full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2005/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 40	² 29	³ 4
⁴ 20	⁵ 17	⁶ 25	⁷ 18	⁸ 50	⁹ 14	¹⁰ 8
¹¹ 33	¹² 28	¹³ 55	¹⁴ 14	¹⁵ 10	¹⁶ 4	¹⁷ 16
¹⁸ 39	¹⁹ 28	²⁰ 19	²¹ 50	²² 15	²³ 24	²⁴ 10
²⁵ 21	²⁶ 23	²⁷ 27	²⁸ 21	²⁹ 13	³⁰ 10

Messages by day:

BIOS Hacking? (nick at virus-l.demon.co.uk (Nick FitzGerald))
(Paper) Programming: The Heart of Web Security (sanandres at gmail.com (Sumy))
DMA[2005-0401a] - 'IVT BlueSoleil Directory Transversal' (kf_lists at digitalmunition.com (KF (Lists)))
openbsd 3.8 under GPL? (guninski at guninski.com (Georgi Guninski))
openbsd 3.8 under GPL? (dunceor at gmail.com (Dunceor .))
IBM Laptop harddisk password bypass (frank_bussink at hotmail.com (Frank Bussink))
[USN-103-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[hr0n073rr0r15m - 7h3 J4ck50ff 7r14l. (sorral.bouddashiss at gmail.com (Sorral Bouddashiss))
openbsd 3.8 under GPL? (propolice at gmail.com (Eduardo Tongson))
Phun With Apache (duper at willhackforfood.biz (duper@...lhackforfood.biz))
[ GLSA 200504-01 ] telnet-bsd: Multiple buffer overflows (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200504-01 ] telnet-bsd: Multiple buffer overflows (koon at gentoo.org (Thierry Carrez))
[hr0n073rr0r15m - 7h3 J4ck50ff 7r14l. (vincehoran at gmail.com (Vince Horan))
Internet Going Down For Maintenance (larry at larryseltzer.com (Larry Seltzer))
BakBone products multiple vulnerabilities (class101 at hat-squad.com (class101@...-SQUAD.com))
[SECURITY] [DSA 702-1] New ImageMagick packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
BakBone Netvault 6.x/7.x Remote Heap Buffer Overflow (class101 at hat-squad.com (class101@...-SQUAD.com))
BakBone Netvault 6.x/7.x Local Stack Buffer Overflow (class101 at hat-squad.com (class101@...-SQUAD.com))
Metasploit Framework v3.0 Alpha (fdlist at digitaloffense.net (Humberto Duodenum Moore))
Internet Going Down For Maintenance (chromazine at sbcglobal.net (Steve Kudlak))
[SECURITY] [DSA 703-1] New krb5 packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Fwd: Connect to n3td3v on Yahoo! 360 (xploitable at gmail.com (n3td3v))
CAU-2005-0001: Chat Service Users - "Oops! Wrong Window" Information Disclosure (druid at caughq.org (I)ruid))
Internet Going Down For Maintenance (bart2k at hushmail.com (bart2k@...hmail.com))
openbsd 3.8 under GPL? (wireless.insecurity at gmail.com (Vladamir))
openbsd 3.8 under GPL? (timoguin at gmail.com (Tim O'Guin))
Metasploit Framework v3.0 Alpha (rudrak at gmail.com (Rudra Kamal Sinha Roy))
Metasploit Framework v3.0 Alpha (hracciatti at gmail.com (Hernán M. Racciatti))
[hr0n073rr0r15m - 7h3 J4ck50ff 7r14l. (d4yj4y at yahoo.com (Day Jay))
[hr0n073rr0r15m - 7h3 J4ck50ff 7r14l. (d4yj4y at yahoo.com (Day Jay))
[hr0n073rr0r15m - 7h3 J4ck50ff 7r14l. (d4yj4y at yahoo.com (Day Jay))
Metasploit Framework v3.0 Alpha (seclists at stratitec.com (defiance))
Re: Internet Going Down For Maintenance (jbdubbs at gmail.com (Jason Weisberger))
Re: Internet Going Down For Maintenance (timoguin at gmail.com (Tim O'Guin))
Re: Internet Going Down For Maintenance (seclists at securinews.com (Paul Kurczaba))
Re: Internet Going Down For Maintenance (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Internet Going Down For Maintenance (toddtowles at brookshires.com (Todd Towles))
Secure Data Deletion Idea? (lokkju at gmail.com (Lokkju))
[hr0n073rr0r15m - 7h3 J4ck50ff 7r14l. (stuart at serverpeak.com (Stuart Low))
Yersinia, a framework for layer 2 attacks (yersinia at wasahero.org (Yersinia Authors))

