full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2005/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 13
² 22	³ 24	⁴ 26	⁵ 20	⁶ 22	⁷ 10	⁸ 13
⁹ 39	¹⁰ 38	¹¹ 53	¹² 20	¹³ 30	¹⁴ 24	¹⁵ 17
¹⁶ 26	¹⁷ 14	¹⁸ 17	¹⁹ 56	²⁰ 38	²¹ 11	²² 3
²³ 13	²⁴ 26	²⁵ 31	²⁶ 22	²⁷ 20	²⁸ 3	²⁹ 7
³⁰ 10	³¹ 13

Messages by day:

May 1 (13 messages)

DMA[2005-0501a] - 'ARPUS/Ce setuid buffer overflow and file overwrite' (kf_lists at digitalmunition.com (KF (lists)))
Micky-dee's anyone? (tuytumadre at att.net (tuytumadre@....net))
Micky-dee's anyone? (seclists at securinews.com (Paul Kurczaba))
Clients format string and server crash in Mtp-Target 1.2.2 (aluigi at autistici.org (Luigi Auriemma))
[ GLSA 200505-01 ] Horde Framework: Multiple XSS vulnerabilities (lewk at gentoo.org (Luke Macken))
Micky-dee's anyone? (xploitable at gmail.com (n3td3v))
Question: Security through Obscurity with VHOSTS (jftucker at gmail.com (James Tucker))
Micky-dee's anyone? (jftucker at gmail.com (James Tucker))
Hotmail.com doesn't like russians, returns 500 internal server error. (jftucker at gmail.com (James Tucker))
Micky-dee's anyone? (xploitable at gmail.com (n3td3v))
Hotmail.com doesn't like russians, returns 500 internal server error. (guninski at guninski.com (Georgi Guninski))
Micky-dee's anyone? (vulcanius at gmail.com (vulcanius))
Reminder to you Out-of-Office folks. (vulcanius at gmail.com (vulcanius))

May 2 (22 messages)

Reminder to you Out-of-Office folks. (sutpen at gmail.com (Thomas Sutpen))
Remote buffer overflow in GlobalScape Secure FTP server 3.0.2 (muts at whitehat.co.il (muts))
Micky-dee's anyone? (xillwillx at gmail.com (Ill will))
Micky-dee's anyone? (pabad at fibertel.com.ar (Pablo Abad))
Microsoft WINS Vulnerability + OS/SP Scanner (source) (ad at class101.org (class))
RE: hPRoTeCT Labs Releases vulnfind (hprotect@...hmail.com) (Alexander.Haeussler at ZF-Lenksysteme.com (Alexander.Haeussler@...Lenksysteme.com))
RE: hPRoTeCT Labs Releases vulnfind (hprotect@...hmail.com) (j.schipper at math.uu.nl (Joachim Schipper))
Multiple Vulnerabilities in Video Cam Server 1.0.0 (fdonato at autistici.org (Donato Ferrante))
asm to c (rebonzo at libero.it (Matteo Giannone))
asm to c (andrewg at felinemenace.org (Andrew Griffiths))
The best hacker ever ! (pauls at utdallas.edu (Schmehl, Paul L))
Reminder to you Out-of-Office folks. (vulcanius at gmail.com (vulcanius))
The best hacker ever ! (vulcanius at gmail.com (vulcanius))
The best hacker ever ! (zuxy.haiduc at gmail.com (Zuxy Haiduc))
The best hacker ever ! (gboyce at badbelly.com (Gregory Boyce))
DMA[2005-0425a] - 'ESRI ArcGIS 9.x multiple localvulnerabilities' (sohlow at gmail.com (solemn))
CCA source code released (jonny at drugphish.ch (Jonathan Heusser))
The Tel Aviv University Security Forum - meeting #11 - 8/5/05 (ge at linuxbox.org (Gadi Evron))
The best hacker ever ! (randori82 at gmail.com (Andre Derek Protas))
tHorK FrameWork beta v0.1::: another exploit framework (khaalel at gmail.com (khaalel))
Possible Google Phishing Scam (dan_20407 at msn.com (DAN MORRILL))
Another PayPal phishing scam (julio at rfdslabs.com.br (Julio Cesar Fort))

May 3 (24 messages)

Another PayPal phishing scam (se_cur_ity at hotmail.com (Morning Wood))
Reminder to you Out-of-Office folks. (sutpen at gmail.com (Thomas Sutpen))
The best hacker ever ! (vtlists at wyae.de (Volker Tanger))
Another PayPal phishing scam (var at deny-all.com (Vincent Archer))
Another PayPal phishing scam (njh at bandsman.co.uk (Nigel Horne))
Another PayPal phishing scam (cumhuronat at gmail.com (cumhur onat))
Possible Google Phishing Scam (frlinux at gmail.com (FRLinux))
Another PayPal phishing scam (j.schipper at math.uu.nl (Joachim Schipper))
Blair is more important than network security? (xploitable at gmail.com (n3td3v))
Blair is more important than network security? (jan.meijer at surfnet.nl (Jan Meijer))
[USN-113-1] libnet-ssleay-perl vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-114-1] kimgio vulnerability (martin at piware.de (Martin Pitt))
Another PayPal phishing scam (phased at mail.ru (phased))
Another PayPal phishing scam (toddtowles at brookshires.com (Todd Towles))
The best hacker ever ! (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[SECURITY] [DSA 720-1] New smartlist packages fix unauthorised un/subscription (joey at infodrom.org (Martin Schulze))
[USN-115-1] Kommander vulnerability (martin.pitt at canonical.com (Martin Pitt))
iDEFENSE Security Advisory 05.03.05: Mac OS X Server NeST -target Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
Blair is more important than network security? (peter at whole-uk.com (Pete Barnwell))
Another PayPal phishing scam (nick at virus-l.demon.co.uk (Nick FitzGerald))
Advisories for 4 vulnerabilities addressed by Apple SU 2005-005 (vuln at remahl.se (David Remahl))
Microsoft Windows Image Rendering Memory Limit DoS (luis.cortes at hypersec.co.uk (Luis A. Cortes Zavala))
Hotmail Advisories (luis.cortes at hypersec.co.uk (Luis A. Cortes Zavala))
Hotmail Advisories (luis.cortes at hypersec.co.uk (Luis A. Cortes Zavala))

May 4 (26 messages)

Reminder to you Out-of-Office folks. (blsonne at rogers.com (Byron L. Sonne))
NIC Chile CGI Script Zone Transfers (rodrigo at intellicomp.cl (Rodrigo Gutierrez))
Sprint telco service? (kf_lists at digitalmunition.com (KF (lists)))
Buffer Overflow in BitKeeper (enune at fribble.net (Enune))
DMA[2005-0502a] - 'Apple OSX multiple Bluetooth vulnerabilities' (kf_lists at digitalmunition.com (KF (lists)))
Sprint telco service? (chromazine at sbcglobal.net (Steve Kudlak))
Sprint telco service? (kf_lists at digitalmunition.com (KF (lists)))
The best hacker ever ! (ccozad at cosco.com.au (cozadc/Cozad, Chris))
Sprint telco service? (vulcanius at gmail.com (vulcanius))
[USN-116-1] gzip vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-117-1] cvs vulnerability (martin.pitt at canonical.com (Martin Pitt))
Missing string length check in Horde (yap at yapsoft.it (Andrea Parrella))
Re: [VulnWatch] Hotmail Advisories (sherwill22 at tmail.com (Sherwyn Williams))
Re: [VulnWatch] Hotmail Advisories (jerome.athias at free.fr (Jerome Athias))
Local root vuln in VPN daemon on MacOS X (pieter at os3.nl (Pieter de Boer))
[USN-118-1] PostgreSQL vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
iDEFENSE Security Advisory 05.04.05: Apple Mac OS X vpnd Server_id Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
Re: [VulnWatch] Hotmail Advisories (luis.cortes at hypersec.co.uk (Luis A. Cortes Zavala))
The best hacker ever ! (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Microsoft Windows Image Rendering Memory Limit DoS (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Microsoft Windows Image Rendering Memory Limit DoS (luis.cortes at hypersec.co.uk (Luis A. Cortes Zavala))
Gamespy cd-key validation system: "Cd-key in use" DoS versus many games (aluigi at autistici.org (Luigi Auriemma))
Gamespy cd-key validation system: Cd-key never in use (aluigi at autistici.org (Luigi Auriemma))
directory traversal in SimpleCam 1.2 (fdonato at autistici.org (Donato Ferrante))
Buffer Overflow in BitKeeper (d4yj4y at yahoo.com (Day Jay))
SQL Tabular data stream payload in initial SYN? (fd at mchsi.com (Mark))

