full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2005/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 11	² 30	³ 14	⁴ 18	⁵ 17	⁶ 11
⁷ 50	⁸ 26	⁹ 47	¹⁰ 31	¹¹ 45	¹² 10	¹³ 24
¹⁴ 27	¹⁵ 23	¹⁶ 30	¹⁷ 32	¹⁸ 33	¹⁹ 14	²⁰ 29
²¹ 15	²² 17	²³ 26	²⁴ 37	²⁵ 48	²⁶ 15	²⁷ 9
²⁸ 33

Messages by day:

February 1 (11 messages)

Windows Security Checklists - 10 Parts (zx at castlecops.com (Paul Laudanski))
University of Phoenix - Outlook Express Unauthorized Configuration Manipulation (evilpacket at gmail.com (Adam Baldwin))
[ GLSA 200501-46 ] ClamAV: Multiple issues (trog at uncon.org (Trog))
OT: Tool for sanitizing MS office documents? (mcensamuel at yahoo.com (m3c))
Remotely exploitable buffer overflow vulnerability in Savant Web Server 3.1 (muts at zahav.net.il (muts@...av.net.il))
Call For Papers : HITB Security Conference Bahrain 2005 (alpha_n_demon at yahoo.com (alphademon))
[USN-71-1] PostgreSQL vulnerability (martin.pitt at canonical.com (Martin Pitt))
Remotely exploitable buffer overflow vulnerability in Savant Web Server 3.1 (andfarm at teknovis.com (Andrew Farmer))
Remotely exploitable buffer overflow vulnerability in Savant Web Server 3.1 (muts at inter.net.il (muts))
RE: Message Notify (bugzilla at redhat.com (Bugzilla))
[ GLSA 200502-01 ] FireHOL: Insecure temporary file creation (vorlon at gentoo.org (Matthias Geerdsen))

February 2 (30 messages)

[FLSA-2005:2255] Updated zip package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:2187] Updated freeradius packages fix security flaws (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:2272] Updated unarj package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
MDKSA-2005:026 - Updated imap packages fix authentication vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:027 - Updated chbg packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:028 - Updated ncpfs packages fix vulnerabilities (security at linux-mandrake.com (Mandrakelinux Security Team))
SQL injection in EveryDNS.net Service (enune at fribble.net (Calum Power))
[ GLSA 200502-02 ] UW IMAP: CRAM-MD5 authentication bypass (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
some interresting project i just stumbled across... (Shadow333 at gmx.at (Oliver Leitner))
[ GLSA 200502-03 ] enscript: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
[ GLSA 200501-46 ] ClamAV: Multiple issues (lists at intrusense.com (Darren Bounds))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (blueboar at thievco.com (blueboar@...evco.com))
[USN-72-1] Perl vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
some interresting project i just stumbled across... (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
some interresting project i just stumbled across... (mikie.simpson at gmail.com (Michael Simpson))
some interresting project i just stumbled across... (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Limited buffer-overflow in Painkiller 1.35 (aluigi at autistici.org (Luigi Auriemma))
[OT] Re: some interresting project i just stumbled across... (vincent at vanscherpenseel.nl (Vincent van Scherpenseel))
Cisco Security Advisory: Default SNMP Community Strings in Cisco IP/VC Products (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
ICMP Covert channels question (sovrevage at gmail.com (Stian Øvrevåge))
ICMP Covert channels question (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
MSN search down (emiraga at emiraga.com (emiraga))
[ GLSA 200502-04 ] Squid: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
some interresting project i just stumbled across... (y_avenger_y at ua.fm (Alex V. Lukyanenko))
UNIX Tar Security Advisory from TEAM PWN4GE (team_pwn4ge at outgun.com (Team Pwnge))
UNIX Tar Security Advisory from TEAM PWN4GE (vtlists at wyae.de (Volker Tanger))
ICMP Covert channels question (kkadow at gmail.com (Kevin))
UNIX Tar Security Advisory from TEAM PWN4GE (niek at packetstorm.nu (Niek))
PayPal /webscr currency substitution exploit? (2600hz at hushmail.com (2600hz))
UNIX Tar Security Advisory from TEAM PWN4GE (howells at kde.org (Chris Howells))

February 3 (14 messages)

[ GLSA 200502-05 ] Newspost: Buffer overflow vulnerability (lewk at gentoo.org (Luke Macken))
MDKSA-2005:029 - Updated vim packages fix vulnerabilities (security at linux-mandrake.com (Mandrakelinux Security Team))
UNIX Tar Security Advisory from TEAM PWN4GE (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Postponement of Information Securiy Summit from FEBRUARY to APRIL @ Hyderabad-India. (info at iiss2004.com (Info))
[USN-73-1] Python vulnerability (martin.pitt at canonical.com (Martin Pitt))
[Linux kernel ipv6_setsockopt integer overflow] (qobaiashi at gmx.net (qobaiashi))
Libpcap versus WINPcap (STEPHEN.TAYLOR at saic.com (Taylor, Stephen))
DoS in LANChat Pro Revival 1.666c (fdonato at autistici.org (Donato Ferrante))
New presentation: Advanced SQL Injection in Oracle databases (secemf at yahoo.com.ar (Esteban Martínez Fayó))
Re: Cain and Abel (delete852 at yahoo.com (Nick Vasiliev))
Re: Cain and Abel (janus at volny.cz (Honza Vlach))
Re: Cain and Abel (psmelson at comcast.net (Paul Melson))
Re: Cain and Abel (sil at infiltrated.net (J. Oquendo))
Re: [Linux kernel ipv6_setsockopt integer overflow] (dan at lightwave.net.ru (Dan Yefimov))

February 4 (18 messages)

Re: Cain and Abel (xillwillx at gmail.com (Ill will))
some interresting project i just stumbled across... (darryl at snakegully.nu (Darryl Luff))
[USN-74-1] Postfix vulnerability (martin.pitt at canonical.com (Martin Pitt))
some interresting project i just =?iso-8859-1?q?stumbled across=2E=2E=2E?= (Shadow333 at gmx.at (Oliver Leitner))
[USN-75-1] cpio vulnerability (martin.pitt at canonical.com (Martin Pitt))
Securitytrap Jan Top20 list (vertex at securitytrap.com (vertex))
Re: NAT router inbound network traffic subversion (fd at ben.iagu.net (fd@....iagu.net))
security forecasts 2005 (fd at ithum.de (i.t Consulting))
<RANT> Cart00ney-Sigs (was: Re: Freenet clone) (measl at mfn.org (J.A. Terranson))
some interresting project i just stumbled across... (adam at huntrecruiting.com (Adam Hunt))
some interresting project i just stumbled across... (Shadow333 at gmx.at (Oliver Leitner))
Re: [Linux kernel ipv6_setsockopt integer overflow] (qobaiashi at gmx.net (qobaiashi))
<RANT> Cart00ney-Sigs (bkfsec at sdf.lonestar.org (bkfsec))
<RANT> Cart00ney-Sigs (was: Re: Freenet clone) (frank at knobbe.us (Frank Knobbe))
[USN-74-2] Fixed Postfix packages for USN-74-1 (martin.pitt at canonical.com (Martin Pitt))
some interresting project i just stumbled across... (requiem at praetor.org (Jeremy Bishop))
Exploit For Savant Web Server 3.1 (tested on win2003) (corryl at sitoverde.com (CorryL))
<RANT> Cart00ney-Sigs (was: Re: Freenet clone) (nick at virus-l.demon.co.uk (Nick FitzGerald))

February 5 (17 messages)

Webroot Software Resigns from COAST (zx at castlecops.com (Paul Laudanski))
some interresting project i just stumbledacross... (jasonc at science.org (Jason Coombs))
some interresting project i just stumbledacross... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Libpcap versus WINPcap (aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya, Aditya Lalit Deshmukh))
yahoo mail image verification (cumhuronat at gmail.com (cumhur onat))
directory traversal in RaidenHTTPD 1.1.27 (fdonato at autistici.org (Donato Ferrante))
Operator Shell (osh) BSS-based Buffer Overflow (core at bokeoa.com (Charles Stevenson))
Multiple AV Vendors ignoring tar.gz archives (barrie at reboot-robot.net (Barrie Dempster))
Multiple AV Vendors ignoring tar.gz archives (zx at castlecops.com (Paul Laudanski))
NGircd <= 0.8.1 Remote DoS (exploit) (corryl at sitoverde.com (CorryL))
Multiple AV Vendors ignoring tar.gz archives (barrie at reboot-robot.net (Barrie Dempster))
Multiple AV Vendors ignoring tar.gz archives (zx at castlecops.com (Paul Laudanski))
Re: Operator Shell (osh) BSS-based Buffer Overflow (core at bokeoa.com (Charles Stevenson))
Multiple SQL injection in Chipmunk forum (foster at ghc.ru (GHC vision))
CMScore advisory (foster at ghc.ru (GHC vision))
Multiple AV Vendors ignoring tar.gz archives (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: [USN-74-1] Postfix vulnerability (wietse at porcupine.org (Wietse Venema))