April 2 (29 messages)

Re: Internet Going Down For Maintenance (streamline1000 at gmail.com (Corey Vaila))
Re: Internet Going Down For Maintenance (carlos.oliv at gmail.com (Carlos de Oliveira))
Re: Internet Going Down For Maintenance (jasonc at science.org (Jason Coombs))
Re: Internet Going Down For Maintenance (kye at lewislan.id.au (Kye Lewis))
Re: Internet Going Down For Maintenance (frank at knobbe.us (Frank Knobbe))
SDbot Virus (JBilder at bacons.com (Jeffry Bilder))
Re: Internet Going Down For Maintenance (chromazine at sbcglobal.net (Steve Kudlak))
openbsd 3.8 under GPL? (guninski at guninski.com (Georgi Guninski))
SDbot Virus (Thierry at sniff-em.com (Thierry Zoller))
Fwd: Connect to n3td3v on Yahoo! 360 (steve_r125 at yahoo.co.uk (Steve R))
[ GLSA 200504-02 ] Sylpheed, Sylpheed-claws: Buffer overflow on message display (koon at gentoo.org (Thierry Carrez))
[gentoo-announce] [ GLSA 200504-02 ] Sylpheed, Sylpheed-claws: Buffer overflow on message display (koon at gentoo.org (Thierry Carrez))
Metasploit Framework v3.0 Alpha (randallm at fidmail.com (Randall M))
Re: Internet Going Down For Maintenance (randallm at fidmail.com (Randall M))
FBI declares war on hackers (randallm at fidmail.com (Randall M))
Anyone have more info on this (randallm at fidmail.com (Randall M))
FBI declares war on hackers (stfunub at gmail.com (Andrew Smith))
FBI declares war on hackers (mail at hackingspirits.com (Debasis Mohanty))
FBI declares war on hackers (tgood at mindsecurity.net (Travis Good))
Microsoft Windows Server 2003 "Shell Folders" Directory Traversal Vulnerability (ptrs-ejy at bp.iij4u.or.jp (Eiji James Yoshida))
FBI declares war on hackers (xploitable at gmail.com (n3td3v))
FBI declares war on hackers (niccolo.roselli at gmail.com (Niccolò Roselli Cecconi))
FBI declares war on hackers (jworkman at pimpworks.org (Jeff Workman))
In-game players kicking in the Quake 3 engine (aluigi at autistici.org (Luigi Auriemma))
In-game server buffer-overflow in Jedi Academy 1.011 (aluigi at autistici.org (Luigi Auriemma))
In-game server crash in Call of Duty 1.5b and United Offensive 1.51b (aluigi at autistici.org (Luigi Auriemma))
How to write remote exploits ( V. 1.1) (sanandres at gmail.com (Sumy))
Internet Going Down For Maintenance (maeder at glue.ch (Thomas Maeder))
Re: Internet Going Down For Maintenance (VitoB at comcast.net (VB))

April 3 (4 messages)

FBI declares war on hackers (list.t4c at ghcif.de (Milan 't4c' Berger))
FBI declares war on hackers (chromazine at sbcglobal.net (Steve Kudlak))
RE: Full-Disclosure Digest, Vol 2, Issue 6 (randori82 at hotmail.com (Andre Derek Protas))
Re: Internet Going Down For Maintenance (measl at mfn.org (J.A. Terranson))

April 4 (20 messages)

April 5 (17 messages)