May 5 (20 messages)

telco service? (deigodude at aol.com (Deigo Dude))
telco service? (deigodude at aol.com (Deigo Dude))
Paypal Phishing Again (jbdubbs at gmail.com (Jason Weisberger))
telco service? (kf_lists at digitalmunition.com (KF (lists)))
Paypal Phishing Again (nick at virus-l.demon.co.uk (Nick FitzGerald))
Paypal Phishing Again (security at omnitechpro.com (Jeremy Heslop))
Oracle 9i / 10g Fine Grained Auditing Issue (ak at red-database-security.com (Kornbrust, Alexander))
Oracle 10g DBMS_SCHEDULER SESSION_USER issue (ak at red-database-security.com (Kornbrust, Alexander))
Compozit Webhosting Panel Administration Vulnerability (basher13 at linuxmail.org (eric basher))
Paypal Phishing Again (nick at virus-l.demon.co.uk (Nick FitzGerald))
Paypal Phishing Again (toddtowles at brookshires.com (Todd Towles))
Paypal Phishing Again (toddtowles at brookshires.com (Todd Towles))
Paypal Phishing Again (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
telco service? (vulcanius at gmail.com (vulcanius))
telco service? (d4yj4y at yahoo.com (Day Jay))
Port 1025 netvenuechat (sherwill22 at tmail.com (Sherwyn Williams))
wintcpmod.exe Hear of it? (Dan at dbambach.net (Dan Bambach))
[ GLSA 200505-02 ] Oops!: Remote code execution (lewk at gentoo.org (Luke Macken))
Gossamer Threads Links SQL login XSS Vulnerability (nhouse at stationx.net (Nathan House))
Statcounter Script Injection User Session Hijack (nhouse at stationx.net (Nathan House))

May 6 (22 messages)

Re: directory traversal in SimpleCam 1.2 (pingywon at hotmail.com (pingywon))
MDKSA-2005:081 - Updated XFree86/XOrg packages fix libXpm vulnerabilities (security at mandriva.com (Mandriva Security Team))
[USN-119-1] tcpdump vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[SEC-1 LTD] RSA SecurID Web Agent Heap Overflow (garyo at sec-1.com (Gary O'leary-Steele))
KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (khaalel at gmail.com (khaalel))
[USN-121-1] OpenOffice.org vulnerability (martin.pitt at canonical.com (Martin Pitt))
Speaking of phishing (randallm at fidmail.com (Randall M))
Speaking of phishing (dhill+fulldisc at cricalix.net (Duncan Hill))
[USN-122-1] Squid vulnerability (martin.pitt at canonical.com (Martin Pitt))
wintcpmod.exe Hear of it? (toddtowles at brookshires.com (Todd Towles))
[SECURITY] [DSA 721-1] New squid packages fix ACL bypass (joey at infodrom.org (Martin Schulze))
64 bit qmail fun (guninski at guninski.com (Georgi Guninski))
64 bit qmail fun (jlo at ludd.luth.se (Lars Olsson))
[USN-123-1] Xine library vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
MDKSA-2005:082 - Updated OpenOffice.org packages fix heap overflow vulnerability (security at mandriva.com (Mandriva Security Team))
wintcpmod.exe Hear of it? (michael.holstein at csuohio.edu (Michael Holstein))
[ GLSA 200505-03 ] Ethereal: Numerous vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (d4yj4y at yahoo.com (Day Jay))
KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (khaalel at gmail.com (khaalel))
KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (bkfsec at sdf.lonestar.org (bkfsec))
Re: [SEC-1 LTD] RSA SecurID Web Agent Heap Overflow (kkadow at gmail.com (Kevin))
Re: [VulnWatch] KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (hescominsoon at emmanuelcomputerconsulting.com (William Warren))

May 7 (10 messages)

PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (d4yj4y at yahoo.com (Day Jay))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (steve at unixwiz.net (Steve Friedl))
Re: [VulnDiscuss] Re: [VulnWatch] KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (khaalel at gmail.com (khaalel))
Paypal Phishing Again (akihana at gmail.com (Mike Mohr))
Re: directory traversal in SimpleCam 1.2 (fdonato at autistici.org (Donato Ferrante))
Re: [SEC-1 LTD] RSA SecurID Web Agent Heap Overflow (vin at theworld.com (Vin McLellan))
Ethereal <= 0.10.10 single UDP packet DoS (nicob at nicob.net (Nicob))
Bluetooth related security problem with Motorola E398 GSM phone (tonu at jes.ee (Tonu Samuel))
Bluetooth related security problem with Motorola E398 GSM phone (Thierry at sniff-em.com (Thierry Zoller))
32-bit qmail fun (qmail-pop3d) (jlo at ludd.luth.se (Lars Olsson))

May 8 (13 messages)

[SecurityLab] Ethereal 0.10.10 SIP Dissector Overflow (ejovi at securitylab.net (Ejovi Nuwere))
phpbb 2.0.15 released - patches high critical vuln (zx at castlecops.com (Paul Laudanski))
Firefox Remote Compromise Leaked (tuytumadre at att.net (tuytumadre@....net))
Firefox Remote Compromise Leaked (jasonc at science.org (Jason Coombs))
Firefox Remote Compromise Leaked (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Firefox Remote Compromise Technical Details (tuytumadre at att.net (tuytumadre@....net))
Firefox Remote Compromise Leaked (gautam.bipin at gmail.com (Bipin Gautam))
Server Remote File Manager DOS Exploit (basher13 at linuxmail.org (eric basher))
Firefox Remote Compromise Leaked (mattmurphy at kc.rr.com (mattmurphy@...rr.com))
Firefox Remote Compromise Leaked (steve at unixwiz.net (Steve Friedl))
Easy Message Board Directory Traversal and Remote Command (soulblacktm at gmail.com (SoulBlack Group))
Announcement: The Web Security Mailing List (contact at webappsec.org (contact@...appsec.org))
Browser Based File Manager Administration Vulnerability (basher13 at linuxmail.org (eric basher))

May 9 (39 messages)

