkfsec at sdf.lonestar.org (bkfsec))
If Lycos can attack spammer sites, can we all start doing it? (krispykringle at gmail.com (KrispyKringle))
overburning edit of molded cdroms feasible? (chromazine at sbcglobal.net (Steve Kudlak))
Multiple vulnerabilities in Kreed 1.05 (aluigi at autistici.org (Luigi Auriemma))
Re: Full-Disclosure digest, Vol 1 #2093 - 36 msgs (rgcraig at gmail.com (Randall Craig))
If Lycos can attack spammer sites, can we all start doing it? (jftucker at gmail.com (James Tucker))
Amazon security contact (sp3ctacle at gmail.com (sp3ctacle 3))
RE: Isecom.org ideahamster.org and the hackerhighschool.org (robert at dyadsecurity.com (robert@...dsecurity.com))
Official IFRAME patch - make sure it installs correctly (nick at virus-l.demon.co.uk (Nick FitzGerald))
If Lycos can attack spammer sites, can we all start doing it? (auto184605 at hushmail.com (auto184605@...hmail.com))
Re: Full-Disclosure digest, Vol 1 #2093 - 36 msgs (krispykringle at gentoo.org (Dan Margolis))
Re: Thanks :) (irwanhadi at phxby.com (Irwanhadi))
Whitepaper Release - Anti-Virus Evasion Techniques and Countermeasures (mail at hackingspirits.com (Debasis Mohanty))
Network Sniffing (xtrecate at spymac.com (xtrecate))
Official IFRAME patch - make sure it installs correctly (skylined at edup.tudelft.nl (Berend-Jan Wever))
Official IFRAME patch - make sure it installs correctly (toddtowles at brookshires.com (Todd Towles))
Re: Full-Disclosure digest, Vol 1 #2093 - 36 msgs (daygl0 at ns.sympatico.ca (Danny))

December 3 (21 messages)

If Lycos can attack spammer sites, can we all start doing it? (measl at mfn.org (J.A. Terranson))
Re: Full-Disclosure digest, Vol 1 #2093 - 36 msgs (andfarm at teknovis.com (Andrew Farmer))
Lycos Ant-spma screensaver (onestepto at yahoo.com.au (Paul))
Securitytrap Nov Top20 List (vertex at securitytrap.com (vertex))
[SECURITY] [DSA 604-1] New hpsockd packages fix denial of service (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
If Lycos can attack spammer sites, can we all start doing it? (var at deny-all.com (Vincent Archer))
Fwd: How many backbones here are filtering the makelovenotspam screensaver site? (rootmoose at telia.com (Ake Nordin))
RE: Remote Mercury32 Imap exploit (prandal at herefordshire.gov.uk (Randal, Phil))
Re: Remote Mercury32 Imap exploit (class101 at hat-squad.com (class 101))
SUSE Security Announcement: cyrus-imapd (SUSE-SA:2004:043) (thomas at suse.de (Thomas Biege))
Gaim Festival Logoff Vulnerability <= 0.81 (1.03) (khermansen at ht-technology.com (Kristian Hermansen))
RE: Official IFRAME patch - make sure it installs correctly (drivera at iberdrola.es (Rivera Alonso, David))
Tool Announcement: AIRT -- the Advanced Incident Response Tool (linux) (madsys at ercist.iscas.ac.cn (madsys))
Network Sniffing (xtrecate at spymac.com (xtrecate))
iDEFENSE Security Advisory 12.03.2004: Apple Darwin Streaming Server DESCRIBE Null Byte Denial of Service Vulnerability (idlabs-advisories at idefense.com (idla…)
[ GLSA 200412-01 ] rssh, scponly: Unrestricted command execution (koon at gentoo.org (Thierry Carrez))
What to do with bot networks (csibley at gmail.com (Conor Sibley))
Network Sniffing (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
What to do with bot networks (pauls at utdallas.edu (Paul Schmehl))
AW: What to do with bot networks (email at robert-marquardt.com (Robert Marquardt))
I'm calling for LycosEU heads and team to resign or be sacked (xploitable at gmail.com (n3td3v))

December 4 (21 messages)

I'm calling for LycosEU heads and team to resign or be sacked (tatercrispies at gmail.com (Bob Smith))
I'm calling for LycosEU heads and team to resign or be sacked (tatercrispies at gmail.com (Bob Smith))
I'm calling for LycosEU heads and team to resign or be sacked (andfarm at teknovis.com (Andrew Farmer))
I'm calling for LycosEU heads and team to resign or be sacked (micah at style.net (Micah McNelly))
I'm calling for LycosEU heads and team to resign or be sacked (tatercrispies at gmail.com (Bob Smith))
I'm calling for LycosEU heads and team to resign or be sacked (andfarm at teknovis.com (Andrew Farmer))
[FLSA-2004:2148] Updated httpd, apache and mod_ssl packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
I'm calling for LycosEU heads and team to resign or be sacked (tatercrispies at gmail.com (Tatercrispies))
I'm calling for LycosEU heads and team to resign or be sacked (measl at mfn.org (J.A. Terranson))
I'm calling for LycosEU heads and team to resign or be sacked (xtrecate at spymac.com (xtrecate))
I'm calling for LycosEU heads and team to resign or be sacked (sharlow at UTNet.UToledo.Edu (Sean Harlow))
I'm calling for LycosEU heads and team to resign or be sacked (security at brvenik.com (Jason))
wireless sniffing question (john68945 at gmail.com (question question))
wireless sniffing question (blancher at cartel-securite.fr (Cedric Blancher))
MacOSX -FreeBSD (smenard at nbnet.nb.ca (Stephen Menard))
secret message time (0wnj00 at gmail.com (Owned You))
secret message time (ge at linuxbox.org (Gadi Evron))
MacOSX -FreeBSD (smenard at nbnet.nb.ca (Stephen Menard))
I'm calling for LycosEU heads and team to resign or be sacked (umphress at gmail.com (Chris Umphress))
MacOSX -FreeBSD (smenard at nbnet.nb.ca (Stephen Menard))
MacOSX -FreeBSD (smenard at nbnet.nb.ca (Stephen Menard))

December 5 (17 messages)

I'm calling for LycosEU heads and team to resign or be sacked (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
secret message time (measl at mfn.org (J.A. Terranson))
What to do with bot networks (dufresne at winternet.com (Ron DuFresne))
If Lycos can attack spammer sites, can we all start doing it? (mikenging at hotmail.com (Michael R. Schmidt))
I'm calling for LycosEU heads and team to resign or be sacked (devdas at dvb.homelinux.org (Devdas Bhagat))
Re: Phpbb id: 10701 update and Attachmodule add-on Directory Traversal (ntx0f at seteuid.com (ntx0f))
If Lycos can attack spammer sites, can we all start doing it? (dave at horsfall.org (Dave Horsfall))
If Lycos can attack spammer sites, can we all start doing it? (gautam.singh at gmail.com (Gautam R. Singh))
If Lycos can attack spammer sites, can we all start doing it? (gautam.singh at gmail.com (Gautam R. Singh))
If Lycos can attack spammer sites, can we all start doing it? (measl at mfn.org (J.A. Terranson))
Network Sniffing (measl at mfn.org (J.A. Terranson))
[ GLSA 200412-02 ] PDFlib: Multiple overflows in the included TIFF library (lewk at gentoo.org (Luke Macken))
If Lycos can attack spammer sites, can we all start doing it? (mikenging at hotmail.com (Michael R. Schmidt))
If Lycos can attack spammer sites, can we all start doing it? (tatercrispies at gmail.com (Tatercrispies))
Digest authentication share brute (max.moser at gmail.com (Max Moser))
Format string flaw in VMWare Workstation 4.5.2 build-8848. (billybobknob at hotmail.com (BillyBob))
If Lycos can attack spammer sites, can we all start doing it? (measl at mfn.org (J.A. Terranson))

December 6 (35 messages)

