full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2005/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 4	² 6	³ 5	⁴ 8	⁵ 3
⁶ 29	⁷ 22	⁸ 32	⁹ 22	¹⁰ 8	¹¹ 8	¹² 5
¹³ 14	¹⁴ 19	¹⁵ 11	¹⁶ 21	¹⁷ 6	¹⁸ 2	¹⁹ 8
²⁰ 31	²¹ 22	²² 18	²³ 18	²⁴ 11	²⁵ 1	²⁶ 1
²⁷ 9	²⁸ 15	²⁹ 27	³⁰ 47

Messages by day:

June 1 (4 messages)

[ GLSA 200506-01 ] Binutils, elfutils: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
HP Radia Notify Daemon: Multiple Buffer Overflow Vulnerabilities (johnc at grok.org.uk (John Cartwright))
iDEFENSE Labs Releases OllyDbg Heap Vis (labs-no-reply at idefense.com (iDEFENSE Labs))
hPRoTeCT Labs Releases Depends API Master Vis (hprotect at hushmail.com (hprotect@...hmail.com))

June 2 (6 messages)

Re: A short warning on the X11 Editres protocol (fvw.bugtraq at var.cx (Frank v Waveren))
[SECURITY] [DSA 731-1] New krb4 packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
SEC-CONSULT SA20050602-1 :: Arbitrary File Inclusion in phpCMS 1.2.x (research at sec-consult.com (Bernhard Müller))
SEC-CONSULT SA20050602-2 :: Exhibit Engine Blind SQL Injection (research at sec-consult.com (Bernhard Müller))
HP Radia Notify Daemon: Multiple Buffer Overflow Vulnerabilities (johnc at grok.org.uk (John Cartwright))
CastleCops phpBB bbcode Input Validation Disclosure (zx at castlecops.com (Paul Laudanski))

June 3 (5 messages)

[DRUPAL-SA-2005-001] New Drupal release fixes critical security issue (uwe at hermann-uwe.de (Uwe Hermann))
(no subject) (muellera37 at msn.com (andy mueller))
(no subject) (toddtowles at brookshires.com (Todd Towles))
[SECURITY] [DSA 732-1] New mailutils packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
(no subject) (arr at watson.org (Andrew R. Reiter))

June 4 (8 messages)

Request for comments: anti-phishing storefront approach (douglas.ross at gmail.com (Doug Ross))
Request for comments: anti-phishing storefront approach (dmargoli+lists at af0.net (Dan Margolis))
(Fwd) traffic laundering using MSN (stuart at cyberdelix.net (lsi))
Hotmail security flaw (eierkoek at gmail.com (Alex de Vries))
[FLSA-2005:152532] Updated kernel packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
Request for comments: anti-phishing storefrontapproach (niceman at att.net (Mike N))
Request for comments: anti-phishing storefrontapproach (niceman at att.net (Mike N))
LSS.hr false positives. (b0iler at r00thell.org (b0iler))

June 5 (3 messages)

Off topic rant to my friends (randallm at fidmail.com (Randall M))
Off topic rant to my friends (measl at mfn.org (J.A. Terranson))
Off topic rant to my friends (naverxp at yahoo.com.sg (John Goh))

June 6 (29 messages)

