full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2005/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 26	² 16
³ 20	⁴ 20	⁵ 26	⁶ 40	⁷ 41	⁸ 14	⁹ 12
¹⁰ 26	¹¹ 73	¹² 54	¹³ 34	¹⁴ 43	¹⁵ 25	¹⁶ 14
¹⁷ 31	¹⁸ 21	¹⁹ 27	²⁰ 16	²¹ 21	²² 22	²³ 7
²⁴ 26	²⁵ 60	²⁶ 41	²⁷ 41	²⁸ 22	²⁹ 19	³⁰ 14
³¹ 18

Messages by day:

January 1 (26 messages)

Mail Delivery (failure full-disclosure@...ts.netsys.com) (peak at argo.troja.mff.cuni.cz (peak@...o.troja.mff.cuni.cz))
Happy new year (des_ward at o2.co.uk (Des Ward))
[inbox] Re: This sums up Yahoo!s security policyto a -T- (exibar at thelair.com (Exibar))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (webmaster at securiteinfo.com (webmaster@...uriteinfo.com))
Just a thought (from an autoreply to another thread) (blsonne at rogers.com (Byron L. Sonne))
Re: Is that your document? (james.cupps at sappi.com (james.cupps@...pi.com))
[inbox] Re: This sums up Yahoo!s security policyto a -T- (xploitable at gmail.com (n3td3v))
Re: Sample (jkuperus at planet.nl (jkuperus@...net.nl))
list noise (phased at mail.ru (phased))
Microsoft WINS Exploit (port 42) released (alf1num3rik at yahoo.com (Stephen Jimson))
Whoppix 2.6 released - Now available for download (muts at inter.net.il (muts))
KorWeblog php injection Vulnerability (mins at fsu.or.kr (Choi Min-sung))
hackers hacking hackers wtf? (blackhat_information at yahoo.com (jonny be good))
AOL's Online Password Reset feature does not fully validate user information (steven at lovebug.org (Steven))
Re: Document (scrotora at hushmail.com (Scrotora))
Xanga Cross Site Scripting Vunerability - GNAA Security Center (webmaster at q-cat.com (Nick Price))
Re: Thank you! (scrotora at hushmail.com (Scrotora))
Just a thought (from an autoreply to another thread) (stfunub at gmail.com (Andrew Smith))
Multiple Backdoors found in eEye Products (IRISand SecureIIS) (pauls at utdallas.edu (Paul Schmehl))
Just a thought (from an autoreply to anotherthread) (pingywon at hotmail.com (pingywon MCSE))
Just a reminder (nodialtone at comcast.net (Byron Copeland))
Various Vulnerabilities in OWL Intranet Engine (joxeankoret at yahoo.es (Joxean Koret))
Cross Site Scripting Vulnerabilities and Possible Code Execution in SugarCRM (joxeankoret at yahoo.es (Joxean Koret))
Two Vulnerabilities in ViewCVS (joxeankoret at yahoo.es (Joxean Koret))
Xanga Login Cookie stealing Vunerability - GNAA Security Center (gerryniger at gmail.com (gnaa/rkz))
Multiple Backdoors found in eEye Products (IRIS and SecureIIS) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

January 2 (16 messages)

Win32 based (nodialtone at comcast.net (Byron Copeland))
Xanga Cookie Stealing Vunerability XSS - GNAA Security Center (gerryniger at gmail.com (gnaa/rkz))
I love you! (jan.muenther at nruns.com (jan.muenther@...ns.com))
Just a thought (from an autoreply to another thread) (blsonne at rogers.com (Byron L. Sonne))
defaced zine issue 7 (anie at hcsmail.com (Luther Vaughn))
Challenge (jellyfish_jvss2002 at yahoo.com.sg (jelly fish))
Just a thought (from an autoreply to another thread) (m0rtis at adelphia.net (Mortis))
Re: Thanks :) (scrotora at hushmail.com (Scrotora))
hackers hacking hackers wtf? (TalM at comsec.co.il (Tal Mozes))
list noise (dcdave at att.net (dcdave@....net))
Just a thought (from an autoreply to another thread) (measl at mfn.org (J.A. Terranson))
Multiple Backdoors found in eEye Products (IRIS and Secure (dave at immunitysec.com (Dave Aitel))
And you're proud of this Mike Evanchick? (Mike at MichaelEvanchik.com (Michael Evanchik))
And you're proud of this Mike Evanchick? (Mike at MichaelEvanchik.com (Michael Evanchik))
Just a thought (from an autoreply to another thread) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
/bin/rm file access vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

January 3 (20 messages)

Mail Delivery (failure full-disclosure@...ts.netsys.com) (dayioglu at metu.edu.tr (dayioglu@...u.edu.tr))
Santy Variant attacking about 50 PHP-applications (stfunub at gmail.com (Andrew Smith))
STG Security Advisory: [SSA-20041224-21] File extensions restriction bypass vulnerability in GNUBoard (advisory at stgsecurity.com (SSR Team))
Santy Variant attacking about 50 PHP-applications (stfunub at gmail.com (Andrew Smith))
Multiple Backdoors found in eEye Products (IRIS and Secure (BlueBoar at thievco.com (Blue Boar))
YEY AGAIN Automatic remotecompromiseofInternetExplorer Service Pack 2 XP SP2 (jftucker at gmail.com (James Tucker))
Multiple Backdoors found in eEye Products (IRIS and SecureIIS) (dave at immunitysec.com (Dave Aitel))
Remote DoS in GFI MailEssentials due to a bug in Microsoft HTML parser (kruse at krusesecurity.dk (Peter Kruse))
Multiple Backdoors found in eEye Products (IRIS and Secure (pauls at utdallas.edu (Paul Schmehl))
Suspect phpBB users (barrie at reboot-robot.net (Barrie Dempster))
phpBB Worm writers are dumb (emiraga at emiraga.com (EmirAga))
Encrypted document (bugzilla at redhat.com (Bugzilla))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (johncybpk at gmx.net (johncybpk@....net))
[inbox] Re: This sums up Yahoo!s securitypolicy to a -T- (measl at mfn.org (J.A. Terranson))
Re: Insecurity in Finnish parlament (computers) (gadgeteer at elegantinnovations.org (gadgeteer@...gantinnovations.org))
Insecurity in Finnish parlament (computers) (guninski at guninski.com (Georgi Guninski))
Trivial Bug in Symantec Security Products (chows at ozemail.com.au (Gregh))
Multiple Firewall Products Bypass Vulnerability (ferruh at mavituna.com (Ferruh Mavituna))
Microsoft Windows BMP file buffer overflow (luchenghuai at yahoo.com (Chenghuai Lu))
Multiple Backdoors found in eEye Products(IRIS and Secure (joel.esler at rcert-s.army.mil (Esler, Joel - Contractor))

January 4 (20 messages)

phpBB Worm writers are dumb (p.nolan at comcast.net (Patrick Nolan))
phpBB Worm writers are dumb (sovrevage at gmail.com (Stian Øvrevåge))
DMA[2005-0103a] - 'William LeFebvre "top" format string vulnerability' (kf_lists at digitalmunition.com (KF (Lists)))
Secunia Research: Mozilla / Mozilla Firefox Download Dialog Source Spoofing (jb at secunia.com (Jakob Balle))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (dayioglu at metu.edu.tr (dayioglu@...u.edu.tr))
This sums up Yahoo!s securitypolicyto a -T- (jan.m.clairmont at citigroup.com (Clairmont, Jan M))
3Com 3CDaemon Multiple Vulnerabilities (smaillist at gmail.com (Sowhat .))
Re: Bluetooth: BlueSnarf and BlueBug Full Disclusore (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
Microsoft Windows BMP file buffer overflow (sysadminkc at gmail.com (SysAdminKC))
The Macallan mail solution 4.0.6.8 (Build 786) contains several vulnerabilities (y_avenger_y at ua.fm (Alex V. Lukyanenko))
Socket termination, format string and XSS in Soldner Secret Wars 30830 (aluigi at autistici.org (Luigi Auriemma))
Mysql windows 4.1.8 build PATH mess-up (peteoswald at comcast.net (Peter Oswald Jr.))
QWikiwiki directory traversal vulnerability (madelman at iname.com (Madelman))
list noise (stevex11 at sbcglobal.net (Steve Kudlak))
[ GLSA 200501-01 ] LinPopUp: Buffer overflow in message reply (koon at gentoo.org (Thierry Carrez))
[ GLSA 200501-02 ] a2ps: Insecure temporary files handling (koon at gentoo.org (Thierry Carrez))
Socket termination, format string and XSS in Soldner Secret Wars 30830 (aluigi at autistici.org (Luigi Auriemma))
QWikiwiki directory traversal vulnerability (madelman at iname.com (Madelman))
Example of Legal Ruling involving Internet Issues: >> Re: Yahoo and inheiriting someone's email (chromazine at sbcglobal.net (Steve Kudlak))
[SHORT ESSAY] Yahoo security "policy", booters, 12-hour account DoS and other stuff (y_avenger_y at ua.fm (Alex V. Lukyanenko))

January 5 (26 messages)

