full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2005/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 18	² 44	³ 62	⁴ 38	⁵ 9	⁶ 10
⁷ 16	⁸ 26	⁹ 23	¹⁰ 71	¹¹ 48	¹² 41	¹³ 26
¹⁴ 57	¹⁵ 36	¹⁶ 41	¹⁷ 18	¹⁸ 37	¹⁹ 25	²⁰ 22
²¹ 23	²² 39	²³ 33	²⁴ 31	²⁵ 26	²⁶ 13	²⁷ 7
²⁸ 9	²⁹ 25	³⁰ 23	³¹ 45

Messages by day:

March 1 (18 messages)

OpenServer 5.0.6 OpenServer 5.0.7 : A vulnerability in TCP (please_reply_to_security at sco.com (please_reply_to_security@....com))
Possible XSS issue on Windows XPSP2 IE6 via MIME Encapsulation of Aggregate HTML (bitlance_3 at hotmail.com (bitlance winter))
Seeking anyone harmed by PivX Solutions (jasonc at science.org (Jason Coombs))
Seeking anyone harmed by PivX Solutions (jasonc at science.org (Jason Coombs))
Securitytrap 2005 Feb Top20 list, MSN messager PNG Image BoF exploit on top (vertex at securitytrap.com (vertex))
Kernelpanik Labs Digest 2005-2 (seclists at kernelpanik.org (Kernelpanik Labs - Security Lists))
Bluesnarf attacks (constantin.hofstetter at gmail.com (Constantin Hofstetter))
Bluesnarf attacks (kf_lists at digitalmunition.com (KF (lists)))
[ GLSA 200503-01 ] Qt: Untrusted library search path (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200503-02 ] phpBB: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
[ GLSA 200503-03 ] Gaim: Multiple Denial of Service issues (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Bluesnarf attacks (dante at alighieri.org (Davide Del Vecchio))
Bluesnarf attacks (constantin.hofstetter at gmail.com (Constantin Hofstetter))
iDEFENSE Security Advisory 03.01.05: RealNetworks RealPlayer .smil Buffer Overflow Vulnerability (idlabs-advisories at idefense.com (idlabs-advisories@...fense…)
Possible XSS issue on Windows XPSP2 IE6 via MIMEEncapsulation of Aggregate HTML (jerome.athias at free.fr (Jerome ATHIAS))
[ GLSA 200503-04 ] phpWebSite: Arbitrary PHP execution and path disclosure (koon at gentoo.org (Thierry Carrez))
Things that make you go "Hmmm" (bounce at asmodeus.yi.org (Burke N. Hare))
dsniff (Charlie_Bruce at nal.com (Charlie_Bruce@....com))

March 2 (44 messages)

[FLSA-2005:2314] Updated XFree86 packages fix security flaws (dom at earth.li (Dominic Hargreaves))
Things that make you go "Hmmm" (jasonc at science.org (Jason Coombs))
Things that make you go "Hmmm" (jasonc at science.org (Jason Coombs))
Things that make you go "Hmmm" (dropstatd at hush.ai (dropstatd@...h.ai))
Things that make you go "Hmmm" (mremington at threatfocus.com (Mark Remington))
Things that make you go "Hmmm" (mremington at threatfocus.com (Mark Remington))
ULTRA VNC in a HIPPA environment (buford.t.pisser at verizon.net (Buford))
Things that make you go "Hmmm" (mremington at threatfocus.com (Mark Remington))
Irony in the Otherworld (phantasmal at hush.ai (Phantasmal Phantasmagoria))
client - server (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Things that make you go "Hmmm" (jasonc at science.org (Jason Coombs))
client - server (gautam.singh at gmail.com (Gautam R. Singh))
slashdot (carlos.oliv at gmail.com (Carlos de Oliveira))
Macromedia ColdFusion (roman.kunz at juliusbaer.com (roman.kunz@...iusbaer.com))
Things that make you go "Hmmm" (Andriy.Bilous at sabre.com (Andriy Bilous))
slashdot (j at pureftpd.org (Frank Denis (Jedi/Sector One)))
(no subject) (anthony.aykut at frame4.com (Anthony Aykut))
client - server (fd at ben.iagu.net (fd@....iagu.net))
[FLSA-2005:2127] Updated CUPS packages fix security vulnerabilities (marcdeslauriers at videotron.ca (Marc Deslauriers))
Things that make you go "Hmmm" (shana.ufie at gmail.com (Andreia Gaita))
Bluesnarf attacks (dank.krew at gmail.com (stonersavant))
Things that make you go "Hmmm" (mastah at phreaker.net (Egoist))
Things that make you go "Hmmm" (smp.repicky at gmail.com (Matt))
New virus? (matthewb at accelrys.com (Matthew Burling))
New virus? (stephane.nasdrovisky at paradigmo.com (stephane nasdrovisky))
New virus? (Thierry at sniff-em.com (Thierry Zoller))
PIVX IS BANKRUPT (lor.tharholm at hushmail.com (lor.tharholm@...hmail.com))
New virus? (carlos.ulver at gmail.com (Carlos Ulver))
test (smart at cs.state.ny.us (John Smart))
[ GLSA 200503-05 ] xli, xloadimage: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
test (pingywon at hotmail.com (pingywon))
test (xyberpix at xyberpix.com (xyberpix))
Yahoo Messenger. Yahoo Mail vulnerable (xploitable at gmail.com (n3td3v))
PIVX IS BANKRUPT (venom at gen-x.co.nz (VeNoMouS))
Re: test (roberto.arias at gmail.com (Roberto Arias))
Bluesnarf attacks (adam.laurie at thebunker.net (Adam Laurie))
OpenSSL <=3D 0.9.6m vulnerability (cyber_tal0n at hushmail.com (cyber_tal0n@...hmail.com))
iDEFENSE Labs Releases IDA Sync (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Checksum Buffer Overflow (idlabs-advisories at idefense.com (idlabs-advisori…)
iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Network Buffer Overflow (idlabs-advisories at idefense.com (idlabs-advisorie…)
iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GETCONFIG Buffer Overflow (idlabs-advisories at idefense.com (idlabs-advisories@…)
iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Directory Traversal (idlabs-advisories at idefense.com (idlabs-advisories@...fen…)
iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Buffer Overflow (idlabs-advisories at idefense.com (idlabs-advisories@...fense.c…)
iDEFENSE Security Advisory 03.02.05: Computer Associates License Client and Server Invalid Command Buffer Overflow (idlabs-advisories at idefense.com (idlabs-a…)

March 3 (62 messages)

Microsoft sure fire customer satisfaction (randallm at fidmail.com (RandallM))
Things that make you go "Hmmm" (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Things that make you go "Hmmm" (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
slashdot (ntx0f at seteuid.com (ntx0f))
slashdot (ntx0f at seteuid.com (ntx0f))
slashdot (mulambo at gmail.com (Export TheGeek))
OpenSSL <=3D 0.9.6m vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: test (xyberpix at xyberpix.com (xyberpix))
[USN-90-1] Imagemagick vulnerability (martin.pitt at canonical.com (Martin Pitt))
Things that make you go "Hmmm" (jftucker at gmail.com (James Tucker))
Fwd: IObjectSafety and Internet Explorer (guninski at guninski.com (Georgi Guninski))
PIVX IS BANKRUPT (skodliv at gmail.com (ren hoek))
Retrieve Internet Explorer protected storage ? (fcharpen at xmcopartners.com (Frederic Charpentier))
slashdot (mooyix at gmail.com (Brendan Dolan-Gavitt))
PIVX IS BANKRUPT (j.schipper at math.uu.nl (Joachim Schipper))
Things that make you go "Hmmm" (jasonc at science.org (Jason Coombs))
Retrieve Internet Explorer protected storage ? (mastah at phreaker.net (Egoist))
Things that make you go "Hmmm" (smp.repicky at gmail.com (Matt))
Windows Registry Analzyer (nocmonkey at gmail.com (Danny))
Windows Registry Analzyer (news-letters at bluewin.ch (NSC))
Windows Registry Analzyer (cmacfarlane at Drummond-Miller.co.uk (Cassidy Macfarlane))
Windows Registry Analzyer (ostiguy at gmail.com (Matt Ostiguy))
Windows Registry Analzyer (nocmonkey at gmail.com (Danny))
Windows Registry Analzyer (davefd at davewking.com (Dave King))
Windows Registry Analzyer (davefd at davewking.com (Dave King))
Windows Registry Analzyer (frank at knobbe.us (Frank Knobbe))
Windows Registry Analzyer (lists at bwbohh.net (Eric Windisch))
Bios programming... (matt at dynamicanswers.com (Matt Marooney))
Windows Registry Analzyer (ka at pacific.net (Ken A))
Windows Registry Analzyer (toddtowles at brookshires.com (Todd Towles))
Bios programming... (christian at leber.de (Christian Leber))
Re: Windows Registry Analzyer (davek_throwaway at hotmail.com (Dave Korn))
Bios programming... (matt at dynamicanswers.com (Matt Marooney))
Re: Windows Registry Analzyer (davek_throwaway at hotmail.com (Dave Korn))
Bios programming... (matt at dynamicanswers.com (Matt Marooney))
Bios programming... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Bios programming... (prb at lava.net (Peter Besenbruch))
Bios programming... (matt at dynamicanswers.com (Matt Marooney))
Bios programming... (michael.holstein at csuohio.edu (Michael Holstein))
Bios programming... (whump at mac.com (Bill Humphries))
Bios programming... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Windows Registry Analzyer (michael.holstein at csuohio.edu (Michael Holstein))
Bios programming... (matt at dynamicanswers.com (Matt Marooney))
Re: Windows Registry Analzyer (michael.holstein at csuohio.edu (Michael Holstein))
Bios programming... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Bios programming... (matt at dynamicanswers.com (Matt Marooney))
Bios programming... (everbeeninlove at gmail.com (Ankush Kapoor))
Bios programming... (lists at domain-logic.com (Randall Perry))
[ GLSA 200503-06 ] BidWatcher: Format string vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Bios programming... (brent.colflesh at ulticom.com (Brent Colflesh))
Bios programming... (matt at dynamicanswers.com (Matt Marooney))
Bios programming... (edgardo at u.washington.edu ('FoR ReaLz' E. Balansay))
Bios programing (DDavis at pivx.com (Dominique Davis))
[ GLSA 200503-07 ] phpMyAdmin: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Things that make you go "Hmmm" (jasonc at science.org (Jason Coombs))
Delivery by mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
Delivery by mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
Delivery service mail (rizwanalikhan74 at yahoo.com (Rizwanalikhan))
Bios programming... (droyer at taleo.com (David Royer))
Bios programming... (pjvenda at arrakis.net.dhis.org (Pedro Venda))
Windows Registry Analzyer (Nigel.Davison at irevolution.com (Davison, Nigel))
Bios programming... (philippwalther at gmx.ch (Philipp Walther))