Re: LSS.hr false positives. (correction) (ljuranic at lss.hr (Leon Juranic))
Lpanel.NET's Lpanel (all versions up to and including 1.59) is vulnerable to plain-text session credential leakage via… (zackerius12 at linuxmail.org (Zackarin …)
Lpanel.NET's Lpanel (all versions up to and including 1.59) is vulnerable in that it allows an attacker to close any … (zackerius12 at linuxmail.org (Zackarin …)
Lpanel.NET's Lpanel (all versions up to and including 1.59) is vulnerable in that it allows an attacker to open any s… (zackerius12 at linuxmail.org (Zackarin …)
Lpanel.NET's Lpanel (all versions up to and including 1.59) is vulnerable to unauthorized domain management access. (zackerius12 at linuxmail.org (Zackarin Sm…)
Lpanel.NET's Lpanel (all versions up to and including 1.59) is vulnerable to the unauthorized viewing of client invoic… (zackerius12 at linuxmail.org (Zackarin …)
Lpanel.NET's Lpanel (all versions up to and including 1.59) is vulnerable in that it allows an attacker to respond to … (zackerius12 at linuxmail.org (Zackarin …)
Lpanel.NET's Lpanel (all versions up to and including 1.59) is vulnerable in that it allows an attacker to reset the D… (zackerius12 at linuxmail.org (Zackarin …)
Advisory: FUSE: Filesystem in Userspace - Information Disclosure (sven at sven-tantau.de (Sven Tantau))
Advisory: FUSE: Filesystem in Userspace - Information Disclosure (version mixup update) (sven at sven-tantau.de (Sven Tantau))
everybuddy <= 0.4.3 insecure temporary file creation (eromang at dclux.com (Eric Romang / DATACENTER Luxembourg))
GIPTables Firewall <= v1.1 insecure temporary file creation (exploits at zataz.net (ZATAZ Audits))
LutelWall <= 0.97 insecure temporary file creation (exploits at zataz.net (ZATAZ Audits))
Popper webmail remote code execution vulnerability - advisory fix (ljuranic at lss.hr (Leon Juranic))
Crob FTP Server remote buffer overflows (ljuranic at lss.hr (Leon Juranic))
Cisco pix 501 - 5.5 PPTP VPN (exploits at zataz.net (ZATAZ Audits))
Cisco pix 501 - 5.5 PPTP VPN (torbjorn.samuelsson at gmail.com (Torbjörn Samuelsson))
Analysis: Postbank.nl Phishing Scam (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Cisco pix 501 - 5.5 PPTP VPN (pwicks at oxygen.com (James Patterson Wicks))
[ GLSA 200506-02 ] Mailutils: SQL Injection (koon at gentoo.org (Thierry Carrez))
[ GLSA 200506-03 ] Dzip: Directory traversal vulnerability (koon at gentoo.org (Thierry Carrez))
Analysis: Postbank.nl Phishing Scam (lists at moritz-naumann.com (Moritz Naumann))
Exploits Selling / Buying (joffer at gmail.com (Alexander Hristov))
[ GLSA 200506-04 ] Wordpress: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Exploits Selling / Buying (stan.bubrouski at gmail.com (Stan Bubrouski))
Exploits Selling / Buying (deeper at gmail.com (Daniel))
Exploits Selling / Buying (toddtowles at brookshires.com (Todd Towles))
Exploits Selling / Buying (xyberpix at xyberpix.com (xyberpix))
Exploits Selling / Buying (eric at arcticbears.com (Eric Paynter))

June 7 (22 messages)

Exploits Selling / Buying (blsonne at rogers.com (Byron L. Sonne))
Exploits Selling / Buying (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Exploits Selling / Buying (blsonne at rogers.com (Byron L. Sonne))
Wierd firefox symptom (stan.bubrouski at gmail.com (Stan Bubrouski))
MDKSA-2005:096 - Updated openssl packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
Second-Order Symlink Vulnerabilities (coley at mitre.org (coley@...re.org))
AOL AIM Instant Messenger Buddy Icon "ateimg32.dll" DoS (tommy at security-protocols.com (Tom Ferris))
Exploits Selling / Buying (guninski at guninski.com (Georgi Guninski))
Gmail (dullking at gmail.com (Dull King))
Gmail (luiz.fc at gmail.com (Luiz Fernando))
remote command execution in 'tattle' (b0iler at r00thell.org (b0iler))
Second-Order Symlink Vulnerabilities (greed at pobox.com (Graham Reed))
Wierd firefox symptom (dan at losangelescomputerhelp.com (Daniel H. Renner))
RE: AOL AIM Instant Messenger Buddy Icon "ateimg32.dll" DoS (auto447062 at hushmail.com (auto447062@...hmail.com))
Wierd firefox symptom (gem at rellim.com (Gary E. Miller))
[AppSecInc Advisory WEBSP05-V0098] Remote Buffer overflow in WebSphere Application Server Administrative Console (shatter at appsecinc.com (Team SHATTER))
Denial of Service vulnerability in GoodTech SMTP Server for Windows NT/2000/XP version 5.14 (reedarvin at gmail.com (Reed Arvin))
MDKSA-2005:097 - Updated a2ps packages fix temporary file vulnerabilities (security at mandriva.com (Mandriva Security Team))
Microsoft Windows and *nix Telnet Port Number Argument Obfuscation (khermans at cisco.com (Kristian Hermansen))
iDEFENSE Labs Releases Malcode Analyst Pack (labs-no-reply at idefense.com (iDEFENSE Labs))
IpSwitch IMAP Server LOGON stack overflow (nolimit at coreiso.org (nolimit@...eiso.org))
FW: OWASP SoCal Chapter - New Mailing List (Kartik.Trivedi at Foundstone.com (Kartik.Trivedi@...ndstone.com))