February 6 (11 messages)

Multiple AV Vendors ignoring tar.gz archives (james.mailing at gmail.com (James Eaton-Lee))
Re: [USN-74-1] Postfix vulnerability (frlinux at gmail.com (FRLinux))
Multiple AV Vendors ignoring tar.gz archives (nick at virus-l.demon.co.uk (Nick FitzGerald))
Multiple AV Vendors ignoring tar.gz archives (barrie at reboot-robot.net (Barrie Dempster))
satire on vendor responses (guninski at guninski.com (Georgi Guninski))
satire on vendor responses (kin186 at hackermail.com (White Self-Existing World-Bridger))
Local *.php file inclusion and full path disclosure in BXCP <= 0.2.9.7 (FistFuXXer at gmx.de (Majest))
Multiple AV Vendors ignoring tar.gz archives (james.mailing at gmail.com (James Eaton-Lee))
Re: [USN-74-1] Postfix vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: [USN-74-1] Postfix vulnerability (martin.pitt at canonical.com (Martin Pitt))
[ GLSA 200502-06 ] LessTif: Multiple vulnerabilities in libXpm (koon at gentoo.org (Thierry Carrez))

February 7 (50 messages)

Microsoft Outlook Web Access URL Injection Vulnerability (se_cur_ity at hotmail.com (morning_wood))
state of homograph attacks (fulldisclosure at cubesearch.com (fulldisclosure@...esearch.com))
state of homograph attacks (thorpflyer at yahoo.com (Simon Roberts))
Re: Cain and Abel (piw at e-liberty.pl (Piw))
yahoo mail image verification (thierry.haven at xmcopartners.com (Thierry Haven))
[USN-76-1] Emacs vulnerability (martin.pitt at canonical.com (Martin Pitt))
[TURBOLINUX SECURITY INFO] 07/Feb/2005 (security-announce at turbolinux.co.jp (Turbolinux))
[ GLSA 200502-07 ] OpenMotif: Multiple vulnerabilities in libXpm (koon at gentoo.org (Thierry Carrez))
Re: Cain and Abel (mail at code-foundation.de (Dominik Birk))
VOIPSEC (voipsa at voipsa.org (VoIP Security Aliance))
Multiple AV Vendors ignoring tar.gz archives (xslf at xslf.com (Shoshannah Forbes))
yahoo mail image verification (propolice at gmail.com (Eduardo Tongson))
New version of ike-scan (IPsec IKE scanner) available - v1.7 (Roy.Hills at nta-monitor.com (Roy Hills))
Administrivia: Goodbye (len at netsys.com (Len Rose))
[USN-77-1] Squid vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
DMA[2005-0131b] - 'Setuid Perl PERLIO_DEBUG buffer overflow' (kf_lists at digitalmunition.com (KF (lists)))
DMA[2005-0131a] - 'Setuid Perl PERLIO_DEBUG root owned file creation' (kf_lists at digitalmunition.com (KF (lists)))
Administrivia: Goodbye (measl at mfn.org (J.A. Terranson))
Administrivia: Goodbye (ge at linuxbox.org (Gadi Evron))
re: Microsoft Outlook Web Access URL Injection (se_cur_ity at hotmail.com (morning_wood))
Administrivia: Goodbye (kf_lists at digitalmunition.com (KF (lists)))
Administrivia: Goodbye (ge at linuxbox.org (Gadi Evron))
Firedragging [Firefox 1.0] (mikx at mikx.de (mikx))
Firetabbing [Firefox 1.0] (mikx at mikx.de (mikx))
Fireflashing [Firefox 1.0] (mikx at mikx.de (mikx))
state of homograph attacks (gerald at holl.co.at (Gerald Holl))
OpenServer 5.0.6 OpenServer 5.0.7 : Vulnerabilities in long-lived TCP connections / Rose attack (please_reply_to_security at sco.com (please_reply_to_security@…)
UnixWare 7.1.3 UnixWare 7.1.1 : Vulnerabilities in long-lived TCP connections / Rose attack (please_reply_to_security at sco.com (please_reply_to_security@....…)
re: Microsoft Outlook Web Access URL Injection (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
state of homograph attacks (richard at unixboxen.net (Richard Jacobsen))
[ GLSA 200502-08 ] PostgreSQL: Local privilege escalation (lewk at gentoo.org (Luke Macken))
Multiple AV Vendors ignoring tar.gz archives (nick at virus-l.demon.co.uk (Nick FitzGerald))
Software Licenses and compression (was: Multiple AV Vendors ignoring tar.gz archives) (bkfsec at sdf.lonestar.org (bkfsec))
Re: SSH probe attack afoot? (barrie at reboot-robot.net (Barrie Dempster))
state of homograph attacks (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Multiple AV Vendors ignoring tar.gz archives (bkfsec at sdf.lonestar.org (bkfsec))
Multiple AV Vendors ignoring tar.gz archives (StuartF at datacom.co.nz (Stuart Fox (DSL AK)))
iDEFENSE Security Advisory 02.07.05: SquirrelMail S/MIME Plugin Command Injection Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.…)
CodeCon Reminder (rabbi at abditum.com (Len Sassaman))
state of homograph attacks (listener at wernig.net (Markus Wernig))
UnixWare 7.1.4 : racoon multilple security issues (please_reply_to_security at sco.com (please_reply_to_security@....com))
Administrivia: Goodbye (kin186 at hackermail.com (White Self-Existing World-Bridger))
Administrivia: Goodbye (kin186 at hackermail.com (White Self-Existing World-Bridger))
state of homograph attacks (prb at lava.net (Peter Besenbruch))
Multiple AV Vendors ignoring tar.gz archives (nick at virus-l.demon.co.uk (Nick FitzGerald))
state of homograph attacks (nick at virus-l.demon.co.uk (Nick FitzGerald))
mailman email harvester (bernhard at bksys.at (Bernhard Kuemel))
Administrivia: Goodbye (measl at mfn.org (J.A. Terranson))
iDEFENSE Security Advisory 02.07.05: IBM AIX chdev Local Format String Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
Re: [USN-74-1] Postfix vulnerability (lamont at debian.org (LaMont Jones))

February 8 (26 messages)

state of homograph attacks (listener at wernig.net (Markus Wernig))
Re: Software Licenses and compression (was: Multiple AV Vendors ignoring tar.gz archives) (james.mailing at gmail.com (James Eaton-Lee))
Multiple AV Vendors ignoring tar.gz archives (james.mailing at gmail.com (James Eaton-Lee))
[ANNOUNCE] kses 0.2.2 (Ulf.Harnhammar.9485 at student.uu.se (Ulf Härnhammar))
OpenServer 5.0.6 OpenServer 5.0.7 : enable command line buffer overflows (please_reply_to_security at sco.com (please_reply_to_security@....com))
UnixWare 7.1.4 : vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with ac… (please_reply_to_security at sco.com (pl…)
state of homograph attacks (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Administrivia: Goodbye (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Multiple AV Vendors ignoring tar.gz archives (barrie at reboot-robot.net (Barrie Dempster))
Multiple AV Vendors ignoring tar.gz archives (nick at virus-l.demon.co.uk (Nick FitzGerald))
SafeNet SoftRemote VPN Client Issue: Clear-text password stored in memory (Roy.Hills at nta-monitor.com (Roy Hills))
Re: mailman email harvester (davek_throwaway at hotmail.com (Dave Korn))
Multiple AV Vendors ignoringtar.gz archives (fwd) (zx at castlecops.com (Paul Laudanski))
XSS VULNERABILITY AT MODULE PostWrap (asckbg at hotmail.com (hio hou))
Re: mailman email harvester (jlongs2 at uic.edu (James Longstreet))
Multiple AV Vendors ignoring tar.gz archives (bkfsec at sdf.lonestar.org (bkfsec))
Integer overflow and arbitrary files deletion in RealArcade 1.2.0.994 (aluigi at autistici.org (Luigi Auriemma))
Multiple AV Vendors ignoringtar.gz archives (fwd) (barrie at reboot-robot.net (Barrie Dempster))
Microsoft to buy Sybari AV company (etomcat at freemail.hu (Feher Tamas))
[ GLSA 200502-09 ] Python: Arbitrary code execution through SimpleXMLRPCServer (koon at gentoo.org (Thierry Carrez))
Microsoft to buy Sybari AV company (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
GREENAPPLE Release (dave at immunitysec.com (Dave Aitel))
MDKSA-2005:030 - Updated perl-DBI packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:031 - Updated perl packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrakelinux Security Team))
iDEFENSE Security Advisory 02.08.05: IBM AIX auditselect Local Format String Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
Re: mailman email harvester (modperlpants at yahoo.com (J b))