Re: Case ID 51560370 - Notice of Claimed Infringement (timoguin at gmail.com (Tim O'Guin))
Blocking Skype on ISP level (rootmoose at telia.com (Ake Nordin))
Reverse engineering the Windows TCP stack (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Re: Case ID 51560370 - Notice of Claimed Infringement (dunceor at gmail.com (Dunceor .))
[USN-105-1] PHP4 vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
I need uh Qwik-Fix please sho 'nuff! (lor.tharholm at hushmail.com (lor.tharholm@...hmail.com))
Re: Case ID 51560370 - Notice of Claimed Infringement (sysadmin at agent.co.il (Ag. System Administrator))
I need uh Qwik-Fix please sho 'nuff! (jasonc at science.org (Jason Coombs))
I need uh Qwik-Fix please sho 'nuff! (jasonc at science.org (Jason Coombs))
[USN-106-1] Gaim vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-107-1] racoon vulnerability (martin.pitt at canonical.com (Martin Pitt))
MailEnable Imapd remote BoF + Exploit [x0n3-h4ck] (expanders at libero.it (expanders))
[USN-108-1] GDK vulnerability (martin.pitt at canonical.com (Martin Pitt))
MailEnable Smtpd remote Dos [x0n3-h4ck] (corryl at sitoverde.com (CorryL))
Secure Data Deletion Idea? (gem at rellim.com (Gary E. Miller))
RES: CISSP Test (mikie.simpson at gmail.com (Michael Simpson))
PullThePlug Wargames (announcements at pulltheplug.org (announcements@...ltheplug.org))

April 6 (25 messages)

April 7 (18 messages)

Re: Case ID 51560370 - Notice of Claimed Infringement (sutpen at gmail.com (Thomas Sutpen))
Cisco Linksys WET11 Password Resetting Vulnerability (khermansen at ht-technology.com (Kristian Hermansen))
Re: runcms/e-xoops 1.1A and below file upload vulnerability (pokleyzz at scan-associates.net (pokley))
Nokia Terminal Gateway default installation vulnerability (miraclemaker_gsm at yahoo.com (Miracle Maker))
MobileBugtraq Mailing List (franckl at mobilebugtraq.Com (Franckl - MobileBugtraq))
Re: Case ID 51560370 - Notice of Claimed Infringement (dunceor at gmail.com (Dunceor .))
MSN Plus Password Change Security Bypass Vulnerability (editor at sec.org.il (m0fo))
windows linux final study (ajones1 at gmail.com (Adam Jones))
windows linux final study (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
IIS hacking contest (Bryan.Loveless at NAU.EDU (Bryan Loveless))
Re: Case ID 51560370 - Notice of Claimed Infringement (Thierry at sniff-em.com (Thierry Zoller))
IIS hacking contest (lists at domain-logic.com (Randall Perry))
Re: Case ID 51560370 - Notice of Claimed Infringement (lists at domain-logic.com (Randall Perry))
Re: Case ID 51560370 - Notice of Claimed Infringement (Thierry at sniff-em.com (Thierry Zoller))
Re: Case ID 51560370 - Notice of Claimed Infringement (lists at domain-logic.com (Randall Perry))
Re: Case ID 51560370 - Notice of Claimed Infringement (kyphros at gmail.com (Mike Owen))
IIS hacking contest (mmaiffret at eeye.com (Marc Maiffret))
Article: Web Server Defacements (sanandres at gmail.com (Sumy))

April 8 (50 messages)

April 9 (14 messages)

April 10 (8 messages)

April 11 (33 messages)

April 12 (28 messages)