June 8 (32 messages)

UnixWare 7.1.4 : MySQL updated MySQL (version 4.1.11) fixes security issues (please_reply_to_security at sco.com (please_reply_to_security@....com))
UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : wu-ftp denial of service (please_reply_to_security at sco.com (please_reply_to_security@....com))
RE: Exploits Selling / Buying (rebonzo at libero.it (Matteo Giannone))
Microsoft Windows and *nix Telnet Port Number Argument Obfuscation (nick at virus-l.demon.co.uk (Nick FitzGerald))
Exploits Selling / Buying (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Kaspersky antivirus (pigrelax at yandex.ru (alex))
[Windows XP] possible privilege escalation (kf_lists at digitalmunition.com (KF (lists)))
Exploits Selling / Buying (stan.bubrouski at gmail.com (Stan Bubrouski))
Microsoft Windows and *nix Telnet Port Number Argument Obfuscation (ahaning at gmail.com (Andrew Haninger))
Microsoft Windows and *nix Telnet Port NumberArgument Obfuscation (dj_noresult at xs4all.nl (Arjan van der Velde))
Microsoft Windows and *nix Telnet Port NumberArgument Obfuscation (raghu.chinthoju at gmail.com (Raghu Chinthoju))
[USN-137-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
RE: Exploits Selling / Buying (full-disclosure at moritz-naumann.com (Moritz Naumann))
IpSwitch IMAP Server LOGON stack overflow (dave at immunitysec.com (Dave Aitel))
RE: Exploits Selling / Buying (rebonzo at libero.it (Matteo Giannone))
RE: Exploits Selling / Buying (rol at as2917.net (Paul Rolland))
Mozillat trashing host file (daniels at Ponderosatel.com (Daniel Sichel))
[ GLSA 200506-05 ] SilverCity: Insecure file permissions (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Mozillat trashing host file (spamproof at nospammail.net (Rob))
Microsoft Windows and *nix Telnet Port Numb erArgument Obfuscation (john.richard.ctr at elmendorf.af.mil (Richard John L Contractor 611 ACF/SCO))
Microsoft Windows and *nix Telnet Port Numb erArgument Obfuscation (ahaning at gmail.com (Andrew Haninger))
DFind - #1 Tiny Security Scanner - preview version (ad at class101.org (class))
Re: Exploits Selling / Buying (full-disclosure at moritz-naumann.com (Moritz Naumann))
Still segfaults in man -k (raju at linux-delhi.org (Raj Mathur))
HELP (michaelnoam at hotmail.com (michael noam))
IpSwitch IMAP Server LOGON stack overflow (dave at immunitysec.com (Dave Aitel))
Microsoft Windows and *nix Telnet Port NumberArgument Obfuscation (Stephen.Blass at asu.edu (Stephen Blass))
DFind - #1 Tiny Security Scanner - preview version (ad at class101.org (class))
Voice VLAN Access/Abuse (Ed.Welsh at fishnetsecurity.com (Welsh, Ed))
IpSwitch IMAP Server LOGON stack overflow (nolimit at coreiso.org (nolimit@...eiso.org))
IpSwitch IMAP Server LOGON stack overflow (nolimit at coreiso.org (nolimit@...eiso.org))
Re: Exploits Selling / Buying (laszlof at tvog.net (Frank J. Laszlo))

June 9 (22 messages)