March 4 (38 messages)

Re: Windows Registry Analzyer (lists at bwbohh.net (Eric Windisch))
unace-2.x buffer overflow (Ulf.Harnhammar.9485 at student.uu.se (Ulf Härnhammar))
Bios programming... (whump at mac.com (Bill Humphries))
Bios programming... (digitalchaos at gawab.com (Digitalchaos))
Windows Registry Analzyer (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Windows Registry Analzyer (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Bios programming... (chromazine at sbcglobal.net (Steve Kudlak))
Bios programming... (chromazine at sbcglobal.net (Steve Kudlak))
Bios programming... (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Bios programming... (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Re: Windows Registry Analzyer (Mark.Handy at morganstanley.com (Handy, Mark (IT)))
Bios programming... (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Windows Registry Analzyer (nonoyjoey at gmail.com (joey))
Bios programming... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Windows Registry Analzyer (dufresne at winternet.com (Ron DuFresne))
SetWindowsHookEx (mastah at phreaker.net (Egoist))
Bios programming... (chromazine at sbcglobal.net (Steve Kudlak))
Multi browser sensitive information disclosure (bitlance_3 at hotmail.com (bitlance winter))
Bios programming... (devis at easynix.net (devis))
Re: Windows Registry Analzyer (raoul at elforsoft.com (Raoul Nakhmanson-Kulish))
Things that make you go "Hmmm" (mikie.simpson at gmail.com (Michael Simpson))
re: Bios Programming... (matt at dynamicanswers.com (Matt Marooney))
[ GLSA 200503-08 ] OpenMotif, LessTif: New libXpm buffer overflows (koon at gentoo.org (Thierry Carrez))
Things that make you go "Hmmm" (smp.repicky at gmail.com (Matt))
[ GLSA 200503-09 ] xv: Filename handling vulnerability (koon at gentoo.org (Thierry Carrez))
[ GLSA 200503-10 ] Mozilla Firefox: Various vulnerabilities (koon at gentoo.org (Thierry Carrez))
re: Bios Programming... (j.schipper at math.uu.nl (Joachim Schipper))
re: Bios Programming... (snowhare at nihongo.org (Benjamin Franz))
Bios programming... (dk at pwarchitects.com (dk))
Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2 (andrey at hiddenbit.org (Andrey Bayora))
MDKSA-2005:048 - Updated curl packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:049 - Updated gaim packages fix multiple vulnerabilities (security at linux-mandrake.com (Mandrakelinux Security Team))
"No such thing as spyware" (nocmonkey at gmail.com (Danny))
MDKSA-2005:050 - Updated gftp packages fix vulnerability (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:051 - Updated cyrus-imapd packages fix vulnerabilities (security at linux-mandrake.com (Mandrakelinux Security Team))
MDKSA-2005:052 - Updated kdegraphics packages fix vulnerabilities (security at linux-mandrake.com (Mandrakelinux Security Team))
Bios programming... (dk at pwarchitects.com (dk))
"No such thing as spyware" (mastah at phreaker.net (Egoist))

March 5 (9 messages)

PaX privilege elevation security bug (pageexec at freemail.hu (pageexec@...email.hu))
Bios programming... (dk at pwarchitects.com (dk))
Bios programming... (pauls at utdallas.edu (Paul Schmehl))
[OFFTOPIC] Forensics (macygasp at gmail.com (Macy Gasp))
Re: Windows Registry Analzyer (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Bellua Cyber Security Asia 2005 Update (bcs2005 at bellua.com (Anthony Zboralski))
Eiríkur Eiríksson/Símstöðvad/Fjarsknet/Síminn is out of the office. (eirikure at simi.is (Eiríkur Eiríksson))
Re: Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2 ("Vincent DUVERNET (Nolmë Informatique) ("Vincent DUVERNET (Nolmë Informatique)))
[HAT-SQUAD] new exploit code (class101 at hat-squad.com (class 101))

March 6 (10 messages)

RE: Full-Disclosure Digest, Vol 4, Issue 11 (randallm at fidmail.com (RandallM))
Strange connection from google desktop search (randallm at fidmail.com (RandallM))
Strange connection from google desktop search (fd at finalaeon.net (Rev. Kronovohr))
Re: Strange connection from google desktop search (steve_r125 at yahoo.co.uk (Steve R))
Strange connection from google desktop search (dufresne at winternet.com (Ron DuFresne))
[ GLSA 200503-11 ] ImageMagick: Filename handling vulnerability (koon at gentoo.org (Thierry Carrez))
[ GLSA 200503-12 ] Hashcash: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
[ GLSA 200503-12 ] Hashcash: Format stringvulnerability (scheidell at secnap.net (Michael Scheidell))
Administrivia: A new home for FD (johnc at grok.org.uk (John Cartwright))
Administrivia: A new home for FD (xploitable at gmail.com (n3td3v))

March 7 (16 messages)

[HAT-SQUAD] Computer Associates Exploit (class101 at hat-squad.com (class 101))
[FLSA-2005:1748] Updated subversion packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:2344] Updated php packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[ GLSA 200503-13 ] mlterm: Integer overflow vulnerability (lewk at gentoo.org (Luke Macken))
Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2 (trog at uncon.org (Trog))
The end is nigh: first true MMS mobile worm in the wild (etomcat at freemail.hu (Feher Tamas))
Web Proxy Interface? (liljoker771 at gmail.com (Brandon Kovacs))
PaX privilege elevation security bug (cyber_tal0n at hushmail.com (cyber_tal0n@...hmail.com))
The end is nigh: first true MMS mobile worm in the wild (frank at knobbe.us (Frank Knobbe))
[USN-92-1] LessTif vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[ GLSA 200503-14 ] KDE dcopidlng: Insecure temporary file creation (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Real Realplayer 10 .smil local buffer overflow POC (nolimit.bugtraq at gmail.com (nolimit bugtraq))
Gene6 FTP Server Local Privilege Escalation Vulnerability (isowhat at gmail.com (Sowhat))
Web Proxy Interface? (druid at stonedcoder.org (druid@...nedcoder.org))
- Argeniss - Oracle Database Server Directory transversal (cesarc56 at yahoo.com (Cesar))
Spam from SecurityFocus outgoing email servers! (seclists at securinews.com (Paul Kurczaba))

March 8 (26 messages)

Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2 (andrey at hiddenbit.org (Andrey Bayora))
Bypass of 22 Antivirus software with GDI+bug exploit Mutations - part 2 (randallm at fidmail.com (Randall M))
[FLSA-2005:2404] Updated less package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[Ticket#: 2005030810000023] [SPAM] Full-Disclosu [...] (benutzerservice at max-boegl.de (EDV-Benutzerservice))
Spam from SecurityFocus outgoing email servers! (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
Possible Norton Firewall / Internet Security Bug.... (aditya.deshmukh at online.gateway.expertworks.net (Aditya Deshmukh))
[USN-93-1] Squid vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: The end is nigh: first true MMS mobile worm in the wild (etomcat at freemail.hu (Feher Tamas))
Spam from SecurityFocus outgoing email servers! (rudrak at gmail.com (Rudra Kamal Sinha Roy))
Spam from SecurityFocus outgoing email servers! (jftucker at gmail.com (James Tucker))
Spam from SecurityFocus outgoing email servers! (sas.7641835 at bloglines.com (sas.7641835@...glines.com))
The end is nigh: first true MMS mobile worm in the wild (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Multiple vulnerabilities in paFileDB (sp3x at securityreason.com (SecurityReason))
Spam from SecurityFocus outgoing email servers! (rodrigob at suespammers.org (Rodrigo Barbosa))
[Ticket#: 2005030810000023] [SPAM] Full-Disclosu [...] (dlcmacosx at mac.com (David Chastain))
[Ticket#: 2005030810000023] [SPAM] Full-Disclosu [...] (mmadison at fnni.com (Madison, Marc))
[Ticket#: 2005030810000023] [SPAM] Full-Disclosu [...] (michealespinola at gmail.com (Micheal Espinola Jr))
[Ticket#: 2005030810000023] [SPAM]Full-Disclosu [...] (listaw at eyemetrics.com (Armin Wied))
[Ticket#: 2005030810000023] [SPAM] Full-Disclosu [...] (cyd-net at web.de (cyd))
CIRT.DK Advisory - SafeNet Inc Sentinel License Manager 7.2.0.2 Buffer Overflow (advisory at cirt.dk (CIRT.DK Advisory))
[Ticket#: 2005030810000023] [SPAM] Full-Disclosu [...] (joe_k at web.de (Joerg Kurz))
phrack.org - path disclosure (crg at digitalsec.net (Crg))
[Ticket#: 2005030810000023] [SPAM] Full-Disclosu [...] (kedves at attglobal.net (Jean-Marie Monnier))
[Ticket#: 2005030810000023] [SPAM] Full-Disclosu [...] (support-fc at dr-n.de (dennis))
phrack.org - path disclosure (reydes at gmail.com (Alonso / ReYDeS))
phrack.org - path disclosure (xillwillx at gmail.com (Ill will))

March 9 (23 messages)

[Ticket#: 2005030810000023] [SPAM] Full-Disclosu [...] (kf_lists at digitalmunition.com (KF (Lists)))
phrack.org - path disclosure (crg at digitalsec.net (Crg))
Re: The end is nigh: first true MMS mobile worm in the wild (nick at virus-l.demon.co.uk (Nick FitzGerald))
phrack.org - path disclosure (pingywon at hotmail.com (pingywon))
Yahoo! Messenger Offline Mode Status Remote Buffer Overflow Vulnerability (rudrak at gmail.com (Rudra Kamal Sinha Roy))
linux break in challenge (joeljose420 at gmail.com (Joel Jose))
Administrivia: A new home for FD (ecki at intershop.de (Eckard Brauer))
Administrivia: A new home for FD (nick at virus-l.demon.co.uk (Nick FitzGerald))
2 nice pop/pop/ret :) (class101 at hat-squad.com (class 101))
2 nice pop/pop/ret :) (update) (class101 at hat-squad.com (class 101))
Administrivia: A new home for FD (pfuggle at physics.unimelb.edu.au (pfuggle@...sics.unimelb.edu.au))
phrack.org - path disclosure (staff_rs at phrack.org (staff_rs@...ack.org))
Administrivia: A new home for FD (johnc at grok.org.uk (John Cartwright))
overwriting low kernel memory (guninski at guninski.com (Georgi Guninski))
List Charter (johnc at grok.org.uk (John Cartwright))
prevent from spoofing (rakumar at ipolicynetworks.com (Kumar,Ratna))
[USN-94-1] Perl vulnerability (martin.pitt at canonical.com (Martin Pitt))
prevent from spoofing (jerome.athias at free.fr (Jerome ATHIAS))
prevent from spoofing (gabrielmt at gmail.com (Gabriel Moutinho))
overwriting low kernel memory (the.go0m at gmail.com (g g0))
Publishing exploit code ruled illegal in France? (sec-list at nolog.org (sec-list@...og.org))
Publishing exploit code ruled illegal in France? (chows at ozemail.com.au (Gregh))
new BIG vulnerability in libc found!!!!! (xenzeo at gardener.com (Lennart Hansen))