new winamp is out (support at sleepdeprived.ca (David Vincent))
Fwd: Re: If Lycos can attack spammer sites, can we all start doing it? (shunt at shunt.homeunix.net (Stephen Hunt))
I'm calling for LycosEU heads and team to resign or be sacked (var at deny-all.com (Vincent Archer))
[SECURITY] [DSA 605-1] New viewcvs packages fix information leak (debian-security-announce at lists.debian.org (debian-security-announce@...ts.debian.org))
Winamp - Buffer Overflow In IN_CDDA.dll [ Patch Released ] (brett.moore at security-assessment.com (Brett Moore))
Network Sniffing (varcher at denyall.com (Vincent Archer))
Multiple vulnerabilities in w3who ISAPI DLL (ngregoire at exaprobe.com (Nicolas Gregoire))
If Lycos can attack spammer sites, can we all start doing it? (dave.cawley at adelphia.com (Dave D. Cawley))
[Advisory] Mozilla Products Remote Crash Vulnerability (niekvdmaas at gmail.com (Niek van der Maas))
Disclosure of local file content in Mozilla Firefox and Opera (badpenguin79 at hotmail.com (Giovanni Delvecchio))
I'm calling for LycosEU heads and team to resign or be sacked (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
I'm calling for LycosEU heads and team to resign or be sacked (mevanchik at relationship1.com (Michael Evanchik))
Re: [Advisory] Mozilla Products Remote Crash Vulnerability (skylined at edup.tudelft.nl (Berend-Jan Wever))
RE: Core Wars and If Lycos can attack spammer sites, can we all start doing it? (jan.m.clairmont at citigroup.com (Clairmont, Jan M))
[ GLSA 200412-03 ] imlib: Buffer overflows in image decoding (koon at gentoo.org (Thierry Carrez))
If Lycos can attack spammer sites, can we all start doing it? (gregoire at pobox.com (Gregoire Seither))
[ exploitwatch.org ] - Website now available as a RSS feed (admin at exploitwatch.org (admin@...loitwatch.org))
I'm calling for LycosEU heads and team to resign or be sacked (py.bonnetain at ba-cst.com (Pierre-Yves Bonnetain))
makelovenotspam [dot] com (xploitable at gmail.com (n3td3v))
I'm calling for LycosEU heads and team to resign or be sacked (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
If Lycos can attack spammer sites, can we all start doing it? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Two downed CN sites allegedly attrib. to Lycos screen saver (vigilaro at gmx.net (vigilaro@....net))
Disclosure of local file content in Mozilla Firefox and Opera (ju at heisec.de (Juergen Schmidt))
I'm calling for LycosEU heads and team to resign or be sacked (tatercrispies at gmail.com (Tatercrispies))
If Lycos can attack spammer sites, can we all start doing it? (bkfsec at sdf.lonestar.org (bkfsec))
Absinthe 1.1 - Blind SQL Injection Tool Released (nummish at 0x90.org (nummish@...0.org))
[Advisory] Mozilla Products Remote Crash Vulnerability (kf_lists at secnetops.com (Kevin Finisterre))
DoS protection in N-Tiered Web Apps? (mlachniet at sequoianet.com (Lachniet, Mark))
I'm calling for LycosEU heads and team to resign or be sacked (bkfsec at sdf.lonestar.org (bkfsec))
makelovenotspam [dot] com (constantin.hofstetter at gmail.com (Constantin Hofstetter))
Lycos Ends AntiSpam Effort, Denies Downing Spam Sites (hackerwacker at cybermesa.com (james edwards))
I'm calling for LycosEU heads and team to resign or be sacked (dcdave at att.net (dcdave@....net))
Disclosure of local file content in Mozilla Firefox and Opera (thor at pivx.com (Thor Larholm))
[Advisory] Mozilla Products Remote Crash Vulnerability (heikki at osafoundation.org (Heikki Toivonen))
Disclosure of local file content in Mozilla Firefox and Opera (badpenguin79 at hotmail.com (Giovanni Delvecchio))

December 7 (43 messages)

[Advisory] Mozilla Products Remote Crash Vulnerability (perfect.material at gmail.com (PERFECT.MATERIAL))
MDKSA-2004:142 - Updated gzip packages fix temporary file vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:143 - Updated ImageMagick packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:144 - Updated lvm1 packages fix temporary file vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:145 - Updated rp-pppoe packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:146 - Updated nfs-utils packages fix remote DoS vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:147 - Updated openssl packages fix temporary file vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
A suggestion to all AV vendors... (visitbipin at yahoo.com (bipin gautam))
[ GLSA 200412-04 ] Perl: Insecure temporary file creation (lewk at gentoo.org (Luke Macken))
Lycos Ends AntiSpam Effort, Denies Downing Spam Sites (andfarm at teknovis.com (Andrew Farmer))
k-otik kiddies are really whores (u_should_work_at_mcdonalds at hotmail.com (swallow mycum))
[Advisory] Mozilla Products Remote Crash Vulnerability (ju at heisec.de (Juergen Schmidt))
help.msn.com (contact_jamie_fisher at yahoo.co.uk (jamie fisher))
I'm calling for LycosEU heads and team to resign or be sacked (robc at globalvc.co.uk (Rob Carmichael))
RE: Text message (pigrelax at yandex.ru (Pigrelax))
[ GLSA 200412-05 ] mirrorselect: Insecure temporary file creation (lewk at gentoo.org (Luke Macken))
Bypass personal firewall application protection . Again. (offtopic at mail.ru (offtopic))
A suggestion to all AV vendors... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Bypass personal firewall application protection . Again. (azlate at bitdefender.com (Andrei Zlate-Podani))
Online Script Decoder (security at greymagic.com (GreyMagic Security))
A suggestion to all AV vendors... (iago at valhallalegends.com (Ron))
[Advisory] Mozilla Products Remote Crash Vulnerability (heikki at osafoundation.org (Heikki Toivonen))
A suggestion to all AV vendors... (colinm at clientsecure.net (colinm@...entsecure.net))
A suggestion to all AV vendors... (kenneth.d.ng at gmail.com (Kenneth Ng))
A suggestion to all AV vendors... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
I'm calling for LycosEU heads and team to resign or be sacked (dk at pwarchitects.com (dk))
Lycos Ends AntiSpam Effort, Denies Downing Spam Sites (xploitable at gmail.com (n3td3v))
A suggestion to all AV vendors... (mlande at bellsouth.net (Mary Landesman))
MaxDB WebTools <= 7.5.00.18 buffer overflow and Denial of Service (demidov at gleg.net (Evgeny Demidov))
A suggestion to all AV vendors... (iago at valhallalegends.com (Ron))
A suggestion to all AV vendors... (kenneth.d.ng at gmail.com (Kenneth Ng))
Re: Online Script Decoder (psz at maths.usyd.edu.au (Paul Szabo))
VA Appliance Deployment White Paper (dotsecure at gmail.com (Martin Mkrtchian))
A suggestion to all AV vendors... (toddtowles at brookshires.com (Todd Towles))
GPRS/IP-session from Nokia/Symbian mobile phone stays up (mdavids at forfun.net (Marco Davids (Prive)))
Online Script Decoder (eflorio at edmaster.it (Elia Florio))
Contact BankOne.com ? (stfunub at gmail.com (Andrew Smith))
Contact BankOne.com ? (0wnj00 at gmail.com (Owned You))
Whois appears to have taken a hit (ggilliss at netpublishing.com (Gregory Gilliss))
Contact BankOne.com ? (dotsecure at gmail.com (Martin Mkrtchian))
Whois appears to have taken a hit (ggilliss at netpublishing.com (Gregory Gilliss))
GPRS/IP-session from Nokia/Symbian mobile phone stays up (bill at tamu.edu (William Reading))
GPRS/IP-session from Nokia/Symbian mobile phone stays up (bill at tamu.edu (William Reading))

December 8 (2 messages)

Address Bar Spoophing for the Pheeshies: IntotheNet Explorer 6 (1 at malware.com (http-equiv@...ite.com ))
A suggestion to all AV vendors... (smenard at nbnet.nb.ca (Stephen Menard))

December 9 (2 messages)

KDE Security Advisory: plain text password exposure (mueller at kde.org (Dirk Mueller))
KDE Security Advisory: kfax libtiff vulnerabilities (mueller at kde.org (Dirk Mueller))

December 12 (3 messages)

A suggestion to all AV vendors... (fw at deneb.enyo.de (Florian Weimer))
Administrivia: Hardware Failure (johnc at grok.org.uk (John Cartwright))
MS IE User's Authentication Details (userid/password) Sharing Issue (mail at hackingspirits.com (Debasis Mohanty))

December 13 (42 messages)