AirJack26 (mlists at arhont.com (Konstantin V. Gavrilenko))
[ GLSA 200505-04 ] GnuTLS: Denial of Service vulnerability (vorlon at gentoo.org (Matthias Geerdsen))
H-Sphere (se_cur_ity at hotmail.com (Morning Wood))
SiteStudio (se_cur_ity at hotmail.com (Morning Wood))
64 bit qmail fun (guninski at guninski.com (Georgi Guninski))
[SECURITY] [DSA 722-1] New smail packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 722-1] New smail packages fixarbitrary code execution (scuciatto at tca.com.br (Scuciatto))
Memory leak in DB2 sqlcctcpgetbuffer process, vulnerability or not? (vandetillaerdt at gmail.com (Henk van de Tillaerdt))
H-Sphere (kf_lists at digitalmunition.com (KF (lists)))
Memory leak in DB2 sqlcctcpgetbuffer process, vulnerability or not? (greed at pobox.com (Graham Reed))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (d4yj4y at yahoo.com (Day Jay))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (steve at unixwiz.net (Steve Friedl))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (d4yj4y at yahoo.com (Day Jay))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (michealespinola at gmail.com (Micheal Espinola Jr))
[SECURITY] [DSA 723-1] New XFree86 packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (imipak at gmail.com (imipak))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (d4yj4y at yahoo.com (Day Jay))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (d4yj4y at yahoo.com (Day Jay))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (tuytumadre at att.net (tuytumadre@....net))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (d4yj4y at yahoo.com (Day Jay))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (timoguin at gmail.com (Tim O'Guin))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (d4yj4y at yahoo.com (Day Jay))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (d4yj4y at yahoo.com (Day Jay))
[ GLSA 200505-05 ] gzip: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200505-06 ] TCPDump: Decoding routines Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Useless tidbit (optimist at eurocompton.net (pretty vacant))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (brian at liquidvisionmedia.com (Brian Debottari))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (d4yj4y at yahoo.com (Day Jay))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (d4yj4y at yahoo.com (Day Jay))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (perfectirijillo at gmail.com (J u a n))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (michealespinola at gmail.com (Micheal Espinola Jr))
iDEFENSE Labs - Q1 2005 - VCP Incentive Program Recipients (labs-no-reply at idefense.com (iDEFENSE Labs))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (d4yj4y at yahoo.com (Day Jay))
Firefox Remote Compromise Leaked (eric at arcticbears.com (Eric Paynter))
remote root security bug in ethereal 0.9.13 >= and <= 0.10.10 (advisories at suresec.org (suresec advisories))

May 10 (38 messages)

Firefox Remote Compromise Leaked (mlande at bellsouth.net (Mary Landesman))
Firefox Remote Compromise Leaked (eric at arcticbears.com (Eric Paynter))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (jftucker at gmail.com (James Tucker))
Fwd: GWAVA Sender Notification (Content filter) (jftucker at gmail.com (James Tucker))
coldfusion pentest (fatb at security.zz.ha.cn (fatb))
Firefox Remote Compromise Leaked (mlande at bellsouth.net (Mary Landesman))
coldfusion pentest (grutz at jingojango.net (Kurt Grutzmacher))
Fwd: GWAVA Sender Notification (Content filter) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
CAIF 1.2 released (Goebel at CERT.Uni-Stuttgart.DE (Oliver Goebel))
coldfusion pentest (fcharpen at xmcopartners.com (Frederic Charpentier))
coldfusion pentest (javier.reoyo at interdominios.com (Javier Reoyo))
List Charter (johnc at grok.org.uk (John Cartwright))
Fwd: GWAVA Sender Notification (Content filter) (jftucker at gmail.com (James Tucker))
coldfusion pentest (fatb at security.zz.ha.cn (fatb))
coldfusion pentest (fatb at security.zz.ha.cn (fatb))
Useless tidbit (optimist at eurocompton.net (pretty vacant))
Useless tidbit (MS AntiSpyware) (stevenrakick at yahoo.com (Steven Rakick))
scanning through socks or proxy (rebonzo at libero.it (Matteo Giannone))
scanning through socks or proxy (toddtowles at brookshires.com (Todd Towles))
Firefox & Mozilla Advisory (peter.jfactu at btinternet.com (P Ellison))
Firefox Remote Compromise Leaked (guninski at guninski.com (Georgi Guninski))
Firefox & Mozilla Advisory (se_cur_ity at hotmail.com (Morning Wood))
Firefox & Mozilla Advisory (toddtowles at brookshires.com (Todd Towles))
Crash in Zoidcom 1.0 beta 4 (aluigi at autistici.org (Luigi Auriemma))
Firefox & Mozilla Advisory (benv at designtoscano.com (Ben Vaisvil))
[ GLSA 200505-07 ] libTIFF: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200505-08 ] HT Editor: Multiple buffer overflows (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Firefox Remote Compromise Leaked (bkfsec at sdf.lonestar.org (bkfsec))
scanning through socks or proxy (michael.holstein at csuohio.edu (Michael Holstein))
PWCK Overflow POC Code Redhat/Suse older versions or something (maybe later too) (d4yj4y at yahoo.com (Day Jay))
Firefox & Mozilla Advisory (toddtowles at brookshires.com (Todd Towles))
Firefox & Mozilla Advisory (benv at designtoscano.com (Ben Vaisvil))
ThinkSECURE's AIRRAID - A WIRELESS HACKING TOURNAMENT - AUG 2005, SINGAPORE (security at hammerjammer.net (security@...merjammer.net))
sendmail exploit (l.epsilon at gmail.com (migalo digalo))
KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (me at n-tek.ch (me))
Another exploit against apache or kernel (adrian at senn.ch (Adrian Senn))
Another exploit against apache or kernel (pauls at utdallas.edu (Paul Schmehl))
sendmail exploit (pingywon at hotmail.com (pingywon))

May 11 (53 messages)

Useless tidbit (MS AntiSpyware) (nick at virus-l.demon.co.uk (Nick FitzGerald))
Guesbook Pro XSS & HTML Injection (soulblacktm at gmail.com (SoulBlack Group))
RE: Invitation to www.banneretcs.com Hacking Contest (bobbie_prince at yahoo.com.au (Luke Skywalker))
KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (jftucker at gmail.com (James Tucker))
Useless tidbit (MS AntiSpyware) (jftucker at gmail.com (James Tucker))
MDKSA-2005:083 - Updated ethereal packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
sendmail exploit (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
strange stuff in apache logs (julioody at gmail.com (Julio Cesar Ody))
strange stuff in apache logs (fd at finalaeon.net (Rev. Kronovohr))
strange stuff in apache logs (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: Invitation to www.banneretcs.com Hacking Contest (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Another exploit against apache or kernel (frank at knobbe.us (Frank Knobbe))
[USN-124-1] Mozilla and Firefox vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[Scan Associates Advisory] Neteyes Nexusway multiple vulnerability (pokleyzz at scan-associates.net (pokley))
Useless tidbit (MS AntiSpyware) (randallm at fidmail.com (Randall M))
sendmail exploit (l.epsilon at gmail.com (migalo digalo))
sendmail exploit (ralph at strg-alt-entf.org (Ralph Angenendt))
sendmail exploit (asimmons at messagelabs.com (Andrew Simmons))
sendmail exploit (jlauro at umflint.edu (Lauro, John))
BakBone NetVault last warning (ad at class101.org (class))
BakBone NetVault last warning (ad at class101.org (class))
Re: sendmail exploit (davek_throwaway at hotmail.com (Dave Korn))
BakBone NetVault last warning (kf_lists at digitalmunition.com (KF (lists)))
BakBone NetVault last warning (ad at class101.org (class))
BakBone NetVault last warning (kf_lists at digitalmunition.com (KF (lists)))
Where's Slashdot.org??? (cjcook at strongtowersecurity.com (Coral Cook))
Where's Slashdot.org??? (toddtowles at brookshires.com (Todd Towles))
Where's Slashdot.org??? (kf_lists at digitalmunition.com (KF (lists)))
Re: Where's Slashdot.org??? (optimist at eurocompton.net (pretty vacant))
Re: Where's Slashdot.org??? (michael.calcano at gmail.com (Michael Calcaño))
Re: Where's Slashdot.org??? (njh at bandsman.co.uk (Nigel Horne))
Re: Where's Slashdot.org??? (optimist at eurocompton.net (pretty vacant))
Re: Where's Slashdot.org??? (erc at pobox.com (Ed Carp))
KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (bkfsec at sdf.lonestar.org (bkfsec))
Cisco Security Advisory: FWSM URL Filtering Solution TCP ACL Bypass Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (khaalel at gmail.com (khaalel))
KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (jftucker at gmail.com (James Tucker))
Metasploit Framework v2.4 (fdlist at digitaloffense.net (H D Moore))
OpenServer 5.0.6 OpenServer 5.0.7 : chroot A known exploit can break a chroot prison. (please_reply_to_security at sco.com (please_reply_to_security@....com))
OpenServer 5.0.6 OpenServer 5.0.7 : chroot A known exploit can break a chroot prison. (jlongs2 at uic.edu (James Longstreet))
Useless tidbit (MS AntiSpyware) (byte.busters at gmail.com (byte busters))
Useless tidbit (MS AntiSpyware) (kurt.buff at gmail.com (Kurt Buff))
OpenServer 5.0.6 OpenServer 5.0.7 : chroot A known exploit can break a chroot prison. (kf_lists at digitalmunition.com (KF (lists)))
Linux kernel ELF core dump privilege elevation (ihaquer at isec.pl (Paul Starzetz))
OpenServer 5.0.6 OpenServer 5.0.7 : chroot A known exploit can break a chroot prison. (shyyqvfpybfher at wylie.me.uk (shyyqvfpybfher@...ie.me.uk))
KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (bkfsec at sdf.lonestar.org (bkfsec))
OpenServer 5.0.6 OpenServer 5.0.7 : chroot A known exploit can break a chroot prison. (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (bkfsec at sdf.lonestar.org (bkfsec))
OpenServer 5.0.6 OpenServer 5.0.7 : chroot A known exploit can break a chroot prison. (kf_lists at digitalmunition.com (KF (lists)))
Which is the best anti-spyware cleaner? (zx at castlecops.com (Paul Laudanski))
Which is the best anti-spyware cleaner? (zx at castlecops.com (Paul Laudanski))
Which is the best anti-spyware cleaner? (benv at designtoscano.com (Ben Vaisvil))
Which is the best anti-spyware cleaner? (zx at castlecops.com (Paul Laudanski))