Re: Exploits Selling / Buying (sikurezza at nexlab.it (sikurezza@...lab.it))
[ Suresec Advisories ] - Mac OS X 10.4 - launchd local root vulnerability (advisories at suresec.org ( Suresec Advisories ))
RE: Exploits Selling / Buying (enune at fribble.net (Enune))
Circumventing SSSS Screening and No-Fly List (jasonc at science.org (Jason Coombs))
RE: Exploits Selling / Buying (stuart at serverpeak.com (Stuart Low))
List Charter (johnc at grok.org.uk (John Cartwright))
Microsoft Windows and *nix Telnet Port NumberArgument Obfuscation (atte.peltomaki at f-secure.com (Atte Peltomaki))
Microsoft Windows and *nix Telnet Port Number Argument Obfuscation (stan.bubrouski at gmail.com (Stan Bubrouski))
Off topic rant to my friends (chromazine at sbcglobal.net (Steve Kudlak))
xmysqladmin insecure temporary file creation (exploits at zataz.net (ZATAZ Audits))
[USN-138-1] gedit vulnerability (martin.pitt at canonical.com (Martin Pitt))
Microsoft Windows and *nix Telnet Port Number Argument Obfuscation (khermans at cisco.com (Kristian Hermansen))
Microsoft Windows and *nix Telnet Port Number Argument Obfuscation (nick at virus-l.demon.co.uk (Nick FitzGerald))
Microsoft Windows and *nix Telnet PortNumber Argument Obfuscation (shrdlu at deaddrop.org (Etaoin Shrdlu))
Circumventing SSSS Screening and No-Fly List (michael.holstein at csuohio.edu (Michael Holstein))
Circumventing SSSS Screening and No-Fly List (ahaning at gmail.com (Andrew Haninger))
RE: End users as security devices (daniels at Ponderosatel.com (Daniel Sichel))
[ GLSA 200506-06 ] libextractor: Multiple overflow vulnerabilities (koon at gentoo.org (Thierry Carrez))
Re: Circumventing SSSS Screening and No-Fly List (davek_throwaway at hotmail.com (Dave Korn))
MDKSA-2005:098 - Updated wget packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
Off topic rant to my friends (jftucker at gmail.com (James Tucker))
Microsoft Windows and *nix Telnet PortNumber Argument Obfuscation (khermans at cisco.com (Kristian Hermansen))

June 10 (8 messages)

Microsoft Windows and *nix Telnet Port Number Argument Obfuscation (nick at virus-l.demon.co.uk (Nick FitzGerald))
Microsoft Windows and *nix Telnet Port Number Argument Obfuscation (nick at virus-l.demon.co.uk (Nick FitzGerald))
FBI San Diego, Drug Investigations and 9/11 (jasonc at science.org (Jason Coombs))
[USN-139-1] Gaim vulnerability (martin.pitt at canonical.com (Martin Pitt))
Off topic rant to my friends (cmacfarlane at Drummond-Miller.co.uk (Cassidy Macfarlane))
Microsoft Windows and *nix Telnet Port Number Argument Obfuscation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re:[ Suresec Advisories ] - Mac OS X 10.4 - launchd local root vulnerability (jw at innerewut.de (Jonathan Weiss))
Re:[ Suresec Advisories ] - Mac OS X 10.4 - launchd local root vulnerability (bierman at apple.com (Peter Bierman))

June 11 (8 messages)

[ GLSA 200506-07 ] Ettercap: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
[ GLSA 200506-08 ] GNU shtool, ocaml-mysql: Insecure temporary file creation (koon at gentoo.org (Thierry Carrez))
[ GLSA 200506-09 ] gedit: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
In USA the Government Votes for YOU? - Electronic Voting Systems'Security, Report (jei at cc.hut.fi (Jei))
Microsoft Windows and *nix Telnet Port Number Argument Obfuscation (devdas at dvb.homelinux.org (Devdas Bhagat))
[ GLSA 200506-10 ] LutelWall: Insecure temporary file creation (koon at gentoo.org (Thierry Carrez))
In USA the Government Votes for YOU? - Electronic Voting Systems'Security, Report (pauls at utdallas.edu (Paul Schmehl))
pf port for linux (nobody at shalmirane.net (Navara))