List Charter (johnc at grok.org.uk (John Cartwright))
NetWare Screensaver Authentication Bypass From The Local Console (agray at novacoast.com (Adam Gray))
GPRS/IP-session from Nokia/Symbian mobile phone stays up (mdavids at forfun.net (Marco Davids (Prive)))
Multiple XSS Vulnerabilities in several UBB.Thread Versions (girl at catholic.org (gp))
Re: Online Script Decoder (etomcat at freemail.hu (Feher Tamas))
GPRS/IP-session from Nokia/Symbian mobile phone stays up (contact_jamie_fisher at yahoo.co.uk (jamie fisher))
Re: Online Script Decoder (infsec at gmail.com (Willem Koenings))
SugarSales Multiple Vulnerabilities (research at sec-consult.com (Daniel Fabian))
TCP Port 42 port scans? What the heck over... (jlay at ameriben.com (James Lay))
[TURBOLINUX SECURITY INFO] 13/Dec/2004 (security-announce at turbolinux.co.jp (Turbolinux))
Multiple vulnerabilities in phpMyAdmin (ngregoire at exaprobe.com (Nicolas Gregoire))
GPRS/IP-session from Nokia/Symbian mobile phone stays up (nanog at email.fries.net (Todd T. Fries))
GPRS/IP-session from Nokia/Symbian mobilephonestays up (juliao.duartenn at oblog.pt (Juliao Duartenn (Oblog-Direccao)))
GPRS/IP-session from Nokia/Symbian mobile phone stays up (gautam.singh at gmail.com (Gautam R. Singh))
Gadu-Gadu several vulnerabilities (sloik at man.poznan.pl (Jaroslaw Sajko))
no full-disclosure for FULL-Disclosure down ?8-( (jan.m.clairmont at citigroup.com (Clairmont, Jan M))
TCP Port 42 port scans? What the heck over... (dave at immunitysec.com (Dave Aitel))
[HV-LOW] Symantec LiveUpdate issues may cause DoS (vuln at hexview.com (vuln@...view.com))
Advisory 14/2004: Linux 2.x smbfs multiple remote vulnerabilities (s.esser at e-matters.de (Stefan Esser))
[HV-MED] Zip/Linux long path buffer overflow (vuln at hexview.com (vuln@...view.com))
Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities (s.esser at e-matters.de (Stefan Esser))
[johnc@...k.org.uk: Administrivia: Hardware Failure] (johnc at grok.org.uk (John Cartwright))
TCP Port 42 port scans? What the heck over... (dkillion at charter.net (Dave Killion))
TCP Port 42 port scans? What the heck over... (Patrick.Dolan at phns.com (Dolan, Patrick))
Socket unreacheable in the Lithtech engine (new protocol) (aluigi at autistici.org (Luigi Auriemma))
TCP Port 42 port scans? What the heck over... (iago at valhallalegends.com (Ron))
TCP Port 42 port scans? What the heck over... (danielf at supportteam.net (Daniel F. Chief Security Engineer -))
HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[ZH2004-19SA]Possible execution of remote shell commands in Opera with kfmclient (badpenguin79 at hotmail.com (Giovanni Delvecchio))
iDEFENSE Security Advisory 12.13.04: Multiple Vendor xzgv PRF Parsing Integer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...f…)
HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! (srenna at vdbmusic.com (Scott Renna))
TCP Port 42 port scans? What the heck over... (mducharme at cybergeneration.com (Maxime Ducharme))
Winamp 5.07 (latest version) Remote Crash + other stupid shizle (b0fnet at yahoo.com (b0f))
TCP Port 42 port scans? What the heck over... (ostiguy at gmail.com (Matt Ostiguy))
TCP Port 42 port scans? What the heck over... (0wnj00 at gmail.com (Owned You))
HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! (pwicks at oxygen.com (James Patterson Wicks))
TCP Port 42 port scans? What the heck over... (fw at deneb.enyo.de (Florian Weimer))
GPRS/IP-session from Nokia/Symbian mobilephonestays up (contact_jamie_fisher at yahoo.co.uk (jamie fisher))
Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory (advisory at secnetops.com (Secure Network Operations, Inc.))
HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! (joe at joesmith.homeip.net (joe smith))
TCP Port 42 port scans? What the heck over ... (StuartF at datacom.co.nz (Stuart Fox (DSL AK)))
[ GLSA 200412-07 ] file: Arbitrary code execution (vorlon at gentoo.org (Matthias Geerdsen))

December 14 (41 messages)

MDKSA-2004:148 - Updated iproute2 packages fix temporary file vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:149 - Updated postgresql packages fix temporary file vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: Full-Disclosure Digest, Vol 1, Issue 2103 (bpinkerton at geospectrum.com (Bryan Pinkerton))
TCP Port 42 port scans? What the heck over... (scheidell at secnap.net (Michael Scheidell))
[HV-LOW] Symantec LiveUpdate issues may cause DoS (krispykringle at gentoo.org (Dan Margolis))
STG Security Advisory: [SSA-20041209-13] UseModWiki XSS vulnerability (advisory at stgsecurity.com (SSR Team))
[ GLSA 200412-08 ] nfs-utils: Multiple remote vulnerabilities (lewk at gentoo.org (Luke Macken))
Re: Full-Disclosure Digest, Vol 1, Issue 2104 (bpinkerton at geospectrum.com (Bryan Pinkerton))
RE: Cipher Tool (mikoc02 at yahoo.com (richard capistrano))
Merry Christmas worm (Zafi.D) is spreading now. Beware! (etomcat at freemail.hu (Feher Tamas))
(no subject) (levent_ozcan at hotpop.com (Levent))
Linux kernel IGMP vulnerabilities (ihaquer at isec.pl (Paul Starzetz))
Linux kernel scm_send local DoS (ihaquer at isec.pl (Paul Starzetz))
New changes (pigrelax at yandex.ru (Pigrelax))
HOW TO BREAK XP SP2 POPUP BLOCKER: kick itin the nut ! (fulld.20.mandoskippy at spamgourmet.com (John Omernik))
phpBB Attachment Mod Directory Traversal HTTP POST Injection (zx at castlecops.com (Paul Laudanski))
TCP Port 42 port scans? What the heck over... (mducharme at cybergeneration.com (Maxime Ducharme))
iDEFENSE Security Advisory 12.14.04: Adobe Acrobat Reader 5.0.9 mailListIsPdf() Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-adviso…)
[Correction For]: Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory (advisory at secnetops.com (Secure Network…)
Re: Linux kernel IGMP vulnerabilities (pekkas at netcore.fi (Pekka Savola))
RE: Linux kernel scm_send local DoS (lsawyer at gci.com (Leif Sawyer))
TCP Port 42 port scans? What the heck over... (niek at packetstorm.nu (Niek))
TCP Port 42 port scans? What the heck over... (kf_lists at secnetops.com (Kevin Finisterre))
To anybody who's offended by my disclosure policy-GET THIS GUYS (uberguidoz at gmail.com (GuidoZ))
HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! (jftucker at gmail.com (James Tucker))
TCP Port 42 port scans? What the heck over... (wastedimage at gmail.com (wastedimage))
HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! (dufresne at winternet.com (Ron DuFresne))
RE: NetWare Screensaver Authentication Bypass From The Local Console (agray at novacoast.com (Adam Gray))
Re: Full-Disclosure Digest, Vol 1, Issue 2105 (bpinkerton at geospectrum.com (Bryan Pinkerton))
Security breach database (n30_lists at hotmail.com (n30))
HyperTerminal - Buffer Overflow In .ht File (brett.moore at security-assessment.com (Brett Moore))
Re: NetWare Screensaver Authentication Bypass From The Local Console (brad at selu.edu (Brad Bendily))
RE: NetWare Screensaver Authentication Bypass From The Local Console (geoff at cadzow.com.au (Geoff Vass))
iDEFENSE Security Advisory 12.14.04: Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisori…)
iDEFENSE Security Advisory 12.13.04: Adobe Reader 6.0 .ETD File Format String Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
Hotmail Cross-Site Scripting Vulnerability #1 (rivgi at finjan.com (Rafel Ivgi, The-Insider))
Yahoo! Mail Cross-Site Scripting Vulnerability (rivgi at finjan.com (Rafel Ivgi, The-Insider))
Hotmail Cross-Site Scripting Vulnerability #2 (rivgi at finjan.com (Rafel Ivgi, The-Insider))
RE: Linux kernel scm_send local DoS (ihaquer at isec.pl (Paul Starzetz))
[USN-38-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Re: NetWare Screensaver Authentication Bypass From The Local Console (RMcLaren at vcss.k12.ca.us (Roger McLaren))

December 15 (35 messages)

OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS Vulnerability (dilabox at gmail.com (dila))
Re: Linux kernel scm_send local DoS (Shadow333 at gmx.at (even multiplexed))
GPRS/IP-session from Nokia/Symbian mobilephonestays up (jftucker at gmail.com (James Tucker))
TCP Port 42 port scans? What the heck over... (StuartF at datacom.co.nz (Stuart Fox (DSL AK)))
[ GLSA 200412-09 ] ncpfs: Buffer overflow in ncplogin and ncpmap (koon at gentoo.org (Thierry Carrez))
header intact. (meteor at feelids.com (Meteor))
RE: Cipher Tool (lohan.spies at IFS-SA.co.za (Lohan Spies))
Re: Linux kernel IGMP vulnerabilities (stephen.butler at gmail.com (stephen joseph butler))
*nix data wipe tools (thomas.greene at theregister.co.uk (Thomas C. Greene))
STG Security Advisory: [SSA-20041214-14] GNUBoard PHP injection vulnerability (advisory at stgsecurity.com (SSR Team))
STG Security Advisory: [SSA-20041215-15] Vulnerability of uploading files with multiple extensions in MoniWiki (advisory at stgsecurity.com (SSR Team))
[ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines (koon at gentoo.org (Thierry Carrez))
TCP Port 42 port scans? What the heck over... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
TCP Port 42 port scans? What the heck over... (ostiguy at gmail.com (Matt Ostiguy))
TCP Port 42 port scans? What the heck over... (mducharme at cybergeneration.com (Maxime Ducharme))
Re: Linux kernel scm_send local DoS (Shadow333 at gmx.at (even multiplexed))
iDEFENSE Security Advisory 12.15.04: Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability (idlabs-advisories at idefense.com (idlabs…)
Re: Linux kernel scm_send local DoS (ihaquer at isec.pl (Paul Starzetz))
Re: Linux kernel IGMP vulnerabilities (ihaquer at isec.pl (Paul Starzetz))
TCP Port 42 port scans? What the heck over... (joel.esler at rcert-s.army.mil (Esler, Joel - Contractor))
fun with linux kernel (guninski at guninski.com (Georgi Guninski))
Cisco Security Advisory: Cisco Unity Integrated with Exchange Has Default Passwords (psirt at cisco.com (Cisco Systems Product Security Incident Response Team…)
TCP Port 42 port scans? What the heck over... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: Cipher Tool (dufresne at winternet.com (Ron DuFresne))
Cisco Security Advisory: Default Administrative Password in Cisco Guard and Traffic Anomaly Detector (psirt at cisco.com (Cisco Systems Product Security Incide…)
Re: Linux kernel scm_send local DoS (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
php unserialize (m.eiszner at sec-consult.com (Martin Eiszner))
Merry Christmas worm (Zafi.D) is spreading now. Beware! (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
MDKSA-2004:150 - Updated kdelibs and kdebase packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
[ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines (koon at gentoo.org (Thierry Carrez))
[ GLSA 200412-09 ] ncpfs: Buffer overflow in ncplogin and ncpmap (koon at gentoo.org (Thierry Carrez))
Re: Linux kernel scm_send local DoS (Shadow333 at gmx.at (even multiplexed))
Re: Linux kernel IGMP vulnerabilities (admin at TELE2WIN.NET (Timothy Hall))
Advisory 01/2004: Multiple vulnerabilities in PHP 4/5 (sesser at php.net (Stefan Esser))
[VulnDiscuss] Re: Linux kernel scm_send local DoS (Shadow333 at gmx.at (even multiplexed))