May 12 (20 messages)

[DR018] Quartz Composer / QuickTime 7 information leakage (vuln at remahl.se (David Remahl))
Firefox 1.0.4 released. Several critical vulnerabilities fixed (tuytumadre at att.net (tuytumadre@....net))
[ GLSA 200505-09 ] Gaim: Denial of Service and buffer overflow vulnerabilties (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Useless tidbit (MS AntiSpyware) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Useless tidbit (MS AntiSpyware) (des_ward at o2.co.uk (Des Ward))
[DR018] Quartz Composer / QuickTime 7 information leakage (adf at code511.com (adf--at--Code511.com))
Bluetooth related security problem with Motorola E398 GSM phone (adam.laurie at thebunker.net (Adam Laurie))
MDKSA-2005:084 - Updated gnutls packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:085 - Updated kdelibs packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:086 - Updated gaim packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:087 - Updated tcpdump packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
[USN-124-2] Fixed packages for USN-124-1 (martin.pitt at canonical.com (Martin Pitt))
[USN-125-1] Gaim vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
DIMVA 2005 - Call for Participation - IT-Security Conference in Vienna, 7-8 July (Marc.Heuse at nruns.com (Marc Heuse))
Re: sendmail exploit (mandreko at ori.net (Matt Andreko))
Where's Slashdot.org??? (dk at pwarchitects.com (dk))
Re: Where's Slashdot.org??? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: phpbb 2.0.15 released - patches high critical vuln (zx at castlecops.com (Paul Laudanski))
Netvault Remote Heap Overflow (another one) (nolimit.bugtraq at gmail.com (nolimit bugtraq))

May 13 (30 messages)

[FLSA-2005:152856] Updated sudo packages fix security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:152804] Updated openmotif packages fix image vulnerability (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:152768] Updated ruby package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:152763] Updated qt packages fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
Internet Explorer Help System RCE (mallen7474 at yahoo.com (Mike Allen))
Internet Explorer Help System RCE (dhill+fulldisc at cricalix.net (Duncan Hill))
[FLSA-2005:154988] Updated openoffice.org packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:152912] Updated imap packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:152871] Updated nfs-utils package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[USN-126-1] GNU TLS library vulnerability (martin.pitt at canonical.com (Martin Pitt))
[FLSA-2005:155508] Updated cvs package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
A large list of sites vulnerable to cross site scripting bugs. (info at pointblanksecurity.com (Info))
MS launch subscription-based security service (imipak at gmail.com (imipak))
PhotoPost Arbitrary Data Exploit (basher13 at linuxmail.org (eric basher))
Re: [VulnWatch] Re: phpbb 2.0.15 released - patches high critical vuln (phased at mail.ru (phased))
OllyDbg "INT3 AT" Format String Vulnerability (bania.piotr at gmail.com (Piotr Bania))
MS launch subscription-based security service (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
MS launch subscription-based security service (guninski at guninski.com (Georgi Guninski))
Benign Worms (k872sd at hotmail.com (k k))
Benign Worms (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
OpenServer 5.0.7 UnixWare 7.1.4 UnixWare 7.1.3 : Hyper-Threading information leakage (please_reply_to_security at sco.com (please_reply_to_security@....com))
Benign Worms (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Benign Worms (lists at robertlemos.com (Rob Lemos))
Benign Worms (michael.holstein at csuohio.edu (Michael Holstein))
Netvault Remote Heap Overflow (another one) (ad at class101.org (class))
Benign Worms (mhoye at neon.polkaroo.net (Mike Hoye))
Benign Worms (measl at mfn.org (J.A. Terranson))
Benign Worms (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Benign Worms (eric at arcticbears.com (Eric Paynter))
Benign Worms (snowhare at nihongo.org (Benjamin Franz))

May 14 (24 messages)

MDKSA-2005:088 - Updated mozilla packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
Benign Worms (eric at arcticbears.com (Eric Paynter))
Gaim 1.2.1 -- PoC Stack Overflow (iago at valhallalegends.com (Ron))
Benign Worms (tuytumadre at att.net (tuytumadre@....net))
Benign Worms (nick at virus-l.demon.co.uk (Nick FitzGerald))
Benign Worms (umphress at gmail.com (Chris Umphress))
[ GLSA 200505-10 ] phpBB: Cross-Site Scripting Vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Benign Worms (sean01 at accnet.com.au (Sean Crawford))
MS launch subscription-based security service (nick at virus-l.demon.co.uk (Nick FitzGerald))
MS launch subscription-based security service (blsonne at rogers.com (Byron L. Sonne))
Benign Worms (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
ZDNet UK: Microsoft OneCare gets a bashing (full-disclosure at lists.grok.org.uk (full-disclosure))
RE: Bening Worms (Cosmin Stejerean) (cstejere at cti.depaul.edu (Stejerean, Cosmin))
Out of Office AutoReply: ZDNet UK: Microsoft On eCare gets a bashing (DARREN.L.BENNETT at saic.com (Bennett, Darren L.))
Out of Office AutoReply: ZDNet UK: Microsoft On eCare gets a bashing (Andreas.Schroeder at ept.de (Schroeder, Andreas))
Out of Office AutoReply: ZDNet UK: Microsoft OneCare gets a bashing (steve.vigneau at eds.com (Vigneau, Steve))
Benign Worms (eric at arcticbears.com (Eric Paynter))
MS launch subscription-based security service (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Benign Worms (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: Bening Worms (Cosmin Stejerean) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Benign Worms (eric at arcticbears.com (Eric Paynter))
Benign Worms (jftucker at gmail.com (James Tucker))
Benign Worms (chromazine at sbcglobal.net (Steve Kudlak))
Benign Worms (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