June 12 (5 messages)

Microsoft Windows and *nix Telnet PortNumber Argument Obfuscation (umphress at gmail.com (Chris Umphress))
[ GLSA 200506-11 ] Gaim: Denial of Service vulnerabilities (koon at gentoo.org (Thierry Carrez))
a small update for HOD NETDDE scanner/exploit MS04-031 (ad at class101.org (class))
[CIRT.DK - Advisory] Novell eDirectory 8.7.3 DOS Device name Denial of Service (advisory at cirt.dk (CIRT.DK Advisory))
[CIRT.DK - Advisory] Novell iManager 2.0.2 ASN.1 Parsing vulnerability in Apache module (advisory at cirt.dk (CIRT.DK Advisory))

June 13 (14 messages)

Web application Security Scanner (tgoogle at yandex.ru (tgoogle))
Web application Security Scanner (pigrelax at yandex.ru (alex))
Web application Security Scanner (tgoogle at yandex.ru (tgoogle))
Web application Security Scanner (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Web application Security Scanner (tgoogle at yandex.ru (tgoogle))
Web application Security Scanner (toddtowles at brookshires.com (Todd Towles))
Web application Security Scanner (deepquest at mac.com (deepquest))
Web application Security Scanner (pigrelax at yandex.ru (alex))
alya.cgi (ktjan at yahoo.com (Nobody Special))
Web application Security Scanner (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
alya.cgi (toddtowles at brookshires.com (Todd Towles))
UPDATE: [ GLSA 200505-06 ] TCPDump: Decoding routines Denial of Service vulnerability (koon at gentoo.org (Thierry Carrez))
[ GLSA 200506-12 ] MediaWiki: Cross-site scripting vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
NDSS '06 -- Call for Papers (kseo at bbn.com (Karen Seo))

June 14 (19 messages)

RE: End users as security devices (dufresne at winternet.com (Ron DuFresne))
RE: End users as security devices (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Web application Security Scanner (fcharpen at xmcopartners.com (Frederic Charpentier))
www.whois.sc (squid at oranged.to (Jimmy Stewpot))
www.whois.sc (a.gietl at e-admin.de (Andreas Gietl))
www.whois.sc (tgoogle at yandex.ru (tgoogle))
iDEFENSE Security Advisory 06.14.05: Multiple Vendor Telnet Client Information Disclosure Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 06.14.05: Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Lab…)
iDEFENSE Security Advisory 06.14.05: Microsoft Outlook Web Access Cross-Site Scripting Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 06.14.05: Microsoft Windows Interactive Training Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
Anti-Virus Malformed ZIP Archives flaws [UPDATE] (Thierry at sniff-em.com (Thierry Zoller))
RE: Exploits Selling / Buying (zashev at gmail.com (Ivaylo Zashev))
MDKSA-2005:099 - Updated gaim packages fix more vulnerabilities (security at mandriva.com (Mandriva Security Team))
In USA the Government Votes for YOU? - Electronic Voting Systems'Security, Report (bkfsec at sdf.lonestar.org (bkfsec))
MDKSA-2005:100 - Updated rsh packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
RE: Web application Security Scanner (Cosmin Stejerean) (cstejere at cti.depaul.edu (Stejerean, Cosmin))
iDefense and Microsoft (n3td3v at yahoo.com (n3td3v))
www.whois.sc (fw at deneb.enyo.de (Florian Weimer))
Book Review: "Apache Security" By O'Reilly (zeno at cgisecurity.net (zeno@...security.net))

June 15 (11 messages)

Re: Full-Disclosure Digest, Vol 4, Issue 18 (mms at speakeasy.org (matt sommer))
is this new? vuln info Adobe (phr1ker at hushmail.com (phr1ker@...hmail.com))
Bluetooth dot dot attacks (update) (kf_lists at digitalmunition.com (KF (lists)))
DMA[2005-0614a] - 'Global Hauri ViRobot Server cookie overflow' (kf_lists at digitalmunition.com (KF (lists)))
Mambo 4.5.2.2 SQL Injection in UPDATE statement (pokleyzz at scan-associates.net (pokley))
Re: www.whois.sc (Florian Weimer) (worried at gmail.com (mike bailey))
[USN-140-1] Gaim vulnerability (martin.pitt at canonical.com (Martin Pitt))
In USA the Government Votes for YOU?- Electronic Voting Systems'Security, Report (Ken.Stout at clarkeusa.com (Ken Stout))
[USN-140-1] Gaim vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: www.whois.sc (Florian Weimer) (fw at deneb.enyo.de (Florian Weimer))
Re: www.whois.sc (Florian Weimer) (the.soylent at gmail.com (the.soylent))