December 16 (21 messages)

Advisory 01/2004: Multiple Vulnerabilities in PHP 4/5 (s.esser at e-matters.de (Stefan Esser))
[ZH2004-18SA]Firefox/Opera-bypass of security restrcition by Content-Type spoofi (badpenguin79 at hotmail.com (Giovanni Delvecchio))
STG Security Advisory: [SSA-20041215-17] Vulnerability of uploading files with multiple extensions in JSBoard (advisory at stgsecurity.com (SSR Team))
STG Security Advisory: [SSA-20041215-18] Vulnerability of uploading files with multiple extensions in phpBB Attachment … (advisory at stgsecurity.com (SSR Team))
RE: Cipher Tool (jftucker at gmail.com (James Tucker))
HOW TO BREAK XP SP2 POPUP BLOCKER: kick itin the nut ! (jftucker at gmail.com (James Tucker))
PHP Input Validation Vulnerabilities (research at sec-consult.com (Daniel Fabian))
[MaxPatrol] SQL-injection in Ikonboard 3.1.x (aanisimov at ptsecurity.ru (aanisimov@...ecurity.ru))
[USN-40-1] PHP vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
To anybody who's offended by my disclosure policy-GET THIS GUYS (devis at easynix.net (devis))
TCP Port 42 port scans? What the heck over... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
iDEFENSE Security Advisory 12.16.04: MPlayer MMST Streaming Stack Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
iDEFENSE Security Advisory 12.16.04: MPlayer Bitmap Parsing Remote Heap Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.c…)
iDEFENSE Security Advisory 12.16.04: Veritas Backup Exec Agent Browser Registration Request Buffer Overflow Vulnerabil… (idlabs-advisories at idefense.com (idla…)
[USN-39-1] Linux amd64 kernel vulnerability (martin.pitt at canonical.com (Martin Pitt))
[ GLSA 200412-12 ] Adobe Acrobat Reader: Buffer overflow vulnerability (lewk at gentoo.org (Luke Macken))
[ GLSA 200412-11 ] Cscope: Insecure creation of temporary files (lewk at gentoo.org (Luke Macken))
[OpenPKG-SA-2004.053] OpenPKG Security Advisory (php) (openpkg at openpkg.org (OpenPKG))
Fwd: TCP Port 42 port scans? What the heck over... (wastedimage at gmail.com (wastedimage))
iDEFENSE Security Advisory 12.16.04: Samba smbd Security Descriptor Integer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fen…)
iDEFENSE Security Advisory 12.16.04: MPlayer Remote RTSP Heap Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))

December 17 (25 messages)

KIT.GED (raoul at elforsoft.com (Raoul Nakhmanson-Kulish))
Gadu-Gadu, another two bugs (sloik at man.poznan.pl (Jaroslaw Sajko))
To anybody who's offended by my disclosure policy-GET THIS GUYS (jftucker at gmail.com (James Tucker))
Re: zone transfers, a spammer's dream? (troubles___ at hotmail.com (Troubles Troubles))
[USN-41-1] Samba vulnerability (martin.pitt at canonical.com (Martin Pitt))
Security breach database (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: zone transfers, a spammer's dream? (troubles___ at hotmail.com (Troubles Troubles))
RE: NetWare Screensaver Authentication Bypass From The Local Console (jftucker at gmail.com (James Tucker))
(Fwd) how to filter the xmas virus (stuart at cyberdelix.net (lsi))
[OpenPKG-SA-2004.056] OpenPKG Security Advisory (cvstrac) (openpkg at openpkg.org (OpenPKG))
*nix data wipe tools (ggilliss at netpublishing.com (Gregory Gilliss))
[ GLSA 200412-13 ] Samba: Integer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Re: Linux kernel scm_send local DoS (xbud at g0thead.com (xbud))
Script Injection in Google Groups Beta (xploitable at gmail.com (n3td3v))
KIT.GED (thalm at void.my-bulldog.com (Tiago Halm))
Script Injection in Google Groups Beta (xploitable at gmail.com (n3td3v))
Unchecked returns from kernel_read() in linux-2.6.10-rc2 kernel (ytsipenyuk at fortifysoftware.com (Katrina Tsipenyuk))
NetBSD Security Advisory 2004-010: Insufficient argument validation in compat code (security-officer at netbsd.org (NetBSD Security-Officer))
eDonkey Hub version 16.50 vunerability? (dguido at gmail.com (Daniel Guido))
TCP Port 42 port scans? (dsbryhan at chartermi.net (Scot Bryhan))
NetBSD kernel local vulnerabilities (demidov at gleg.net (Evgeny Demidov))
Re: Script Injection in Google Groups Beta (xploitable at gmail.com (n3td3v))
Re: Script Injection in Google Groups Beta (xploitable at gmail.com (n3td3v))
Security breach database (barrie at reboot-robot.net (Barrie Dempster))
HyperTerminal - Buffer Overflow In .ht File (ggilliss at netpublishing.com (Gregory Gilliss))

December 18 (5 messages)

MDKSA-2004:151 - Updated php packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
OpenSSH is a good choice? (carlos.oliv at gmail.com (Carlos de Oliveira))
KIT.GED (uberguidoz at gmail.com (GuidoZ))
E-mail tracking finds murderess and baby in kidnap-homicide case. (etomcat at freemail.hu (Tamas Feher))
Security breach database (infsec at gmail.com (Willem Koenings))

December 19 (11 messages)

FW: Shadowcrew Grand Jury Indictment (raza at raza.demon.co.uk (raza))
Insecurity in Finnish parlament (computers) (markus.jansson at hushmail.com (Markus Jansson))
[ GLSA 200412-19 ] phpMyAdmin: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200412-15 ] Ethereal: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200412-16 ] kdelibs, kdebase: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200412-17 ] kfax: Multiple overflows in the included TIFF library (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200412-18 ] abcm2ps: Buffer overflow vulnerability (lewk at gentoo.org (Luke Macken))
UPDATE: [ GLSA 200410-12 ] WordPress: HTTP response splitting and XSS vulnerabilities (lewk at gentoo.org (Luke Macken))
PHP and curl open_basedir still bypassable (venom at gen-x.co.nz (VeNoMouS))
[ GLSA 200412-14 ] PHP: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
HOW TO BREAK XP SP2 POPUP BLOCKER: TIME TO WAKE UP! (chows at ozemail.com.au (Gregh))

December 20 (27 messages)

Re: zone transfers, a spammer's dream? (troubles___ at hotmail.com (Troubles Troubles))
Re: PHP and curl open_basedir still bypassable (venom at gen-x.co.nz (VeNoMouS))
Re: zone transfers, a spammer's dream? (nodialtone at comcast.net (Byron Copeland))
[ZH2004-18SA]Firefox/Opera-bypass of security restrcition by Content-Type spoofi (jftucker at gmail.com (James Tucker))
Mailing lists and unsolicited/malicious spam (uberguidoz at gmail.com (GuidoZ))
Mailing lists and unsolicited/malicious spam (uberguidoz at gmail.com (GuidoZ))
Tlen.pl, remote script execution (sloik at man.poznan.pl (Jaroslaw Sajko))
[ GLSA 200412-20 ] NASM: Buffer overflow vulnerability (lewk at gentoo.org (Luke Macken))
multiple remote root vulns in Rosiello rFTPD and RPF (slotto at gmail.com (Slotto Corleone))
[ GLSA 200412-21 ] MPlayer: Multiple overflows (koon at gentoo.org (Thierry Carrez))
RE: Cipher Tool (toddtowles at brookshires.com (Todd Towles))
[USN-42-1] Xine library vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Re: Gadu-Gadu, another two bugs (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
Possible Python 2.3 DoS Vulnerability (shell6 at gmail.com (Jack Shell))
Re: Gadu-Gadu, another two bugs (lazy at server.gwsh.gda.pl (lazy@...ver.gwsh.gda.pl))
Gadu-Gadu Remote DoS (all versions) (maciej at soltysiak.com (Maciej Soltysiak))
[USN-43-1] groff utility vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
FreezeX file access vulnerability (xenzeo at blackhat.dk (Xenzeo))
OpenSSH is a good choice? (barrie at reboot-robot.net (Barrie Dempster))
Possible Python 2.3 DoS Vulnerability (nd at perlig.de (André Malo))
MDKSA-2004:152 - Updated ethereal packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:153 - Updated aspell packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Security breach database (dotsecure at gmail.com (Martin Mkrtchian))
Re: Gadu-Gadu, another two bugs (maciej at soltysiak.com (Maciej Soltysiak))
OpenSSH is a good choice? (andfarm at teknovis.com (Andrew Farmer))
iDEFENSE Security Advisory 12.20.04: IBM AIX chcod Local Privilege Escalation Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
iDEFENSE Security Advisory 12.20.04: IBM AIX invscout Local Command Execution Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))