February 9 (47 messages)

Finjan Security Advisory: Microsoft Office XP Remote Buffer Overflow Vulnerability (rivgi at finjan.com (Rafel Ivgi))
Microsoft to buy Sybari AV company (nocmonkey at gmail.com (Danny))
netdde during update (se_cur_ity at hotmail.com (morning_wood))
Microsoft to buy Sybari AV company (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Local *.php file inclusion and full path disclosure in BXCP <= 0.2.9.7 (FistFuXXer at gmx.de (Majest))
HELP: mailing list (FistFuXXer at gmx.de (Majest))
Microsoft to buy Sybari AV company (guninski at guninski.com (Georgi Guninski))
List Charter (johnc at grok.org.uk (John Cartwright))
nosubject (pinkhatz at gmail.com (j j))
Homograph attack fools Internet Explorer too (kmc at eircom.net (Kevin Connolly))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (anewman at appsecinc.com (anewman@...secinc.com))
Internet Explorer zone spoofing with encoded URLs (jouko at iki.fi (Jouko Pynnonen))
Re: List (draht at suse.de (draht@...e.de))
Homograph attack fools Internet Explorer to o (prandal at herefordshire.gov.uk (Randal, Phil))
Re: mailman email harvester (bernhard at bksys.at (Bernhard Kuemel))
HELP: mailing list (xyberpix at xyberpix.com (xyberpix))
Re: mailman email harvester (bernhard at bksys.at (Bernhard Kuemel))
Nice call to ebx found (class101 at hat-squad.com (class 101))
Blowfish & BitchX (the.soylent at gmail.com (the.soylent))
Re: Homograph attack fools (older versions of) Internet Explorer too (kmc at eircom.net (Kevin Connolly))
Paper: Solution for Red Hat PIE protection (zarul_shahrin at yahoo.com (ZARUL SHAHRIN))
Blowfish&B/tchX (the.soylent at gmail.com (the.soylent))
[ GLSA 200502-10 ] pdftohtml: Vulnerabilities in included Xpdf (vorlon at gentoo.org (Matthias Geerdsen))
Blowfish&B/tchX (Shadow333 at gmx.at (Oliver Leitner))
Blowfish&B/tchX (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Question about the latest Microsoft updates (postmaster at wateraxe.demon.nl (postmaster@...eraxe.demon.nl))
Blowfish&B/tchX (the.soylent at gmail.com (the.soylent))
Re: Re: mailman email harvester (davek_throwaway at hotmail.com (Dave Korn))
Administrivia: List Compromised due to Mailman Vulnerability (johnc at grok.org.uk (John Cartwright))
Question about the latest Microsoft updates (fulldisclosure at wateraxe.demon.nl (Allan))
Mouseover URL spoof with IE (nocmonkey at gmail.com (Danny))
Administrivia: Goodbye (Azerail at supersecretninjaskills.com (Azerail))
Administrivia: List Compromised due to Mailman Vulnerability (frank at knobbe.us (Frank Knobbe))
Administrivia: List Compromised due to Mailman Vulnerability (fw at deneb.enyo.de (Florian Weimer))
Administrivia: List Compromised due to Mailman Vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Administrivia: List Compromised due to Mailman Vulnerability (frank at knobbe.us (Frank Knobbe))
Microsoft to buy Sybari AV company (bkfsec at sdf.lonestar.org (bkfsec))
Mouseover URL spoof with IE (thor at pivx.com (Thor Larholm))
Administrivia: List Compromised due to Mailman Vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Mouseover URL spoof with IE (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Mouseover URL spoof with IE (nocmonkey at gmail.com (Danny))
Administrivia: List Compromised due to Mailman Vulnerability (hades at psilanthropy.org (Anders Langworthy))
[USN-78-1] Mailman vulnerability (martin.pitt at canonical.com (Martin Pitt))
Mouseover URL spoof with IE (shugal at gmx.de (Martin Stricker))
yet another DSL modem backdoor - Mentor (Conexant) (adam.laurie at thebunker.net (Adam Laurie))
iDEFENSE Security Advisory 02.09.05: CA BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow (idlabs-advisories at idefense.com (idlabs-adv…)
Administrivia: List Compromised due to Mailman Vulnerability (sblass at asu.edu (Steve Blass))

February 10 (31 messages)

[FLSA-2005:1943] Updated libpng resolves security vulnerabilities (dom at earth.li (Dominic Hargreaves))
[FLSA-2005:1906] Updated abiword packages fix security issue (dom at earth.li (Dominic Hargreaves))
Virus scanning site... (jeff-kell at utc.edu (Jeff Kell))
Virus scanning site... (lists at itsecurity3.its.uiowa.edu (Jason Alexander))
Virus scanning site... (Kane at contentsecurity.com.au (Kane Lightowler))
Re: yet another DSL modem backdoor - Mentor (Conexant) (admin at darktech.org.uk (Philip Barnham))
Administrivia: List Compromised due to Mailman Vulnerability (johnc at grok.org.uk (John Cartwright))
Mouseover URL spoof with IE (bkfsec at sdf.lonestar.org (bkfsec))
Administrivia: List Compromised due to Mailman Vulnerability (bkfsec at sdf.lonestar.org (bkfsec))
SUSE Security Announcement: squid (SUSE-SA:2005:006) (thomas at suse.de (Thomas Biege))
[USN-79-1] PostgreSQL vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
iDEFENSE Security Advisory 02.10.05: IBM AIX lspath Local File Access Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
iDEFENSE Security Advisory 02.10.05: IBM AIX ipl_varyon Local Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
iDEFENSE Security Advisory 02.10.05: IBM AIX netpmon Local Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
[ GLSA 200502-11 ] Mailman: Directory traversal vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
UPDATE: [ GLSA 200501-45 ] Gallery: Cross-site scripting vulnerability (lewk at gentoo.org (Luke Macken))
Crashes and socket unreacheable in Armagetron Advanced 0.2.7.0 (aluigi at autistici.org (Luigi Auriemma))
iDEFENSE Security Advisory 02.10.05: Computer Associates BrightStor ARCserve Backup UniversalAgent Backdoor Vulnerabil… (idlabs-advisories at idefense.com (idla…)
Multiple AV Vendors ignoring tar.gz archives (rodrigob at suespammers.org (Rodrigo Barbosa))
Multiple AV Vendors ignoring tar.gz archives (full-disclosure at nospam.wafel.org (Jorrit Kronjee))
[FLSA-2005:2353] Updated gpdf package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:2252] Updated iptables packages resolve security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:2352] Updated Xpdf package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:2188] Updated gaim package resolves security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
Fwd: Flaw in mail-list software leaks passwords (xploitable at gmail.com (n3td3v))
Fwd: Flaw in mail-list software leaks passwords (xploitable at gmail.com (n3td3v))
MDKSA-2005:032 - Updated cpio packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:033 - Updated enscript packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:034 - Updated squid packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrakelinux Security Team))
Registration is accepted (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
You are made active (rizwanalikhan74 at yahoo.com (Rizwanalikhan))

February 11 (45 messages)