March 10 (71 messages)

[Updated][FLSA-2005:2344] Updated php packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability. (visitbipin at yahoo.com (bipin gautam))
Administrivia: A new home for FD (dufresne at winternet.com (Ron DuFresne))
Administrivia: A new home for FD (pfuggle at physics.unimelb.edu.au (pfuggle@...sics.unimelb.edu.au))
Administrivia: A new home for FD (shrdlu at deaddrop.org (Etaoin Shrdlu))
Administrivia: A new home for FD (ge at linuxbox.org (Gadi Evron))
Administrivia: A new home for FD (sbradcpa at pacbell.net (Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]))
Administrivia: A new home for FD (jasonc at science.org (Jason Coombs))
Publishing exploit code ruled illegal in France? (jean-philippe.gaulier at unilim.fr (jean-philippe Gaulier))
Publishing exploit code ruled illegal in France? (guninski at guninski.com (Georgi Guninski))
Multiple Vulnerabilities of PY Software Active Webcam WebServer (smaillist at gmail.com (Sowhat .))
Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability. (fcharpen at xmcopartners.com (Frederic Charpentier))
Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability. (visitbipin at yahoo.com (bipin gautam))
Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability. (visitbipin at yahoo.com (bipin gautam))
new BIG vulnerability in libc found!!!!! (macygasp at gmail.com (Macy Gasp))
Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability. (pbieringer at aerasec.de (Dr. Peter Bieringer))
Multiple AV Vendor Incorrect CRC32 BypassVulnerability. (randallm at fidmail.com (Randall M))
new BIG vulnerability in libc found!!!!! (rik.bobbaers at cc.kuleuven.ac.be (Harry de Grote))
US pres election was hacked away by Dumbya & cabal. (etomcat at freemail.hu (Feher Tamas))
Publishing exploit code ruled illegal in France? (varcher at denyall.com (Vincent Archer))
RE: [USN-94-1] Perl vulnerability (secalert at doitt.nyc.gov (secalert))
US pres election was hacked away by Dumbya &cabal. (support at mmicman.com (Edward Ray))
Administrivia: A new home for FD (inet.dude at gmail.com (inet dude))
US pres election was hacked away by Dumbya &cabal. (jworkman at pimpworks.org (Jeff Workman))
Reverse dns (pauls at utdallas.edu (Paul Schmehl))
US pres election was hacked away by Dumbya &cabal. (mikelieman at barryscott.com (mike lieman))
Reverse dns (var at deny-all.com (Vincent Archer))
Reverse dns (duo at digitalarcadia.net (Duo))
US pres election was hacked away by Dumbya&cabal. (support at mmicman.com (Edward Ray))
Reverse dns (nocmonkey at gmail.com (Danny))
Reverse dns (mring at presgar.com (Mike Ring))
Reverse dns (support at mmicman.com (Edward Ray))
US pres election was hacked away by Dumbya &cabal. (michealespinola at gmail.com (Micheal Espinola Jr))
Reverse dns (DaleB at BETWWTS.com (Dale Babiy))
Publishing exploit code ruled illegal in France? (james.burnes at gwl.com (Burnes, James))
US pres election was hacked away by Dumbya &cabal. (uk0wnz at ownmail.net (uk0wnz))
US pres election was hacked away by Dumbya&cabal. (mikelieman at barryscott.com (mike lieman))
Reverse dns (azlate at bitdefender.com (Andrei Zlate-Podani))
Reverse dns (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Reverse dns (security at alaricowebdesign.it (Security - AlaricoWebDesign.it))
Reverse dns (pauls at utdallas.edu (Paul Schmehl))
US pres election was hacked away by Dumbya&cabal. (pauls at utdallas.edu (Paul Schmehl))
US pres election was hacked away by... (fcv at dev6.com (Filipe Varela))
Reverse dns (pauls at utdallas.edu (Paul Schmehl))
RE: Multiple AV Vendor Incorrect CRC32 BypassVulnerability. (visitbipin at yahoo.com (bipin gautam))
Stealing Free Articles and Auctioning It (mail at hackingspirits.com (Debasis Mohanty))
Re: Reverse dns (derek at durski.net (derek@...ski.net))
Reverse dns (pete at shadows.uottawa.ca (Pete Hickey))
Stealling Free Articles and Auctioning It (mail at hackingspirits.com (Debasis Mohanty))
Reverse dns (duo at digitalarcadia.net (Duo))
2 nice pop/pop/ret :) (update) (davek_throwaway at hotmail.com (Dave Korn))
Reverse dns (pauls at utdallas.edu (Paul Schmehl))
Reverse dns (pauls at utdallas.edu (Paul Schmehl))
US pres election was hacked away by Dumbya &cabal. (dlcmacosx at mac.com (David Chastain))
US pres election was hacked away byDumbya&cabal. (shrdlu at deaddrop.org (Etaoin Shrdlu))
US pres election was hacked away byDumbya&cabal. (toddtowles at brookshires.com (Todd Towles))
Reverse dns (nocmonkey at gmail.com (Danny))
Administrivia: Update on Settings etc (johnc at grok.org.uk (John Cartwright))
Re: Reverse dns (whether you want it or not) (thegesus at gmail.com (TheGesus))
US pres election was hacked away by... (michealespinola at gmail.com (Micheal Espinola Jr))
Reverse dns (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
US pres election was hacked away by Dumbya &cabal. (anthonypetito at gmail.com (Anthony Petito))
2 nice pop/pop/ret :) (update) (class101 at gmail.com (class 101))
Multiple AV Vendor Incorrect CRC32 BypassVulnerability. (steve_scholz at sybari.com (Steve Scholz))
Publishing exploit code ruled illegal in France? (class101 at gmail.com (class 101))
[SPAM] Stealling Free Articles and Auctioning It (m.esco at wp.pl (Jacek Barcikowski))
Reverse dns (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
2 nice pop/pop/ret :) (update) (class101 at gmail.com (class 101))
Fw: 2 nice pop/pop/ret :) (update) (class101 at gmail.com (class 101))
Stealing Free Articles and Auctioning It (hq4ever at gmail.com (Maxim Vexler))
Multiple AV Vendor Incorrect CRC32 BypassVulnerability. (steve_scholz at sybari.com (Steve Scholz))

March 11 (48 messages)

US pres election was hacked away byDumbya&cabal. (whump at mac.com (Bill Humphries))
I don't know if anyone has noticed... (ericscher at mac.com (Eric Scher))
Nothing is real. Video makes it easy to fake anything! (etomcat at freemail.hu (Feher Tamas))
Publishing exploit code ruled illegal in France? (var at deny-all.com (Vincent Archer))
Publishing exploit code ruled illegal in France? (liudieyu at umbrella.name (Liu Die Yu))
Reverse dns (Andriy.Bilous at sabre.com (Andriy Bilous))
US pres election was hacked away byDumbya&cabal. (John.Airey at rnib.org.uk (Airey, John))
Multiple AV Vendor Incorrect CRC32 BypassVulnerability. (steve_scholz at sybari.com (Steve Scholz))
Multiple AV Vendor Incorrect CRC32 BypassVulnerability. (steve_scholz at sybari.com (Steve Scholz))
Multiple AV Vendor Incorrect CRC32 BypassVulnerability. (steve_scholz at sybari.com (Steve Scholz))
Re: Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability. (lise_moorveld at hotmail.com (Lise Moorveld))
Fwd: NDA & SOX? (grisu at guru.at (Christoph Gruber))
[SPAM] Fw: Newest Internet Security Patch (class101 at hat-squad.com (class 101))
Re: Reverse dns (whether you want it or not) (support at mmicman.com (Edward Ray))
Re: US pres election was hacked away byDumbya&cabal. (davek_throwaway at hotmail.com (Dave Korn))
Re: Reverse dns (whether you want it or not) (davek_throwaway at hotmail.com (Dave Korn))
US pres election was hacked away byDumbya&cabal. (toddtowles at brookshires.com (Todd Towles))
Reverse dns (simon.biles at gmail.com (Simon Biles))
Nothing is real. Video makes it easy to fake anything! (johnc at grok.org.uk (John Cartwright))
Publishing exploit code ruled illegal in France? (securitynews at wanadoo.fr (securitynews))
Re: iDownload/iSearch responds to Spyware Critics (bkfsec at sdf.lonestar.org (bkfsec))
Multiple AV Vendor Incorrect CRC32 BypassVulnerability. (visitbipin at yahoo.com (bipin gautam))
Publishing exploit code ruled illegal in France? (class101 at hat-squad.com (class 101))
US pres election was hacked away by Dumbya&cabal. (fwd) (pauls at utdallas.edu (Paul Schmehl))
Re: Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability. (visitbipin at yahoo.com (bipin gautam))
Nothing is real. Video makes it easy to fake anything! (pauls at utdallas.edu (Paul Schmehl))
Nothing is real. Video makes it easy to fake anything! (chris_bradley at gmacm.com (Chris Bradley - TX))
Multiple AV Vendor Incorrect CRC32BypassVulnerability. (djweaver at charter.net (David J. Weaver))
[SPAM] Fw: Newest Internet Security Patch (pferrie at symantec.com (Peter Ferrie))
Re: Full-Disclosure Digest, Vol 1, Issue 8 (mikelieman at barryscott.com (mike lieman))
Windows rootkits get all the hype (etomcat at freemail.hu (Tamas Feher))
Re: Reverse dns (whether you want it or not) (nocmonkey at gmail.com (Danny))
Administrivia: SpamCop Issue Resolved (johnc at grok.org.uk (John Cartwright))
[Fwd: Re: Web security breach changes the lives of 119 people] (jasonc at science.org (Jason Coombs))
Multiple Vulnerabilities of PY Software Active Webcam WebServer (seclists at securinews.com (Paul Kurczaba))
Fwd: NDA & SOX? (jasonc at science.org (Jason Coombs))
Stealing Free Articles and Auctioning It (mooyix at gmail.com (Brendan Dolan-Gavitt))
Stealing Free Articles and Auctioning It (asd at suespammers.org (Anthony DeRobertis))
US pres election was hacked away by Dumbya&cabal. (fwd) (michealespinola at gmail.com (Micheal Espinola Jr))
[OFFTOPIC] I don't know if anyone has noticed... (listuser at seifried.org (Kurt Seifried))
US pres election was hacked away by Dumbya&cabal. (fwd) (perfectirijillo at gmail.com (J u a n))
US pres election was hacked away by Dumbya&cabal. (fwd) (bkfsec at sdf.lonestar.org (bkfsec))
Re: Complaint to be filed at grok org uk (johnc at grok.org.uk (John Cartwright))
Multiple AV Vendor Incorrect CRC32BypassVulnerability. (steve_scholz at sybari.com (Steve Scholz))
[SPAM] Fw: Newest Internet Security Patch (class101 at hat-squad.com (class 101))
Stealing Free Articles and Auctioning It (wclarie at gmail.com (Wouter Clarie))
Stealing Free Articles and Auctioning It (vtlists at wyae.de (Volker Tanger))
Re: Multiple AV Vendor Incorrect CRC32 BypassVulnerability. (steve_scholz at sybari.com (Steve Scholz))