December 21 (41 messages)

Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer. (skylined at edup.tudelft.nl (Berend-Jan Wever))
Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer. (skylined at edup.tudelft.nl (Berend-Jan Wever))
OpenSSH is a good choice? (carlos.oliv at gmail.com (Carlos de Oliveira))
Administrivia: Explanation (len at netsys.com (Len Rose))
OpenSSH is a good choice? (hutuworm at gmail.com (hutuworm))
Secunia Research: My Firewall Plus Privilege Escalation Vulnerability (che at secunia.com (Carsten H. Eiram))
[USN-44-1] perl information leak (martin.pitt at canonical.com (Martin Pitt))
Re: Gadu-Gadu Remote DoS (all versions) (maciej at soltysiak.com (Maciej Soltysiak))
OpenSSH is a good choice? (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Secunia Research: Spy Sweeper Enterprise Client Privilege Escalation (che at secunia.com (Carsten H. Eiram))
Re: @SPAM+++++++++ (smenard at nbnet.nb.ca (steve menard))
[ GLSA 200412-22 ] mpg123: Playlist buffer overflow (koon at gentoo.org (Thierry Carrez))
Possible apache2/php 4.3.9 worm (aschultz at echo-inc.com (Alex Schultz))
iDEFENSE Security Advisory 12.21.04: Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fe…)
Possible apache2/php 4.3.9 worm (pauls at utdallas.edu (Paul Schmehl))
Re: Possible apache2/php 4.3.9 worm (etomcat at freemail.hu (Feher Tamas))
Possible apache2/php 4.3.9 worm (ppatters at cbnco.com (Pamela Patterson))
Possible apache2/php 4.3.9 worm (prandal at herefordshire.gov.uk (Randal, Phil))
Objet :Full-Disclosure Digest, Vol 1, Issue 2118 (De retour le mardi 28 décembre.) (christophe.savin at tdf.fr (Christophe Savin))
Re: Worm hitting PHPbb2 Forums (mark at onnow.net (mark@...ow.net))
RE: Worm hitting PHPbb2 Forums (christopher_adickes at SHI.com (Christopher Adickes))
RE: phpBB vulnerability/Santy.a (formerly Possible apache2/php 4.3.9 worm) (aschultz at echo-inc.com (Alex Schultz))
Re: Full-Disclosure Digest, Vol 1, Issue 2120 (justin.mason at urbanhunting.com (Justin Mason))
Possible apache2/php 4.3.9 worm (loconet at gmail.com (Juan Carlos Navea))
RE: Worm hitting PHPbb2 Forums (mike_sha at shaw.ca (Mike))
Possible apache2/php 4.3.9 worm (domains at islandnet.com (Ron Brogden))
hijack_apache-0.1a beta (emiraga at emiraga.com (EmirAga))
Possible apache2/php 4.3.9 worm (toddtowles at brookshires.com (Todd Towles))
Re: Possible apache2/php 4.3.9 worm (jstewart at lurhq.com (Joe Stewart))
OpenSSH is a good choice? (dufresne at winternet.com (Ron DuFresne))
SUSE Security Announcement: various kernel problems (SUSE-SA:2004:044) (meissner at suse.de (Marcus Meissner))
OpenSSH is a good choice? (infsec at gmail.com (Willem Koenings))
OpenSSH is a good choice? (infsec at gmail.com (Willem Koenings))
OpenSSH is a good choice? (infsec at gmail.com (Willem Koenings))
OpenSSH is a good choice? (infsec at gmail.com (Willem Koenings))
[ GLSA 200412-23 ] Zwiki: XSS vulnerability (lewk at gentoo.org (Luke Macken))
iDEFENSE Security Advisory 12.21.04: Hewlett Packard HP-UX ftpd Remote Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...f…)
iDEFENSE Security Advisory 12.21.04: libtiff Directory Entry Count Integer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fen…)
iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflo… (idlabs-advisories at idefense.com (idla…)
iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerabili… (idlabs-advisories at idefense.com (idla…)
iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflo… (idlabs-advisories at idefense.com (idla…)

December 22 (50 messages)

Objet :Full-Disclosure Digest, Vol 1, Issue 2113 (De retour le mardi 28 décembre.) (christophe.savin at tdf.fr (Christophe Savin))
Sanity.a (phpbb web worm) Source code (alf1num3rik at yahoo.com (Stephen Jimson))
Possible apache2/php 4.3.9 worm (mooyix at gmail.com (Brendan Dolan-Gavitt))
RE: Worm hitting PHPbb2 Forums (DDevault at Elance.com (David Devault))
RE: Worm hitting PHPbb2 Forums (shirkdog_list at hotmail.com (M. Shirk))
This sums up Yahoo!s security policy to a -T- (xploitable at gmail.com (n3td3v))
Objet :Full-Disclosure Digest, Vol 1, Issue 2116 (De retour le mardi 28 décembre.) (christophe.savin at tdf.fr (Christophe Savin))
Objet :Full-Disclosure Digest, Vol 1, Issue 2112 (De retour le mardi 28 décembre.) (christophe.savin at tdf.fr (Christophe Savin))
Re: Full-Disclosure Digest, Vol 1, Issue 2116 (Vacation Auto-Reply) (HDahlstrom at carollo.com (Harold Dahlstrom))
List of worm and trojan files (cat at the-cat.com (Carilda A Thomas))
OpenSSH is a good choice? (dufresne at winternet.com (Ron DuFresne))
TCP Port 42 port scans? What the heck over... (dufresne at winternet.com (Ron DuFresne))
Possible apache2/php 4.3.9 worm (danbuk at gmail.com (DanB UK))
TCP Port 42 port scans? What the heck over... (dufresne at winternet.com (Ron DuFresne))
[USN-45-1] nasm vulnerability (martin.pitt at canonical.com (Martin Pitt))
Java Runtime Environment Remote Denial-of-Service (DoS) Vulnerability (schonef at uni-muenster.de (Marc Schoenefeld))
Funny Google segfault (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
Regarding Secunia Advisory SA13040. (kiwi at oav.net (Xavier Beaudouin))
[USN-46-1] TIFF library vulnerability (martin.pitt at canonical.com (Martin Pitt))
Delay of netsys ? (rebonzo at libero.it (Matteo Giannone))
Possible apache2/php 4.3.9 worm (barrie at reboot-robot.net (Barrie Dempster))
TCP Port 42 port scans? What the heck over... (dave at immunitysec.com (Dave Aitel))
[SECUNIA] Regarding Secunia Advisory SA13040 (tk at secunia.com (Thomas Kristensen))
Java Runtime Environment Remote Denial-of-Service (DoS) Vulnerability (jftucker at gmail.com (James Tucker))
Possible apache2/php 4.3.9 worm (milw0rm at gmail.com (milw0rm Inc.))
Re: [caudium-devel] [SECUNIA] Regarding Secunia Advisory SA13040 (grendel at caudium.net (Marek Habersack))
RE: NetWare Screensaver Authentication Bypass From The Local Console (steve at myself.gen.nz (Steve Wray))
SUSE Security Announcement: samba (SUSE-SA:2004:045) (krahmer at suse.de (Sebastian Krahmer))
SUSE Security Announcement: kernel local privilege escalation (SUSE-SA:2004:046) (meissner at suse.de (Marcus Meissner))
RE: Worm hitting PHPbb2 Forums (infsec at gmail.com (Willem Koenings))
Lavasoft Ad-Watch SE fails to detect registry deletion (michealespinola at gmail.com (Micheal Espinola Jr))
MDKSA-2004:154 - Updated kdelibs packages fix multiple vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:155 - Updated logcheck packages fix temporary file vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:156 - Updated krb5 packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
This sums up Yahoo!s security policy to a -T- (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Shoe 1.0 - Remote Lace Overflow (announce at 0x90.org (announce@...0.org))
MDKSA-2004:157 - Updated mplayer packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
OpenSSH is a good choice? (toddtowles at brookshires.com (Todd Towles))
Re: [caudium-devel] [SECUNIA] Regarding Secunia Advisory SA13040 (kiwi at oav.net (Xavier Beaudouin))
Objet :Full-Disclosure Digest, Vol 1, Issue 2120 (De retour le mardi 28 décembre.) (christophe.savin at tdf.fr (Christophe Savin))
Objet :Full-Disclosure Digest, Vol 1, Issue 2110 (De retour le mardi 28 décembre.) (christophe.savin at tdf.fr (Christophe Savin))
E-mail tracking finds murderess and baby in kidnap-homicide case. (kerochan2 at gmail.com (Kero-Chan))
Re: Possible apache2/php 4.3.9 worm (maxvalde at fis.unam.mx (Max Valdez))
Re: Possible apache2/php 4.3.9 worm (se_cur_ity at hotmail.com (morning_wood))
OpenSSH is a good choice? (infsec at gmail.com (Willem Koenings))
Re: Possible apache2/php 4.3.9 worm (p.nolan at comcast.net (Patrick Nolan))
[USN-45-1] nasm vulnerability (toddtowles at brookshires.com (Todd Towles))
RE: Cipher Tool (toddtowles at brookshires.com (Todd Towles))
RE: Cipher Tool (infsec at gmail.com (Willem Koenings))
List of worm and trojan files (matt at systemlinux.net (Matt McCormack))