MDKSA-2005:035 - Updated python packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:036 - Updated MySQL packages fix temporary file vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
milw0rm.com (venom at gen-x.co.nz (VeNoMouS))
milw0rm.com (venom at gen-x.co.nz (VeNoMouS))
Spybot and SQL (mjcarter at ihug.co.nz (mjcarter@...g.co.nz))
Spybot and SQL (farrenkm at ohsu.edu (Matthew Farrenkopf))
[SPAM] Re: Spybot and SQL (m.esco at wp.pl (Jacek Barcikowski))
[USN-80-1] mod_python vulnerability (martin.pitt at canonical.com (Martin Pitt))
google getting attacks; anybody got this? --i got it. (gkverma at gmail.com (Gaurav Kumar))
google getting attacks; anybody got this? --i got it. (Polarizer at Codixx.Com (Polarizer))
[USN-81-1] iptables vulnerability (martin.pitt at canonical.com (Martin Pitt))
google getting attacks; anybody got this? --i got it. (se_cur_ity at hotmail.com (morning_wood))
google getting attacks; anybody got this? --igot it. (se_cur_ity at hotmail.com (morning_wood))
google getting attacks; anybody got this? --i got it. (gilles.demarty at gmail.com (Gilles Demarty))
Antivirus listing (watchachi at gmx.de ("weninson rêgo"))
Nice call to ebx found (thierry.haven at xmcopartners.com (Thierry Haven))
google getting attacks; anybody got this? --i got it. (gdemarty at altern.org (Gilles Demarty))
google getting attacks; anybody got this? --i got it. (Polarizer at Codixx.de (Polarizer))
Re: Nice call to ebx found (class101 at hat-squad.com (class 101))
Mail Delivery (failure full-disclosure@...ts.netsys.com) (tss at iki.fi (tss@....fi))
Multiple AV Vendors ignoring tar.gz archives (james.mailing at gmail.com (James Eaton-Lee))
google getting attacks; anybody got this? --i got it. (phased at mail.ru (phased))
Secunia Research: Microsoft Internet Explorer "createControlRange()" Memory Corruption (as at secunia.com (Andreas Sandblad))
[SPAM] Re: Spybot and SQL (farrenkm at ohsu.edu (Matthew Farrenkopf))
Secunia Research: Microsoft Internet Explorer Multiple Vulnerabilities (as at secunia.com (Andreas Sandblad))
Spybot and SQL (papp_geza1 at axelero.hu (Geza Papp dr (Axelero)))
Spybot and SQL (papp_geza1 at axelero.hu (Geza Papp dr (Axelero)))
[SA14216] F-Secure Multiple Products ARJ Archive Handling Vulnerability (papp_geza1 at axelero.hu (Geza Papp dr (Axelero)))
New wired from Panda alets - MyDoom-AK (papp_geza1 at axelero.hu (Geza Papp dr (Axelero)))
Antivirus listing (pauls at utdallas.edu (Paul Schmehl))
Antivirus listing (mail at hackingspirits.com (Debasis Mohanty))
[VulnWatch] Secunia Research: Microsoft Internet Explorer"createControlRange()" Memory Corruption (as at secunia.com (Andreas Sandblad))
[sb] [VulnWatch] Secunia Research: Microsoft Internet Explorer"createControlRange()" Memory Corruption (as at secunia.com (Andreas Sandblad))
[sb] [VulnWatch] Secunia Research: Microsoft Internet Explorer"createControlRange()" Memory Corruption (as at secunia.com (Andreas Sandblad))
[sb] [VulnWatch] Secunia Research: Microsoft Internet Explorer MultipleVulnerabilities (as at secunia.com (Andreas Sandblad))
[VulnWatch] Secunia Research: Microsoft Internet Explorer MultipleVulnerabilities (as at secunia.com (Andreas Sandblad))
[sb] [VulnWatch] Secunia Research: Microsoft Internet Explorer MultipleVulnerabilities (as at secunia.com (Andreas Sandblad))
[ GLSA 200502-12 ] Webmin: Information leak in Gentoo binary package (koon at gentoo.org (Thierry Carrez))
[ GLSA 200502-13 ] Perl: Vulnerabilities in perl-suid wrapper (koon at gentoo.org (Thierry Carrez))
google getting attacks; anybody got this? --i got it. (andfarm at teknovis.com (Andrew Farmer))
[SPAM] Re: [SPAM] Re: Spybot and SQL (m.esco at wp.pl (Jacek Barcikowski))
MDKSA-2005:032-1 - Updated cpio packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
Speaking of UPX... (kf_lists at digitalmunition.com (KF (Lists)))
Zone Labs Security Alert ZL05-01: Zone Labs IPC Instability (Product-Security at zonelabs.com (Zone Labs Product Security))
iDEFENSE Security Advisory 02.11.05: ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com…)

February 12 (10 messages)

GREENAPPLE Release (blsonne at rogers.com (Byron L. Sonne))
Re: [Mailman-Developers] mailman email harvester (bernhard at bksys.at (Bernhard Kuemel))
Re: [Mailman-Developers] mailman email harvester (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: [Mailman-Developers] mailman email harvester (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
mailman email harvester (bernhard at bksys.at (Bernhard Kuemel))
Fireflashing [Firefox 1.0] (jkuperus at planet.nl (Jelmer Kuperus))
exim auth_spa_server() PoC exploit (yuri at eclipse.org.il (Yuri Gushin))
Infostring crash and shutdown in the Quake 3 engine (aluigi at autistici.org (Luigi Auriemma))
GREENAPPLE Release (loptr.chaote at gmail.com (Loptr Chaote))
Credit Card data disclosure in CitrusDB (dornseif at informatik.rwth-aachen.de (Maximillian Dornseif))

February 13 (24 messages)

GREENAPPLE Release (blsonne at rogers.com (Byron L. Sonne))
Re: mailman email harvester (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[ GLSA 200502-14 ] mod_python: Publisher Handler vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Re: [Mailman-Developers] mailman emailharvester (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Credit Card data disclosure in CitrusDB (loptr.chaote at gmail.com (Loptr Chaote))
Re: [Mailman-Developers] mailman emailharvester (vtlists at wyae.de (Volker Tanger))
GREENAPPLE Release (phased at mail.ru (phased))
[lists] Re[2]: GREENAPPLE Release (purdy at tecman.com (Curt Purdy))
[lists] Re: Credit Card data disclosure in CitrusDB (purdy at tecman.com (Curt Purdy))
[lists] Credit Card data disclosure in CitrusDB (purdy at tecman.com (Curt Purdy))
[lists] Re: Administrivia: List Compromised due to MailmanVulnerability (purdy at tecman.com (Curt Purdy))
Credit Card data disclosure in CitrusDB (exploits at zataz.net (ZATAZ))
Credit Card data disclosure in CitrusDB (Thierry at sniff-em.com (Thierry Zoller))
Credit Card data disclosure in CitrusDB (exploits at zataz.net (ZATAZ))
[lists] Re: Administrivia: List Compromised dueto MailmanVulnerability (jasonc at science.org (Jason Coombs))
[ GLSA 200502-15 ] PowerDNS: Denial of Service vulnerability (vorlon at gentoo.org (Matthias Geerdsen))
[ GLSA 200502-16 ] ht://Dig: Cross-site scripting vulnerability (lewk at gentoo.org (Luke Macken))
Update (bugzilla at redhat.com (Bugzilla))
GREENAPPLE Release - (OFFTOPIC - sorry). (listuser at seifried.org (Kurt Seifried))
GREENAPPLE Release - (OFFTOPIC - sorry). (optimist at eurocompton.net (pretty vacant))
Is delivered mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
Registration is accepted (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
Delivery by mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
The ultimate solution to phising (sean01 at accnet.com.au (Sean Crawford))

February 14 (27 messages)

The ultimate solution to phising (sovrevage at gmail.com (Stian Øvrevåge))
SUSE Security Announcement: mailman remote file disclosure (SUSE-SA:2005:006) (meissner at suse.de (Marcus Meissner))
The ultimate solution to phising (Thierry at sniff-em.com (Thierry Zoller))
ASPjar Guestbook login.asp not official patch (corryl at sitoverde.com (CorryL))
ASPjar Guestbook login.asp not official patch (jlongs2 at uic.edu (James Longstreet))
Open call to Full disclosure mirror archives (Thierry at sniff-em.com (Thierry Zoller))
blocking SkyPE? (yair at kns.com (Perry, Yair))
Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 (jlay at ameriben.com (James Lay))
blocking SkyPE? (nobody at guzu.net (Manu))
[ GLSA 200502-17 ] Opera: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Advisory: JPEG EXIF information disclosure (dornseif at informatik.rwth-aachen.de (Maximillian Dornseif))
Re: GREENAPPLE Release - (OFFTOPIC - sorry). (gadgeteer at elegantinnovations.org (Ken Dyke))
Advisory: Awstats official workaround flaw (dornseif at informatik.rwth-aachen.de (Maximillian Dornseif))
[ GLSA 200502-18 ] VMware Workstation: Untrusted library search path (koon at gentoo.org (Thierry Carrez))
UPDATE: [ GLSA 200501-36 ] AWStats: Remote code execution (koon at gentoo.org (Thierry Carrez))
Advisory: Cross Site Scripting Vulnerability in Openconf Conference Management Software (dornseif at informatik.rwth-aachen.de (Maximillian Dornseif))
Advisory: Authentication bypass in CitrusDB (dornseif at informatik.rwth-aachen.de (Maximillian Dornseif))
Advisory: Upload Authorization bypass in CitrusDB (dornseif at informatik.rwth-aachen.de (Maximillian Dornseif))
Advisory: SQL-Injection in CitrusDB (dornseif at informatik.rwth-aachen.de (Maximillian Dornseif))
Advisory: Directory traversal in CitrusDB (dornseif at informatik.rwth-aachen.de (Maximillian Dornseif))
[HAT-SQUAD] Findjmp2 (class101 at hat-squad.com (class 101))
[ GLSA 200502-19 ] PostgreSQL: Buffer overflows in PL/PgSQL parser (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[waraxe-2005-SA#040] - Full path disclosure and XSS in PhpNuke 6.x-7.6 (come2waraxe at yahoo.com (Janek Vind))
Google Hack Honeypot v1.0 is released! (rmcgeeha at students.depaul.edu (Ryan McGeehan))
SecurityForest - Public Release no.2 (loni at securityforest.com (loni@...urityforest.com))
Delivery by mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
Delivery by mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))