March 12 (41 messages)

Re: Multiple AV Vendor Incorrect CRC32BypassVulnerability. (randallm at fidmail.com (Randall M))
Reverse dns (ben at adversary.org (Ben McGinnes))
Re: Multiple AV Vendor Incorrect CRC32 BypassVulnerability. (visitbipin at yahoo.com (bipin gautam))
Re: Multiple AV Vendor Incorrect CRC32BypassVulnerability. (steve_scholz at sybari.com (Steve Scholz))
MailMonitor for Exchange has processed a suspicious mail (MailMonitor at kings.edu (MailMonitor@...gs.edu))
Re: Multiple AV Vendor Incorrect CRC32BypassVulnerability. (visitbipin at yahoo.com (bipin gautam))
[SPAM] Fw: Newest Internet Security Patch (nick at virus-l.demon.co.uk (Nick FitzGerald))
Fwd: NDA & SOX? (spamproof at nospammail.net (Rob))
Backdoors for the human mind. (ka at khidr.net (Ka))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any mor… (etomcat at freemail.hu (Tamas Feher))
Re: Multiple AV Vendor IncorrectCRC32BypassVulnerability. (steve_scholz at sybari.com (Steve Scholz))
[ GLSA 200503-15 ] X.org: libXpm vulnerability (vorlon at gentoo.org (Matthias Geerdsen))
PlatinumFTP 1.0.18 remote DoS (ml at portsonline.net (ports))
[ GLSA 200503-16 ] Ethereal: Multiple vulnerabilities (lewk at gentoo.org (Luke Macken))
PlatinumFTP 1.0.18 remote DoS (gary at pointblanksecurity.com (Gary H. Jones II))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any more..… (measl at mfn.org (J.A. Terranson))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any … (Valdis.Kletnieks at vt.edu (Valdis.Klet…)
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any … (devdas at dvb.homelinux.org (Devdas Bha…)
Re: [Private]Multiple AV Vendor IncorrectCRC32BypassVulnerability. (visitbipin at yahoo.com (bipin gautam))
Reuters: Microsoft to give holes info to UncleSam first - responsible vendor notification may not be a good idea anymore... (mvp at joeware.net (joe))
PlatinumFTP 1.0.18 remote DoS (ml at portsonline.net (ports))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any mor… (raju at linux-delhi.org (Raj Mathur))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any more... (niek at packetstorm.nu (Niek))
Re: Microsoft to give holes info to Uncle Sam first (etomcat at freemail.hu (Feher Tamas))
Fwd: NDA & SOX? (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Re: [Private]Multiple AV VendorIncorrectCRC32BypassVulnerability. (steve_scholz at sybari.com (Steve Scholz))
PlatinumFTP 1.0.18 remote DoS (gary at pointblanksecurity.com (Gary H. Jones II))
Reuters: Microsoft to give holes info to UncleSam first - responsible vendor notification may not be a good idea anymore... (mvp at joeware.net (joe))
PlatinumFTP 1.0.18 remote DoS (ml at portsonline.net (ports))
[ GLSA 200503-17 ] libexif: Buffer overflow vulnerability (lewk at gentoo.org (Luke Macken))
Reuters: Microsoft to give holes info to UncleSam first - responsible vendor notification may not be a goodidea any more.… (jasonc at science.org (Jason Coombs))
Reuters: Microsoft to give holes info to UncleSam first - responsible vendor notification may not be a goodidea any more... (measl at mfn.org (J.A. Terranson))
Stealing Free Articles and Auctioning It (mail at hackingspirits.com (Debasis Mohanty))
Reuters: Microsoft to give holes info to UncleSam first - responsible vendor notification may not be a good idea anymore... (measl at mfn.org (J.A. Terranson))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any more..… (measl at mfn.org (J.A. Terranson))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any more..… (measl at mfn.org (J.A. Terranson))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any … (devdas at dvb.homelinux.org (Devdas Bha…)
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any more..… (measl at mfn.org (J.A. Terranson))
Fwd: NDA & SOX? (nekramer at mindtheater.net (Nancy Kramer))
Re: Microsoft to give holes info to Uncle Samfirst (eballen1 at qwest.net (Bruce Ediger))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any … (hades at psilanthropy.org (Anders Langw…)

March 13 (26 messages)

Re: Microsoft to give holes info to Uncle Sam first (nick at virus-l.demon.co.uk (Nick FitzGerald))
Fwd: NDA & SOX? (jasonc at science.org (Jason Coombs))
Fw: Returned mail: see transcript for details (jasonc at science.org (Jason Coombs))
Fw: Returned mail: see transcript for details (jasonc at science.org (Jason Coombs))
Fw: Returned mail: see transcript for details (jasonc at science.org (Jason Coombs))
Fw: Returned mail: see transcript for details (jasonc at science.org (Jason Coombs))
Re: [Private]Multiple AV VendorIncorrectCRC32BypassVulnerability. (visitbipin at yahoo.com (bipin gautam))
Spam from SecurityFocus outgoing email servers! (uberguidoz at gmail.com (GuidoZ))
Re: [Private]Multiple AV VendorIncorrectCRC32BypassVulnerability. (visitbipin at yahoo.com (bipin gautam))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any … (Valdis.Kletnieks at vt.edu (Valdis.Klet…)
Multiple AVVendorIncorrectCRC32BypassVulnerability. (steve_scholz at sybari.com (Steve Scholz))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any more..… (measl at mfn.org (J.A. Terranson))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any mo… (supadupa at gmail.com (Scott Edwards))
Reuters: Microsoft to give holes info to UncleSam first - responsible vendor notification may not be a goodidea any more... (phased at mail.ru (phased))
Reuters: Microsoft to give holes info to UncleSam first - responsible vendor notification may not be a good idea anymore... (phased at mail.ru (phased))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any mor… (jftucker at gmail.com (James Tucker))
Multiple AVVendorIncorrectCRC32BypassVulnerability. (visitbipin at yahoo.com (bipin gautam))
3 XSS Vulnerabilities in Phorum <= 5.0.14 (jonojono at umich.edu (Jon Oberheide))
Re: iDownload/iSearch responds to Spyware Critics (darkiye at gmail.com (King Fuddler))
Multiple AVVendorIncorrectCRC32BypassVulnerability. (steve_scholz at sybari.com (Steve Scholz))
[HAT-SQUAD] SafeNet Sentinel LM, UDP License Manager Exploit (class101 at hat-squad.com (class 101))
Firefox 1.01 : spoofing status bar without using JavaScript (bitlance_3 at hotmail.com (bitlance winter))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any … (mailinglists at vanscherpenseel.nl (Vin…)
Re: PaX privilege elevation security bug (devine at iie.cnam.fr (Christophe Devine))
Reuters: Microsoft to give holes info to UncleSam first - responsible vendor notification may not be a goodidea any mo… (peak at argo.troja.mff.cuni.cz (Pavel K…)
Re: Reuters: Microsoft to give holes info (derek at angelofsin.net (derek@...elofsin.net))

March 14 (57 messages)