MediaSentry false positives? (kkadow at gmail.com (Kevin))
[ GLSA 200501-03 ] Mozilla, Firefox, Thunderbird: Various vulnerabilities (koon at gentoo.org (Thierry Carrez))
Tiger Teams (rienzi at nimrod.com.mx (rienzi@...rod.com.mx))
Example of Legal Ruling involving Internet Issues: >> Re: Yahoo and inheiriting someone's email (MRMyers at anteon.com (Myers, Marvin))
MediaSentry false positives? (fw at deneb.enyo.de (Florian Weimer))
DMA[2005-0103a] - 'William LeFebvre "top" format string vulnerability' (kin186 at hackermail.com (White Self-Existing World-Bridger))
Possible DNS compromise/poisoning? (nicholasnam at hush.com (nicholasnam@...h.com))
MediaSentry false positives? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
MediaSentry false positives? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
MediaSentry false positives? (fw at deneb.enyo.de (Florian Weimer))
[ GLSA 200501-04 ] Shoutcast Server: Remote code execution (lewk at gentoo.org (Luke Macken))
RE: Yahoo Email Policy "Debate" (precarious_panther at bigpond.com (Adam))
Re: YET AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2 (delist at waveresearchlabs.com (Duane Toler))
SQL injection worm ? (mducharme at cybergeneration.com (Maxime Ducharme))
Possible DNS compromise/poisoning? (danbuk at gmail.com (DanBUK))
Possible DNS compromise/poisoning? (fw at deneb.enyo.de (Florian Weimer))
Possible DNS compromise/poisoning? (kf_lists at digitalmunition.com (KF (lists)))
Full-Disclosure] SQL injection worm ? (infsec at gmail.com (Willem Koenings))
Possible DNS compromise/poisoning? (mmadison at fnni.com (Madison, Marc))
Possible DNS compromise/poisoning? (measl at mfn.org (J.A. Terranson))
Pattern matching search tool (pauls at utdallas.edu (Paul Schmehl))
[ GLSA 200501-05 ] mit-krb5: Heap overflow in libkadm5srv (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200501-06 ] tiff: New overflows in image decoding (koon at gentoo.org (Thierry Carrez))
Re: Bluetooth: BlueSnarf and BlueBug Full Disclusore (synackurg at gmail.com (Dave Bryan))
Re: SQL injection worm ? (bugtraq at cgisecurity.net (bugtraq@...security.net))
SQL injection worm ? (mducharme at cybergeneration.com (Maxime Ducharme))

January 6 (40 messages)

Pattern matching search tool (alain at ait.ac.th (Alain Fauconnet))
Possible DNS compromise/poisoning? (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Pattern matching search tool (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Securitytrap 2004 Dec Top 20 List - PHP exploit on Top (vertex at securitytrap.com (vertex))
All Symantec Products All Versions Until 2005 - Remote Stack Buffer Overflow (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Animated Cursor Blue Screen? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
WinHKI BH File Incorrect Filename Handeling Leads to 100 CPU% (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
WinHKI - LHA File Incorrect Filename Handeling Leads to Crash/Underflow (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
WinHKI - BH File Directory Transversal (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
WinHKI - CAB File Directory Transversal (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
WinAce & WinHKI - ZIP File Directory Transversal (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
WinAce - GZIP File Directory Transversal (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Example of Legal Ruling involving Internet Issues: >> Re: Yahoo and inheiriting someone's email (jftucker at gmail.com (James Tucker))
Example of Legal Ruling involving Internet Issues: >> Re: Yahoo and inheiriting someone's email (chromazine at sbcglobal.net (Steve Kudlak))
Request Declined; Causes of failures in systems was list noise (stevex11 at sbcglobal.net (Steve Kudlak))
list noise (stevex11 at sbcglobal.net (Steve Kudlak))
Re: SQL injection worm ? (infsec at gmail.com (Willem Koenings))
New Santy-Worm attacks *all* PHP-skripts (se_cur_ity at hotmail.com (morning_wood))
[ GLSA 200501-07 ] xine-lib: Multiple overflows (koon at gentoo.org (Thierry Carrez))
Animated Cursor Blue Screen? (tom.koehler at gmx.net (Tom Koehler))
Pattern matching search tool (fw at deneb.enyo.de (Florian Weimer))
Possible DNS compromise/poisoning? (nicholasnam at hush.com (nicholasnam@...h.com))
Animated Cursor Blue Screen? (str0ke at milw0rm.com (str0ke@...w0rm.com))
Animated Cursor Blue Screen? (kdodd at co.st-johns.fl.us (Kelly Dodd))
Pattern matching search tool (pauls at utdallas.edu (Paul Schmehl))
[USN-54-1] TIFF library tool vulnerability (martin.pitt at canonical.com (Martin Pitt))
Socket unreacheable in Amp II engine (aluigi at autistici.org (Luigi Auriemma))
[USN-55-1] imlib2 vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Remote Code Execution with Parameters on Windows (XP SP2) (shreddersub7 at yahoo.com (ShredderSub7))
Re: Again: zone transfers, a spammer's dream? (bruno at wolff.to (Bruno Wolff III))
MDKSA-2005:001 - Updated libtiff packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:002 - Updated wxGTK2 packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:003 - Updated vim packages fix modeline vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:004 - Updated nasm packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
[ GLSA 200501-08 ] phpGroupWare: Various vulnerabilities (lewk at gentoo.org (Luke Macken))
[ GLSA 200501-09 ] xzgv: Multiple overflows (koon at gentoo.org (Thierry Carrez))
[ GLSA 200501-10 ] Vilistextum: Buffer overflow vulnerability (koon at gentoo.org (Thierry Carrez))
Arbitrary file inclusion in SugarCRM [PHP] (blindot at gmail.com (Santiago Cortes))
WinAc AND WinHKI ZIP File Directory Transversal (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
WinHKI - ARC File Extraction of 1KB to 1.56GB (theinsider at 012.net.il (Rafel Ivgi, The-Insider))

January 7 (41 messages)

Heap overflow in Mozilla Browser <= 1.7.3 NNTP code. (lcamtuf at ghettot.org (Michal Zalewski))
RE: Full-Disclosure Digest, Vol 1, Issue 2144 (maurizio_trinco at yahoo.com (Maurizio Trinco))
Microsoft AntiSpyware - First Impressions (pwicks at oxygen.com (James Patterson Wicks))
hackers hacking hackers wtf? (b.griffin at cqu.edu.au (Brad Griffin))
Trivial Bug in Symantec Security Products (b.griffin at cqu.edu.au (Brad Griffin))
WinHKI - ARC File Extraction of 1KB to 1.56GB (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Any study on patch availability? (dilabox at gmail.com (dila))
Microsoft AntiSpyware - First Impressions (irfan.syed at guoco.com (irfan.syed@...co.com))
Simple PHP Blog directory traversal vulnerability (madelman at iname.com (Madelman))
Linux kernel sys_uselib local root vulnerability (ihaquer at isec.pl (Paul Starzetz))
[iSEC] [Dailydave] Advisory 1/2005 - Linux Kernel arbitrary code execution (fwd) (ihaquer at isec.pl (Paul Starzetz))
[USN-56-1] exim4 vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Microsoft AntiSpyware - First Impressions (zx at castlecops.com (Paul Laudanski))
This sums up Yahoo!s securitypolicyto a -T- (df at erinye.com (Daniel Fischer))
Possible DNS compromise/poisoning? (ben at adversary.org (Ben McGinnes))
Novell WebAcces (noacces at lycos.nl (noAcces))
Advisory 1/2005 - Linux Kernel arbitrary code execution vulnerability. (s.esser at ematters.de (Stefan Esser))
Yahoo security and privacy (xploitable at gmail.com (n3td3v))
Linux kernel uselib() privilege elevation, corrected (ihaquer at isec.pl (Paul Starzetz))
Microsoft AntiSpyware - First Impressions (kf_lists at digitalmunition.com (KF (lists)))
Undocumented sun classes (thierry.haven at xmcopartners.com (Thierry Haven))
Microsoft AntiSpyware - First Impressions (kf_lists at digitalmunition.com (KF (lists)))
ndisasm bad opcodes interpretation (shadown at gmail.com (shadown))
Press Release Survivor Location Assistance Project (synackrst at gmail.com (synackrst))
Novell WebAcces (danbuk at gmail.com (DanBUK))
[grsec] grsecurity 2.1.0 release / 5 Linux kernel advisories (spender at grsecurity.net (Brad Spengler))
grsecurity 2.1.0 release / 5 Linux kernel advisories (spender at grsecurity.net (Brad Spengler))
Novell WebAcces (michael.horseman at capgemini.com (Horseman, Michael W.))
Microsoft AntiSpyware - First Impressions (krmaxwell at gmail.com (Kyle Maxwell))
Re: ndisasm bad opcodes interpretation (davek_throwaway at hotmail.com (Dave Korn))
Re: grsecurity 2.1.0 release / 5 Linux kernel advisories (gahmad at securityfocus.com (Greg Ahmad))
RE: Full-Disclosure Digest, Vol 1, Issue 2144 (uberguidoz at gmail.com (GuidoZ))
Re: ndisasm bad opcodes interpretation (shadown at gmail.com (shadown))
Microsoft AntiSpyware - First Impressions (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: ndisasm bad opcodes interpretation (davek_throwaway at hotmail.com (Dave Korn))
ndisasm bad opcodes interpretation (shadown at gmail.com (shadown))
RE: Full-Disclosure Digest, Vol 1, Issue 2144 (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
One more phpBB worm (infsec at gmail.com (Willem Koenings))
Re: ndisasm bad opcodes interpretation (shadown at gmail.com (shadown))
iDEFENSE Security Advisory [IDEF0725] Exim host_aton() Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
iDEFENSE Security Advisory [IDEF0731] Exim auth_spa_server() Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))

January 8 (14 messages)

Kindergarten on vacation (was: Obvious fake mail...) (s.esser at e-matters.de (Stefan Esser))
Outsch... Sorry... (s.esser at e-matters.de (Stefan Esser))
Firefox long URL field obfuscation vulnerability? (khermansen at ht-technology.com (Kristian Hermansen))
Backdoors and source code (was Re: Multiple Backdoors found...) (kkadow at gmail.com (Kevin))
WinHKI - ARC File Extraction of 1KB to 1.56GB (visitbipin at yahoo.com (bipin gautam))
Linux kernel uselib() privilege elevation, corrected (bits_n_bytes at gmx.de (Frank Dietrich))
Novell WebAcces (noacces at lycos.nl (noAcces))
Linux kernel uselib() privilege elevation, corrected (appelast at drumnbass.art.pl (Karol Wiesek))
Microsoft AntiSpyware: Will it be free and Vulnerable (randallm at fidmail.com (RandallM))
Microsoft AntiSpyware - First Impression (randallm at fidmail.com (RandallM))
Fax Message Received (scrotora at hushmail.com (Scrotora))
Microsoft AntiSpyware: Will it be free and Vulnerable (ostiguy at gmail.com (Matt Ostiguy))
Re: Document (scrotora at hushmail.com (Scrotora))
Using Google Desktop Search for remote system monitoring (abe.usher at sharp-ideas.net (Abe Usher))

January 9 (12 messages)