May 15 (17 messages)

MS launch subscription-based security service (nick at virus-l.demon.co.uk (Nick FitzGerald))
RE: Bening Worms (Cosmin Stejerean) (nick at virus-l.demon.co.uk (Nick FitzGerald))
RE: Bening Worms (Cosmin Stejerean) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: Bening Worms (Cosmin Stejerean) (purplebag at gmail.com (purplebag))
RE: Bening Worms (Cosmin Stejerean) (requiem at praetor.org (Jeremy Bishop))
Benign Worms (bla at darton.edu (Brian Anderson))
Benign Worms (measl at mfn.org (J.A. Terranson))
Benign Worms (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[ GLSA 200505-11 ] Mozilla Suite, Mozilla Firefox: Remote compromise (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200505-12 ] PostgreSQL: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
64 bit qmail fun (guninski at guninski.com (Georgi Guninski))
Ultimate Forum Password Database Vulnerability (basher13 at linuxmail.org (eric basher))
Gurgens Guest Book Password Database Vulnerability (basher13 at linuxmail.org (eric basher))
RE: Bening Worms (Cosmin Stejerean)= Mutated (randallm at fidmail.com (Randall M))
Microsoft's Security Response Center - The Videos (request_a_mail at yahoo.com (Valuable Password))
M$ Security Response center (randallm at fidmail.com (Randall M))
Benign Worms (dan+lists at af0.net (Dan))

May 16 (26 messages)

RE: Bening Worms (Cosmin Stejerean) (cstejere at cti.depaul.edu (Stejerean, Cosmin))
Microsoft's Security Response Center - The Videos (thegesus at gmail.com (TheGesus))
ZDNet UK: Microsoft OneCare gets a bashing (thegesus at gmail.com (TheGesus))
Microsoft's Security Response Center - The Videos (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: Bening Worms (Cosmin Stejerean) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
RE: Benign Worms (Cosmin Stejerean) (cstejere at cti.depaul.edu (Stejerean, Cosmin))
RE: Benign Worms (Cosmin Stejerean) (measl at mfn.org (J.A. Terranson))
ZabaSearch.com XSS (bitlance_3 at hotmail.com (bitlance winter))
Postnuke 0.750 - 0.760rc4 local file inclusion (pokleyzz at scan-associates.net (pokley))
Fwd: ZabaSearch.com XSS (kembarawan at gmail.com (Zainal Abidin Ahmad))
Benign Worms (michael.holstein at csuohio.edu (Michael Holstein))
Pico Server (pServ) Local Information Disclosure (overbeck at i4.informatik.rwth-aachen.de (Claus R. F. Overbeck))
Pico Server (pServ) Information Disclosure Of CGI Sources (overbeck at i4.informatik.rwth-aachen.de (Claus R. F. Overbeck))
Pico Server (pServ) Remote Command Injection (overbeck at i4.informatik.rwth-aachen.de (Claus R. F. Overbeck))
Tor 0.1.0.6-rc is out (comesefosse at ntani.firenze.linux.it (Tarapia Tapioco))
Re: Postnuke 0.750 - 0.760rc4 local file inclusion (zx at castlecops.com (Paul Laudanski))
Javascript Bug in Firefox (rjoyal at grainscanada.gc.ca (Raymond Joyal))
Javascript Bug in Firefox (ajones1 at gmail.com (Adam Jones))
Javascript Bug in Firefox (bla at darton.edu (Brian Anderson))
RE: Javascript Bug in Firefox (rjoyal at grainscanada.gc.ca (Raymond Joyal))
Google hacking tools (javapro13 at mac.com (Scot Shunn))
Google hacking tools (toddtowles at brookshires.com (Todd Towles))
Google hacking tools (ekamerling at snaplen.com (Erik Kamerling))
Javascript Bug in Firefox (mhoye at neon.polkaroo.net (Mike Hoye))
Google hacking tools (dotsecure at gmail.com (Martin Mkrtchian))
Google hacking tools (wesleymcgrew at gmail.com (Robert Wesley McGrew))

May 17 (14 messages)

Security benefits of spliting services between two ISP providers (rnaydenov at postbank.bg (Rossen S. Naydenov))
Security benefits of spliting services between two ISP providers (reece.mills at charter.net (Reece Mills))
MySQL < 4.0.12 && MySQL <= 5.0.4 : Insecure tmp file handling (exploits at zataz.net (ZATAZ.net))
KISS Social Engineering (randallm at fidmail.com (Randall M))
[USN-127-1] bzip2 vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Security benefits of spliting services between two ISP providers (laszlof at tvog.net (Frank Laszlo))
KISS Social Engineering (ajones1 at gmail.com (Adam Jones))
Joris Evers is no longet at IDG News Service (Joris_Evers at idg.com (Joris_Evers@....com))
[ GLSA 200505-13 ] FreeRADIUS: Buffer overflow and SQL injection vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[USN-128-1] nasm vulnerability (martin.pitt at canonical.com (Martin Pitt))
Security benefits of spliting services between two ISP providers (DaveH at Radware.com (Dave Hawkins))
Security benefits of spliting services between two ISP providers (reece.mills at charter.net (Reece Mills))
OpenServer 5.0.6 OpenServer 5.0.7 : telnet client multiple issues (please_reply_to_security at sco.com (please_reply_to_security@....com))
MDKSA-2005:088-1 - Updated mozilla-firefox packages re-enable extensions (security at mandriva.com (Mandriva Security Team))

May 18 (17 messages)

Security benefits of spliting services between two ISP providers (rnaydenov at postbank.bg (Rossen S. Naydenov))
KISS Social Engineering (randallm at fidmail.com (Randall M))
[USN-129-1] Squid vulnerability (martin.pitt at canonical.com (Martin Pitt))
Security benefits of spliting services between two ISP providers (mmadison at fnni.com (Madison, Marc))
[SECURITY] [DSA 724-1] New phpsysinfo packages fix cross site scripting (joey at infodrom.org (Martin Schulze))
Can ISO15408 evaluated products be trusted? (nora15408 at yahoo.com (Nora Barrera))
Can ISO15408 evaluated products be trusted? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Implementation of CoreST mysql vulnerability? (mooyix at gmail.com (Brendan Dolan-Gavitt))
UnixWare 7.1.4 : Updated mozilla fixes many security issues (please_reply_to_security at sco.com (please_reply_to_security@....com))
NOVELL ZENWORKS MULTIPLE REMØTE STACK & HEAP OVERFLOWS (list at rem0te.com (list@...0te.com))
Security issue in Microsoft Outlook (bakchodiya at yahoo.com (Bakchodiya))
Whoppix 2.7 released (muts at whitehat.co.il (muts))
[FLSA-2005:152815] Updated libtiff packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:152771] Updated pam packages fix security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
RE: Security issue in Microsoft Outlook (djsb at neonisp.com (Domingos Bruges))
RE: Security issue in Microsoft Outlook (Michael.Scovetta at ca.com (Scovetta, Michael V))
Security benefits of spliting services between two ISP providers (laszlof at tvog.net (Frank Laszlo))

May 19 (56 messages)