Re: Microsoft Patches & Political Theory... (mikelieman at barryscott.com (mike lieman))
Know Your Enemy: Tracking Botnets (thorsten.holz at mmweg.rwth-aachen.de (Thorsten Holz))
Know Your Enemy: Tracking Botnets (pingywon at hotmail.com (pingywon))
Re: Microsoft Patches & Political Theory... (measl at mfn.org (J.A. Terranson))
Know Your Enemy: Tracking Botnets (mastah at phreaker.net (Egoist))
Know Your Enemy: Tracking Botnets (pingywon at hotmail.com (pingywon))
Re: iDownload/iSearch responds to Spyware Critics (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Reuters: Microsoft to give holes info (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
external scan procedure (rnaydenov at aegis-is.com (Rossen Naydenov))
New release of the Auditor Security Collection is available for download (max.moser at gmail.com (Max Moser))
Reuters: Microsoft to give holes info to UncleSam first - responsible vendor notification may not be a good idea anymore.… (var at deny-all.com (Vincent Archer))
Re: Microsoft Patches & Political Theory... (guninski at guninski.com (Georgi Guninski))
Analysis of CherryOS and PearPC code (khermansen at ht-technology.com (Kristian Hermansen))
Sago Networks allows use of root passwords in clear text channels (supadupa at gmail.com (Scott Edwards))
Sago Networks allows use of root passwords in clear text channels (thorsten.holz at mmweg.rwth-aachen.de (Thorsten Holz))
Know Your Enemy: Tracking Botnets (randallm at fidmail.com (Randall M))
Know Your Enemy: Tracking Botnets (mastah at phreaker.net (Egoist))
Sago Networks allows use of root passwords inclear text channels (phased at mail.ru (phased))
[HAT-SQUAD] SafeNet Sentinel LM, UDP License Manager Exploit (class101 at hat-squad.com (class 101))
Problems getting off this list (mparker at rim.com (Michael Parker))
[ZH2005-02SA] Insecure tmp file creation in Wine (badpenguin79 at hotmail.com (Giovanni Delvecchio))
Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and … (pbieringer at aerasec.de (Dr. Peter Bie…)
[Off-topic] Show some respect (tat at postmark.net (Antonio Oliveira))
Problems getting off this list (tatercrispies at gmail.com (Tatercrispies))
[Off-topic] Show some respect (xyberpix at xyberpix.com (xyberpix))
SUSE Security Announcement: openslp (SUSE-SA:2005:015) (krahmer at suse.de (Sebastian Krahmer))
Re: Know Your Enemy: Tracking Botnets (Thorsten Holz) (david-jungerson at web.de (David Jungerson))
Problems getting off this list (kf_lists at digitalmunition.com (KF (lists)))
Problems getting off this list (keithp at corp.ptd.net (Keith Pachulski))
Re: Know Your Enemy: Tracking Botnets (ThorstenHolz) (phased at mail.ru (phased))
Re: Know Your Enemy: Tracking Botnets (ThorstenHolz) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Know Your Enemy: Tracking Botnets (ThorstenHolz) (mastah at phreaker.net (Egoist))
Re: Know Your Enemy: Tracking Botnets (ThorstenHolz) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Know Your Enemy: Tracking Botnets (ThorstenHolz) (thorsten.holz at mmweg.rwth-aachen.de (Thorsten Holz))
Re: Know Your Enemy: Tracking Botnets (ThorstenHolz) (mastah at phreaker.net (Egoist))
DMA[2005-0310a] - 'Frank McIngvale LuxMan buffer overflow' (kf_lists at digitalmunition.com (KF (lists)))
Re: Know Your Enemy: Tracking Botnets (ThorstenHolz) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Know Your Enemy: Tracking Botnets (ThorstenHolz) (thorsten.holz at mmweg.rwth-aachen.de (Thorsten Holz))
Re: iDownload/iSearch responds to Spyware Critics (bkfsec at sdf.lonestar.org (bkfsec))
Botnets and tracking and busting scriptkiddies (DDavis at pivx.com (Dominique Davis))
Re: Know Your Enemy: Tracking Botnets (ThorstenHolz) (mastah at phreaker.net (Egoist))
Botnets and tracking and busting scriptkiddies (michael.holstein at csuohio.edu (Michael Holstein))
Botnets and tracking and busting scriptkiddies (mastah at phreaker.net (Egoist))
Good security books (javapro13 at mac.com (Scott White))
Web services security (javapro13 at mac.com (Scott White))
Re: Microsoft to give holes info to Uncle Sam first (bkfsec at sdf.lonestar.org (bkfsec))
Botnets and tracking and busting scriptkiddies (michael.holstein at csuohio.edu (Michael Holstein))
Good security books (pwicks at oxygen.com (James Patterson Wicks))
Good security books (davefd at davewking.com (Dave King))
Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any more… (bkfsec at sdf.lonestar.org (bkfsec))
Re: [FD] Good security books (A.J.Caines at halplant.com (Andrew J Caines))
Good security books (toddtowles at brookshires.com (Todd Towles))
Re: [FD] Good security books (javapro13 at mac.com (Scott White))
Re: [FD] Good security books (support at mmicman.com (Edward Ray))
Re: Know Your Enemy: Tracking Botnets (ThorstenHolz) (lists at lowkeysoft.com (Steele))
Good security books (bugtraq at cgisecurity.net (bugtraq@...security.net))
Web services security (bugtraq at cgisecurity.net (bugtraq@...security.net))

March 15 (36 messages)

Re: Know Your Enemy: Tracking Botnets (ThorstenHolz) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Know Your Enemy: Tracking Botnets(ThorstenHolz) (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Fwd: Good security books (0xception at gmail.com (0xception))
Ideas for school project... (iago at valhallalegends.com (Ron))
Analysis of CherryOS and PearPC code (dunceor at gmail.com (Dunceor .))
Ideas for school project... (osgo at hotmail.com (-osgo-))
Ideas for school project... (ka at khidr.net (Ka))
Good security books (James.Cupps at sappi.com (Cupps, James))
[USN-95-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Good security books (asimmons at messagelabs.com (Andrew Simmons))
Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and ca… (visitbipin at yahoo.com (bipin gautam))
[ GLSA 200503-18 ] Ringtone Tools: Buffer overflow vulnerability (lewk at gentoo.org (Luke Macken))
UPDATE: [ GLSA 200501-38 ] Perl: rmtree and DBI tmpfile vulnerabilities (koon at gentoo.org (Thierry Carrez))
Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and ca… (visitbipin at yahoo.com (bipin gautam))
Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and ca… (visitbipin at yahoo.com (bipin gautam))
Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and c… (pbieringer at aerasec.de (Dr. Peter Bie…)
Unfiltered escape sequences in filenamescontained in ZIP archives wouldn't be escaped on displaying orlogging, and can… (mail at hackingspirits.com (Debasis Moh…)
Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and c… (rodrigob at suespammers.org (Rodrigo Ba…)
Re: [FD] Good security books (hades at psilanthropy.org (Anders Langworthy))
GoodTech Telnet Server Buffer Overflow Vulnerability (unsecure at altervista.org (Komrade))
Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, … (pbieringer at aerasec.de (Dr. Peter Bie…)
Wi-fi. Approaching customers (chows at ozemail.com.au (Gregh))
Wi-fi. Approaching customers (wade at sivodd.com (Wade Woolwine))
Re: Av issues (Thierry at sniff-em.com (Thierry Zoller))
Wi-fi. Approaching customers (matthew at sabin.com (Matthew Sabin))
Wi-fi. Approaching customers (sidhayn at buckeye-express.com (Richard Farina))
Wi-fi. Approaching customers (m.graf at shoplogistics.de (Marcus Graf))
Wi-fi. Approaching customers (craig.soderland at sap.com (Soderland, Craig))
Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, a… (Thierry at sniff-em.com (Thierry Zoller…)
Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, a… (Thierry at sniff-em.com (Thierry Zoller…)
Wi-fi. Approaching customers (cjcook at strongtowersecurity.com (Coral J. Cook))
Wi-fi. Approaching customers (jlauro at umflint.edu (Lauro, John))
Wi-fi. Approaching customers (jayc at nashlink.net (Jay Daniel))
Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can a… (njh at bandsman.co.uk (Nigel Horne))
Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, a… (mjp-bugtraq at securepipe.com (Michael …)
OSx on a PC? (tpo at tpo.net (T.P. O'Halloran))

March 16 (41 messages)

Wi-fi. Approaching customers (rsumida at csulb.edu (Ryan Sumida))
Wi-fi. Approaching customers (kf_lists at digitalmunition.com (KF (Lists)))
Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and c… (rodrigob at suespammers.org (Rodrigo Ba…)
Wi-fi. Approaching customers (mlists at arhont.com (Konstantin V. Gavrilenko))
Wi-fi. Approaching customers (dufresne at winternet.com (Ron DuFresne))
Wi-fi. Approaching customers (dufresne at winternet.com (Ron DuFresne))
Wi-fi. Approaching customers (chows at ozemail.com.au (Gregh))
Wi-fi. Approaching customers (dufresne at winternet.com (Ron DuFresne))
[USN-96-1] mySQL vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, … (pbieringer at aerasec.de (Dr. Peter Bie…)
K-otic teh suck? (coardump at gmail.com (cranium pain))
Re: K-otic teh suck? (coardump at gmail.com (cranium pain))
Wi-fi. Approaching customers (bkfsec at sdf.lonestar.org (bkfsec))
Re: Av issues (visitbipin at yahoo.com (bipin gautam))
ADVISORY: DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability (bania.piotr at gmail.com (Piotr Bania))
Re: Av issues (sean01 at accnet.com.au (Sean Crawford))
[ GLSA 200503-19 ] MySQL: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Re: Av issues (Thierry at sniff-em.com (Thierry Zoller))
[gentoo-announce] [ GLSA 200503-19 ] MySQL: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Wi-fi. Approaching customers (Mark.Senior at gov.ab.ca (Mark Senior))
Wi-fi. Approaching customers (rsumida at csulb.edu (Ryan Sumida))
[ GLSA 200503-20 ] curl: NTLM response buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Wi-fi. Approaching customers (michael.holstein at csuohio.edu (Michael Holstein))
Wi-fi. Approaching customers (Brad at beckshybrids.com (Fruth, Brad R.))
Wi-fi. Approaching customers (rsumida at csulb.edu (Ryan Sumida))
Wi-fi. Approaching customers (rsumida at csulb.edu (Ryan Sumida))
[gentoo-announce] [ GLSA 200503-20 ] curl: NTLM response buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Wi-fi. Approaching customers (rsumida at csulb.edu (Ryan Sumida))
Wi-fi. Approaching customers (rsumida at csulb.edu (Ryan Sumida))
Wi-fi. Approaching customers (rsumida at csulb.edu (Ryan Sumida))
Wi-fi. Approaching customers (mlists at arhont.com (Konstantin V. Gavrilenko))
Wi-fi. Approaching customers (toddtowles at brookshires.com (Todd Towles))
Re: Av issues (visitbipin at yahoo.com (bipin gautam))
Re: K-otic teh suck? (anibhatt at gmail.com (Anirudh Bhatt))
K-iotik Zone (rudrak at gmail.com (Rudra Kamal Sinha Roy))
K-iotik Zone (michealespinola at gmail.com (Micheal Espinola Jr))
Problems getting off this list (smp.repicky at gmail.com (Matt))
Problems getting off this list (keithp at corp.ptd.net (Keith Pachulski))
K-iotik Zone (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Problems getting off this list (vordhosbn at gmail.com (vord))
LLSSRV Clarifications from Immunity (dave at immunitysec.com (Dave Aitel))

March 17 (18 messages)

Virus writers exchanging information (raoul at elforsoft.com (Raoul Nakhmanson-Kulish))
Wi-fi. Approaching customers (geggam692000 at yahoo.com (D B))
Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and c… (tomek-bug at lodz.tpsa.pl (Tomasz Papsz…)
Windows rootkit author interview - with title in poor taste (etomcat at freemail.hu (Feher Tamas))
A phpBB hacker tool called "nigga". (etomcat at freemail.hu (Feher Tamas))
Hacker attack at Sumitomo UK bank fails to fetch 423mio USD (etomcat at freemail.hu (Feher Tamas))
A phpBB hacker tool called "nigga". (elvi52001 at yahoo.com (ElviS .de))
[ GLSA 200503-21 ] Grip: CDDB response overflow (lewk at gentoo.org (Luke Macken))
[USN-98-1] OpenSLP vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[gentoo-announce] [ GLSA 200503-21 ] Grip: CDDB response overflow (lewk at gentoo.org (Luke Macken))
Microsoft GhostBuster Opionions (davefd at davewking.com (Dave King))
LDAP username special char Problem (Jakob.Jellbauer at interhyp.de (Jellbauer Jakob))
Microsoft GhostBuster Opionions (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Microsoft GhostBuster Opionions (bkfsec at sdf.lonestar.org (bkfsec))
LLSSRV Redux Excitement (dave at immunitysec.com (Dave Aitel))
Microsoft GhostBuster Opinions (davefd at davewking.com (Dave King))
Microsoft GhostBuster Opionions (davefd at davewking.com (Dave King))
new BIG vulnerability in libc found!!!!! (cyberpixl at gmail.com (cyberpixl))