Mail Delivery (failure full-disclosure@...ts.netsys.com) (jan.muenther at nruns.com (jan.muenther@...ns.com))
Electronic Jihad on August 26, 04 ?? (stevex11 at sbcglobal.net (Steve Kudlak))
Re: Re: document_all (thor at pivx.com (thor@...x.com))
Using Google Desktop Search for remote system monitoring (barrie at reboot-robot.net (Barrie Dempster))
[USN-57-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Re: Error (tcleary2 at csc.com.au (tcleary2@....com.au))
Microsoft AntiSpyware - First Impressions (jerome.athias at free.fr (jerome.athias))
List Charter (johnc at grok.org.uk (John Cartwright))
Microsoft AntiSpyware - First Impressions (stfunub at gmail.com (Andrew Smith))
[ GLSA 200501-11 ] Dillo: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
Leading Israeli e-commerce sites XSS vulnerabilities advisory (avivra at 012.net.il (Aviv Raff))
Re: Bluetooth: BlueSnarf and BlueBug Full Disclusore (eric-mailing at club-internet.fr (Eric Detoisien))

January 10 (26 messages)

Re: Bluetooth: BlueSnarf and BlueBug Full Disclusore (srenna at vdbmusic.com (Scott Renna))
Microsoft AntiSpyware - First Impressions (mlande at bellsouth.net (Mary Landesman))
Linux kernel uselib() privilege elevation, corrected (evilninja at gmx.net (Christian))
Microsoft AntiSpyware - First Impressions (pwicks at oxygen.com (James Patterson Wicks))
Linux kernel uselib() privilege elevation, corrected (nix at syndicalist.net (Henrik Persson))
Multiple Backdoors found in eEye Products (IRISand SecureIIS) (xyberpix at xyberpix.com (xyberpix))
Linux kernel uselib() privilege elevation, corrected (jason at flacid.org (Jason Carr))
[Annonce][Contest] Call For Articles: MISC Magazine - CanSecWest/core05 (blancher at cartel-securite.fr (Cedric Blancher))
[ GLSA 200501-12 ] TikiWiki: Arbitrary command execution (vorlon at gentoo.org (Matthias Geerdsen))
[ GLSA 200501-13 ] pdftohtml: Vulnerabilities in included Xpdf (koon at gentoo.org (Thierry Carrez))
Re: Hi (scrotora at hushmail.com (Scrotora))
Kernelpanik Labs Digest 2005-1 (seclists at kernelpanik.org (Kernelpanik Labs - Security Lists))
SUSE Security Announcement: libtiff/tiff (SUSE-SA:2005:001) (thomas at suse.de (Thomas Biege))
Microsoft AntiSpyware: Will it be free and Vulnerable (var at deny-all.com (Vincent Archer))
Kernelpanik Labs Digest 2005-1 (nd at perlig.de (André Malo))
[USN-58-1] MIT Kerberos server vulnerability (martin.pitt at canonical.com (Martin Pitt))
bluetooth bluesnarfing tool (dante at alighieri.org (Davide Del Vecchio))
Encrypted Messenger DoS Vulnerability (evilpacket at gmail.com (Adam Baldwin))
Google Hacking and SiteDigger 2.0 (javapro13 at mac.com (Kartik Trivedi))
AV security contacts (dbounds at intrusense.com (Darren Bounds))
[USN-59-1] mailman vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Multi-vendor AV gateway image inspection bypass vulnerability (dbounds at intrusense.com (Darren Bounds))
[AppSecInc Team SHATTER Security Advisory] Microsoft Windows Improper Token Validation (vrathod at appsecinc.com (Team SHATTER (Application Security, Inc.)))
[AppSecInc Team SHATTER Security Advisory] Microsoft Windows LPC heap overflow (vrathod at appsecinc.com (Team SHATTER (Application Security, Inc.)))
Windows Improper Token Validation -Exploit- (cesarc56 at yahoo.com (Cesar))
Firespoofing [Firefox 1.0] (mikx at mikx.de (mikx))

January 11 (73 messages)

applicable exploit for winxp-sp2-uptodate Internet Explorer (liudieyu at umbrella.name (Liu Die Yu))
UPDATED: the insider exploit( = the latest ie 0day which involves SHOWMODALDIALOG) (liudieyu at umbrella.name (Liu Die Yu))
[ GLSA 200501-15 ] UnRTF: Buffer overflow (krispykringle at gentoo.org (Dan Margolis))
[ GLSA 200501-14 ] mpg123: Buffer overflow (krispykringle at gentoo.org (Dan Margolis))
logfile spammer (stuart at cyberdelix.net (lsi))
PoC to be released on 01/20/05 (chance_user at yahoo.com (Some User))
PoC to be released on 01/20/05 (jasonc at science.org (Jason Coombs))
PoC to be released on 01/20/05 (pwicks at oxygen.com (James Patterson Wicks))
PoC to be released on 01/20/05 (tuytumadre at att.net (tuytumadre@....net))
PoC to be released on 01/20/05 (measl at mfn.org (J.A. Terranson))
[OFF TOPIC] PoC to be released on 01/20/05 (b.griffin at cqu.edu.au (Brad Griffin))
PoC to be released on 01/20/05 (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
PoC to be released on 01/20/05 (uberguidoz at gmail.com (GuidoZ))
UPDATED: the insider exploit( = the latest ie 0day which involves SHOWMODALDIALOG) (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Re: AV security contacts (juha-matti.laurio at om.fi (juha-matti.laurio@...fi))
Interesting but suspicious possible phishing mail (dan_20407 at msn.com (DAN MORRILL))
Linux kernel uselib() privilege elevation, corrected (macygasp at gmail.com (Marcy Darcy))
Security Contact for Nokia Mobile phone softwares (rohit at kritikalsolutions.com (rohit@...tikalsolutions.com))
full-disclosure@...ts.netsys.com (nicolas.waisman at immunitysec.com (Nicolas Waisman))
UPDATED: the insider exploit( = the latest ie0day which involves SHOWMODALDIALOG) (ferruh at mavituna.com (Ferruh Mavituna))
Interesting but suspicious possible phishing mail (var at deny-all.com (Vincent Archer))
Metasploit Framework v2.3 (fdlist at digitaloffense.net (H D Moore))
VERITAS Backup Exec 8.x/9.x Remote Universal Exploit (class101 at hat-squad.com (class 101))
[ GLSA 200501-16 ] Konqueror: Java sandbox vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200501-17 ] KPdf, KOffice: More vulnerabilities in included Xpdf (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200501-18 ] KDE FTP KIOslave: Command injection (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
VERITAS Backup Exec 8.x/9.x Remote UniversalExploit (class101 at hat-squad.com (class 101))
Linux kernel uselib() privilege elevation, corrected (Athanasius at miggy.org (Athanasius))
Firespoofing [Firefox 1.0] (craig.soderland at sap.com (Soderland, Craig))
Shoe 1.0 - Remote Lace Overflow (dank.krew at gmail.com (stonersavant))
[OpenPKG-SA-2005.001] OpenPKG Security Advisory (perl) (openpkg at openpkg.org (OpenPKG))
I thought Microsoft were releasing new security patches today (11 Jan 2005)? (mike_diack at hotmail.com (Mike Diack))
[ GLSA 200501-19 ] imlib2: Buffer overflows in image decoding (krispykringle at gentoo.org (Dan Margolis))
WinHKI - ARC File Extraction of 1KB to 1.56GB (rivgi at finjan.com (Rafel Ivgi))
Firespoofing [Firefox 1.0] (james.greenhalgh at worldpay.com (James Greenhalgh))
I thought Microsoft were releasing new security patches today (11 Jan 2005)? (ostiguy at gmail.com (Matt Ostiguy))
Linux kernel uselib() privilege elevation, corrected (dragon at dragons.org.uk (Gaz Wilson))
I thought Microsoft were releasing new security patches today (11 Jan 2005)? (var at deny-all.com (Vincent Archer))
[ GLSA 200501-20 ] o3read: Buffer overflow during file conversion (koon at gentoo.org (Thierry Carrez))
[ GLSA 200501-21 ] HylaFAX: hfaxd unauthorized login vulnerability (koon at gentoo.org (Thierry Carrez))
I thought Microsoft were releasing new security patches today (11 Jan 2005)? (vh at helith.net (vh))
I thought Microsoft were releasing new securitypatches today (11 Jan 2005)? (Mark.Handy at morganstanley.com (Handy, Mark (IT)))
I thought Microsoft were releasing new securitypatches today (11 Jan 2005)? (larry at larryseltzer.com (Larry Seltzer))
I thought Microsoft were releasing new security patches today (11 Jan 2005)? (nocmonkey at gmail.com (Danny))
I thought Microsoft were releasing new security patches today (11 Jan 2005)? (pwicks at oxygen.com (James Patterson Wicks))
I thought Microsoft were releasing new security patches today (11 Jan 2005)? (pwicks at oxygen.com (James Patterson Wicks))
FW: MS Antispyware makes deal to leave Weatherbug alone (toddtowles at brookshires.com (Todd Towles))
I thought Microsoft were releasing new security patches today (11 Jan 2005)? (michealespinola at gmail.com (Micheal Espinola Jr))
I thought Microsoft were releasing new secu rity patches today (11 Jan 2005)? (prandal at herefordshire.gov.uk (Randal, Phil))
Firespoofing [Firefox 1.0] (and-bugtraq at doxdesk.com (Andrew Clover))
I thought Microsoft were releasing new security patches today (11 Jan 2005)? (abaker at gmail.com (ASB))
Microsoft AntiSpyware: Will it be free and Vulnerable (devis at easynix.net (devis))
Multi-vendor AV gateway image inspection bypass vulnerability (jeff.gillian at gmail.com (Jeff Gillian))
EEYE: Windows ANI File Parsing Buffer Overflow (dsoeder at eeye.com (Derek Soeder))
PoC to be released on 01/20/05 (exibar at thelair.com (Exibar))
I thought Microsoft were releasing new security patches today (11 Jan 2005)? (kf_lists at digitalmunition.com (KF (lists)))
RE: I thought Microsoft were releasing new secu rity patches today (11 Jan 2005)? (chris at get-tuf.com (Chris Brown))
I thought Microsoft were releasing new securitypatches today (11 Jan 2005)? (Mark.Handy at morganstanley.com (Handy, Mark (IT)))
FW: New Security Patches from Microsoft (toddtowles at brookshires.com (Todd Towles))
Multi-vendor AV gateway image inspection bypass vulnerability (nocmonkey at gmail.com (Danny))
Microsoft AntiSpyware: Will it be free and Vulnerable (fd.lists.dmargoli at af0.net (Dan Margolis))
[ GLSA 200501-22 ] poppassd_pam: Unauthorized password changing (koon at gentoo.org (Thierry Carrez))
FW: New Security Patches from Microsoft (larry at larryseltzer.com (Larry Seltzer))
Re: Firespoofing [Firefox 1.0] (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
Multi-vendor AV gateway image inspection bypassvulnerability (Mark.Senior at gov.ab.ca (Mark Senior))
FW: New Security Patches from Microsoft (toddtowles at brookshires.com (Todd Towles))
Microsoft AntiSpyware: Will it be free and Vulnerable (devis at easynix.net (devis))
Re: I thought Microsoft were releasing new security patches today (11 Jan 2005)? (smenard at nbnet.nb.ca (steve menard))
Linux kernel uselib() privilege elevation, corrected (smenard at nbnet.nb.ca (steve menard))
Using data: URLs for malware injection (kju-fd at fqdn.org (Michael Holzt))
MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (team_pwn4ge at outgun.com (Team Pwnge))
MDKSA-2005:005 - Updated nfs-utils packages fix 64bit vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
Multi-vendor AV gateway image inspection bypass vulnerability (lists at intrusense.com (Darren Bounds))