February 15 (23 messages)

MDKSA-2005:037 - Updated mailman packages fix directory traversal vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185 (richardt at qualcomm.com (Threlkeld, Richard))
the fun continues with milw0rm.com (venom at gen-x.co.nz (VeNoMouS))
Kayako eSupport v2.3.1 Support Tracker XSS Vulnerability (seth at tautology.org (Seth Alan Woolley))
Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 (var at deny-all.com (Vincent Archer))
[USN-82-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[HAT-SQUAD] Findjmp2 (class101 at hat-squad.com (class 101))
RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185 (ionut.stanescu at brd.ro (STANESCU Ionut))
RE: Microsoft Baseline Security Analyzer no t seeing KB887742 and KB886185 (prandal at herefordshire.gov.uk (Randal, Phil))
[ZALUPA] POC - IE Flash Remote Command Exec (ob_sc_ur_it_y at hotmail.com (moronic_wood .))
Re: [Mailman-Developers] mailman emailharvester (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
linux kernel 2.6 fun. windoze is a joke (guninski at guninski.com (Georgi Guninski))
harddisk encryption (ledeve at gmx.net (Lentila de Vultur))
ASPjar Guestbook login.asp not official patch (corryl at sitoverde.com (CorryL))
harddisk encryption (Glenn_Everhart at bankone.com (Glenn_Everhart@...kone.com))
Harddisk encryption (tdyke at wcb.bc.ca (Dyke, Tim))
Harddisk encryption (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[ GLSA 200502-20 ] Emacs, XEmacs: Format string vulnerabilities in movemail (koon at gentoo.org (Thierry Carrez))
[ GLSA 200502-21 ] lighttpd: Script source disclosure (koon at gentoo.org (Thierry Carrez))
the fun continues with milw0rm.com (blsonne at rogers.com (Byron L. Sonne))
New Internet Explorer Beta (danjr at voyager.net (danjr))
harddisk encryption (bmrm1 at comcast.net (Bill Miller))
Delivery by mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))

February 16 (30 messages)

New Internet Explorer Beta (stan at ccs.neu.edu (Stan Bubrouski))
MDKSA-2005:038 - Updated emacs/xemacs packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
In case y'all didn't catch it yet... (tim-security at sentinelchicken.org (Tim))
New Internet Explorer Beta (william at lefkovics.net (William Lefkovics))
RE: Microsoft Baseline Security Analyzer no t seeing KB887742 and KB886185 (sbradcpa at pacbell.net (Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]))
New Internet Explorer Beta (kiwi at oav.net (Xavier Beaudouin))
In case y'all didn't catch it yet... (guninski at guninski.com (Georgi Guninski))
In case y'all didn't catch it yet... (Polarizer at Codixx.Com (Polarizer))
In case y'all didn't catch it yet... (Polarizer at Codixx.Com (Polarizer))
In case y'all didn't catch it yet... (infsec at gmail.com (Willem Koenings))
[NORTHSHOREINTERNET.COM.AU: #1] amihotornot.com.au vulnerability (advisories at northshoreinternet.com.au (North Shore Internet))
RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185 (harshad at yahoo.com (Harshad))
In case y'all didn't catch it yet... (Polarizer at Codixx.De (Polarizer))
RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185 (richardt at qualcomm.com (Threlkeld, Richard))
New Internet Explorer Beta (Robert.Moss at psinet.telstra.co.uk (Robert Moss))
RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB886185 (thor at hammerofgod.com (Thor (Hammer of God)))
harddisk encryption (ledeve at gmx.net (Lentila de Vultur))
[USN-83-1] LessTif 2 vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
In case y'all didn't catch it yet... (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
In case y'all didn't catch it yet... (tim-security at sentinelchicken.org (Tim))
In case y'all didn't catch it yet... (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
In case y'all didn't catch it yet... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
In case y'all didn't catch it yet... (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
[ GLSA 200502-22 ] wpa_supplicant: Buffer overflow vulnerability (vorlon at gentoo.org (Matthias Geerdsen))
New Internet Explorer Beta (dk at pwarchitects.com (dk))
[ GLSA 200502-23 ] KStars: Buffer overflow in fliccd (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
In case y'all didn't catch it yet... (infsec at gmail.com (Willem Koenings))
RE: Microsoft Baseline Security Analyzer not seeing KB887742 and KB88 6185 Correction (Joe.Granto at MCI.Com (Joe Granto))
In case y'all didn't catch it yet... (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
[ZALUPA] POC - IE Flash Remote Command Exec (loptr.chaote at gmail.com (Loptr Chaote))

February 17 (32 messages)

[ZALUPA] POC - IE Flash Remote Command Exec (se_cur_ity at hotmail.com (morning_wood))
MDKSA-2005:039 - Updated rwho packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
IE/OE Restricted Zone Status Bar Spoofing (bitlance_3 at hotmail.com (winter bitlance))
In case y'all didn't catch it yet... (lionel.ferette at belnet.be (Lionel Ferette))
Yahoo Problems? (macygasp at gmail.com (Marcy Darcy))
In case y'all didn't catch it yet... (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
[USN-78-2] Fixed mailman packages for USN-78-1 (martin.pitt at canonical.com (Martin Pitt))
[USN-66-2] PHP vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: Yahoo Problems? (etomcat at freemail.hu (Feher Tamas))
Re: Yahoo Problems? (papp_geza1 at axelero.hu (Geza Papp dr (Axelero)))
Re: Yahoo Problems? (macygasp at gmail.com (Macy Gasp))
Advisory: Multiple Vulnerabilities in BibORB (security at surf25.de (Patrick Hof))
[TURBOLINUX SECURITY INFO] 17/Feb/2005 (security-announce at turbolinux.co.jp (Turbolinux))
Re: Yahoo Problems? (niek at packetstorm.nu (Niek))
Administrivia: Hosting Urgently Required (johnc at grok.org.uk (John Cartwright))
Re: Sex pictures (tss at iki.fi (tss@....fi))
A parent's primer to computer slang (skylined at edup.tudelft.nl (Berend-Jan Wever))
In case y'all didn't catch it yet... (eian at samfundet.no (Martin Eian))
iDEFENSE Labs Website Launch (labs-no-reply at idefense.com (iDEFENSE Labs))
How T-Mobil's network was compromised (unknownsoldier93 at yahoo.com (gf gf))
Yahoo Problems? (tanvirlodi at yahoo.com (Tanvir))
Yahoo Problems? (tanvirlodi at yahoo.com (Tanvir))
A parent's primer to computer slang (seclists at securinews.com (Paul Kurczaba))
[ GLSA 200502-24 ] Midnight Commander: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
A parent's primer to computer slang (michealespinola at gmail.com (Micheal Espinola Jr))
How T-Mobil's network was compromised (doj at solar-nexus.com (Dave Ockwell-Jenner))
How T-Mobil's network was compromised (stfunub at gmail.com (Andrew Smith))
How T-Mobil's network was compromised (xillwillx at gmail.com (Ill will))
[FLSA-2005:2137] Updated cyrus-sasl resolves security vulnerabilities (dom at earth.li (Dominic Hargreaves))
T-Moble still vulnerable, 1 year after being hacked (eric_alberg at yahoo.com (eric alberg))
The Security Forum - meeting #8 -20/2/05 (ge at linuxbox.org (Gadi Evron))
[SA14304] Internet Explorer/Outlook Express Status Bar Spoofing -- A joke ? (Modifié par ZATAZ) (sec-adv at secunia.com (Secunia Security Advisories))