March 18 (37 messages)

new BIG vulnerability in libc found!!!!! (venom at gen-x.co.nz (VeNoMouS))
Microsoft GhostBuster Opinions (dufresne at winternet.com (Ron DuFresne))
Social Engineering: You Have Been A Victim (zx at castlecops.com (Paul Laudanski))
Microsoft GhostBuster Opinions (requiem at praetor.org (Jeremy Bishop))
Re: Windows Security Checklists - 10 Parts (zx at castlecops.com (Paul Laudanski))
Social Engineering: You Have Been A Victim (dufresne at winternet.com (Ron DuFresne))
Microsoft GhostBuster Opionions (jeroen at unfix.org (Jeroen Massar))
Cain & Abel PSK Sniffer Heap overflow (garyo at sec-1.com (Gary O'leary-Steele))
Cain & Abel PSK Sniffer Heap overflow (garyo at sec-1.com (Gary O'leary-Steele))
Security Contact at RSA? (garyo at sec-1.com (Gary O'leary-Steele))
Microsoft GhostBuster Opinions (perfectirijillo at gmail.com (J u a n))
[USN-99-1] PHP4 vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Microsoft GhostBuster Opinions (davefd at davewking.com (Dave King))
Kaspersky Labs virus analysts do not sleep at work (etomcat at freemail.hu (Feher Tamas))
Microsoft GhostBuster Opinions (toddtowles at brookshires.com (Todd Towles))
Windows is EASY and SECURE (daniels at Ponderosatel.com (Daniel Sichel))
Microsoft GhostBuster Opinions (davefd at davewking.com (Dave King))
Windows is EASY and SECURE (toddtowles at brookshires.com (Todd Towles))
Windows is EASY and SECURE (dave.cawley at adelphia.com (Dave D. Cawley))
Social Engineering: You Have Been A Victim (zx at castlecops.com (Paul Laudanski))
Microsoft GhostBuster Opinions (toddtowles at brookshires.com (Todd Towles))
Social Engineering: You Have Been A Victim (zx at castlecops.com (Paul Laudanski))
Truth, Justice and the Ordinary Person (zx at castlecops.com (Paul Laudanski))
Social Engineering: You Have Been A Victim (jdyson at treachery.net (Jay D. Dyson))
Re: Social Engineering: You Have Been A Victim (piling at best.tuke.sk (Tomas Piling))
Blocks OWA Redirect Attempts (se_cur_ity at hotmail.com (Morning Wood))
Java Web Start argument injection vulnerability (jouko at iki.fi (Jouko Pynnonen))
XP updates breaking dash in domain names? (apolkosnik at gmail.com (Adam Polkosnik))
Retraction:Re XP updates breaking dash in domain names? (apolkosnik at gmail.com (Adam Polkosnik))
XP updates breaking dash in domain names? (Thierry at sniff-em.com (Thierry Zoller))
Truth, Justice and the Ordinary Person (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Microsoft GhostBuster Opinions (dk at pwarchitects.com (dk))
Truth, Justice and the Ordinary Person (zx at castlecops.com (Paul Laudanski))
Social Engineering: You Have Been A Victim (bkfsec at sdf.lonestar.org (bkfsec))
Microsoft GhostBuster Opinions (dufresne at winternet.com (Ron DuFresne))
Microsoft GhostBuster Opinions (dufresne at winternet.com (Ron DuFresne))
Blocks OWA Redirect Attempts (pingywon at hotmail.com (pingywon))

March 19 (25 messages)

Re: choice-point screw-up and secure hashes (jasonc at science.org (Jason Coombs))
[ GLSA 200503-22 ] KDE: Local Denial of Service (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Re: choice-point screw-up and secure hashes (listuser at seifried.org (Kurt Seifried))
[gentoo-announce] [ GLSA 200503-22 ] KDE: Local Denial of Service (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Re: choice-point screw-up and secure hashes (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Re: choice-point screw-up and secure hashes (listuser at seifried.org (Kurt Seifried))
Re: choice-point screw-up and secure hashes (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Markus Pilgrimm out of office (Markus.Pilgrimm at wagner-group.com (Markus.Pilgrimm@...ner-group.com))
XP updates breaking dash in domain names? (visitbipin at yahoo.com (bipin gautam))
Windows is EASY and SECURE (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
Attack & Defence Against Visual CAPTCHA (mail at hackingspirits.com (Debasis Mohanty))
Re: choice-point screw-up and secure hashes (atom at smasher.org (Atom Smasher))
Re: choice-point screw-up and secure hashes (atom at smasher.org (Atom Smasher))
Re: choice-point screw-up and secure hashes (dufresne at winternet.com (Ron DuFresne))
Re: choice-point screw-up and secure hashes (dufresne at winternet.com (Ron DuFresne))
MS Access SQL injection column enumeration (ramatkal at hotmail.com (sol seclists))
Summer security internships for undergrads? (mooyix at gmail.com (Brendan Dolan-Gavitt))
Re: choice-point screw-up and secure hashes (jasonc at science.org (Jason Coombs))
Re: choice-point screw-up and secure hashes (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: choice-point screw-up and secure hashes (jasonc at science.org (Jason Coombs))
Re: choice-point screw-up and secure hashes (jasonc at science.org (Jason Coombs))
Re: choice-point screw-up and secure hashes (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Attack & Defence Against Visual CAPTCHA (etomcat at freemail.hu (Feher Tamas))
Re: choice-point screw-up and secure hashes (atom at smasher.org (Atom Smasher))
Re: choice-point screw-up and secure hashes (atom at smasher.org (Atom Smasher))

March 20 (22 messages)

Re: choice-point screw-up and secure hashes (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: choice-point screw-up and secure hashes (atom at smasher.org (Atom Smasher))
Re: choice-point screw-up and secure hashes (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: choice-point screw-up and secure hashes (security at brvenik.com (Jason))
Re: choice-point screw-up and secure hashes (atom at smasher.org (Atom Smasher))
Re: choice-point screw-up and secure hashes (atom at smasher.org (Atom Smasher))
Re: choice-point screw-up and secure hashes (jasonc at science.org (Jason Coombs))
John The Ripper For Windows (georgem456 at excite.com (George))
John The Ripper For Windows (barrie at reboot-robot.net (Barrie Dempster))
John The Ripper For Windows (Thierry at sniff-em.com (Thierry Zoller))
Re: Social Engineering: You Have Been A Victim (fulldisclosure at wateraxe.demon.nl (Allan))
phrack.org - path disclosure (mcbain at aol.com (mcbain@....com))
[ GLSA 200503-23 ] rxvt-unicode: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200503-24 ] LTris: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[gentoo-announce] [ GLSA 200503-23 ] rxvt-unicode: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[gentoo-announce] [ GLSA 200503-24 ] LTris: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Administrivia: A new home for FD (xyberpix at xyberpix.com (xyberpix))
[ GLSA 200503-25 ] OpenSLP: Multiple buffer overflows (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200503-25 ] OpenSLP: Multiple buffer overflows (koon at gentoo.org (Thierry Carrez))
John The Ripper For Windows (venom at gen-x.co.nz (VeNoMouS))
[ GLSA 200503-26 ] Sylpheed, Sylpheed-claws: Message reply overflow (lewk at gentoo.org (Luke Macken))
[gentoo-announce] [ GLSA 200503-26 ] Sylpheed, Sylpheed-claws: Message reply overflow (lewk at gentoo.org (Luke Macken))

March 21 (23 messages)

John The Ripper For Windows (Thierry at sniff-em.com (Thierry Zoller))
John The Ripper For Windows (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
John The Ripper For Windows (barrie at reboot-robot.net (Barrie Dempster))
John The Ripper For Windows (Thierry at sniff-em.com (Thierry Zoller))
Abusive attitude (Was: John The Ripper For Windows) (atte.peltomaki at f-secure.com (Atte Peltomaki))
OSx on a PC? (janus at volny.cz (Honza Vlach))
OSx on a PC? (njh at bandsman.co.uk (Nigel Horne))
OSx on a PC? (nullman at gmail.com (nullman))
OSx on a PC? (macecil at comcast.net (Michael Cecil))
Re: choice-point screw-up and secure hashes (toddtowles at brookshires.com (Todd Towles))
[gentoo-announce] [ GLSA 200503-27 ] Xzabite dyndnsupdate: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
Re: OSx on a PC? (khermansen at ht-technology.com (Kristian Hermansen))
MS Access SQL injection column enumeration (eirikure at simi.is (Eiríkur Eiríksson))
[ GLSA 200503-27 ] Xzabite dyndnsupdate: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
Administrivia: A new home for FD (kang at insecure.ws (kang))
Administrivia: A new home for FD (smp.repicky at gmail.com (Matt))
Recent hack repository (javapro13 at mac.com (Vijay Chauhan))
Recent hack repository (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Recent hack repository (pauls at utdallas.edu (Paul Schmehl))
Recent hack repository (kyphros at gmail.com (Mike Owen))
Samsung ADSL Modem Vulnerability (se_cur_ity at hotmail.com (Morning Wood))
Re: [ISN] How To Save The Internet (jasonc at science.org (Jason Coombs))
Recent hack repository (javapro13 at mac.com (Vijay Chauhan))

March 22 (39 messages)