January 12 (54 messages)

UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : mountd remote denial of service (please_reply_to_security at sco.com (please_reply_to_security@....com))
MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (vh at helith.net (vh))
MediaSentry false positives? (kkadow at gmail.com (Kevin))
RE: Full-Disclosure: Interesting but suspicious possible phishing mail (randallm at fidmail.com (RandallM))
Multi-vendor AV gateway image inspection bypass vulnerability (stevenrakick at yahoo.com (Steven Rakick))
Microsoft AntiSpyware: Will it be free and Vulnerable (fd.lists.dmargoli at af0.net (Dan Margolis))
MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (andfarm at teknovis.com (Andrew Farmer))
[Fwd: Re: Microsoft AntiSpyware: Will it be free and Vulnerable] (devis at easynix.net (devis))
RE: Full-Disclosure: Interesting but suspicious possible phishing mail (spam at dacave.de (jigmed pema))
MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (seclists at securinews.com (Paul Kurczaba))
FW: MS Antispyware makes deal to leave Weatherbugalone (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
TFTPD32 Long FileName Remote Denial of Service (smaillist at gmail.com (Sowhat .))
MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (tux at penguinnetwerx.net (Kevin Reiter))
MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (full-disclosure at arago.de (Martin Allert))
MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (tux at penguinnetwerx.net (Kevin Reiter))
MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (michealespinola at gmail.com (Micheal Espinola Jr))
MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Using data: URLs for malware injection (rivgi at finjan.com (Rafel Ivgi))
UPDATE: [ GLSA 200412-25 ] CUPS: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
Reality, humor, and history (was Re: MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
(no subject) (skylined at edup.tudelft.nl (Berend-Jan Wever))
[Annonce][Contest] Call For Articles: MISC Magazine - CanSecWest/core05 (blancher at cartel-securite.fr (Cedric Blancher))
MailMonitor for Exchange has processed a suspicious mail (MailMonitor at kings.edu (MailMonitor@...gs.edu))
(no subject) (raoul at elforsoft.com (Raoul Nakhmanson-Kulish))
Using data: URLs for malware injection (kju-fd at fqdn.org (Michael Holzt))
MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (robert at roberthogan.net (Robert Hogan))
Linux kernel i386 SMP page fault handler privilege escalation (ihaquer at isec.pl (Paul Starzetz))
PoC to be released on 01/20/05 (skodliv at gmail.com (ren hoek))
Linux kernel i386 SMP page fault handler privilege escalation (macygasp at gmail.com (Marcy Darcy))
Attack Tool Kit 4.0 released (maru at scip.ch (Marc Ruef))
[Fwd: Re: Microsoft AntiSpyware: Will it be free and Vulnerable] (fd.lists.dmargoli at af0.net (Dan Margolis))
Apple Airport WDS DoS (dylang at thock.com (Dylan Griffiths))
Multi-vendor AV gateway image inspection bypass vulnerability - KMail (noamr at beyondsecurity.com (Noam Rathaus))
FW: MS Antispyware makes deal to leaveWeatherbugalone (mlande at bellsouth.net (Mary Landesman))
Attack Tool Kit 4.0 released (maru at scip.ch (Marc Ruef))
Incorrect characters (onestepto at yahoo.com.au (Paul))
MediaSentry false positives? (deindl at irt.de (Albert Deindl))
Incorrect characters (joel at servicestyle.com (Joel Merrick))
Reality, humor, and history (was Re: MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (bruen at coldrain.net (Stormwalker))
Reality, humor, and history (was Re: MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (andfarm at teknovis.com (Andrew Farmer))
Multi-vendor AV gateway image inspection bypass vulnerability (stevenrakick at yahoo.com (Steven Rakick))
AOL password issue (mike124 at gmail.com (Michael Yandrischovitz))
T-Mobile Hacker and server vulnerabilities (khermansen at ht-technology.com (Kristian Hermansen))
[waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke (come2waraxe at yahoo.com (Janek Vind))
PoC to be released on 01/20/05 (eric at arcticbears.com (Eric Paynter))
[ GLSA 200501-23 ] Exim: Two buffer overflows (vorlon at gentoo.org (Matthias Geerdsen))
Multi-vendor AV gateway image inspection bypass vulnerability (nils at steering-group.net (Nils Ketelsen))
T-Mobile Hacker and server vulnerabilities (hevnsnt at gmail.com (hevnsnt))
PoC to be released on 01/20/05 (seclists at securinews.com (Paul Kurczaba))
T-Mobile Hacker and server vulnerabilities (kf_lists at digitalmunition.com (KF (lists)))
MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (seclists at securinews.com (Paul Kurczaba))
PoC to be released on 01/20/05 (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Multi-vendor AV gateway image inspection bypass vulnerability (frank at knobbe.us (Frank Knobbe))
PoC to be released on 01/20/05 (uberguidoz at gmail.com (GuidoZ))

January 13 (34 messages)

InternetExploiter 3.2 (skylined at edup.tudelft.nl (Berend-Jan Wever))
Multi-vendor AV gateway image inspection bypass vulnerability (stevenrakick at yahoo.com (Steven Rakick))
Multi-vendor AV gateway image inspection bypass vulnerability (frank at knobbe.us (Frank Knobbe))
MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Re: Full-Disclosure: Interesting but suspicious possible phishing mail (bruno at wolff.to (Bruno Wolff III))
MDKSA-2005:006 - Updated hylafax packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:007 - Updated imlib packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
T-Mobile Hacker and server vulnerabilities (xillwillx at gmail.com (Ill will))
T-Mobile Hacker and server vulnerabilities (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
T-Mobile Hacker and server vulnerabilities (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Reality, humor, and history (was Re: MORE CRITICAL FLAWS IN MS WINDOWS EXPLORER (dave at horsfall.org (Dave Horsfall))
[TURBOLINUX SECURITY INFO] 13/Jan/2005 (security-announce at turbolinux.co.jp (Turbolinux))
T-Mobile Hacker and server vulnerabilities (vh at helith.net (vh))
Re: Linux kernel i386 SMP page fault handler privilege escalation (cdevine at lab.b-care.net (Christophe Devine))
Is that your password? (dan at f-box.org (Daniel Bartlett))
T-Mobile Hacker and server vulnerabilities (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Is that your password? (Thierry at sniff-em.com (Thierry Zoller))
Is that your password? (joel.esler at rcert-s.army.mil (Esler, Joel - Contractor))
Is that your password? (mwieser at gmx.de (Matthias Wieser))
Re: Linux kernel i386 SMP page fault handler privilege escalation (ihaquer at isec.pl (Paul Starzetz))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (john.herbert at ins.com (john.herbert@....com))
GMail Messages are Vulnerable to Interception (jerome.athias at free.fr (Jerome ATHIAS))
(no subject) (the_insider at mail.com (The Insider))
GMail Messages are Vulnerable to Interception (ismail at kde.org.tr (Ismail Donmez))
OpenSSHd - Publickey-Authentication - Has 3.9 problems with 16384Bit DSA-keys? (vh at helith.net (vh))
Trend Micro Control Manager - Enterprise Edition 3.0 Web application Replay attack (advisory at cirt.dk (CIRT Advisory))
OpenSSHd - Publickey-Authentication - Has 3.9 problems with 16384Bit DSA-keys? (frank at knobbe.us (Frank Knobbe))
Server crash in Breed patch #1 (aluigi at autistici.org (Luigi Auriemma))
MBSA not catching 886185 (jlay at ameriben.com (James Lay))
MediaSentry false positives? (kkadow at gmail.com (Kevin))
iDEFENSE Security Advisory 01.13.05: Apple iTunes Playlist Parsing Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense…)
little crash in IE (sourvivor at phreaker.net (sourvivor))
iDEFENSE Security Advisory 01.13.05: MySQL MaxDB WebAgent websql logon Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...f…)
iDEFENSE Security Advisory 01.13.05: SGI IRIX inpview Design Error Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))