Security issue in Microsoft Outlook (andy at mbrez.com (Andy Brezinsky))
Re: Security issue in Microsoft Outlook (nick at virus-l.demon.co.uk (Nick FitzGerald))
A new phishing fraud (editor at sec.org.il (m0fo))
Security contact for Commonwealth bank (enune at fribble.net (Enune))
A new phishing fraud (austinsr at uindy.edu (Shawn Austin))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (jonathan at nuclearelephant.com (Jonathan Zdziarski))
MDKSA-2005:089 - Updated cdrdao packages fix local root vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:090 - Updated nasm packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:091 - Updated bzip2 packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (alain at ait.ac.th (Alain Fauconnet))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (codesamurai at mac.com (Brian K.))
Can ISO15408 evaluated products be trusted? (h_hikita at yahoo.co.jp (HHikita))
MDKSA-2005:092 - Updated gzip packages fix several vulnerabilities (security at mandriva.com (Mandriva Security Team))
Security issue in Microsoft Outlook (raoul at elforsoft.com (Raoul Nakhmanson-Kulish))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (ph0enix at justonemorething.org (ph0enix))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (exploits at zataz.net (ZATAZ.net))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (ph0enix at justonemorething.org (ph0enix))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (deeper at gmail.com (Daniel))
AW: Security issue in Microsoft Outlook (Wilhelm.Stein at detecon.com (Stein, Wilhelm Michael))
Re: Security issue in Microsoft Outlook (jesse at jesterpm.net (Jesse Morgan))
Re: Security issue in Microsoft Outlook (tom at SecurityBugHunter.com (Tom Gallagher))
RE: Security issue in Microsoft Outlook (simon_dever at hotmail.com (Simon Dever))
Re: Security issue in Microsoft Outlook (harshad at yahoo.com (Harshad))
!! Conference Program Computer Security Mexico 2005 !! (seguridad at seguridad.unam.mx (Seguridad en Computo - UNAM))
[Active Spam - GGL Filter] AW: Security issue in Microsoft Outlook (irfan.syed at guoco.com (irfan.syed@...co.com))
Content detection in html payload with snort ? (fcharpen at xmcopartners.com (Frederic Charpentier))
Re: Security issue in Microsoft Outlook (bugtraq.geek at gmail.com (Jens Becker))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (ph0enix at justonemorething.org (ph0enix))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (ph0enix at justonemorething.org (ph0enix))
RE: Security issue in Microsoft Outlook (Steveb at tshore.com (Steve Bostedor))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (jonathan at nuclearelephant.com (Jonathan Zdziarski))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (jonathan at nuclearelephant.com (Jonathan Zdziarski))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (jonathan at nuclearelephant.com (Jonathan Zdziarski))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (jonathan at nuclearelephant.com (Jonathan Zdziarski))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (jonathan at nuclearelephant.com (Jonathan Zdziarski))
Re: Security issue in Microsoft Outlook (kevintm at ameritech.net (Kevin Martin))
Re: Security issue in Microsoft Outlook (euclidnine at yahoo.com (M. Moreno))
Re: Security issue in Microsoft Outlook (j.schipper at math.uu.nl (Joachim Schipper))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (deeper at gmail.com (Daniel))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (deeper at gmail.com (Daniel))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (codesamurai at mac.com (Brian K.))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (jonathan at nuclearelephant.com (Jonathan Zdziarski))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (jonathan at nuclearelephant.com (Jonathan Zdziarski))
D-Link DSL routers authentication bypass (francesco.orro at akhela.com (Francesco Orro))
[USN-130-1] TIFF library vulnerability (martin.pitt at canonical.com (Martin Pitt))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (codesamurai at mac.com (Brian K.))
[Active Spam - GGL Filter] AW: Security iss ue in Microsoft Outlook (jim.richards at dot.state.wi.us (Richards, Jim))
[SECURITY] [DSA 725-1] New ppxp packages fix local root exploit (joey at infodrom.org (Martin Schulze))
[ GLSA 200505-14 ] Cheetah: Untrusted module search path (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Mac OSX 10.4 Dashboard Authentication Hijacking Vulnerability (greed at pobox.com (Graham Reed))
NOVELL ZENWORKS MULTIPLE REMXXTE STACK & HEAP OVERFLOWS (bart2k at hushmail.com (bart2k@...hmail.com))
Possible proxy scan for proactive countermeasures? (the.rxmr at gmail.com (the rxmr))
Possible proxy scan for proactive countermeasures? (spamproof at nospammail.net (Rob))
[Fwd: The New World of Work] (jasonc at science.org (Jason Coombs))
RE: Security issue in Microsoft Outlook (patchitorloseit at yahoo.com (Patch Now))
[gentoo-announce] [ GLSA 200505-14 ] Cheetah: Untrusted module search path (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))

May 20 (38 messages)

Security benefits of spliting services between two ISP providers (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
AW: Security issue in Microsoft Outlook (Andreas_Aufmuth at vogel-medien.de (Aufmuth Andreas))
Can ISO15408 evaluated products be trusted? (nora15408 at yahoo.com (Nora Barrera))
D-Link DSL routers authentication bypass (atarasco at gmail.com (Luis Peralta))
[SECURITY] [DSA 726-1] New oops packages fix format string vulnerability (joey at infodrom.org (Martin Schulze))
Can ISO15408 evaluated products be trusted? (h_hikita at yahoo.co.jp (HHikita))
UPDATE: [ GLSA 200504-23 ] Kommander: Insecure remote script execution (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
ERRATA: [ GLSA 200505-13 ] FreeRADIUS: SQL injection and Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200505-15 ] gdb: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
looking for a HTTPS redirect server (raj_kap99 at yahoo.com (Rajeev Kapoor))
[Bulk] Re: D-Link DSL routers authentication bypass (francesco.orro at akhela.com (Francesco Orro))
Security benefits of spliting services between two ISP providers (laszlof at tvog.net (Frank Laszlo))
looking for a HTTPS redirect server (fcharpen at xmcopartners.com (Frederic Charpentier))
D-Link DSL routers authentication bypass (Sebastian.von.Knorring at iki.fi (Sebastian von Knorring))
FW: looking for a HTTPS redirect server (toddtowles at brookshires.com (Todd Towles))
FW: looking for a HTTPS redirect server (raj_kap99 at yahoo.com (Rajeev Kapoor))
FW: looking for a HTTPS redirect server (gkverma at gmail.com (Gaurav Kumar))
FW: looking for a HTTPS redirect server (gkverma at gmail.com (Gaurav Kumar))
FW: looking for a HTTPS redirect server (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
FW: looking for a HTTPS redirect server (var at deny-all.com (Vincent Archer))
Security benefits of spliting services betweentwo ISP providers (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
[SECURITY] [DSA 727-1] New libconvert-uulib-perl packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
RE: Security issue in Microsoft Outlook (david at covetrix.com (David Corn))
Security benefits of spliting services betweentwo ISP providers (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
FW: looking for a HTTPS redirect server (eric at arcticbears.com (Eric Paynter))
Security issue in Microsoft Outlook (bugtraq.lists.dmargoli at af0.net (Dan Margolis))
Please fix your e-mail system (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
COX Internet Outage (str0ke at milw0rm.com (str0ke@...w0rm.com))
COX Internet Outage (sec at lordsargon.com (sargon))
RE: Security issue in Microsoft Outlook (david at covetrix.com (David Corn))
COX Internet Outage (str0ke at milw0rm.com (str0ke@...w0rm.com))
COX Internet Outage (grantmc at gmail.com (Grant McChesney))
COX Internet Outage (toddtowles at brookshires.com (Todd Towles))
COX Internet Outage BS (sil at politrix.org (J. Oquendo))
COX Internet Outage BS (toddtowles at brookshires.com (Todd Towles))
Privacy at Verizon, Hawaiian Telcom and The Carlyle Group? (jasonc at science.org (Jason Coombs))
COX Internet Outage BS (jmcguire81 at cox.net (John McGuire))
COX Internet Outage (ad at class101.org (class))