December 23 (36 messages)

This sums up Yahoo!s security policy to a -T- (se_cur_ity at hotmail.com (morning_wood))
Possible apache2/php 4.3.9 worm (dk at pwarchitects.com (dk))
Re: This sums up Yahoo!s security policy to a -T- (steve_r125 at yahoo.co.uk (Steve R))
Shoe 1.0 - Remote Lace Overflow (toddtowles at brookshires.com (Todd Towles))
change email (pbsoft_labs at yahoo.com (PBSoft Computer Labs (Peter)))
[OpenPKG-SA-2004.055] OpenPKG Security Advisory (gettext) (openpkg at openpkg.org (OpenPKG))
iDEFENSE Security Advisory 12.16.04: VeritasBackup Exec AgentBrowser Registration Request Buffer Overflow Vulnerability (geoincidents at nls.net (Geo.))
OpenSSH is a good choice? (dufresne at winternet.com (Ron DuFresne))
RE: Worm hitting PHPbb2 Forums (mailinglists at mattiaslindgren.com (Mattias R. Lindgren))
WPkontakt message parsing error (sloik at man.poznan.pl (Jaroslaw Sajko))
RE: Worm hitting PHPbb2 Forums (p.nolan at comcast.net (Patrick Nolan))
Security breach database (zx at castlecops.com (Paul Laudanski))
Insecurity in Finnish parlament (computers) (carlos.oliv at gmail.com (Carlos de Oliveira))
Re: Linux kernel scm_send local DoS (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
E-mail tracking finds murderess and baby in kidnap-homicide case. (irfan.syed at guoco.com (irfan.syed@...co.com))
Insecurity in Finnish parlament (computers) (olli.mustajarvi at eduskunta.fi (Mustajärvi Olli))
Insecurity in Finnish parlament (computers) (olli.mustajarvi at eduskunta.fi (Mustajärvi Olli))
Cross-Site Scripting - an industry-wide problem (mikx at mikx.de (mikx))
Insecurity in Finnish parlament (computers) (olli.mustajarvi at eduskunta.fi (Mustajärvi Olli))
ICT Security in the Finnish Parliament (olli.mustajarvi at eduskunta.fi (Mustajärvi Olli))
Plesk 7 Cross-Site Scripting (stfunub at gmail.com (Andrew Smith))
Internet Explorer FTP client can be used to send mail (ian-fulldisclosure at penguinhosting.net (Ian Gulliver))
Insecurity in Finnish parlament (computers) (olli.mustajarvi at eduskunta.fi (Mustajärvi Olli))
This sums up Yahoo!s security policy to a -T- (xploitable at gmail.com (n3td3v))
Possible apache2/php 4.3.9 worm (danbuk at gmail.com (DanB UK))
[ADVISORY] Scripting Vulnerabilities in Indian Email Providers Put Millions At Risk (sgmasood at yahoo.com (S G Masood))
OpenSSH is a good choice? (sovrevage at gmail.com (Stian Øvrevåge))
This sums up Yahoo!s security policy to a -T- (exibar at thelair.com (Exibar))
[USN-48-1] xpdf, tetex-bin vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-52-1] vim vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-50-1] CUPS vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-49-1] debmake vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-51-1] teTeX auxiliary script vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-47-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-45-1] nasm vulnerability (martin.pitt at canonical.com (Martin Pitt))
This sums up Yahoo!s security policy to a -T- (fw at deneb.enyo.de (Florian Weimer))

December 24 (36 messages)

List of worm and trojan files (cat at the-cat.com (Carilda A Thomas))
OpenSSH is a good choice? (dk at pwarchitects.com (dk))
STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard (advisory at stgsecurity.com (SSR Team))
Re: eDonkey Hub version 16.50 vunerability? (steve_r125 at yahoo.co.uk (Steve R))
Re: [USN-52-1] vim vulnerability (liudieyu at umbrella.name (Liu Die Yu))
Final Call for Papers & Workshops - BCS Asia 2005 (bcs2005 at bellua.com (Anthony.zboralski))
RE: Worm hitting PHPbb2 Forums (zx at castlecops.com (Paul Laudanski))
List of worm and trojan files (kkadow at gmail.com (Kevin))
OpenSSH is a good choice? (ben.hawkes at paradise.net.nz (Ben Hawkes))
Joyous Holiday Hacking (ggilliss at netpublishing.com (Gregory Gilliss))
Cross-Site Scripting - an industry-wide problem (se_cur_ity at hotmail.com (morning_wood))
Insecurity in Finnish parlament (computers) (prb at lava.net (Peter Besenbruch))
This sums up Yahoo!s security policy to a -T- (brenno at dewinter.com (Brenno J.S.A.A.F. de Winter))
Insecurity in Finnish parlament (computers) (y_avenger_y at ua.fm (Alex V. Lukyanenko))
Shoe 1.0 - Remote Lace Overflow (y_avenger_y at ua.fm (Alex V. Lukyanenko))
List of worm and trojan files (barrie at reboot-robot.net (Barrie Dempster))
Finnish perlament !?!?! (allan.vanleeuwen at orangemail.nl (Leeuwen, Allan van))
List of worm and trojan files (dywypi at gmail.com (Sam Gentle))
OpenSSH is a good choice? (infsec at gmail.com (Willem Koenings))
Internet Explorer FTP client can be used to send mail (ian-fulldisclosure at penguinhosting.net (Ian Gulliver))
[USN-45-1] nasm vulnerability (devdas at dvb.homelinux.org (Devdas Bhagat))
Cross-Site Scripting - an industry-wide problem (skylined at edup.tudelft.nl (Berend-Jan Wever))
This sums up Yahoo!s security policy to a -T- (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
This sums up Yahoo!s security policy to a -T- (measl at mfn.org (J.A. Terranson))
This sums up Yahoo!s security policy to a -T- (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
E-mail tracking finds murderess and baby in kidnap-homicide case. (kerochan2 at gmail.com (Kero-Chan))
YEY AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2 (mevanchik at relationship1.com (Michael Evanchik))
List of worm and trojan files (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Status (full-disclosure@...ts.netsys.com) (shaunige at yahoo.co.uk (shaunige@...oo.co.uk))
New IE / Windoze Zero-Day? (aiwadaiwa at hushmail.com (aiwadaiwa@...hmail.com))
XSS in yacy 0.31 (fdonato at autistici.org (Donato Ferrante))
OpenSSH is a good choice? (dufresne at winternet.com (Ron DuFresne))
Joyous Holiday Hacking (stefmit at gmail.com (Stef))
Microsoft Internet Explorer Full Remote Compromise w/o User Intervention (tuytumadre at att.net (tuytumadre@....net))
Microsoft Internet Explorer Full Remote Compromise w/o User Intervention (tuytumadre at att.net (tuytumadre@....net))
new phpBB worm affects 2.0.11 (herman at swebpage.com (Herman Sheremetyev))

December 25 (32 messages)

Internet Explorer FTP client can be used to send mail (avivra at 012.net.il (Aviv Raff))
Re: Re: Microsoft Windows LoadImage API Integer Buffer overflow (flashsky at xfocus.org (flashsky))
Finnish perlament !?!?! (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
[inbox] Re: This sums up Yahoo!s security policy to a -T- (exibar at thelair.com (Exibar))
[spam] Re: This sums up Yahoo!s security policy to a -T- (exibar at thelair.com (Exibar))
YET AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2 (Mike at MichaelEvanchik.com (Michael Evanchik))
Internet Explorer FTP client can be used to send mail (ian-fulldisclosure at penguinhosting.net (Ian Gulliver))
YEY AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2 (avivra at 012.net.il (Aviv Raff))
iotrace 1.3, an userspace read()/write() logger daemon for linux, osf1, openbsd, freebsd (michele.dallachiesa at gmail.com (michele dallachiesa))
new phpBB worm affects 2.0.11 (rafal.kwasny at gmail.com (^^MAg^^))
YET AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2 (skylined at edup.tudelft.nl (Berend-Jan Wever))
Santy.b worm using AOL and YAHOO (alf1num3rik at yahoo.com (Stephen Jimson))
[spam] Re: This sums up Yahoo!s security policy to a -T- (measl at mfn.org (J.A. Terranson))
New Santy-Worm attacks *all* PHP-skripts (ju at heisec.de (Juergen Schmidt))
[inbox] Re: This sums up Yahoo!s security policy to a -T- (measl at mfn.org (J.A. Terranson))
Re: Insecurity in Finnish parlament (computers) (markus.jansson at hushmail.com (Markus Jansson))
DJB's contest (repost after being moderated on BGTQ) (support at sabre-security.com (support@...re-security.com))
Jami L Blume/BOARD/FRS is out of the office. (fwd) (measl at mfn.org (J.A. Terranson))
YEY AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2 (se_cur_ity at hotmail.com (morning_wood))
Re: new phpBB worm affects 2.0.11 (adam at fazed.org (Adam))
Re: Re: Microsoft Windows LoadImage API Integer Buffer overflow (brett at lariat.org (Brett Glass))
OpenSSH is a good choice? (kkadow at gmail.com (Kevin))
Re: Microsoft Windows LoadImage API IntegerBuffer overflow (skylined at edup.tudelft.nl (Berend-Jan Wever))
Re: New Santy-Worm attacks *all* PHP-skripts (pekkas at netcore.fi (Pekka Savola))
OpenSSH is a good choice? (dufresne at winternet.com (Ron DuFresne))
Insecurity in Finnish parlament (computers) (sutpen at gmail.com (Thomas Sutpen))
Microsoft Internet Explorer Full RemoteCompromise w/o User Intervention (alerta at redsegura.com (Alerta RedSegura))
Finnish perlament !?!?! (kerochan2 at gmail.com (Kero-Chan))
Shoe 1.0 - Remote Lace Overflow (sutpen at gmail.com (Thomas Sutpen))
Re: New Santy-Worm attacks *all* PHP-skripts (zx at castlecops.com (Paul Laudanski))
Re: New Santy-Worm attacks *all* PHP-skripts (raistlin at gioco.net (Raistlin))
Suspect phpBB users (jack.yan at jyanet.com (Jack Yan))