February 18 (33 messages)

URLs used by W32/MyDoom-O (aka .AX, .BB) to query search engines? (alain at ait.ac.th (Alain Fauconnet))
New Internet Explorer Beta (skrewz at skrewz.dk (Anders Breindahl))
MDKSA-2005:040 - Updated PostgreSQL packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:041 - Updated cups packages fix vulnerabilities on 64 bit platforms (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:042 - Updated gpdf packages fix vulnerabilities on 64 bit platforms (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:043 - Updated xpdf packages fix vulnerabilities on 64 bit platforms (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:044 - Updated tetex packages fix vulnerabilities on 64 bit platforms (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:045 - Updated kdelibs packages fix vulnerabilities (security at linux-mandrake.com (Mandrakelinux Security Team))
RE: URLs used by W32/MyDoom-O (aka .AX, .BB) to query search engines? (p.nolan at comcast.net (Patrick Nolan))
Re: iDEFENSE Labs Website Launch (iDEFENSE Labs) (edge at indiana.edu (Edge, Ronald D))
Secunia Research: Yahoo! Messenger File Transfer Filename Spoofing (as at secunia.com (Andreas Sandblad))
Secunia Research: Yahoo! Messenger Audio Setup Wizard Privilege Escalation (che at secunia.com (Carsten H. Eiram))
Sandblad's IE vulnerabilities (lise_moorveld at hotmail.com (Lise Moorveld))
Re: iDEFENSE Labs Website Launch (iDEFENSE Labs) (j.schipper at math.uu.nl (Joachim Schipper))
[HAT-SQUAD] 3com 3CDaemon FTP Unauthorized "USER" Remote BOverflow (class101 at hat-squad.com (class 101))
[ GLSA 200502-25 ] Squid: Denial of Service through DNS responses (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[VulnWatch] Secunia Research: Yahoo! Messenger File Transfer Filename Spoofing (as at secunia.com (Andreas Sandblad))
[ GLSA 200502-26 ] GProFTPD: gprostats format string vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
the art of locksmithing (george at galis.org (George Georgalis))
[VulnWatch] Secunia Research: Yahoo! Messenger Audio Setup Wizard PrivilegeEscalation (che at secunia.com (Carsten H. Eiram))
Multiple vulnerabilities in TrackerCam 5.12 (aluigi at autistici.org (Luigi Auriemma))
the art of locksmithing (jlongs2 at uic.edu (James Longstreet))
Multiple vulnerabilities in TrackerCam 5.12 (se_cur_ity at hotmail.com (morning_wood))
the art of locksmithing (george at galis.org (George Georgalis))
Re: iDEFENSE Labs Website Launch (iDEFENSE Labs) (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: iDEFENSE Labs Website Launch (iDEFENSE Labs) (nick at virus-l.demon.co.uk (Nick FitzGerald))
[SPAM] [VulnWatch] Secunia Research: Yahoo! Messenger Audio Setup Wizard PrivilegeEscalation (luke at intrinsix.net (Luke Lussier))
How T-Mobil's network was compromised (bkfsec at sdf.lonestar.org (bkfsec))
Knox Arkeia remote root/system exploit (guldens111 at hotmail.com (John Doe))
Re: iDEFENSE Labs Website Launch (iDEFENSE Labs) (bkfsec at sdf.lonestar.org (bkfsec))
How T-Mobil's network was compromised (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
looking for agood book (pierrejackson2002 at yahoo.com (Pierre Jackson))
looking for agood book (optik at wccnet.org (Rick))

February 19 (14 messages)

RE: [SA14304] Internet Explorer/Outlook Express Status Bar Spoofing -- A joke ? (bitlance_3 at hotmail.com (bitlance winter))
Multiple vulnerabilities in TrackerCam 5.12 (matthew at textbox.net (404))
Thomson TCW690 POST Password Validation Vulnerability (murdok.lnx at gmail.com (MurDoK))
Thomson TCW690 Denial Of Service Vulnerability (murdok.lnx at gmail.com (MurDoK))
Re: iDEFENSE Labs Website Launch (iDEFENSE Labs) (j.schipper at math.uu.nl (Joachim Schipper))
Multiple vulnerabilities in TrackerCam 5.12 (se_cur_ity at hotmail.com (morning_wood))
How T-Mobil's network was compromised (infsec at gmail.com (Willem Koenings))
How T-Mobil's network was compromised (frank at knobbe.us (Frank Knobbe))
[ GLSA 200502-27 ] gFTP: Directory traversal vulnerability (vorlon at gentoo.org (Matthias Geerdsen))
Thomson TCW690 Denial Of Service Vulnerability (atarasco at gmail.com (Andres Tarasco))
pMachine Pro / pMachine Free Remote Code Execution (kingcope at gmx.net (kc))
Multiples vulnerability in ZeroBoard, (asc at albanianhaxorz.org (albanian haxorz))
ADP Elite System Max 9000 Series Login Vulnerability (rootfiend at SAFe-mail.net (rootfiend@...e-mail.net))
How T-Mobil's network was compromised (infsec at gmail.com (Willem Koenings))

February 20 (29 messages)

How T-Mobil's network was compromised (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Thomson TCW690 Denial Of Service Vulnerability (murdok.lnx at gmail.com (MurDoK))
In case y'all didn't catch it yet... (infsec at gmail.com (Willem Koenings))
Knox Arkeia remote root/system exploit (fdlist at digitaloffense.net (H D Moore))
this is fun? (evilninja at gmx.net (Christian))
Re: T-Mobil hacked - how? (unknownsoldier93 at yahoo.com (gf gf))
this is fun? (haplo at haplo.net (Jordan Klein))
How T-Mobil's network was compromised (frank at knobbe.us (Frank Knobbe))
403 - Forbidden Google Error (mail at hackingspirits.com (Debasis Mohanty))
this is fun? (dentonj at gmail.com (Jeffrey Denton))
How T-Mobil's network was compromised (infsec at gmail.com (Willem Koenings))
Followup to T-Mobile hack (danjr at voyager.net (danjr))
403 - Forbidden Google Error (mail at hackingspirits.com (Debasis Mohanty))
this is fun? (dentonj at gmail.com (Jeffrey Denton))
How T-Mobil's network was compromised (fulldisclosure at wateraxe.demon.nl (Allan))
403 - Forbidden Google Error (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Arkeia Network Backup Client Remote Access (fdlist at digitaloffense.net (H D Moore))
[Bulk] Re: looking for agood book (blsonne at rogers.com (Byron L. Sonne))
How T-Mobil's network was compromised (frank at knobbe.us (Frank Knobbe))
[FLSA-2005:1944] GNOME VFS updates address extfs vulnerability (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:1945] Updated sox packages fix buffer overflows (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:2058] Updated cdrtools packages fix a security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
proxy honeynet (dropstatd at hush.ai (dropstatd@...h.ai))
Is delivered mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
Delivery service mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
Delivery service mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
Is delivered mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
You are made active (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
The WebConnect 6.4.4 and 6.5 contains several vulnerabilities (advisory at cirt.dk (CIRT Advisory))

February 21 (15 messages)

WindowsXPSP2 script-initiated popup window titlebar spoofing (bitlance_3 at hotmail.com (bitlance winter))
proxy honeynet (gem at rellim.com (Gary E. Miller))
paNews v2.0b4 - PHP Injection (tjomka at navigator.lv (tjomka))
[USN-84-1] Squid vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
this is fun? (evilninja at gmx.net (evilninja))
Shadow Crew back in business (xploitable at gmail.com (n3td3v))
iDEFENSE Security Advisory 02.21.05: Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities (idlabs-advisories at idefense.com (idlabs-advi…)
SD Server 4.0.70 Directory Traversal Bug (corryl at sitoverde.com (CorryL))
iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulne… (idlabs-advisories at idefense.com (idla…)
iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow V… (idlabs-advisories at idefense.com (idla…)
[ GLSA 200502-28 ] PuTTY: Remote code execution (lewk at gentoo.org (Luke Macken))
Awake a modem with AT commands (action09 at aimao.org (action09))
Sourceforge security contact to the white courtesy phone please. (measl at mfn.org (J.A. Terranson))
Delivery by mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
Registration is accepted (rizwanalikhan74 at yahoo.com (Rizwanalikhan))