Does anyone know about TCP-Replay attacks? (wireless.insecurity at gmail.com (Vladamir))
Does anyone know about TCP-Replay attacks? (wireless.insecurity at gmail.com (Vladamir))
Does anyone know about TCP-Replay attacks? (synfinatic at gmail.com (ADT))
Does anyone know about TCP-Replay attacks? (rakumar at ipolicynetworks.com (Kumar,Ratna))
Does anyone know about TCP-Replay attacks? (wireless.insecurity at gmail.com (Vladamir))
Does anyone know about TCP-Replay attacks? (rakumar at ipolicynetworks.com (Kumar,Ratna))
Does anyone know about TCP-Replay attacks? (wireless.insecurity at gmail.com (Vladamir))
Does anyone know about TCP-Replay attacks? (synfinatic at gmail.com (ADT))
RUXCON 2005 Call for Papers (cfp at ruxcon.org.au (RUXCON Call for Papers))
Re: [ISN] How To Save The Internet (koxenrider at sol-biotech.com (Keith Oxenrider))
Re: [ISN] How To Save The Internet (sberinato at cxo.com (Scott Berinato))
Re: [ISN] How To Save The Internet (sberinato at cxo.com (Scott Berinato))
Re: [ISN] How To Save The Internet (sberinato at cxo.com (Scott Berinato))
CISSP Test (wireless.insecurity at gmail.com (Vladamir))
CISSP Test (Robert_Forbes at reyrey.com (Forbes, Robert R))
CISSP Test (wade at sivodd.com (Wade Woolwine))
CISSP Test (wireless.insecurity at gmail.com (Vladamir))
CISSP Test (wade at sivodd.com (Wade Woolwine))
CISSP Test (danielf at supportteam.net (Daniel F. Chief Security Engineer -))
CISSP Test (dlcmacosx at mac.com (David Chastain))
RE: [ISN] How To Save The Internet (gillettdavid at fhda.edu (David Gillett))
CISSP Test (ad33lh at gmail.com (adeel hussain))
CISSP Test (Robert_Forbes at reyrey.com (Forbes, Robert R))
CISSP Test (srenna at vdbmusic.com (srenna@...music.com))
CISSP Test (exibar at thelair.com (Exibar))
Re: CISSP Test (robert at dyadsecurity.com (robert@...dsecurity.com))
CISSP Test (dlcmacosx at mac.com (David Chastain))
Re: CISSP Test (andre.ludwig at gmail.com (Andre Ludwig))
Looking for a pro-bono white hat... (f0rtify at yahoo.com (Scott))
Re: CISSP Test (Robert_Forbes at reyrey.com (Forbes, Robert R))
Nortel VPN Client Issue: Clear-text password stored in memory (Roy.Hills at nta-monitor.com (Roy Hills))
RE: [ISN] How To Save The Internet (Tom.Marchand at bcbsfl.com (Marchand, Tom))
Adobe Acrobat Default Behavior Ignores Systems Defaults (FullDis.20.mandoskippy at spamgourmet.com (FullDis.20.mandoskippy@...mgourmet.com))
Re: Nortel VPN Client Issue: Clear-text password stored in memory (dayioglu at metu.edu.tr (Burak DAYIOGLU))
Re: [ISN] How To Save The Internet (jasonc at science.org (Jason Coombs))
root-equivalent groups (psz at maths.usyd.edu.au (psz@...hs.usyd.edu.au))
widcomm / broadcomm security contact? (kf_lists at digitalmunition.com (KF (lists)))
CISSP Test (inetsec2002 at yahoo.com (george jetson))
CISSP Test (cdupuis at cccure.org (Clement Dupuis))

March 23 (33 messages)

CISSP Test (measl at mfn.org (J.A. Terranson))
Help with Firewalk (sonianamikasoni at rediffmail.com (anamika))
CISSP Test (wireless.insecurity at gmail.com (Vladamir))
CISSP Test (robert at dyadsecurity.com (robert@...dsecurity.com))
CISSP Test (vulcanius at gmail.com (vulcanius))
CISSP Test (vulcanius at gmail.com (vulcanius))
CISSP Test (vulcanius at gmail.com (vulcanius))
CISSP Test (wireless.insecurity at gmail.com (Vladamir))
Help with Firewalk (rudrak at gmail.com (Rudra Kamal Sinha Roy))
CISSP Test (cdupuis at cccure.org (Clement Dupuis))
SUSE Security Announcement: ImageMagick problems (SUSE-SA:2005:017) (meissner at suse.de (Marcus Meissner))
CISSP Test (dan_20407 at msn.com (DAN MORRILL))
CISSP Test (wireless.insecurity at gmail.com (Vladamir))
RES: CISSP Test (ribeiro at microcity.com.br (Jose Ribeiro Junior))
RE: [ISN] How To Save The Internet (Arndt.WA at forces.gc.ca (Arndt.WA@...ces.gc.ca))
RES: CISSP Test (wireless.insecurity at gmail.com (Vladamir))
Re: [ISN] How To Save The Internet (jasonc at science.org (Jason Coombs))
On Demand Staffing for Information Technology Projects (lionel2 at enorth.com.cn (Lionel Zhou))
Re: [ISN] How To Save The Internet (benv at designtoscano.com (Ben Vaisvil))
RE: [ISN] How To Save The Internet (Glenn_Everhart at bankone.com (Glenn_Everhart@...kone.com))
On Demand Staffing for Information Technology Projects (johnc at grok.org.uk (John Cartwright))
RE: [ISN] How To Save The Internet (Michael.Wojcik at microfocus.com (Michael Wojcik))
CISSP Test (pete at isecom.org (Pete Herzog))
Re: B.S On Demand Staffing for Information Technology Projects (RGolodner at Aetea.com (Richard Golodner))
Asshat coders (venom at gen-x.co.nz (VeNoMouS))
Administrivia: A new home for FD (xyberpix at xyberpix.com (xyberpix))
Asshat coders (kf_lists at digitalmunition.com (KF (lists)))
Asshat coders (sd at fucksheep.org (sd@...ksheep.org))
Asshat coders (venom at gen-x.co.nz (VeNoMouS))
Asshat coders (wireless.insecurity at gmail.com (Vladamir))
Asshat coders (nodialtone at comcast.net (Byron Copeland))
Asshat coders (skrewz at skrewz.dk (Anders Breindahl))
Asshat coders (str0ke at milw0rm.com (str0ke@...w0rm.com))

March 24 (31 messages)

Re: [ISN] How To Save The Internet (devdas at dvb.homelinux.org (Devdas Bhagat))
Asshat coders (sutpen at gmail.com (Thomas Sutpen))
[USN-99-2] Fixed php4 packages for USN-99-1 (martin.pitt at canonical.com (Martin Pitt))
[USN-100-1] cdrecord vulnerability (martin.pitt at canonical.com (Martin Pitt))
Invision Iframe Bug (woody at woodys-software.com (Woody))
Lameness (toddtowles at brookshires.com (Todd Towles))
Reverse engineering the Windows TCP stack (wireless.insecurity at gmail.com (Vladamir))
Lameness (dlcmacosx at mac.com (David Chastain))
Firescrolling 2 [Firefox 1.0.1] (mikx at mikx.de (mikx))
Lameness (toddtowles at brookshires.com (Todd Towles))
SUSE Security Announcement: several kernel security problems (SUSE-SA:2005:018) (meissner at suse.de (Marcus Meissner))
Lameness (with guidelines) (class101 at gmail.com (class101@...-SQUAD.com))
o2 Germany promotes SMS-Phishing (pentest at i4mail.informatik.rwth-aachen.de (pentest@...ail.informatik.rwth-aachen.de))
Lameness (skrewz at skrewz.dk (Anders Breindahl))
SUSE Security Announcement: MySQL vulnerabilities (SUSE-SA:2005:019) (meissner at suse.de (Marcus Meissner))
Reverse engineering the Windows TCP stack (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Reverse engineering the Windows TCP stack (wade at sivodd.com (Wade Woolwine))
Samsung ADSL Modem Vulnerability (se_cur_ity at hotmail.com (Morning Wood))
Lameness (dufresne at winternet.com (Ron DuFresne))
Reverse engineering the Windows TCP stack (Kyle.Quest at networkengines.com (Kyle Quest))
Which anti-spyware cleaner is the best? (zx at castlecops.com (Paul Laudanski))
Invision Iframe Bug (zx at castlecops.com (Paul Laudanski))
Lameness (dlcmacosx at mac.com (David Chastain))
[ GLSA 200503-28 ] Sun Java: Web Start argument injection vulnerability (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200503-28 ] Sun Java: Web Start argument injection vulnerability (koon at gentoo.org (Thierry Carrez))
[ GLSA 200503-29 ] GnuPG: OpenPGP protocol attack (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200503-29 ] GnuPG: OpenPGP protocol attack (koon at gentoo.org (Thierry Carrez))
[FLSA-2005:2155] Updated sharutils package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:2129] Updated mysql packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:2268] Updated spamassassin package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
LogicLibrary BugScan VSR, Trillian 2.0, 3.0 and 3.1 (matt.hargett at logiclibrary.com (Matt Hargett))

March 25 (26 messages)

Reverse engineering the Windows TCP stack (tim-security at sentinelchicken.org (Tim))
Reverse engineering the Windows TCP stack (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Reverse engineering the Windows TCP stack (wireless.insecurity at gmail.com (Vladamir))
Re: [lists] Which anti-spyware cleaner is the best? (zx at castlecops.com (Paul Laudanski))
Re: [lists] Which anti-spyware cleaner is the best? (ecb29 at cornell.edu (Elliott Bäck))
PivX this is your last warning (jasonc at science.org (Jason Coombs))
Reverse engineering the Windows TCP stack (jlongs2 at uic.edu (James Longstreet))
o2 Germany promotes SMS-Phishing (adam at nhh.hu (Ádám Szilveszter dr.))
Maxthon browser search bar information disclosure advisory (avivra at gmail.com (Aviv Raff))
[ GLSA 200503-30 ] Mozilla Suite: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
[ GLSA 200503-31 ] Mozilla Firefox: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200503-30 ] Mozilla Suite: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
Reverse engineering the Windows TCP stack (wireless.insecurity at gmail.com (Vladamir))
[gentoo-announce] [ GLSA 200503-31 ] Mozilla Firefox: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
[ GLSA 200503-32 ] Mozilla Thunderbird: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200503-32 ] Mozilla Thunderbird: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
o2 Germany promotes SMS-Phishing (Thierry at sniff-em.com (Thierry Zoller))
Reverse engineering the Windows TCP stack (Thierry at sniff-em.com (Thierry Zoller))
Lameness (with guidelines) (randallm at fidmail.com (Randall M))
Re: CISSP Test (optimist at eurocompton.net (pretty vacant))
[ GLSA 200503-33 ] IPsec-Tools: racoon Denial of Service (vorlon at gentoo.org (Matthias Geerdsen))
[gentoo-announce] [ GLSA 200503-33 ] IPsec-Tools: racoon Denial of Service (vorlon at gentoo.org (Matthias Geerdsen))
Security Contact for Exchange 2003? (ostiguy at gmail.com (Matt Ostiguy))
Security Contact for Exchange 2003? (william at lefkovics.net (William Lefkovics))
Security Contact for Exchange 2003? (ostiguy at gmail.com (Matt Ostiguy))
Mozilla Foundation GIF Overflow (stevenrakick at yahoo.com (Steven Rakick))

March 26 (13 messages)

Reverse engineering the Windows TCP stack (wireless.insecurity at gmail.com (Vladamir))
Reverse engineering the Windows TCP stack (synfinatic at gmail.com (ADT))
RES: CISSP Test (security at lan-slam.com (SecurityLSI))
[OT] CISSP Test (hades at psilanthropy.org (Anders Langworthy))
Reverse engineering the Windows TCP stack (Thierry at sniff-em.com (Thierry Zoller))
Mozilla Foundation GIF Overflow (trog at uncon.org (Trog))
$25K Prize for the first OS X virus. (dana at danamania.com (Dana Sibera))
Mozilla Foundation GIF Overflow (dbounds at intrusense.com (Darren Bounds))
$25K Prize for the first OS X virus. (kf_lists at digitalmunition.com (KF (Lists)))
[OT] CISSP Test (security at lan-slam.com (SecurityLSI))
ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 (astharot at zone-h.org (Astharot))
Re: ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 (zx at castlecops.com (Paul Laudanski))
Reverse engineering the Windows TCP stack (wireless.insecurity at gmail.com (Vladamir))