January 14 (43 messages)

little crash in IE (seclists at securinews.com (Paul Kurczaba))
[ GLSA 200501-24 ] tnftp: Arbitrary file overwriting (lewk at gentoo.org (Luke Macken))
MediaSentry false positives? (jeff-kell at utc.edu (Jeff Kell))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (jnielsen at sct.com (jnielsen@....com))
MediaSentry false positives? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (jkuperus at planet.nl (jkuperus@...net.nl))
Internet Explorer (SP2) - Remote File Download Information Bar Bypass (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Protected message (cm at coretec.at (Cm))
Internet Explorer valid JavaScript-file successfull load detection local file enumeration (skylined at edup.tudelft.nl (Berend-Jan Wever))
Internet Explorer valid JavaScript-file successfull load detection local file enumeration (tom.koehler at gmx.net (Tom Koehler))
[USN-60-0] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Amazon.com is down (jqxin at iastate.edu (Jianqiang Xin))
[MISC] SBC Blocks Port 25 - No Exceptions. (measl at mfn.org (J.A. Terranson))
Amazon.com is down (measl at mfn.org (J.A. Terranson))
Amazon.com is down (hackerwacker at cybermesa.com (james edwards))
Amazon.com is down (fredrik.je.karlsson at gmail.com (Fredrik Karlsson))
[MISC] SBC Blocks Port 25 - No Exceptions. (exibar at thelair.com (Exibar))
Amazon.com is down (dsbryhan at chartermi.net (Scot Bryhan))
DIMVA 2005 - Second Call for Papers (Marc.Heuse at nruns.com (Marc Heuse))
Problem in Spybot S&D (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Amazon.com is down (NicolaD at education.mondadori.it (Nicola Del Vacchio))
network associates mcafee controls (bvsev at mail.ru (bvsev@...l.ru))
[MISC] SBC Blocks Port 25 - No Exceptions. (lee at xmgnetworks.com (XmG Lee))
iDEFENSE Security Advisory 01.14.05: Exim dns_buld_reverse() Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
Problem in Spybot S&D (dilabox at gmail.com (dila))
network associates mcafee controls (dilabox at gmail.com (dila))
Problems with Spybot Search & Destroy (caldcv at students.fccj.org (caldcv@...dents.fccj.org))
Amazon.com is down (dk at pwarchitects.com (dk))
Multi-vendor AV gateway image inspection bypass vulnerability (trog at uncon.org (Trog))
RE: [MISC] SBC Blocks Port 25 - No Exceptions. (davids at webmaster.com (David Schwartz))
network associates mcafee controls (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Amazon.com is down (measl at mfn.org (J.A. Terranson))
[MISC] SBC Blocks Port 25 - No Exceptions. (measl at mfn.org (J.A. Terranson))
Amazon.com is down (dsbryhan at chartermi.net (Scot Bryhan))
[MISC] SBC Blocks Port 25 - No Exceptions. (nocon at texas-shooters.com (noconflic))
little crash in IE (y_avenger_y at ua.fm (Alex V. Lukyanenko))
Amazon.com is down (y_avenger_y at ua.fm (Alex V. Lukyanenko))
[MISC] SBC Blocks Port 25 - No Exceptions. (measl at mfn.org (J.A. Terranson))
[MISC] SBC Blocks Port 25 - No Exceptions. (hackerwacker at cybermesa.com (james edwards))
Amazon.com is down (stfunub at gmail.com (Andrew Smith))
SBC Blocks Port 25 - No Exceptions. (tool8185 at adelphia.net (matt))
Amazon.com is down (seclists at securinews.com (Paul Kurczaba))
RPVS - Remote PHP Vulnerability Scanner (open source) (n.himeur at free.com (Nourredine Himeur))

January 15 (25 messages)

Google.com down? (iago at valhallalegends.com (Ron))
Amazon.com is down (mlande at bellsouth.net (Mary Landesman))
[MISC] SBC Blocks Port 25 - No Exceptions. (seclists at securinews.com (Paul Kurczaba))
Google.com down? (maxvalde at fis.unam.mx (Max Valdez))
Google.com down? (nocmonkey at gmail.com (Danny))
Google.com down? (joel at servicestyle.com (Joel Merrick))
Google.com down? (hackerwacker at cybermesa.com (james edwards))
Google.com down? (vh at helith.net (vh))
Google.com down? (iago at valhallalegends.com (Ron))
Google.com down? (srenna at vdbmusic.com (Scott Renna))
Amazon.com is down (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[MISC] SBC Blocks Port 25 - No Exceptions. (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
T-Mobile Hacker and server vulnerabilities (jftucker at gmail.com (James Tucker))
Problem in Spybot S&D (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Problem in Spybot S&D (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Amazon.com is down (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
XSS in the nested BB tag in many forum (pigrelax at yandex.ru (pigrelax))
Various Vulnerabilities in SparkleBlog (bugtracklist at freemail.hu (Kovács László))
linux or windows 2003 based wardialer (jackhammer at gmail.com (Paul Tinsley))
linux or windows 2003 based wardialer (iago at valhallalegends.com (Ron))
linux or windows 2003 based wardialer (nodialtone at comcast.net (Byron Copeland))
linux or windows 2003 based wardialer (mcuttler at bnl.gov (Matt Cuttler))
Google.com down? (esler at knology.net (Joel Esler))
Google.com down? (seclists at securinews.com (Paul Kurczaba))
linux or windows 2003 based wardialer (frank at knobbe.us (Frank Knobbe))

January 16 (14 messages)

Google.com down? (danjr at voyager.net (danjr))
Google.com down? (measl at mfn.org (J.A. Terranson))
Google.com down? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[MISC] SBC Blocks Port 25 - No Exceptions. (sean at donelan.com (Sean Donelan))
iDEFENSE Security Advisory 01.14.05: Exim dns_buld_reverse() Buffer Overflow Vulnerability (mh+full-disclosure at zugschlus.de (Marc Haber))
linux or windows 2003 based wardialer (dcdave at att.net (dcdave@....net))
Re: Google.com down? (steve_r125 at yahoo.co.uk (Steve R))
phpGiftReq SQL Injection (madelman at iname.com (Madelman))
Minis directory traversal vulnerability (madelman at iname.com (Madelman))
BCS 2005 Asia - Final Speakers list and Call for Posters (bcs2005 at bellua.com (Anthony Zboralski))
[ GLSA 200501-25 ] Squid: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
iDEFENSE Security Advisory 01.14.05: Exim dns_buld_reverse() Buffer Overflow Vulnerability (fw at deneb.enyo.de (Florian Weimer))
Wide spread DSV (randallm at fidmail.com (RandallM))
iDEFENSE Security Advisory 01.14.05: Exim dns_buld_reverse() Buffer Overflow Vulnerability (nick at virus-l.demon.co.uk (Nick FitzGerald))

January 17 (31 messages)

Wide spread DSV (nodialtone at comcast.net (Byron Copeland))
Re: Msg reply (als at thangorodrim.de (Als))
Wide spread DSV (fd.lists.dmargoli at af0.net (Dan Margolis))
Wide spread DSV (krmaxwell at gmail.com (Kyle Maxwell))
Wide spread DSV (nodialtone at comcast.net (Byron Copeland))
GNU gcc vuln. < 3.4.3 local root (.php) (zzagorrzzagorr at hotmail.com (ZzagorR ZzagorR))
Zone transfers, a spammer's dream? (etomcat at freemail.hu (Feher Tamas))
Wide spread DSV (etomcat at freemail.hu (Feher Tamas))
GNU gcc vuln. < 3.4.3 local root (.php) (andfarm at teknovis.com (Andrew Farmer))
GNU gcc vuln. < 3.4.3 local root (.php) (zzagorrzzagorr at hotmail.com (ZzagorR ZzagorR))
Wide spread DSV (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Illegal mind control is coming to the USA, black helicopters (etomcat at freemail.hu (Feher Tamas))
Multiple Vulnerabilities in Netgear FVS318 Router (advisories at securinews.com (Paul Kurczaba))
Illegal mind control is coming to the USA, black helicopters (var at deny-all.com (Vincent Archer))
[OpenPKG-SA-2005.002] OpenPKG Security Advisory (sudo) (openpkg at openpkg.org (OpenPKG))
[OpenPKG-SA-2005.003] OpenPKG Security Advisory (a2ps) (openpkg at openpkg.org (OpenPKG))
Illegal mind control is coming to the USA, black helicopters (measl at mfn.org (J.A. Terranson))
Illegal mind control is coming to the USA, black helicopters (exibar at thelair.com (Exibar))
Novell GroupWise WebAccess error modules loading (maru at scip.ch (Marc Ruef))
Netegrity SiteMinder smpwservicescgi.exe target specification (maru at scip.ch (Marc Ruef))
SUSE Security Announcement: php4/mod_php4 (SUSE-SA:2005:002) (ludwig.nussel at suse.de (Ludwig Nussel))
New phishing trick? (jeff-kell at utc.edu (Jeff Kell))
Illegal mind control is coming to the USA, black helicopters (seclists at securinews.com (Paul Kurczaba))
Illegal mind control is coming to the USA, black helicopters (var at deny-all.com (Vincent Archer))
Wide spread DSV (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
MDKSA-2005:008 - Updated cups packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability (theinsider at 012.net.il (Rafel Ivgi, The-Insider))
Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations (theinsider at 012.net.il (Rafel Ivgi, The-Inside…)
Illegal mind control is coming to the USA, black helicopters (manbsd at gmail.com (MaNUaL))
iDEFENSE Security Advisory 01.17.05: Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs…)
iDEFENSE Security Advisory 01.17.05: AWStats Remote Command Execution Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))

January 18 (21 messages)

Steam looses its power (michealespinola at gmail.com (Micheal Espinola Jr))
Steam looses its power (optik at wccnet.org (Rick))
GNU gcc vuln. < 3.4.3 local root (.php) (evilninja at gmx.net (Christian))
Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations (Thierry at sniff-em.com (Thierry Zoller))
network associates mcafee controls (bvsev at mail.ru (bvsev@...l.ru))
[USN-61-1] vim vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-62-1] imagemagick vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-63-1] MySQL client vulnerability (martin.pitt at canonical.com (Martin Pitt))
Security status of osCommerce? (joel at servicestyle.com (Joel Merrick))
network associates mcafee controls (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Shoe 1.0 - Remote Lace Overflow (sutpen at gmail.com (Thomas Sutpen))
UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : chroot A known exploit can break a chroot prison. (please_reply_to_security at sco.com (please_reply_to_security…)
Illegal mind control is coming to the USA, black helicopters (dufresne at winternet.com (Ron DuFresne))
Illegal mind control is coming to the USA, black helicopters (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations (skylined at edup.tudelft.nl (Berend-Jan Wev…)
Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations (markus-kern at gmx.net (Markus Kern))
iDEFENSE Security Advisory 01.18.05: Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow (idlabs-advisories at idefense.com (idlabs-advisories@...fense…)
Re: [bugtraq] Novell GroupWise WebAccess error modules loading (pete.connolly at btinternet.com (Pete Connolly))
[USN-62-1] imagemagick vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-61-1] vim vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-63-1] MySQL client vulnerability (martin.pitt at canonical.com (Martin Pitt))

January 19 (27 messages)