June 16 (21 messages)

MDKSA-2005:101 - Updated tcpdump packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:102 - Updated gedit packages fix format string vulnerability (security at mandriva.com (Mandriva Security Team))
Dokeos - Multiple Vulnerabilities (siegfri3d at gmail.com (Sieg Fried))
Sophos Antivirus Advisory (patrickhof at web.de (patrickhof@....de))
Sophos Antivirus Advisory (ad at class101.org (class))
looking for asp source code scanner (gkverma at gmail.com (Gaurav Kumar))
Internet Explorer / Outlook / Microsoft Office private exploit request (metesi at mailvault.com (metesi))
Sophos Antivirus Advisory (ssgsa at mail.montclair.edu (Robert Perriero))
Sophos Antivirus Advisory (se_cur_ity at hotmail.com (Morning Wood))
Sophos Antivirus Advisory (ad at class101.org (class))
CoolCafe Chat SQL injection (se_cur_ity at hotmail.com (Morning Wood))
Internet Explorer / Outlook / Microsoft Office private exploit request (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Sophos Antivirus Advisory (toddtowles at brookshires.com (Todd Towles))
Internet Explorer / Outlook / Microsoft Office private exploit request (jasonc at science.org (Jason Coombs))
Internet Explorer / Outlook / Microsoft Office private exploit request (andre.ludwig at gmail.com (Andre Ludwig))
Internet Explorer / Outlook / Microsoft Office private exploit request (nick at urgusabic.net (Nick Murison))
Internet Explorer / Outlook / Microsoft Office private exploit request (michealespinola at gmail.com (Micheal Espinola Jr))
Internet Explorer / Outlook / Microsoft Office private exploit request (measl at mfn.org (J.A. Terranson))
Internet Explorer / Outlook / Microsoft Office private exploit request (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Internet Explorer / Outlook / Microsoft Office private exploit request (andre.ludwig at gmail.com (Andre Ludwig))
Internet Explorer / Outlook / Microsoft Officeprivate exploit request (rodrigo at intellicomp.cl (Rodrigo Gutierrez))

June 17 (6 messages)

Anti-Fraud Method? (sanandres at gmail.com (Sumy))
Google Exploit Queries Thread (sanandres at gmail.com (Sumy))
eEye Advisory - EEYEB-20050316 - HTML Help File Parsing Buffer Overflow (smanzuik at eeye.com (Steve Manzuik))
Source Code Disclosure in Yaws Webserver <1.56 (research at sec-consult.com (Daniel Fabian))
Internet Explorer / Outlook / Microsoft Office private exploit request (guninski at guninski.com (Georgi Guninski))
[ GLSA 200506-13 ] webapp-config: Insecure temporary file handling (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))

June 18 (2 messages)

Internet Explorer / Outlook / Microsoft Office private exploit request (zashev at gmail.com (Ivaylo Zashev))
Internet Explorer / Outlook / Microsoft Office private exploit request (cumhuronat at gmail.com (cumhur onat))

June 19 (8 messages)

Page Hijack: The 302 Exploit, Redirects and Google (sanandres at gmail.com (Sumy))
Botnet contol center (randallm at fidmail.com (Randall M))
RealVNC/WinVNC Multiple vulnerabilities (class101 at phreaker.net (class101@...eaker.net))
[ GLSA 200506-14 ] Sun and Blackdown Java: Applet privilege escalation (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Security of suphp (mail at hboeck.de (Hanno Böck))
Security of suphp (andrewg at felinemenace.org (Andrew Griffiths))
[ GLSA 200506-15 ] PeerCast: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
Advisory 01/2005: Fileupload/download vulnerability in Trac (sesser at hardened-php.net (Stefan Esser))