December 26 (31 messages)

Jami L Blume/BOARD/FRS is out of the office. (fwd) (johnc at grok.org.uk (John Cartwright))
YEY AGAIN Automatic remote compromise ofInternetExplorer Service Pack 2 XP SP2 (mevanchik at relationship1.com (Michael Evanchik))
YEY AGAIN Automatic remote compromise ofInternetExplorer Service Pack 2 XP SP2 (mevanchik at relationship1.com (Michael Evanchik))
YEY AGAIN Automatic remote compromise ofInternetExplorer Service Pack 2 XP SP2 (mevanchik at relationship1.com (Michael Evanchik))
[spam] RE: [inbox] Re: This sums up Yahoo!s security policy to a -T- (exibar at thelair.com (Exibar))
Re: Re: Microsoft Windows LoadImage API Integer Buffer overflow (brett at lariat.org (Brett Glass))
Re: New Santy-Worm attacks *all* PHP-skripts (zx at castlecops.com (Paul Laudanski))
Suspect phpBB users (uberguidoz at gmail.com (GuidoZ))
Re: New Santy-Worm attacks *all* PHP-skripts (zx at castlecops.com (Paul Laudanski))
Re: New Santy-Worm attacks *all* PHP-skripts (raistlin at gioco.net (Raistlin))
YET AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2 (stfunub at gmail.com (Andrew Smith))
Finnish perlament !?!?! (stevex11 at sbcglobal.net (Steve Kudlak))
Re: New Santy-Worm attacks *all* PHP-skripts (zx at castlecops.com (Paul Laudanski))
Re: New Santy-Worm attacks *all* PHP-skripts (ju at heisec.de (Juergen Schmidt))
Insecurity in Finnish parlament (computers) (jftucker at gmail.com (James Tucker))
Re: Fwd: Re: [USN-52-1] vim vulnerability (ciaranm at gentoo.org (Ciaran McCreesh))
Any study on patch availability? (sudhakar+fulldisclosure at CS.Princeton.EDU (sudhakar+fulldisclosure@...Princeton.EDU))
Insecurity in Finnish parlament (computers) (markus.jansson at hushmail.com (Markus Jansson))
YEY AGAIN Automatic remote compromiseofInternetExplorer Service Pack 2 XP SP2 (Ronald_Jackson at lifenet.org (Ron Jackson))
AOL website redirection scripts allow for abuse (michel.blomgren at tigerteam.se (Michel Blomgren))
Multiple vulnerabilities in AOL and AOL affiliate web sites (michel.blomgren at tigerteam.se (Michel Blomgren))
(no subject) (class101 at phreaker.net (class 101))
[HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc inside. (class101 at hat-squad.com (class 101))
[HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc inside. (class101 at hat-squad.com (class 101))
Delivery Failed (full-disclosure@...ts.netsys.com) (blue at ev01.net (blue@...1.net))
new phpBB worm affects 2.0.11 (andfarm at teknovis.com (Andrew Farmer))
new phpBB worm affects 2.0.11 (andfarm at teknovis.com (Andrew Farmer))
Suspect phpBB users (uberguidoz at gmail.com (GuidoZ))
New Santy-Worm attacks *all* PHP-skripts (gem at rellim.com (Gary E. Miller))
Re: New Santy-Worm attacks *all* PHP-skripts (steve at myself.gen.nz (Steve Wray))
Re: Re: Microsoft Windows LoadImage API Integer Buffer overflow (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

December 27 (20 messages)

Shoe 1.0 - Remote Lace Overflow (nekramer at mindtheater.net (Nancy Kramer))
Insecurity in Finnish parlament (computers) (jftucker at gmail.com (James Tucker))
YET AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2 (mevanchik at relationship1.com (Michael Evanchik))
Re: *nix data wipe tools (pavel at ucw.cz (Pavel Machek))
Finnish perlament !?!?! (toddtowles at brookshires.com (Todd Towles))
This sums up Yahoo!s security policyto a -T- (mlande at bellsouth.net (Mary Landesman))
Insecurity in Finnish parlament (computers) (jftucker at gmail.com (James Tucker))
Insecurity in Finnish parlament (computers) (toddtowles at brookshires.com (Todd Towles))
YEY AGAIN Automatic remotecompromiseofInternetExplorer Service Pack 2 XP SP2 (mevanchik at relationship1.com (Michael Evanchik))
IE sp2 and Mozilla Firefox DoS. (visitbipin at yahoo.com (bipin gautam))
IE sp2 and Mozilla Firefox DoS. (visitbipin at yahoo.com (bipin gautam))
Insecurity in Finnish parlament (computers) (markus.jansson at hushmail.com (Markus Jansson))
IE sp2 and Mozilla Firefox DoS. (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
BUG FIX Remote compromise of Internet Explorer Service Pack 2 XP SP2 (Mike at MichaelEvanchik.com (Michael Evanchik))
YEY AGAIN Automatic remote compromise ofInternetExplorer Service Pack 2 XP SP2 (mevanchik at relationship1.com (Michael Evanchik))
YEY AGAIN Automatic remotecompromiseofInternetExplorer Service Pack 2 XP SP2 (mevanchik at relationship1.com (Michael Evanchik))
(no subject) (mevanchik at relationship1.com (Michael Evanchik))
MDKSA-2004:158 - Updated samba packages fix integer overflow vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
IE sp2 and Mozilla Firefox DoS. (dietz at dimecs.de (Sebastian Dietz))
This sums up Yahoo!s security policyto a -T- (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

December 28 (33 messages)

Windows (XP SP2) Remote code execution with parameters (shreddersub7 at hotmail.com (ShredderSub7 SecExpert))
Remote code execution with parameters without user interaction, even with XP SP2 (shreddersub7 at hotmail.com (ShredderSub7 SecExpert))
Possible apache2/php 4.3.9 worm (dk at pwarchitects.com (dk))
Isecom, osstm related: CRG was busted yesterday (your_momma at hushmail.com (your_momma@...hmail.com))
AOL website redirection scripts allow for abuse (se_cur_ity at hotmail.com (morning_wood))
more: Isecom, osstm related: CRG was busted yesterday (your_momma at hushmail.com (your_momma@...hmail.com))
Cheers Quick action by symantec on IE auto compromise (mevanchik at relationship1.com (Michael Evanchik))
Encrypted document (als at thangorodrim.de (Als))
New changes (RawData at netcabo.pt (RawData))
Suggested filters against PHP Attacking Worms (zx at castlecops.com (Paul Laudanski))
Windows (XP SP2) Remote code execution withparameters (se_cur_ity at hotmail.com (morning_wood))
And you're proud of this Mike Evanchick? (c1b3r_chick at yahoo.com (Elle Chicka))
Windows (XP SP2) Remote code executionwithparameters (rivgi at finjan.com (Rafel Ivgi))
Netcat v1.11 , fixed release by VulnWatch, get it! (class101 at gmail.com (class 101))
[ GLSA 200412-24 ] Xpdf, GPdf: New integer overflows (koon at gentoo.org (Thierry Carrez))
[ GLSA 200412-25 ] CUPS: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
Windows (XP SP2) Remote code execution with parameters (OGoencz at ghi.com (Goencz, Otto))
Netsys Mailman Probes due to Illegal Attachments (jftucker at gmail.com (James Tucker))
IE sp2 and Mozilla Firefox DoS. (visitbipin at yahoo.com (bipin gautam))
[ GLSA 200412-26 ] ViewCVS: Information leak and XSS vulnerabilities (koon at gentoo.org (Thierry Carrez))
IE sp2 and Mozilla Firefox DoS. (phased at mail.ru (phased))
[inbox] Re: This sums up Yahoo!s security policy to a -T- (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Windows (XP SP2) Remote code executionwithparameters (se_cur_ity at hotmail.com (morning_wood))
unexplained crashes of named (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
RE: > hhctrl.ocx is not installed by default in all SP1s but is on all SP2. (shreddersub7 at yahoo.com (Tim ShredderSub7))
IE sp2 and Mozilla Firefox DoS. (se_cur_ity at hotmail.com (morning_wood))
The Security Forum - meeting #7 -16/1/05 (ge at linuxbox.org (Gadi Evron))
change email (uberguidoz at gmail.com (GuidoZ))
List of worm and trojan files (uberguidoz at gmail.com (GuidoZ))
unexplained crashes of named (jftucker at gmail.com (James Tucker))
Re: Windows (XP SP2) Remote code execution with parameters (shreddersub7 at yahoo.com (ShredderSub7))
QNX crrtrap arbitrary file read/write vulnerability [RLSA_06-2004] (julio at rfdslabs.com.br (Julio Cesar Fort))
Insecurity in Finnish parlament (computers) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