February 22 (17 messages)

Arkeia Network Backup Client Remote Access (fdlist at digitaloffense.net (H D Moore))
phpBB Fixed full path disclosure in username handling - 2.0.11 (anthrax101 at gmail.com (Aaron Horst))
Re: Followup to T-Mobile hack (etomcat at freemail.hu (Feher Tamas))
Re: this is fun (etomcat at freemail.hu (Feher Tamas))
R: Full-Disclosure Digest, Vol 3, Issue 42 (t.radice at wssitalia.it (Tiziano Radice))
IDS Signatures (k_preeth at rediffmail.com (preeth k))
: [SCAN Associates Security Advisory] vbulletin 3.0.6 and below php code injection (pokleyzz at scan-associates.net (pokley))
IDS Signatures (scheidell at secnap.net (Michael Scheidell))
IDS Signatures (michealespinola at gmail.com (Micheal Espinola Jr))
Sourceforge security contact to the white courtesy phone please. (spamproof at nospammail.net (Rob))
IDS Signatures (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
iDEFENSE Security Advisory 02.22.05: phpBB Group phpBB Arbitrary File Disclosure Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.c…)
iDEFENSE Security Advisory 02.22.05: phpBB Group phpBB2 Arbitrary File Unlink Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
Re: Followup to T-Mobile hack (stfunub at gmail.com (Andrew Smith))
unace-1.2b multiple buffer overflows and directory traversal bugs (Ulf.Harnhammar.9485 at student.uu.se (Ulf Härnhammar))
[Full Disclosure] RE: this IS FUN!!!! (randallm at fidmail.com (RandallM))
Is delivered mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))

February 23 (26 messages)

Please can some one help out. (tanvirlodi at yahoo.com (Tanvir))
Please can some one help out. (1 at malware.com (http-equiv@...ite.com ))
Please can some one help out. (kf_lists at digitalmunition.com (KF (Lists)))
Re: Please can some one help out. (Off-topic) (etomcat at freemail.hu (Feher Tamas))
Please can some one help out. (tanvirlodi at yahoo.com (Tanvir))
Incorrect Classification of iDownload's Product as Spyware... (zx at castlecops.com (Paul Laudanski))
Please can some one help out. (stan.bubrouski at gmail.com (Stan Bubrouski))
Please can some one help out. (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Release of Arkeia Network Backup 5.3.5 fixes security issue (aspicht at arkeia.com (Arnaud Spicht))
Robustness patch for TWiki, vulnerability in ImageGalleryPlugin (fw at deneb.enyo.de (Florian Weimer))
[ GLSA 200502-29 ] Cyrus IMAP Server: Multiple overflow vulnerabilities (vorlon at gentoo.org (Matthias Geerdsen))
Release of Arkeia Network Backup 5.3.5 fixes security issue (lisfrank at chem.toronto.edu (Frank Bures))
smtpsvc and undocumented registry values (thierry.haven at xmcopartners.com (Thierry Haven))
Release of Arkeia Network Backup 5.3.5 fixessecurity issue (tmyers at coactivesys.com (Tim Myers))
RE: Incorrect Classification of iDownload's Product as Spyware... (seclists at securinews.com (Paul Kurczaba))
Release of Arkeia Network Backup 5.3.5 fixes security issue (kf_lists at digitalmunition.com (KF (lists)))
smtpsvc and undocumented registry values (ajalal at bushschool.tamu.edu (Jalal, Ahmed))
Xfree86 video buffering? (kf_lists at digitalmunition.com (KF (lists)))
Xfree86 video buffering? (seclists at stratitec.com (defiance))
Re: Incorrect Classification of iDownload's Product as Spyware... (zx at castlecops.com (Paul Laudanski))
Xfree86 video buffering? (kf_lists at digitalmunition.com (KF (Lists)))
But i guess..... (tanvirlodi at yahoo.com (Tanvir))
smtpsvc and undocumented registry values (atarasco at gmail.com (Andres Tarasco))
Please can some one help out. (mikie.simpson at gmail.com (Michael Simpson))
Re: Incorrect Classification of iDownload's Product as Spyware... (davec at digistruction.com (Dave C))
iDEFENSE Security Advisory 02.23.05: Sun Solaris kcms_configure Arbitrary File Corruption Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@i…)

February 24 (37 messages)

So I have just been studying IE source code and found this strange behaviour.. (agent99 at sgi.com (agent99@....com))
But i guess..... (ms_Full-Disclosure at war-driving.org (Marcus Specht))
Please can some one help out. (bob at caltech.edu (Robert S. Logan))
[FLSA-2005:2005] Updated gdk-pixbuf packages fix security flaws (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:2043] Updated zlib package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:2343] Updated vim packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
Please help me update my address book on Ringo (ahmad_rana84 at hotmail.com (Ahmad Naazir))
Please help me update my address book on Ringo (measl at mfn.org (J.A. Terranson))
Re: But i guess..... (stan.bubrouski at gmail.com (Stan Bubrouski))
Please help me update my address book on Ringo (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Please help me update my address book on Ringo (dhill+fulldisc at cricalix.net (Duncan Hill))
Google Search and Gmail Correlation (codyhatch at hushmail.com (Cody Hatch))
smtpsvc and undocumented registry values (thierry.haven at xmcopartners.com (Thierry Haven))
Cyclades AlterPath Manager Vulnerabilities (sullo at cirt.net (Sullo))
[TURBOLINUX SECURITY INFO] 24/Feb/2005 (security-announce at turbolinux.co.jp (Turbolinux))
Google Search and Gmail Correlation (adam at nhh.hu (Ádám Szilveszter dr.))
Please help me update my address book on Ringo (jftucker at gmail.com (James Tucker))
Google Search and Gmail Correlation (Thierry at sniff-em.com (Thierry Zoller))
Please can some one help out. (everbeeninlove at gmail.com (John Galt))
Exploiting apache (International-Asso at web.de (International-Asso@....de))
Exploiting apache (iago at valhallalegends.com (Ron))
Please help me update my address book on Ringo (michealespinola at gmail.com (Micheal Espinola Jr))
Google as Application FireWall (andrey at hiddenbit.org (Andrey Bayora))
Exploiting apache (matthew at textbox.net (404))
Cisco Security Advisory: ACNS Denial of Service and Default Admin Password Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Respons…)
IDS Signatures (everbeeninlove at gmail.com (John Galt))
Awake a modem with AT commands (everbeeninlove at gmail.com (John Galt))
In-game cl_guid crash in Soldier of Fortune II 1.03 (aluigi at autistici.org (Luigi Auriemma))
Exploiting apache (devis at easynix.net (devis))
IDS Signatures (frank at knobbe.us (Frank Knobbe))
MDKSA-2005:046 - Updated uim packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:047 - Updated squid packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
RE: Incorrect Classification of iDownload's Product as Spyware... (roger at banneretcs.com (Roger A. Grimes))
GAIM exploit (lists at domain-logic.com (Randall Perry))
Xfree86 video buffering? (eric at arcticbears.com (Eric Paynter))
Xfree86 video buffering? (lists at bwbohh.net (Eric Windisch))
phpWebSite-0.10.0_exploit (tjomka at navigator.lv (tjomka))

February 25 (48 messages)