May 21 (11 messages)

COX Internet Outage (hackerwacker at cybermesa.com (James Edwards))
COX Internet Outage (kf_lists at digitalmunition.com (kf_lists))
COX Internet Outage (xillwillx at gmail.com (Ill will))
Can ISO15408 evaluated products be trusted? (nora15408 at yahoo.com (Nora Barrera))
Can ISO15408 evaluated products be trusted? (nora15408 at yahoo.com (Nora Barrera))
[ GLSA 200505-16 ] ImageMagick, GraphicsMagick: Denial of Service vulnerability (koon at gentoo.org (Thierry Carrez))
Can ISO15408 evaluated products be trusted? (h_hikita at yahoo.co.jp (HHikita))
CERT VU#637934 (daniel at benzedrine.cx (Daniel Hartmeier))
Ports used by trogens (brianphillips at onetel.com (Brian Phillips))
Can ISO15408 evaluated products be trusted? (h_hikita at yahoo.co.jp (HHikita))
RE: Security issue in Microsoft Outlook (colweb at gmail.com (Colin))

May 22 (3 messages)

Ports used by trogens (shaitan11 at gmail.com (Who?))
RE: Security issue in Microsoft Outlook (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Can ISO15408 evaluated products be trusted? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

May 23 (13 messages)

[USN-131-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Defeating Microsoft WGA Validation Check (mail at hackingspirits.com (Debasis Mohanty))
[USN-132-1] ImageMagick vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Computer Associates Vet Antivirus Library Remote Heap Overflow (list at rem0te.com (list@...0te.com))
Format string and crash in Warrior Kings 1.3 and Battles 1.23 (aluigi at autistici.org (Luigi Auriemma))
RE: Security issue in Microsoft Outlook (kc_smith at clark.net (Keenan Smith))
[ GLSA 200505-17 ] Qpopper: Multiple Vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
RE: Security issue in Microsoft Outlook (michealespinola at gmail.com (Micheal Espinola Jr))
RE: Security issue in Microsoft Outlook (dcleveland at affant.com (David Cleveland))
[ GLSA 200505-18 ] Net-SNMP: fixproc insecure temporary file creation (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
XSS in Sambar Server version 6.2 (contact_jamie_fisher at yahoo.co.uk (jamie fisher))
RE: Security issue in Microsoft Outlook (lists.fd.dmargoli at af0.net (Dan Margolis))
[ISR] Zyxel Prestige 650R-31 Denial Of Service (fedek at infobyte.com.ar (Federico Kirschbaum))

May 24 (26 messages)

Re: WGA validation cracked - by poedguy from xillion first! (nikon at xillioncomputers.com (Nick Eoannidis))
Defeating Microsoft WGA Validation Check (jallen at logicaldevelopments.com.au (Justin Allen))
Re: Defeating Microsoft WGA Validation Check (pictureview at protiamail.gr (pictureview@...tiamail.gr))
Re: Defeating Microsoft WGA Validation Check (jallen at logicaldevelopments.com.au (Justin Allen))
Yahoo! Mail Username Information Disclosure Vulnerability (smaillist at hotmail.com (Sowhat .))
Re: Defeating Microsoft WGA Validation Check (dean_johnson68 at yahoo.com (Dean Johnson))
Defeating Microsoft WGA Validation Check (mail at hackingspirits.com (Debasis Mohanty))
Re: Defeating Microsoft WGA Validation Check (mail at hackingspirits.com (Debasis Mohanty))
DMA[2005-0425a] - 'ESRI ArcGIS 9.x multiple local vulnerabilities' (kf_lists at digitalmunition.com (KF (lists)))
Not even the NSA can get it right (barrie at reboot-robot.net (Barrie Dempster))
XSS in Sambar Server version 6.2 (deeper at gmail.com (Daniel))
Not even the NSA can get it right (measl at mfn.org (J.A. Terranson))
http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html (g0tcha at webmail.co.za (g0tcha))
Endless loop in Halo 1.06 (aluigi at autistici.org (Luigi Auriemma))
Not even the NSA can get it right (jftucker at gmail.com (James Tucker))
Re: Endless loop in Halo 1.06 (eslerj at gmail.com (Joel Esler))
Re: Endless loop in Halo 1.06 (eslerj at gmail.com (Joel Esler))
iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP STATUS Remote Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP LSUB DoS Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP LOGIN Remote Buffer Overflow Vulnerabilities (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 05.24.05: Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP SELECT Command DoS Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
XSS in Sambar Server version 6.2 (contact_jamie_fisher at yahoo.co.uk (jamie fisher))
KIBUV.B or variant? (michel.arboi at gmail.com (Michel Arboi))
CAID 32896 - Computer Associates Vet Antivirus engine heap overflow vulnerability (James.Williams at ca.com (Williams, James K))
Not even the NSA can get it right (steve at myself.gen.nz (Steve Wray))

May 25 (31 messages)

KIBUV.B or variant? (ngiles at hushmail.com (mike king))
Miva Merchant 4.x Tax Calculation Bypass Vulnerability w/ PoC (khermansen at ht-technology.com (Kristian Hermansen))
KIBUV.B or variant? (michel.arboi at gmail.com (Michel Arboi))
XSS in Sambar Server version 6.2 (deeper at gmail.com (Daniel))
Not even the NSA can get it right (lists.fd.dmargoli at af0.net (Dan Margolis))
Not even the NSA can get it right (measl at mfn.org (J.A. Terranson))
Not even the NSA can get it right (jftucker at gmail.com (James Tucker))
[Ticket#: 200505251001607] [SECURITY] rootkit/IRCbot on server adrians.lx.ro (noc at restena.lu (RESTENA NOC))
Not even the NSA can get it right (milw0rm at gmail.com (milw0rm Inc.))
Not even the NSA can get it right (imipak at gmail.com (imipak))
[SECURITY] [DSA 728-1] New qpopper packages fix arbitrary file overwriting (joey at infodrom.org (Martin Schulze))
Not even the NSA can get it right (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html (fw at deneb.enyo.de (Florian Weimer))
Stealth virus warning sounded again (randomisedletters at hotmail.com (Random Letters))
Zone Labs ZoneAlarm Vet anti-virus engine OLE processing vulnerability (Product-Security at zonelabs.com (Zone Labs Product Security))
Not even the NSA can get it right (live4java at stormcenter.net (Mister Coffee))
Not even the NSA can get it right (mlachniet at sequoianet.com (Lachniet, Mark))
Not even the NSA can get it right (lists.fd.dmargoli at af0.net (Dan Margolis))
Not even the NSA can get it right (ACastigliola at unumprovident.com (Castigliola, Angelo))
iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 mail header_get_field_name() Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Lab…)
iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 imap4d fetch_io Heap overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 imap4d FETCH Command Resource Consumption DoS Vulnerability (labs-no-reply at idefense.com (iDEFENSE La…)
iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 imap4d Format String Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
shtool insecure temporary file creation (exploits at zataz.net (ZATAZ.net))
Not even the NSA can get it right (jlongs2 at uic.edu (James Longstreet))
Not even the NSA can get it right (seclists at securinews.com (Paul Kurczaba))
Hack Your Credit Card Company (khermansen at ht-technology.com (Kristian Hermansen))
Hack Your Credit Card Company (phased at mail.ru (phased))
Not even the NSA can get it right (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Not even the NSA can get it right (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
OpenServer 5.0.6 OpenServer 5.0.7 : nwprint privilege escalation (please_reply_to_security at sco.com (please_reply_to_security@....com))

May 26 (22 messages)