March 27 (7 messages)

Question: Heap Overflows on 2k3/SP2 (class101 at hat-squad.com (class101@...-SQUAD.com))
windows linux final study (request_a_mail at yahoo.com (Valuable Password))
local root security bug in linux >= 2.4.6 <= 2.4.30-rc1 and 2.6.x.y <= 2.6.11.5 (advisories at suresec.org (advisories))
windows linux final study (wireless.insecurity at gmail.com (Vladamir))
local root security bug in linux >= 2.4.6 <= 2.4.30-rc1 and 2.6.x.y <= 2.6.11.5 (spamproof at nospammail.net (Rob))
THai's Shoutbox XSS (Spoofing URL) BUG (corryl at sitoverde.com (CorryL))
local root security bug in linux >= 2.4.6 <= 2.4.30-rc1 and 2.6.x.y <= 2.6.11.5 (kf_lists at digitalmunition.com (KF (Lists)))

March 28 (9 messages)

Question: Heap Overflows on 2k3/SP2 (nikon at xillioncomputers.com (Nick Eoannidis))
Question: Heap Overflows on 2k3/SP2 (class101 at hat-squad.com (class101@...-SQUAD.com))
[ GLSA 200503-34 ] mpg321: Format string vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[gentoo-announce] [ GLSA 200503-34 ] mpg321: Format string vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
THai's Shoutbox correction name (corryl at sitoverde.com (CorryL))
[USN-101-1] telnet vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[security] Mozilla Foundation GIF Overflow (stevenrakick at yahoo.com (Steven Rakick))
[VulnWatch] Re: ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6[Scanned] (zx at castlecops.com (Paul Laudanski))
[security] Mozilla Foundation GIF Overflow (rarmstrong at iss.net (Armstrong, Richard (ISS Texas)))

March 29 (25 messages)

Re: Question: Heap Overflows on 2k3/SP2 (mconover_001 at hotmail.com (m conover))
Reverse engineering the Windows TCP stack (guninski at guninski.com (Georgi Guninski))
Re: Question: Heap Overflows on 2k3/SP2 (class101 at hat-squad.com (class101@...-SQUAD.com))
windows linux final study (ChrisDay at HBOSplc.com (ChrisDay@...Splc.com))
windows linux final study (d at vidsolbach.de (David Solbach))
windows linux final study (d at vidsolbach.de (David Solbach))
CAN-2004-1073 not fixed (santosh.e at ap.sony.com (Santosh Eraniose))
[USN-102-1] shar vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Reverse engineering the Windows TCP stack (news-letters at bluewin.ch (NSC))
windows linux final study (jericho at attrition.org (security curmudgeon))
windows linux final study (ChrisDay at HBOSplc.com (ChrisDay@...Splc.com))
windows linux final study (mlachniet at sequoianet.com (Lachniet, Mark))
windows linux final study (fw at deneb.enyo.de (Florian Weimer))
Reverse engineering the Windows TCP stack (Kyle.Quest at networkengines.com (Kyle Quest))
windows linux final study (iago at valhallalegends.com (Ron))
Adventia Chat (se_cur_ity at hotmail.com (Morning Wood))
E-Data (se_cur_ity at hotmail.com (Morning Wood))
E-Data (optimist at eurocompton.net (pretty vacant))
RES: CISSP Test (rmondesir at gmail.com (R Mondesir))
RES: CISSP Test (dan_20407 at msn.com (DAN MORRILL))
windows linux final study (jericho at attrition.org (security curmudgeon))
Hacked: Who Else Is Using Your Computer? (zx at castlecops.com (Paul Laudanski))
Somewhat off topic but related? (daniels at Ponderosatel.com (Daniel Sichel))
windows linux final study (joe_k at web.de (Joerg Kurz))
RES: CISSP Test (root at nullrouted.us (J. Oquendo))

March 30 (23 messages)

Somewhat off topic but related? (zx at castlecops.com (Paul Laudanski))
Security Alert - The OS X Zombies (hardmac at gmail.com (Thomas Hardly))
Hacked: Who Else Is Using Your Computer? (timoguin at gmail.com (Tim O'Guin))
Hacked: Who Else Is Using Your Computer? (kf_lists at digitalmunition.com (KF (Lists)))
windows linux final study (dufresne at winternet.com (Ron DuFresne))
Hacked: Who Else Is Using Your Computer? (xillwillx at gmail.com (Ill will))
Somewhat off topic but related? (wireless.insecurity at gmail.com (Vladamir))
Hacked: Who Else Is Using Your Computer? (matthew at textbox.net (404))
Hacked: Who Else Is Using Your Computer? (timoguin at gmail.com (Tim O'Guin))
windows linux final study (mjc at redhat.com (Mark J Cox))
CAN-2004-1073 not fixed (martin.pitt at canonical.com (Martin Pitt))
BO in http://rad.msn.com/ADSAdClient31.dll (contact_jamie_fisher at yahoo.co.uk (jamie fisher))
BO in http://rad.msn.com/ADSAdClient31.dll (contact_jamie_fisher at yahoo.co.uk (jamie fisher))
[SECURITY] [DSA 700-1] New mailreader packages fix cross-site scripting vulnerability (joey at infodrom.org (Martin Schulze))
[ GLSA 200503-35 ] Smarty: Template vulnerability (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200503-35 ] Smarty: Template vulnerability (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200503-35 ] Smarty: Template vulnerability (koon at gentoo.org (Thierry Carrez))
Hacked: Who Else Is Using Your Computer? (dk at pwarchitects.com (dk))
Hacked: Who Else Is Using Your Computer? (wireless.insecurity at gmail.com (Vladamir))
Re: Anyone with experience w/VirtualMDA? (Thierry at sniff-em.com (Thierry Zoller))
Re: Anyone with experience w/VirtualMDA? (Thierry at sniff-em.com (Thierry Zoller))
Hacked: Who Else Is Using Your Computer? (chromazine at sbcglobal.net (Steve Kudlak))
Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack (psirt at cisco.com (Cisco Systems Product Security Incident Response Te…)

March 31 (45 messages)

Rootkit Golden (from Hacker Defender) (allan.vanleeuwen at orangemail.nl (Leeuwen, Allan van))
(no subject) (anthony.aykut at frame4.com (Anthony Aykut))
[ GLSA 200503-36 ] netkit-telnetd: Buffer overflow (koon at gentoo.org (Thierry Carrez))
[ GLSA 200503-37 ] LimeWire: Disclosure of sensitive information (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200503-36 ] netkit-telnetd: Buffer overflow (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200503-36 ] netkit-telnetd: Buffer overflow (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200503-37 ] LimeWire: Disclosure of sensitive information (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200503-37 ] LimeWire: Disclosure of sensitive information (koon at gentoo.org (Thierry Carrez))
BO in http://rad.msn.com/ADSAdClient31.dll (supadupa at gmail.com (Scott Edwards))
[SECURITY] [DSA 701-1] New samba packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Metaphoric Linguistical Communication Protocol - Chung's Donut Shop Release (d4yj4y at yahoo.com (Day Jay))
Metaphoric Linguistical Communication Protocol - Chung's Donut Shop Release (d4yj4y at yahoo.com (Day Jay))
Reverse engineering the Windows TCP stack (ruff.lists at edelweb.fr (Nicolas RUFF (lists)))
Reverse engineering the Windows TCP stack (optimist at eurocompton.net (pretty vacant))
Secure Data Deletion Idea? (scoopachunkapoo at yahoo.com (John Blood))
Secure Data Deletion Idea? (rara at navigo.com (Rachael Treu-Gomes))
Metaphoric Linguistical Communication Protocol - Chung's Donut Shop Release (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Secure Data Deletion Idea? (gem at rellim.com (Gary E. Miller))
NVIDIA and Zdnet.de vs Microsoft (pigrelax at yandex.ru (alex))
Secure Data Deletion Idea? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
NVIDIA and Zdnet.de vs Microsoft (synfinatic at gmail.com (ADT))
NVIDIA and Zdnet.de vs Microsoft (toddtowles at brookshires.com (Todd Towles))
BO in http://rad.msn.com/ADSAdClient31.dll (geggam at gmail.com (Dan Becker))
NVIDIA and Zdnet.de vs Microsoft (bjerregaard at jyde.dk (bjerregaard@...e.dk))
BO in http://rad.msn.com/ADSAdClient31.dll (Thierry at sniff-em.com (Thierry Zoller))
NVIDIA and Zdnet.de vs Microsoft (perfectirijillo at gmail.com (J u a n))
BO in http://rad.msn.com/ADSAdClient31.dll (geggam at gmail.com (Dan Becker))
Reverse engineering the Windows TCP stack (Thierry at sniff-em.com (Thierry Zoller))
BO in http://rad.msn.com/ADSAdClient31.dll (geggam at gmail.com (Dan Becker))
BO in http://rad.msn.com/ADSAdClient31.dll (Thierry at sniff-em.com (Thierry Zoller))
BIOS Hacking? (gautam.singh at gmail.com (Gautam R. Singh))
BIOS Hacking? (larry at larryseltzer.com (Larry Seltzer))
[security] NVIDIA and Zdnet.de vs Microsoft (alexindef at rogers.com (Alex))
[security] NVIDIA and Zdnet.de vs Microsoft (alexindef at rogers.com (Alex))
[HV-HIGH] Microsoft Jet DB engine vulnerabilities (vuln at hexview.com (vuln@...view.com))
Secure Data Deletion Idea? (dk at pwarchitects.com (dk))
NVIDIA and Zdnet.de vs Microsoft (se_cur_ity at hotmail.com (Morning Wood))
NVIDIA and Zdnet.de vs Microsoft (optimist at eurocompton.net (pretty vacant))
Re: ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 (astharot at zone-h.org (Astharot))
RE: [ISN] How To Save The Internet (webcenter at sapo.pt (Nuno Costa))
(PAPER) "Vision of danger: The Firefox Greasemonkey" (bania.piotr at gmail.com (Piotr Bania))
NVIDIA and Zdnet.de vs Microsoft (richard at bjerregaard.net (Richard Bjerregaard))
Bay Technical Associates telnet server logon bypass (nolimit.bugtraq at gmail.com (nolimit bugtraq))
NVIDIA and Zdnet.de vs Microsoft (j.schipper at math.uu.nl (Joachim Schipper))
Re: Bay Technical Associates telnet server logon bypass (mbrennen at fni.com (Michael Brennen))

942 messages