Xfree86 video buffering? (rodrigob at suespammers.org (Rodrigo Barbosa))
Xfree86 video buffering? (kf_lists at digitalmunition.com (KF (Lists)))
Xfree86 video buffering? (kf_lists at digitalmunition.com (KF (Lists)))
Exploiting apache (nick at virus-l.demon.co.uk (Nick FitzGerald))
Xfree86 video buffering? (rodrigob at suespammers.org (Rodrigo Barbosa))
Xfree86 video buffering? (rodrigob at suespammers.org (Rodrigo Barbosa))
[FLSA-2005:2336] Updated kernel packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
Xfree86 video buffering? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Xfree86 video buffering? (fulldisclosure at wateraxe.demon.nl (Allan))
Firescrolling [Firefox 1.0] (mikx at mikx.de (mikx))
Narmacil project : The super worms : does it already exist? (khaalel at gmail.com (khaalel))
Fw: Google Search and Gmail Correlation (Colin.Scott at csplc.com (Colin.Scott@...lc.com))
AW: Google Search and Gmail Correlation (ebay at thehangout.de (Tim Hecktor))
Please help me update my address book on Ringo (scheidell at secnap.net (Michael Scheidell))
Xfree86 video buffering? (jftucker at gmail.com (James Tucker))
Re: Xfree86 video buffering? (rsw at jfet.org (Riad S. Wahby))
Xfree86 video buffering? (michael.holstein at csuohio.edu (Michael Holstein))
(no subject) (yeh.durpe at gmail.com (Yeh Durpe))
Xfree86 video buffering? (bkfsec at sdf.lonestar.org (bkfsec))
[USN-85-1] Gaim vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Xfree86 video buffering? (stan.bubrouski at gmail.com (Stan Bubrouski))
Xfree86 video buffering? (bkfsec at sdf.lonestar.org (bkfsec))
Xfree86 video buffering? (cmacfarlane at Drummond-Miller.co.uk (Cassidy Macfarlane))
phpWebSite-0.10.0_exploit (Colin.Scott at csplc.com (Colin.Scott@...lc.com))
CIS WebServer Directory Traversal Bug (corryl at sitoverde.com (CorryL))
Re: Xfree86 video buffering? (rsw at jfet.org (Riad S. Wahby))
Xfree86 video buffering? (kf_lists at digitalmunition.com (KF (lists)))
RE: Firescrolling [Firefox 1.0] (eric at piteduncan.com (Eric McCarty))
iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
Re: Xfree86 video buffering? (stan.bubrouski at gmail.com (Stan Bubrouski))
Xfree86 video buffering? (stan.bubrouski at gmail.com (Stan Bubrouski))
Re: Xfree86 video buffering? (rsw at jfet.org (Riad S. Wahby))
Re: Xfree86 video buffering? (stan.bubrouski at gmail.com (Stan Bubrouski))
RE: Firescrolling [Firefox 1.0] (jbeauford at EightInOnePet.com (Beauford, Jason))
Re: Xfree86 video buffering? (phased at mail.ru (phased))
Fw: Google Search and Gmail Correlation (nekramer at mindtheater.net (Nancy Kramer))
Re: Xfree86 video buffering? (joel.esler at rcert-s.army.mil (Esler, Joel CNTR/Sytex))
PivX Solutions (jasonc at science.org (Jason Coombs))
Fw: Google Search and Gmail Correlation (bob at evdo-coverage.com (bob wireless internet evdo & wifi hotspot guy))
wireless internet spying wifi hotpots and ATMS (bob at evdo-coverage.com (bob wireless internet evdo & wifi hotspot guy))
PivX Solutions (nocmonkey at gmail.com (Danny))
Fw: Google Search and Gmail Correlation (joel.esler at rcert-s.army.mil (Esler, Joel CNTR/Sytex))
[ GLSA 200502-30 ] cmd5checkpw: Local password leak vulnerability (koon at gentoo.org (Thierry Carrez))
Knet <= 1.04c Buffer Overflow Bug (corryl at sitoverde.com (CorryL))
RE: Firescrolling [Firefox 1.0] (leoandrade at deloitte.com (Andrade, Leonardo F. Buonsanti de (BR - IT Brazil)))
Re: Firescrolling [Firefox 1.0] (stan at ccs.neu.edu (Stan Bubrouski))
More T-Mobile fall out... (pingywon at hotmail.com (pingywon))
More T-Mobile fall out... (jericho at attrition.org (security curmudgeon))

February 26 (15 messages)

Awake a modem with AT commands (manipeto at yahoo.co.uk (Syed Imran Ali))
Novell/Ximian Evolution multiple text attachments DoS (khermansen at ht-technology.com (Kristian Hermansen))
[lists] Novell/Ximian Evolution multiple text attachmentsDoS (purdy at tecman.com (Curt Purdy))
[lists] RE: Awake a modem with AT commands (purdy at tecman.com (Curt Purdy))
[lists] Novell/Ximian Evolution multiple text attachmentsDoS (draht at suse.de (Roman Drahtmueller))
[lists] Novell/Ximian Evolution multiple textattachmentsDoS (purdy at tecman.com (Curt Purdy))
Google Search and Gmail Correlation (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
GAIM exploit (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Badblue HTTP Server, ext.dll buffer overflow (atarasco at sia.es (Andres Tarasco))
Fw: Google Search and Gmail Correlation(ev gpsc verify reciept please) (chromazine at sbcglobal.net (Steve Kudlak))
Re: Firescrolling [Firefox 1.0] (mikx at mikx.de (mikx))
Fake FBI email Worm Variant Xposed (mail at hackingspirits.com (Debasis Mohanty))
Xfree86 video buffering? (evilninja at gmx.net (_evil))
Xfree86 video buffering? (everbeeninlove at gmail.com (Ankush Kapoor))
Fw: Google Search and Gmail Correlation(ev gpsc verify reciept please) (everbeeninlove at gmail.com (Ankush Kapoor))

February 27 (9 messages)

Fake FBI email Worm Variant Xposed (niek at packetstorm.nu (Niek))
RE: Firescrolling [Firefox 1.0] (niek at packetstorm.nu (Niek))
Google Search and Gmail Correlation (niek at packetstorm.nu (Niek))
Xfree86 video buffering? (kf_lists at digitalmunition.com (KF (Lists)))
Xfree86 video buffering? (evilninja at gmx.net (evilninja))
[HAT-SQUAD] BadBlue, Easy P2P File Sharing Remote Exploit (class101 at hat-squad.com (class 101))
Badblue HTTP Server, ext.dll buffer overflow Exploit (tarako at gmail.com (Miguel Tarascó Acuña))
Badblue HTTP Server Exploit (tarako at gmail.com (Miguel Tarascó Acuña))
Xfree86 video buffering? (william at waisse.org (William Waisse))

February 28 (33 messages)

client - server (rebonzo at libero.it (Matteo Giannone))
client - server (lists at bwbohh.net (Eric Windisch))
[lists] RE: Awake a modem with AT commands (manipeto at yahoo.co.uk (Syed Imran Ali))
client - server (gautam.singh at gmail.com (Gautam R. Singh))
[HAT-SQUAD] BadBlue, Easy P2P File Sharing Remote Exploit (update) (class101 at hat-squad.com (class 101))
[USN-86-1] cURL vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-87-1] Cyrus IMAP server vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-88-1] reportbug information disclosure (martin.pitt at canonical.com (Martin Pitt))
[TURBOLINUX SECURITY INFO] 28/Feb/2005 (security-announce at turbolinux.co.jp (Turbolinux))
[HAT-SQUAD] BadBlue, Easy P2P File Sharing Remote Exploit (update) (class101 at hat-squad.com (class 101))
Fw: Google Search and Gmail Correlation(ev gpsc verify reciept please) (dlcmacosx at mac.com (David Chastain))
[lists] RE: Awake a modem with AT commands (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Re: Full-Disclosure Digest, Vol 3, Issue 52 (wiggert at isiz.nl (Wiggert de Haan))
[USN-89-1] XML library vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Possible XSS issue on Windows XPSP2 IE6 via MIME Encapsulation of Aggregate HTML (bitlance_3 at hotmail.com (bitlance winter))
Safe Run As (offtopic at mail.ru (offtopic))
iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error (idlabs-advisories at idefense.com (idlabs…)
Fw: Google Search and Gmail Correlation(evgpsc verify reciept please) (dan_20407 at msn.com (DAN MORRILL))
[ GLSA 200502-31 ] uim: Privilege escalation vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
client - server (michael.holstein at csuohio.edu (Michael Holstein))
[ GLSA 200502-32 ] UnAce: Buffer overflow and directory traversal vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
client - server (rebonzo at libero.it (Matteo Giannone))
client - server (rebonzo at libero.it (Matteo Giannone))
client - server (michealespinola at gmail.com (Micheal Espinola Jr))
client - server (michael.holstein at csuohio.edu (Michael Holstein))
client - server (michealespinola at gmail.com (Micheal Espinola Jr))
Server termination in Scrapland 1.0 (aluigi at autistici.org (Luigi Auriemma))
[VulnDiscuss] Re: [HAT-SQUAD] BadBlue, Easy P2P File Sharing Remote Exploit (update) (class101 at hat-squad.com (class 101))
Xfree86 video buffering? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Possible XSS issue on Windows XPSP2 IE6 via MIME Encapsulation of Aggregate HTML (3APA3A at SECURITY.NNOV.RU (3APA3A))
iDEFENSE Security Advisory 02.28.05: KPPP Privileged File Descriptor Leak Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense.com))
[ GLSA 200502-33 ] MediaWiki: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
client - server (ms_Full-Disclosure at war-driving.org (Marcus Specht))

722 messages