Re: Oddness with the MS antispyware beta (supadupa at gmail.com (Scott Edwards))
linux bugs (survival stories)? (gautam.bipin at gmail.com (Bipin Gautam))
How to Report a Security VulnerabilitytoMicrosoft (gautam.bipin at gmail.com (Bipin Gautam))
XAMPP (se_cur_ity at hotmail.com (Morning Wood))
How to Report a Security Vulnerability toMicrosoft (sysadmin at agent.co.il (Ag. System Administrator))
Re: Oddness with the MS antispyware beta (chows at ozemail.com.au (Gregh))
Oddness with the MS antispyware beta (libove at felines.org (Jay Libove))
Oddness with the MS antispyware beta (michealespinola at gmail.com (Micheal Espinola Jr))
How to Report a Security Vulnerability toMicrosoft (andfarm at teknovis.com (Andrew Farmer))
Cisco Security Advisory: Crafted ICMP Messages Can Cause Denial of Service (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
How to Report a Security Vulnerability toMicrosoft (sysadmin at agent.co.il (Ag. System Administrator))
linux bugs (survival stories)? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
MS05-021 Workaround - Block Port 25/SMTP - HAHA! (nocmonkey at gmail.com (Danny))
linux bugs (survival stories)? (guninski at guninski.com (Georgi Guninski))
linux bugs (survival stories)? (dk at pwarchitects.com (dk))
[ GLSA 200504-09 ] Axel: Vulnerability in HTTP redirection handling (vorlon at gentoo.org (vorlon@...too.org))
How to Report a Security VulnerabilitytoMicrosoft (guninski at guninski.com (Georgi Guninski))
[gentoo-announce] [ GLSA 200504-09 ] Axel: Vulnerability in HTTP redirection handling (vorlon at gentoo.org (vorlon@...too.org))
Details and PoC for MS05-020 MSIE DHTML Object handling vulnerabilities (skylined at edup.tudelft.nl (Berend-Jan Wever))
How to Report a Security VulnerabilitytoMicrosoft (mcbain at aol.com (mcbain@....com))
How to Report a Security VulnerabilitytoMicrosoft (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
How to Report a Security VulnerabilitytoMicrosoft (guninski at guninski.com (Georgi Guninski))
linux bugs (survival stories)? (propolice at gmail.com (Eduardo Tongson))
How to Report a Security VulnerabilitytoMicrosoft (mcbain at aol.com (mcbain@....com))
How to Report a Security VulnerabilitytoMicrosoft (mcbain at aol.com (mcbain@....com))
linux bugs (survival stories)? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
linux bugs (survival stories)? (propolice at gmail.com (Eduardo Tongson))
linux bugs (survival stories)? (j.schipper at math.uu.nl (Joachim Schipper))

April 13 (55 messages)

April 14 (14 messages)

April 15 (10 messages)

April 16 (4 messages)

April 17 (16 messages)

TCP/IP Stack Vulnerability (diego.casati at gmail.com (Diego Casati))
Exploiting Cisco Systems (sanandres at gmail.com (Sumy))
Exploiting Cisco Systems (wr0ck at hotmail.com (Sean Marks))
Exploiting Cisco Systems (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
TCP/IP Vulnerability (diego.casati at gmail.com (Diego Casati))
Exploiting Cisco Systems (hackerwacker at cybermesa.com (james edwards))
Exploiting Cisco Systems (sanandres at gmail.com (Sumy))
Question about spam in Packet Captures (randallm at fidmail.com (Randall M))
gobolook / hotoffer dropper (infsec at gmail.com (Willem Koenings))
[infosec-discuss] Question about spam in Packet Captures (shadow333 at gmail.com (Oliver Leitner))
[ECL] Windows IP Options DoS POC [ECL] (yuri at eclipse.org.il (Yuri Gushin))
Exploiting Red Hat 9 Linux systems (sonianamikasoni at rediffmail.com (anamika))
[infosec-discuss] Question about spam in PacketCaptures (randallm at fidmail.com (Randall M))
clipper 5.3 decompilation (g0tcha at webmail.co.za (g0tcha))
Exploiting Cisco Systems (dunceor at gmail.com (Dunceor .))
Exploiting Cisco Systems (sanandres at gmail.com (Sumy))

April 18 (39 messages)

April 19 (28 messages)

April 20 (19 messages)

April 21 (50 messages)

April 22 (15 messages)

April 23 (24 messages)

FW: Introducing a new generic approach to detecting SQL injection (mole at morris.net (Paul J. Morris))
Possible Virus activity (jgrotegut at directpointe.com (Jonathan Grotegut))
Possible Virus activity (benjamin at seattlefenix.net (Benjamin Krueger))
Possible Virus activity (nocmonkey at gmail.com (Danny))
Possible Virus activity (benjamin at seattlefenix.net (Benjamin Krueger))
Possible Virus activity (jgrotegut at directpointe.com (Jonathan Grotegut))
Possible Virus activity (benjamin at seattlefenix.net (Benjamin Krueger))
Possible Virus activity (jgrotegut at directpointe.com (Jonathan Grotegut))
FW: Introducing a new generic approach to detecting SQL injection (mohit.muthanna at gmail.com (Mohit Muthanna))
Possible Virus activity (nocmonkey at gmail.com (Danny))
set authenticate maddany (maddany at madchat.org (maddany))
set digest off (maddany at madchat.org (maddany))
FW: Introducing a new generic approach to detecting SQL injection (gautam.bipin at gmail.com (Bipin Gautam))
Possible Virus activity (Martin_Roesler at trendmicro-europe.com (Martin_Roesler@...ndmicro-europe.com))
Possible Virus activity (mcbain at aol.com (mcbain@....com))
Possible Virus activity (nocmonkey at gmail.com (Danny))
Possible Virus activity (mcbain at aol.com (mcbain@....com))
Possible Virus activity (nocmonkey at gmail.com (Danny))
Possible Virus activity (mcbain at aol.com (mcbain@....com))
Possible Virus activity (nocmonkey at gmail.com (Danny))
Possible Virus activity (matthew at textbox.net (404))
IIS 6 Remote Buffer Overflow Exploit (zvedzomx at yahoo.se (Christian Lete))
Possible Virus activity (class101 at phreaker.net (class101@...-SQUAD.com))
Re: -==phpBB 2.0.14 Multiple Vulnerabilities==- (zx at castlecops.com (Paul Laudanski))