Is that your password? (blueboar at thievco.com (blueboar@...evco.com))
The UPC packer (3xp101t at gmail.com (Juan dela Cruz))
The UPC packer (propolice at gmail.com (Eduardo Tongson))
Re: The UPC packer (3xp101t at gmail.com (Juan dela Cruz))
SMTP Spam Attempt? (mike at thompsonmike.co.uk (Michael Thompson))
grsecurity 2.1.0 release / 5 Linux kernel advisories (meissner at suse.de (Marcus Meissner))
[USN-64-1] xpdf, CUPS vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[security] Novell GroupWise WebAccess error modules loading (tyron.miller at its.mq.edu.au (tyron miller))
Re: Paper: How to exploit overflow vulnerability under Fedora Core 2 (arjanv at redhat.com (Arjan van de Ven))
Re: Kazaa Sig2Dat Protocol Remote Integer Overflow and Denial Of Service by creating files in arbitrary locations (markus-kern at gmx.net (Markus Kern))
[USN-65-1] Apache utility script vulnerability (martin.pitt at canonical.com (Martin Pitt))
Cisco Security Advisory: Vulnerability in Cisco IOS Embedded Call Processing Solutions (psirt at cisco.com (Cisco Systems Product Security Incident Response Te…)
iDEFENSE Security Advisory 01.14.05: Exim dns_buld_reverse() Buffer Overflow Vulnerability (customerservice at idefense.com (customer service mailbox))
Multiple vulnerabilities in Konversation (wouter at coekaerts.be (Wouter Coekaerts))
Google.com down? (danjr at voyager.net (danjr))
Google.com down? (measl at mfn.org (J.A. Terranson))
Re: [Dshield] SQL injection worm ? (mducharme at cybergeneration.com (Maxime Ducharme))
BlackBerry PIN's are Not Confidential (johnccosta at yahoo.ca (John Costa))
Illegal mind control is coming to the USA,black helicopters (kin186 at hackermail.com (White Self-Existing World-Bridger))
FW: Re: [Dshield] SQL injection worm ? (tmyers at coactivesys.com (Tim Myers))
Re: Illegal mind control... etc (sil at infiltrated.net (J. Oquendo))
MDKSA-2005:009 - Updated mpg123 packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:010 - Updated playmidi packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:011 - Updated xine packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Illegal mind control rtrc. (chromazine at sbcglobal.net (Steve Kudlak))
iDEFENSE Security Advisory 01.19.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities (idlabs-advisories at idefense.com (idlabs-advisories@ide…)
[USN-64-1] xpdf, CUPS vulnerabilities (martin.pitt at canonical.com (Martin Pitt))

January 20 (16 messages)

Re: Thank you! (als at thangorodrim.de (Als))
Integrigy Security Advisory - High Risk Security Issues in the Oracle Database and Oracle Applications (alerts at integrigy.com (Integrigy Security))
harddisk encryption (ledeve at gmx.net (Lentila de Vultur))
ASH Hashing Algorithm (seasonedpaper at djc.people.inodetech.com (seasonedpaper@....people.inodetech.com))
[TURBOLINUX SECURITY INFO] 20/Jan/2005 (security-announce at turbolinux.co.jp (Turbolinux))
Re: [ISN] Book Review: Forensic Discovery (bcs2005 at bellua.com (Anthony Zboralski))
[USN-66-1] PHP vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
harddisk encryption (mkleinpeter at ebay.com (Mike Klein))
harddisk encryption (arr at watson.org (Andrew R. Reiter))
harddisk encryption (dk at pwarchitects.com (dk))
OpenServer 5.0.6 OpenServer 5.0.7 : bind remote attacker can poison the nameserver cache (please_reply_to_security at sco.com (please_reply_to_security@....com…)
[USN-67-1] Squid vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Re: [ISN] Book Review: Forensic Discovery (jmark2099 at yahoo.com (j mark))
[ GLSA 200501-26 ] ImageMagick: PSD decoding heap overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200501-27 ] Ethereal: Multiple vulnerabilities (lewk at gentoo.org (Luke Macken))
iDEFENSE Security Advisory 01.20.05: 3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability (idlabs-advisories at idefense.com (idlabs-advisor…)

January 21 (21 messages)

UnixWare 7.1.3 UnixWare 7.1.1 : OpenSSL Multiple Vulnerabilities (please_reply_to_security at sco.com (please_reply_to_security@....com))
:) (list at nolog.org (list@...og.org))
harddisk encryption (dk at pwarchitects.com (dk))
harddisk encryption (andfarm at teknovis.com (Andrew Farmer))
[sb] [USN-65-1] Apache utility script vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: [ISN] Book Review: Forensic Discovery (bcs2005 at bellua.com (Anthony Zboralski))
harddisk encryption (frank at knobbe.us (Frank Knobbe))
harddisk encryption (stefan.schlott at informatik.uni-ulm.de (Stefan Schlott))
harddisk encryption (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: Full-Disclosure Digest, Vol 2, Issue 44 (Bas.Hendriks at pinkroccade.com (Hendriks Bas))
PHRACK #63 CALL FOR PAPERS (dontreply at phrack.org (dontreply@...ack.org))
SUSE Security Announcement: kernel local privilege escalation (SUSE-SA:2005:003) (meissner at suse.de (Marcus Meissner))
New phishing trick? (stevex11 at sbcglobal.net (Steve Kudlak))
Arbitrary files overwriting through skins in DivX Player 2.6 (aluigi at autistici.org (Luigi Auriemma))
Netscape Overflow. (carlos.ulver at gmail.com (Carlos Ulver))
[Fwd: NOVL-2005-10096251 GroupWise WebAccess error handling modules (report)] (nsb at ceh.ac.uk (Nicolas Bertrand))
[ GLSA 200501-28 ] Xpdf, GPdf: Stack overflow in Decrypt::makeFileKey2 (koon at gentoo.org (Thierry Carrez))
Re: Netscape Overflow. (carlos.ulver at gmail.com (Carlos Ulver))
Scan for IRC (randallm at fidmail.com (RandallM))
Scan for IRC (fulldisclosure at miggy.org (Athanasius))
NOVL-2005-10096251 GroupWise WebAccess error handling modules (report) (ereed at novell.com (Ed Reed))

January 22 (22 messages)

[ GLSA 200501-29 ] Mailman: Cross-site scripting vulnerability (lewk at gentoo.org (Luke Macken))
Scan for IRC (Shadow333 at gmx.at (Oliver Leitner))
Re: Msg reply (list at nolog.org (List))
RE: Scan for IRC (Blady at UniBG.net (Nikolay Baramov))
RE: Scan for IRC (frank at knobbe.us (Frank Knobbe))
Scan for IRC (kkadow at gmail.com (Kevin))
Scan for IRC (warchild at spoofed.org (Jon Hart))
RE: Message Notify (list at nolog.org (List))
Scan for IRC (pauls at utdallas.edu (Paul Schmehl))
Packet/Signature-based Firewall (naverxp at yahoo.com.sg (John))
Packet/Signature-based Firewall (mail at hackingspirits.com (Debasis Mohanty))
[ GLSA 200501-30 ] CUPS: Stack overflow in included Xpdf code (koon at gentoo.org (Thierry Carrez))
Packet/Signature-based Firewall (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Scan for IRC (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Packet/Signature-based Firewall (naverxp at yahoo.com.sg (John))
Scan for IRC (hhoffman at ip-solutions.net (Harry Hoffman))
several BO's in goldenftpd (barbsie at gmail.com (barabas mutsonline))
Packet/Signature-based Firewall (ggl at free.fr (Greg Leclercq))
Packet/Signature-based Firewall (naverxp at yahoo.com.sg (John))
Packet/Signature-based Firewall (ggl at free.fr (Greg Leclercq))
Packet/Signature-based Firewall (naverxp at yahoo.com.sg (John))
[sb] [USN-65-1] Apache utility script vulnerability (martin.pitt at canonical.com (Martin Pitt))

January 23 (7 messages)

Re: Internet Explorer URL obfuscation. (skylined at edup.tudelft.nl (Berend-Jan Wever))
The UPC packer (uberguidoz at gmail.com (GuidoZ))
[ GLSA 200501-31 ] teTeX, pTeX, CSTeX: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
[ GLSA 200501-32 ] KPdf, KOffice: Stack overflow in included Xpdf code (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Phrack is dead, long live Phrack! (nobody at tatooine.homelinux.net (starwars))
PHP Worms (stfunub at gmail.com (Andrew Smith))
[ GLSA 200501-33 ] MySQL: Insecure temporary file creation (lewk at gentoo.org (Luke Macken))

January 24 (26 messages)

PHP Worms (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
blocking SkyPE? (alain at ait.ac.th (Alain Fauconnet))
2 vulnerabilities combine to auto execute received files in Nokia series 60 OS (rohit at kritikalsolutions.com (rohit@...tikalsolutions.com))
DIMVA 2005 - Final Call for Papers (Marc.Heuse at nruns.com (Marc Heuse))
DIMVA 2005 - Final Call for Papers (Marc.Heuse at nruns.com (Marc Heuse))
[USN-68-1] enscript vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
New PGP key (carlos.ulver at gmail.com (Carlos Ulver))
[USN-69-1] Evolution vulnerability (martin.pitt at canonical.com (Martin Pitt))
[ GLSA 200501-34 ] Konversation: Various vulnerabilities (lewk at gentoo.org (Luke Macken))
SUSE Security Announcement: Realplayer 8 (SUSE-SA:2005:004) (meissner at suse.de (Marcus Meissner))
2 vulnerabilities combine to auto execute received files in Nokia series 60 OS (kf_lists at digitalmunition.com (KF (lists)))
[lists] Phrack is dead, long live Phrack! (purdy at tecman.com (Curt Purdy))
2 vulnerabilities combine to auto execute received files in Nokia series 60 OS (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RealPlayer 10.5 Denial of Service and possible Overflow (carlos.ulver at gmail.com (Carlos Ulver))
2 vulnerabilities combine to auto execute received files in Nokia series 60 OS (seclists at securinews.com (Paul Kurczaba))
2 vulnerabilities combine to auto execute received files in Nokia series 60 OS (Thierry at sniff-em.com (Thierry Zoller))
2 vulnerabilities combine to auto execute received files in Nokia series 60 OS (hades at psilanthropy.org (Anders Langworthy))
SECURITY.NNOV: Multiple applications fd_set structure bitmap array index overflow (3APA3A at security.nnov.ru (3APA3A))
Local buffer-overflow in W32Dasm 8.93 (aluigi at autistici.org (Luigi Auriemma))
MDKSA-2005:012 - Updated zhcon packages fix vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:013 - Updated ethereal packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
[ GLSA 200501-35 ] Evolution: Integer overflow in camel-lock-helper (lewk at gentoo.org (Luke Macken))
blocking SkyPE? (lists-security at nettracers.com (lists-security@...tracers.com))
blocking SkyPE? (brenno at dewinter.com (Brenno J.S.A.A.F. de Winter))
Terminal Server vulnerabilities (daniels at Ponderosatel.com (Daniel Sichel))
iDEFENSE Security Advisory 01.24.05: DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisorie…)