Not even the NSA can get it right (seclists at securinews.com (Paul Kurczaba))
[SECURITY] [DSA 728-2] New qpopper packages fix arbitrary file overwriting (joey at infodrom.org (Martin Schulze))
[ GLSA 200505-19 ] gxine: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
alpha numeric exploitation (RaMatkal at hotmail.com (RaMatkal))
[SECURITY] [DSA 729-1] New PHP4 packages fix denial of service (joey at infodrom.org (Martin Schulze))
alpha numeric exploitation (nick at virus-l.demon.co.uk (Nick FitzGerald))
[USN-133-1] Apache utility vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: Hack Your Credit Card Company (OT) (khermansen at ht-technology.com (Kristian Hermansen))
alpha numeric exploitation (Kyle.Quest at networkengines.com (Kyle Quest))
iDEFENSE Security Advisory 05.24.05: Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability (jamesbug at gmx.net (jamesbug@....net))
Re: Hack Your Credit Card Company (OT) (mlists at arhont.com (Konstantin V. Gavrilenko))
Re: Hack Your Credit Card Company (OT) (phased at mail.ru (phased))
Not even the NSA can get it right (anthrax101 at gmail.com (Aaron Horst))
[USN-134-1] Firefox vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Buffer-overflow and crash in Terminator 3: War of the Machines 1.16 (aluigi at autistici.org (Luigi Auriemma))
Buffer-overflow in C'Nedra 0.4.0 (aluigi at autistici.org (Luigi Auriemma))
Alwil Software Avast Antivirus Device Driver Memory Overwrite Vulnerability (bania.piotr at gmail.com (Piotr Bania))
Re: Hack Your Credit Card Company (OT) (imipak at gmail.com (imipak))
Re: Hack Your Credit Card Company (OT) (stevex11 at sbcglobal.net (Steve Kudlak))
Not even the NSA can get it right (virus.friendly at gmail.com (Virus Friendly))
Mozilla 1.7.8 filehandle-error/win32 (the.soylent at gmail.com (the.soylent))
Not even the NSA can get it right (lists.fd.dmargoli at af0.net (Dan Margolis))

May 27 (20 messages)

Re: alpha numeric exploitation (khermansen at ht-technology.com (Kristian Hermansen))
Not even the NSA can get it right (stevex11 at sbcglobal.net (Steve Kudlak))
[USN-114-2] Fixed packages for USN-114-1 (martin.pitt at canonical.com (Martin Pitt))
[USN-135-1] gdb vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[ GLSA 200505-20 ] Mailutils: Multiple vulnerabilities in imap4d and mail (koon at gentoo.org (Thierry Carrez))
Bank of America SiteKeys ineffective? (niceman at att.net (Mike N))
[USN-136-1] binutils vulnerability (martin.pitt at canonical.com (Martin Pitt))
WebRoot version 1.6 (der at cirt.dk (Dennis Panduro Rand))
Not even the NSA can get it right (barrie at reboot-robot.net (Barrie Dempster))
DNS Smurf revisited (ian-fulldisclosure at penguinhosting.net (Ian Gulliver))
[USN-136-2] Fixed packages for USN-136-1 (martin.pitt at canonical.com (Martin Pitt))
Re: Hack Your Credit Card Company (OT) (laszlof at tvog.net (Frank Laszlo))
Bank of America SiteKeys ineffective? (mlande at bellsouth.net (Mary Landesman))
Not even the NSA can get it right (jftucker at gmail.com (James Tucker))
Bank of America SiteKeys ineffective? (niceman at att.net (Mike N))
[SECURITY] [DSA 730-1] New bzip2 packages fix file unauthorised permissions modification (joey at infodrom.org (Martin Schulze))
[AppSecInc Advisory BEA05-V0101] BEA WebLogic Administration Console login page cross-site scripting vulnerability (shatter at appsecinc.com (Team SHATTER))
[AppSecInc Advisory BEA05-V0100] BEA WebLogic Administration Console error page cross-site scripting vulnerability (shatter at appsecinc.com (Team SHATTER))
RE: CAID 32896 - Computer Associates Vet Antivirus engine heap overflow vulnerability (James.Williams at ca.com (Williams, James K))
Bank of America SiteKeys ineffective? (mlande at bellsouth.net (Mary Landesman))

May 28 (3 messages)

ClamAV: Local Privilege Escalation Vulnerability On MacOS [SCN Advisory #04] (tim-security at sentinelchicken.org (Tim))
Invision Power Board 1.x and 2.x Privilege Escalation Vulnerability (rapigator at yahoo.com (Rapigator))
Nordstroms.com security contact (t3rm1nal3ntry at hushmail.com (t3rm1nal3ntry@...hmail.com))

May 29 (7 messages)

XSS Bug in Jaws Glossary Action: ViewTerm ( v 0.4 - 0.5.1 (latest version)) (nah at suckea.com (Nah))
Cygwin Bash Buffer Overflow (rodrigo at intellicomp.cl (Rodrigo Gutierrez))
Compuware Softice (DbgMsg driver) Local Denial Of Service (bania.piotr at gmail.com (Piotr Bania))
Cygwin Bash Buffer Overflow (Cosmin Stejerean) (cstejere at cs.depaul.edu (Stejerean, Cosmin))
Spam exploiting MS05-016 (nick at virus-l.demon.co.uk (Nick FitzGerald))
Wide-scale industrial espionage using Trojan horses in Israel (ge at linuxbox.org (Gadi Evron))
Wide-scale industrial espionage using Trojan horses in Israel (ge at linuxbox.org (Gadi Evron))

May 30 (10 messages)

Spam exploiting MS05-016 (pferrie at symantec.com (Peter Ferrie))
abort 123 port on windows xp (notebook163 at 126.com (note))
abort 123 port on windows xp (steve at unixwiz.net (Steve Friedl))
abort 123 port on windows xp (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: alpha numeric exploitation (berendjanwever at gmail.com (Berend-Jan Wever))
Crash in Stronghold 2 1.2 (aluigi at autistici.org (Luigi Auriemma))
Not even the NSA can get it right (eric at arcticbears.com (Eric Paynter))
MDKSA-2005:095 - Updated gdb packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
[Windows XP] possible privilege escalation (pif.gadget at hotmail.fr (Pif Gadget))
[Windows XP] possible privilege escalation (news-letters at bluewin.ch (NSC))

May 31 (13 messages)

[Argeniss] MS05-012 Exploit (cesarc56 at yahoo.com (Cesar))
[Windows XP] possible privilege escalation (pif.gadget at hotmail.fr (Pif Gadget))
[Windows XP] possible privilege escalation (news-letters at bluewin.ch (NSC))
[Windows XP] possible privilege escalation (patrick.otto at gmail.com (Patrick Otto))
Re: qmail security guarantee questioned (guninski at guninski.com (Georgi Guninski))
Nortel VPN Router Malformed Packet DoS Vulnerability (Roy.Hills at nta-monitor.com (Roy Hills))
Re: qmail security guarantee questioned (guninski at guninski.com (Georgi Guninski))
Cygwin Bash Buffer Overflow (Cosmin Stejerean) (psmelson at comcast.net (Paul Melson))
Re: [Windows XP] possible privilege escalation (Cosmin Stejerean) (cstejere at cs.depaul.edu (Stejerean, Cosmin))
ISR :: Infobyte Security Research :: (ISR-form.pl) (famato at infobyte.com.ar (famato@...obyte.com.ar))
[Windows XP] possible privilege escalation (bkfsec at sdf.lonestar.org (bkfsec))
Reminder: XGrabKeyboard is not a security interface (fw at deneb.enyo.de (Florian Weimer))
A short warning on the X11 Editres protocol (fw at deneb.enyo.de (Florian Weimer))

681 messages