December 29 (21 messages)

And you're proud of this Mike Evanchick? (security at brvenik.com (Jason))
[inbox] Re: This sums up Yahoo!s securitypolicy to a -T- (exibar at thelair.com (Exibar))
[USN-53-1] imlib vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Multiple Backdoors found in eEye Products (IRIS and SecureIIS) (thegusto22 at hotmail.com (Lance Gusto))
Microsoft Windows LoadImage API Integer buffer overflow patch. (bajkero at sec-labs.hack.pl (Artur Byszko))
List of worm and trojan files (jftucker at gmail.com (James Tucker))
And you're proud of this Mike Evanchick? (toddtowles at brookshires.com (Todd Towles))
List of worm and trojan files (toddtowles at brookshires.com (Todd Towles))
And you're proud of this Mike Evanchick? (toddtowles at brookshires.com (Todd Towles))
And you're proud of this Mike Evanchick? (joel.esler at rcert-s.army.mil (Esler, Joel - Contractor))
Again: zone transfers, a spammer's dream? (ralfglauberman at gmail.com (Ralf Glauberman))
Re: new phpBB worm affects 2.0.11 (zx at castlecops.com (Paul Laudanski))
Again: zone transfers, a spammer's dream? (full-disclosure at nospam.wafel.org (Jorrit Kronjee))
Suspect phpBB users (domains at islandnet.com (Ron Brogden))
And you're proud of this Mike Evanchick? (michaelr at cisco.com (Michael Reilly))
Heap overflow in Mozilla Browser <= 1.7.3 NNTP code. (z33d at isec.pl (Maurycy Prodeus))
And you're proud of this Mike Evanchick? (xillwillx at gmail.com (Ill will))
And you're proud of this Mike Evanchick? (Mike at MichaelEvanchik.com (Michael Evanchik))
Trivial Bug in Symantec Security Products (sil at infiltrated.net (J. Oquendo))
Multiple Backdoors found in eEye Products (IRIS and Secure (thegusto22 at hotmail.com (Lance Gusto))
Multiple Backdoors found in eEye Products (IRIS and SecureIIS) (thegusto22 at hotmail.com (Lance Gusto))

December 30 (45 messages)

Is that your password? (psirt at cisco.com (psirt@...co.com))
more: Isecom, osstm related: CRG was busted yesterday (crg at digitalsec.net (Crg))
Multiple Backdoors found in eEye Products (IRISand SecureIIS) (mmaiffret at eeye.com (Marc Maiffret))
/bin/rm file access vulnerability (xenzeo at gardener.com (Lennart Hansen))
/bin/rm file access vulnerability (sharlow at UTNet.UToledo.Edu (Sean Harlow))
MDKSA-2004:159 - Updated glibc packages fix temporary file vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:160 - Updated kdelibs packages fix konqueror email vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:161 - Updated xpdf packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:162 - Updated gpdf packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:163 - Updated kdegraphics packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:164 - Updated cups packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:165 - Updated koffice packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2004:166 - Updated tetex packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
And you're proud of this Mike Evanchick? (blsonne at rogers.com (Byron L. Sonne))
/bin/rm file access vulnerability (vh at helith.net (vh))
Multiple Backdoors found in eEye Products (IRISand SecureI (thegusto22 at hotmail.com (Lance Gusto))
/bin/rm file access vulnerability (eromang at zataz.net (Eric Romang / ZATAZ))
/bin/rm file access vulnerability (lcamtuf at ghettot.org (Michal Zalewski))
Again: zone transfers, a spammer's dream? (xyberpix at xyberpix.com (xyberpix))
Multiple Backdoors found in eEye Products (IRIS and SecureIIS) (fcharpen at xmcopartners.com (Frederic Charpentier))
/bin/rm file access vulnerability (raymond at dyn.org (Raymond Morsman))
/bin/rm file access vulnerability (joerg at eschke.net (Jörg Eschke))
Multiple Backdoors found in eEye Products (IRISand SecureIIS) (barrie at reboot-robot.net (Barrie Dempster))
Trivial Bug in Symantec Security Products (barrie at reboot-robot.net (Barrie Dempster))
/bin/rm file access vulnerability (shane.milton at gmail.com (shane milton))
Windows (XP SP2): Remotely Code Execution with Parameters (Updated) (shreddersub7 at yahoo.com (ShredderSub7))
[ GLSA 200412-27 ] PHProjekt: Remote code execution vulnerability (koon at gentoo.org (Thierry Carrez))
And you're proud of this Mike Evanchick? (toddtowles at brookshires.com (Todd Towles))
RE: Full-Disclosure Digest, Vol 1, Issue 2144 (steve.dangerfield at syntegra.com (steve.dangerfield@...tegra.com))
Multiple Backdoors found in eEye Products (IRISand SecureIIS) (mmaiffret at eeye.com (Marc Maiffret))
/bin/rm file access vulnerability (j.mosher at sympatico.ca (Jerry))
Information System Security Assessment Framework (ISSAF) Draft 0.1 (admoore at phreaker.net (admoore@...eaker.net))
MySQL and the user "su" (swolf at x-project.net (Sascha Wolf))
And you're proud of this Mike Evanchick? (xyberpix at xyberpix.com (xyberpix))
Re: Incoming Message (scrotora at hushmail.com (Scrotora))
Multiple Backdoors found in eEye Products (IRISand SecureIIS) (joel.esler at rcert-s.army.mil (Esler, Joel - Contractor))
/bin/rm file access vulnerability (y_avenger_y at ua.fm (Alex V. Lukyanenko))
/bin/rm file access vulnerability (bkfsec at sdf.lonestar.org (bkfsec))
Multiple Backdoors found in eEye Products (IRISand SecureIIS) (iknowchameleon at yahoo.com (Shunryu Suzuki))
Site changes (scrotora at hushmail.com (Scrotora))
Multiple Backdoors found in eEye Products (IRISand SecureIIS) (iknowchameleon at yahoo.com (Shunryu Suzuki))
MySQL and the user "su" (swolf at x-project.net (Sascha Wolf))
Multiple Backdoors found in eEye Products (IRISand SecureIIS) (girl at catholic.org (gp))
MySQL and the user "su" (andfarm at teknovis.com (Andrew Farmer))
/bin/rm file access vulnerability (jlongs2 at uic.edu (James Longstreet))

December 31 (27 messages)

/bin/rm file access vulnerability (measl at mfn.org (J.A. Terranson))
This sums up Yahoo!s security policyto a -T- (jftucker at gmail.com (James Tucker))
Multiple Backdoors found in eEye Products(IRISand SecureIIS) (shinken at telefonica.net (Roberto Muñoz))
/bin/rm file access vulnerability (dentonj at gmail.com (Jeffrey Denton))
Multiple Backdoors found in eEye Products (IRIS and SecureIIS) (dan at losangelescomputerhelp.com (Daniel H. Renner))
MySQL and the user "su" (kris at koehntopp.de (Kristian Koehntopp))
Microsoft Data Access Dav1.1 PoC (corryl at sitoverde.com (CorryL))
Trivial Bug in Symantec Security Products (sutpen at gmail.com (Thomas Sutpen))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (jeffrey.adams at hqda.army.mil (jeffrey.adams@...a.army.mil))
Re: Document (scrotora at hushmail.com (Scrotora))
A New Year Request (ChrisDay at HBOSplc.com (ChrisDay@...Splc.com))
MySQL and the user "su" (danbuk at gmail.com (DanB UK))
/bin/rm file access vulnerability (frank at knobbe.us (Frank Knobbe))
Multiple Backdoors found in eEye Products (IRISand SecureI (abaker at gmail.com (ASB))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (http-equiv at excite.com (http-equiv@...ite.com))
MySQL and the user "su" (swolf at x-project.net (Sascha Wolf))
/bin/rm file access vulnerability (bkfsec at sdf.lonestar.org (bkfsec))
MySQL and the user "su" (fulldis at pottcounty.com (Tom Crimmins))
Bluetooth: BlueSnarf and BlueBug Full Disclusore (adam.laurie at thebunker.net (Adam Laurie))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (psirt at cisco.com (psirt@...co.com))
Multiple Backdoors found in eEye Products (IRISand SecureIIS) (prb at lava.net (Peter Besenbruch))
The Macallan mail solution 4.0.6.8 (Build 786) contains several vulnerabilities (advisory at cirt.dk (CIRT Advisory))
Cross Site Scripting DOS (Zyxel B-420 Ethernet Bridge) (beniwiedmer at tiscali.ch (beniwiedmer@...cali.ch))
Re: [SECUNIA] Vulnerability postings (joxeankoret at yahoo.es (Joxean Koret))
MySQL and the user "su" (seclists at pottcounty.com (Tom Crimmins))
Santy Variant attacking about 50 PHP-applications (licht77 at gmx.net (peter dudikoff))
ArGoSoft FTP Server reveals valid usernames and allows for brute force attacks (steven at lovebug.org (Steven))

818 messages