January 25 (60 messages)

MDKSA-2005:014 - Updated squid packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
2 vulnerabilities combine to auto execute received files in Nokia series 60 OS (dk at pwarchitects.com (dk))
blocking SkyPE? (alain at ait.ac.th (Alain Fauconnet))
Can we have... (b.anderson at ecu.edu.au (Brian Anderson))
Can we have... (shrdlu at deaddrop.org (Etaoin Shrdlu))
MDKSA-2005:015 - Updated mailman packages fix vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
blocking SkyPE? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Can we have... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
blocking SkyPE? (alain at ait.ac.th (Alain Fauconnet))
Can we have... (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Terminal Server vulnerabilities (dan at losangelescomputerhelp.com (Daniel H. Renner))
blocking SkyPE? (lists-security at nettracers.com (lists-security@...tracers.com))
2 vulnerabilities combine to auto execute received files in Nokia series 60 OS (allan.vanleeuwen at orangemail.nl (Leeuwen, Allan van))
Mirroring procfs. (k_preeth at rediffmail.com (preeth k))
Can we have... (rik.bobbaers at cc.kuleuven.ac.be (Harry de Grote))
Can we have... (nick at virus-l.demon.co.uk (Nick FitzGerald))
hushmail.com, is this true? (temp739 at yahoo.com (Pseudo Nym))
Can we have... (andfarm at teknovis.com (Andrew Farmer))
hushmail.com, is this true? (stfunub at gmail.com (Andrew Smith))
Re: Terminal Server vulnerabilities (larry at larryseltzer.com (Larry Seltzer))
blocking SkyPE? (alain at ait.ac.th (Alain Fauconnet))
hushmail.com, is this true? (temp739 at yahoo.com (Pseudo Nym))
hushmail.com, is this true? (atte.peltomaki at f-secure.com (Atte Peltomaki))
Mirroring procfs. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
hushmail.com, is this true? (shrdlu at deaddrop.org (Etaoin Shrdlu))
[USN-70-1] Perl DBI module vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: Terminal Server vulnerabilities (Mark.Senior at gov.ab.ca (Mark Senior))
Re: Terminal Server vulnerabilities (larry at larryseltzer.com (Larry Seltzer))
OWASP LA chapter meeting (javapro13 at mac.com (Kartik Trivedi))
OWASP LA chapter meeting (javapro13 at mac.com (Kartik Trivedi))
hushmail.com, is this true? (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Re: Terminal Server vulnerabilities (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
hushmail.com, is this true? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
blocking SkyPE? (lists-security at nettracers.com (lists-security@...tracers.com))
phpEventCalendar HTML injection (madelman at iname.com (Madelman))
SMTP Spam Attempt? (xyberpix at xyberpix.com (xyberpix))
Mirroring procfs. (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
[ GLSA 200501-36 ] AWStats: Remote code execution (lewk at gentoo.org (Luke Macken))
Phrack is dead, long live Phrack! (xyberpix at xyberpix.com (xyberpix))
[lists] Terminal Server vulnerabilities (purdy at tecman.com (Curt Purdy))
hushmail.com, is this true? (temp739 at yahoo.com (Pseudo Nym))
[lists] Terminal Server vulnerabilities (swtornio at mac.com (Steve Tornio))
hushmail.com, is this true? (hackerwacker at cybermesa.com (james edwards))
Phrack is dead, long live Phrack! (msh at datakill.us (msh at datakill))
[lists] Terminal Server vulnerabilities (toddtowles at brookshires.com (Todd Towles))
hushmail.com, is this true? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
hushmail.com, is this true? (toddtowles at brookshires.com (Todd Towles))
OpenServer 5.0.6 OpenServer 5.0.7 : scosessoin local privilege elevation (please_reply_to_security at sco.com (please_reply_to_security@....com))
OpenServer 5.0.6 OpenServer 5.0.7 : wu-ftp local users can bypass access restrictions (please_reply_to_security at sco.com (please_reply_to_security@....com))
hushmail.com, is this true? (hackerwacker at cybermesa.com (james edwards))
hushmail.com, is this true? (chows at ozemail.com.au (Gregh))
hushmail.com, is this true? (iago at valhallalegends.com (Ron))
hushmail.com, is this true? (temp739 at yahoo.com (Pseudo Nym))
hushmail.com, is this true? (hackerwacker at cybermesa.com (james edwards))
RE: hushmail.com, is this true? (sil at infiltrated.net (J. Oquendo))
Re: hushmail.com, is this true? (sil at infiltrated.net (J. Oquendo))
Hushmail logging (nail in the coffin) (sil at infiltrated.net (J. Oquendo))
Re: Terminal Server vulnerabilities (builder173 at hotmail.com (Bob the Builder))
hushmail.com, is this true? (dbounds at intrusense.com (Darren Bounds))
Re: Terminal Server vulnerabilities (larry_seltzer_is_a_fraud at canada.com (larry_seltzer_is_a_fraud@...ada.com))

January 26 (41 messages)

blocking SkyPE? (alain at ait.ac.th (Alain Fauconnet))
Email Privacy (was hushmail.com, is this true?) (measl at mfn.org (J.A. Terranson))
Email Privacy (was hushmail.com, is this true?) (shrdlu at deaddrop.org (Etaoin Shrdlu))
MDKSA-2005:016 - Updated gpdf packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:017 - Updated xpdf packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:018 - Updated cups packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:019 - Updated koffice packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:020 - Updated kdegraphics packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:021 - Updated tetex packages fix buffer overflow vulnerability (security at linux-mandrake.com (Mandrake Linux Security Team))
MDKSA-2005:022 - Updated cups packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrake Linux Security Team))
Re: Terminal Server vulnerabilities (offtopic at mail.ru (offtopic))
MPLS intrusion detection (rnaydenov at aegis-is.com (Rossen Naydenov))
/usr/bin/trn local root exploit (zzagorrzzagorr at hotmail.com (Z z a g o r R))
Can we have... (stevex11 at sbcglobal.net (Steve Kudlak))
DMA[2005-0125a] - 'berlios gpsd format string vulnerability' (kf_lists at digitalmunition.com (KF (Lists)))
[TURBOLINUX SECURITY INFO] 26/Jan/2005 (security-announce at turbolinux.co.jp (Turbolinux))
hushmail.com, is this true? (Libraries, The Patriot Act, Forcoing Issues Etc.) (RAL for some) (stevex11 at sbcglobal.net (Steve Kudlak))
/usr/bin/trn local root exploit (msh at datakill.us (msh at datakill))
/usr/bin/trn local root exploit (thyes at gmx.net (Frank Thyes))
/usr/bin/trn local root exploit (janus at volny.cz (Honza Vlach))
/usr/bin/trn local root exploit (zzagorrzzagorr at hotmail.com (Z z a g o r R))
Cisco Security Advisory: Multiple Crafted IPv6 Packets Cause Reload (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Cisco Security Advisory: Crafted Packet Causes Reload on Cisco Routers (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
[lists] Terminal Server vulnerabilities (jrickman at gmail.com (Jonathan Rickman))
Slackware Security updates (carlos.oliv at gmail.com (Carlos de Oliveira))
UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : x.org possible local socket hijacking (please_reply_to_security at sco.com (please_reply_to_security@....com))
The UPC packer (michael.holstein at csuohio.edu (Michael Holstein))
OpenSolaris.org now “open” for business (kf_lists at digitalmunition.com (KF (lists)))
Cisco Security Advisory: Cisco IOS Misformed BGP Packet Causes Reload (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Re: hushmail.com, is this true? (temp739 at yahoo.com (Pseudo Nym))
hushmail.com, is this true? (Libraries, The Patriot Act, Forcoing Issues Etc.) (RAL for some) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Slackware Security updates (colinm at clientsecure.net (colinm@...entsecure.net))
Slackware Security updates (kf_lists at digitalmunition.com (KF (lists)))
Is delivered mail (dmilisic at myrealbox.com (Dmilisic))
[ GLSA 200501-37 ] GraphicsMagick: PSD decoding heap overflow (koon at gentoo.org (Thierry Carrez))
[ GLSA 200501-38 ] Perl: rmtree and DBI tmpfile vulnerabilities (koon at gentoo.org (Thierry Carrez))
iDEFENSE Security Advisory 01.26.05: Openswan XAUTH/PAM Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
Re: [ GLSA 200501-36 ] AWStats: Remote code execution (krustev at krustev.net (Delian Krustev))
Can we have... (jdaytona at gmail.com (Jeremy Davis))
Slackware Security updates (dk at pwarchitects.com (dk))
Terminal services-additional help (ebeuerle at excite.com (Edward Beuerlein))

January 27 (41 messages)