April 24 (10 messages)

April 25 (21 messages)

April 26 (23 messages)

[INetCop Security Advisory] Snmppd potentially format string vulnerability. (dk at pwarchitects.com (dk))
Re: -==phpBB 2.0.14 Multiple Vulnerabilities==- (zx at castlecops.com (Paul Laudanski))
iDEFENSE Security Advisory 04.26.05: MySQL MaxDB Webtool Remote 'If' Stack Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 04.26.05: Citrix Program Neighborhood Agent Arbitrary Shortcut Creation Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 04.26.05: Citrix Program Neighborhood Agent Buffer Overflow (labs-no-reply at idefense.com (iDEFENSE Labs))
[SECURITY] [DSA 714-1] New kdelibs packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Re: email attack vector just got wider (michealespinola at gmail.com (Micheal Espinola Jr))
ADV: NetTerm's NetFtpd 4.2.2 Buffer Overflow + PoC Exploit (shadown at gmail.com (shadown))
(no subject) (stan.bubrouski at gmail.com (Stan Bubrouski))
[ GLSA 200504-25 ] Rootkit Hunter: Insecure temporary file creation (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
(no subject) (pauls at utdallas.edu (Paul Schmehl))
(no subject) (perfectirijillo at gmail.com (J u a n))
(no subject) (dk at pwarchitects.com (dk))
[ GLSA 200504-26 ] Convert-UUlib: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
(no subject) (bkfsec at sdf.lonestar.org (bkfsec))
(no subject) (sutpen at gmail.com (Thomas Sutpen))
[ GLSA 200504-27 ] xine-lib: Two heap overflow vulnerabilities (koon at gentoo.org (Thierry Carrez))
(no subject) (pauls at utdallas.edu (Paul Schmehl))
(no subject) (stan.bubrouski at gmail.com (Stan Bubrouski))
Counter-Strike bug in name command? (khermansen at ht-technology.com (Kristian Hermansen))
(no subject) (kez-fulld at crypt.gen.nz (Kerry Thompson))
More about the impact of the Trend sigs (sutpen at gmail.com (Thomas Sutpen))
(no subject) (d4yj4y at yahoo.com (Day Jay))

April 27 (27 messages)

April 28 (21 messages)

April 29 (13 messages)

Questions about reporting a vulnerability (xyberpix at xyberpix.com (xyberpix))
MDKSA-2005:078 - Updated squid packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
Hotmail.com doesn't like russians, returns 500 internal server error. (auto491351 at hushmail.com (auto491351@...hmail.com))
MDKSA-2005:079 - Updated perl packages to fix rmtree vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:080 - Updated libxpm4 packages fix libXpm vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:080 - Updated libxpm4 packages fix libXpm vulnerabilities (security at mandriva.com (Mandriva Security Team))
Questions about reporting a vulnerability (spamproof at nospammail.net (Rob))
Questions about reporting a vulnerability (mikx at mikx.de (mikx))
Questions about reporting a vulnerability (xyberpix at xyberpix.com (xyberpix))
Questions about reporting a vulnerability (se_cur_ity at hotmail.com (Morning Wood))
The best hacker ever ! (hugh_fraser at dofasco.ca (hugh_fraser@...asco.ca))
The best hacker ever ! (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
The best hacker ever ! (pauls at utdallas.edu (Paul Schmehl))

April 30 (10 messages)

685 messages