Slackware Security updates (dentonj at gmail.com (Jeffrey Denton))
Slackware Security updates (carlos.oliv at gmail.com (Carlos de Oliveira))
MDKSA-2005:023 - Updated bind packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
DMA[2005-0127a] - 'Apple OSX batch family poor use of setuid' (kf_lists at digitalmunition.com (KF (Lists)))
spoolcll.exe - new worm being distributed via mysql vulnerability? (worried at gmail.com (Mike Bailey))
Terminal Server vulnerabilities (ruff.lists at edelweb.fr (Nicolas RUFF (lists)))
Delivery by mail (martin.pitt at canonical.com (Martin.pitt))
Registration is accepted (martin.pitt at canonical.com (Martin.pitt))
/usr/bin/trn local root exploit (ntx0f at seteuid.com (ntx0f))
/usr/bin/trn local root exploit (wojtek at vline.pl (Wojciech Pawlikowski))
ITTS ADVISORE 01/05 - Uebimiau <= 2.7.2 Multiples Vulnerabilities (mar_fallon at yahoo.com.br (Martin Fallon))
Re: Slackware security updates (rebonzo at libero.it (Matteo Giannone))
[lists] Terminal Server vulnerabilities (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Slackware Security updates (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
Terminal Server vulnerabilities (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[lists] Terminal Server vulnerabilities (jan.muenther at nruns.com (Jan Muenther))
Slackware Security updates (rodrigob at suespammers.org (Rodrigo Barbosa))
Remotely exploitable file traversal vulnerability in SnugServer 3.0.0.40 FTP Service (muts at zahav.net.il (muts@...av.net.il))
Re: [ GLSA 200501-36 ] AWStats: Remote code execution (niels-bugtraq at bakker.net (Niels Bakker))
Security Contact in Vonage (noamr at beyondsecurity.com (Noam Rathaus))
NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name (security at nsfocus.com (NSFOCUS Security Team))
"Advances in Security" in the Linux Kernel and RedHat idiocy (spender at grsecurity.net (Brad Spengler))
MDKSA-2005:020 - Updated kdegraphics packages fix buffer overflow vulnerability (vdanen at mandrakesoft.com (Vincent Danen))
Possible new MYSql Worm (Thierry at sniff-em.com (Thierry Zoller))
spoolcll.exe - new worm being distributed via mysql vulnerability? (jdaytona at gmail.com (Jeremy Davis))
spoolcll.exe - new worm being distributed viamysql vulnerability? (Patrick.Dolan at phns.com (Dolan, Patrick))
spoolcll.exe - new worm being distributed viamysql vulnerability? (jdaytona at gmail.com (Jeremy Davis))
"Advances in Security" in the Linux Kernel and RedHat idiocy (arjanv at redhat.com (Arjan van de Ven))
spoolcll.exe - new worm being distributed via mysql vulnerability? (stephane.nasdrovisky at paradigmo.com (stephane nasdrovisky))
Re: [ GLSA 200501-36 ] AWStats: Remote code execution (jvictor_rj at yahoo.com.br (Joao Victor A. Di Stasi))
"Advances in Security" in the Linux Kernel and RedHat idiocy (spender at grsecurity.net (Brad Spengler))
"Advances in Security" in the Linux Kernel and RedHat idiocy (lcamtuf at ghettot.org (Michal Zalewski))
[lists] Terminal Server vulnerabilities (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
xinetd issue.. (jpabuyer at tecnoera.com (Juan Pablo Abuyeres))
[lists] Terminal Server vulnerabilities (jan.muenther at nruns.com (Jan Muenther))
Terminal Server vulnerabilities (StuartF at datacom.co.nz (Stuart Fox (DSL AK)))
Re: Full-Disclosure Digest, Vol 2, Issue 58 (lbarreiro at gmail.com (Luisma))
CarolinaCon 2005 announcement (vvandal at well.com (Vic Vandal))
MDKSA-2005:024 - Updated evolution packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
Re: [ GLSA 200501-36 ] AWStats: Remote codeexecution (se_cur_ity at hotmail.com (morning_wood))
"Advances in Security" in the Linux Kernel and RedHat idiocy (spender at grsecurity.net (Brad Spengler))

January 28 (22 messages)

[OpenPKG-SA-2005.004] OpenPKG Security Advisory (sasl) (openpkg at openpkg.org (OpenPKG))
NAT router inbound network traffic subversion (khermansen at ht-technology.com (Kristian Hermansen))
Sify: ISP in India using hubs to provide connectivity (rohit at kritikalsolutions.com (rohit@...tikalsolutions.com))
NAT router inbound network traffic subversion (se_cur_ity at hotmail.com (morning_wood))
Winamp Exploit (POC) 5.08 Stack Overflow (rojo2_bugtraq at yahoo.es (Rojodos))
NAT router inbound network traffic subversion (joe at jretrading.com (Joe))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (tss at iki.fi (tss@....fi))
[ GLSA 200501-39 ] SquirrelMail: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ Positive Technologies ] Defeating Microsoft Windows XP SP2 Heap protection (aanisimov at ptsecurity.ru (aanisimov@...ecurity.ru))
Update (bugzilla at redhat.com (Bugzilla))
Re: NAT router inbound network traffic subversion (khermansen at ht-technology.com (Kristian Hermansen))
NAT router inbound network traffic subversion (bart2k at hushmail.com (bart2k@...hmail.com))
Re: NAT router inbound network traffic subversionouter inbound network traffic subversion (megaboy at libero.it (mega))
NAT router inbound network traffic subversion (Mark.Senior at gov.ab.ca (Mark Senior))
Registration is accepted (cc at oc192.us (Cc))
War-ftpd bug small addition (class101 at hat-squad.com (class 101))
NAT router inbound network traffic subversion (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Fwd: FW: MS Antispyware makes deal to leave Weatherbug alone (byte.busters at gmail.com (byte busters))
[ GLSA 200501-40 ] ngIRCd: Buffer overflow (koon at gentoo.org (Thierry Carrez))
ICMP Covert channels question (cyberpixl at gmail.com (cyberpixl))
NAT router inbound network traffic subversion (lists at intrusense.com (Darren Bounds))
Re: NAT router inbound network traffic subversion (raize at gravito.com (raize))

January 29 (19 messages)

ICMP Covert channels question (pauls at utdallas.edu (Paul Schmehl))
ICMP Covert channels question (andfarm at teknovis.com (Andrew Farmer))
ICMP Covert channels question (ge at linuxbox.org (Gadi Evron))
[ Positive Technologies ] Defeating Microsoft Windows XP SP2 Heap protection (pigrelax at yandex.ru (pigrelax))
Is there a 0day vuln in this phisher's site? (lists-security at nettracers.com (lists-security@...tracers.com))
ICMP Covert channels question (lists-security at nettracers.com (lists-security@...tracers.com))
Transamericana.org (tat at postmark.net (Antonio Henrique Oliveira))
Transamericana.org (tat at postmark.net (Antonio Henrique Oliveira))
C Code Analyzer (jonny at drugphish.ch (Jonathan Heusser))
ICMP Covert channels question (dbounds at intrusense.com (Darren Bounds))
Transamericana.org (michael4447 at gmail.com (Michael Rutledge))
Transamericana.org (michael4447 at gmail.com (Michael Rutledge))
Transamericana.org (tat at postmark.net (Antonio Henrique Oliveira))
Jabberstudio.org compromised (devdas at dvb.homelinux.org (Devdas Bhagat))
ICMP Covert channels question (pauls at utdallas.edu (Paul Schmehl))
ICMP Covert channels question (lists-security at nettracers.com (lists-security@...tracers.com))
Re: War-ftpd bug small addition (skylined at edup.tudelft.nl (Berend-Jan Wever))
C Code Analyzer (andfarm at teknovis.com (Andrew Farmer))
Is there a 0day vuln in this phisher's site? (seclists at securinews.com (Paul Kurczaba))

January 30 (14 messages)

C Code Analyzer (jonny at drugphish.ch (Jonathan Heusser))
Is there a 0day vuln in this phisher's site? (lists-security at nettracers.com (lists-security@...tracers.com))
[ GLSA 200501-41 ] TikiWiki: Arbitrary command execution (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Is there a 0day vuln in this phisher's site? (and-bugtraq at doxdesk.com (Andrew Clover))
Is there a 0day vuln in this phisher's site? (larry at larryseltzer.com (Larry Seltzer))
Is there a 0day vuln in this phisher's site? (Thierry at sniff-em.com (Thierry Zoller))
ICMP Covert channels question (cyberpixl at gmail.com (cyberpixl))
Is there a 0day vuln in this phisher's site? (se_cur_ity at hotmail.com (morning_wood))
[ GLSA 200501-42 ] VDR: Arbitrary file overwriting issue (koon at gentoo.org (Thierry Carrez))
[ GLSA 200501-43 ] f2c: Insecure temporary file creation (koon at gentoo.org (Thierry Carrez))
[ GLSA 200501-44 ] ncpfs: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
Broadcast crash in Xpand Rally 1.0.0.0 (aluigi at autistici.org (Luigi Auriemma))
super[0]: Linux ncpfs local (super at innu.org (Derek Callaway))
[ GLSA 200501-45 ] Gallery: Cross-site scripting vulnerability (lewk at gentoo.org (Luke Macken))

January 31 (18 messages)

Re: [ GLSA 200501-45 ] Gallery: Cross-site scripting vulnerability (zx at castlecops.com (Paul Laudanski))
Is there a 0day vuln in this phisher's site? (and-bugtraq at doxdesk.com (Andrew Clover))
Transamericana.org (update) (tat at postmark.net (Antonio Oliveira))
OT: Tool for sanitizing MS office documents? (dgianndrea at comsquared.com (David Gianndrea))
OT: Tool for sanitizing MS office documents? (dgianndrea at comsquared.com (David Gianndrea))
OT: Tool for sanitizing MS office documents? (craig.soderland at sap.com (Soderland, Craig))
OT: Tool for sanitizing MS office documents? (cmacfarlane at Drummond-Miller.co.uk (Cassidy Macfarlane))
[TURBOLINUX SECURITY INFO] 31/Jan/2005 (security-announce at turbolinux.co.jp (Turbolinux))
OT: Tool for sanitizing MS office documents? (cdupuis at cccure.org (Clement Dupuis))
OT: Tool for sanitizing MS office documents? (fw at deneb.enyo.de (Florian Weimer))
OT: Tool for sanitizing MS office documents? (dufresne at winternet.com (Ron DuFresne))
OT: Tool for sanitizing MS office documents? (dufresne at winternet.com (Ron DuFresne))
OT: Tool for sanitizing MS office documents? (guninski at guninski.com (Georgi Guninski))
OT: Tool for sanitizing MS office documents? (michealespinola at gmail.com (Micheal Espinola Jr))
[ GLSA 200501-46 ] ClamAV: Multiple issues (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
OT: Tool for sanitizing MS office documents? (christoph.schnidrig at csnc.ch (Christoph Schnidrig))
MDKSA-2005:025 - Updated clamav packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
SAME LADY, DIFFERENT HAT: REELY (1 at malware.com (http-equiv@...ite.com ))

870 messages