June 20 (31 messages)

[ GLSA 200506-16 ] cpio: Directory traversal vulnerability (lewk at gentoo.org (Luke Macken))
Google Exploit Queries Thread (harry at cc.kuleuven.ac.be (Harry de Grote))
Cisco VPN Concentrator Groupname Enumeration Vulnerability (Roy.Hills at nta-monitor.com (Roy Hills))
Security of phpBB (topbeachwear at hotmail.de (Tom Edwards))
Security of suphp (bernd at bwurst.org (Bernd Wurst))
Security of phpBB (bugtraq at cgisecurity.net (bugtraq@...security.net))
Security of phpBB (info at moritz-naumann.com (Moritz Naumann))
Security of suphp (sesser at hardened-php.net (Stefan Esser))
Security of phpBB (deeper at gmail.com (Daniel))
Security of suphp (bernd at bwurst.org (Bernd Wurst))
Security of phpBB (topbeachwear at hotmail.de (Tom Edwards))
full-disclosure@...ts.grok.org.uk (sesser at hardened-php.net (Stefan Esser))
Security of phpBB (anthrax101 at gmail.com (Aaron Horst))
Security of phpBB (ch0pstik at gmail.com (nick johnson))
Re: RealVNC/WinVNC Multiple vulnerabilities (class101 at phreaker.net (class101@...eaker.net))
Re: RealVNC/WinVNC Multiple vulnerabilities (ad at class101.org (class))
Re: RealVNC/WinVNC Multiple vulnerabilities (ad at class101.org (class))
Gmail blacklisted by Full-Disclosure (n3td3v at yahoo.com (n3td3v))
Gmail blacklisted by Full-Disclosure (rodrigob at suespammers.org (Rodrigo Barbosa))
Gmail blacklisted by Full-Disclosure (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Gmail blacklisted by Full-Disclosure (seclists at securinews.com (Paul Kurczaba))
Gmail blacklisted by Full-Disclosure (greed at pobox.com (Graham Reed))
Gmail blacklisted by Full-Disclosure (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Gmail blacklisted by Full-Disclosure (greed at pobox.com (Graham Reed))
RE: RealVNC/WinVNC Multiple vulnerabilities (jnw at realvnc.com (James Weatherall))
RE: RealVNC/WinVNC Multiple vulnerabilities (jnw at realvnc.com (James Weatherall))
RE: RealVNC/WinVNC Multiple vulnerabilities (jnw at realvnc.com (James Weatherall))
RE: RealVNC/WinVNC Multiple vulnerabilities (jnw at realvnc.com (James Weatherall))
Security of phpBB (milw0rm at gmail.com (milw0rm Inc.))
Re: Anti-Virus Malformed ZIP Archives flaws [UPDATE] (nknight at runawaynet.com (Nicholas Knight))
Novell GroupWise Plain Text Password Vulnerability. (securityteam at truedson.com (Security Team))

June 21 (22 messages)

Undocumented account vulnerability in Enterasys Vertical Horizon switches (sq5bpf at andra.com.pl (Jacek Lipkowski))
[ GLSA 200506-17 ] SpamAssassin 3, Vipul's Razor: Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
thunderbird privacy... (christos_gentsis at yahoo.co.uk (christos_gentsis@...oo.co.uk))
thunderbird privacy... (wade at sivodd.com (Wade Woolwine))
thunderbird privacy... (aneale at messagelabs.com (Adam Neale))
thunderbird privacy... (sec-list at nolog.org (sec-list@...og.org))
exploiting/debugging the UnhandledExceptionFilter (ramatkal at hotmail.com (RaMatkal))
thunderbird privacy... (tuevsec at gmx.net (Thomas Springer))
exploiting/debugging the UnhandledExceptionFilter (ad at class101.org (class))
[USN-141-1] tcpdump vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-142-1] sudo vulnerability (martin.pitt at canonical.com (Martin Pitt))
Security of phpBB (ch0pstik at gmail.com (nick johnson))
Security of phpBB (milw0rm at gmail.com (milw0rm Inc.))
Re: RealVNC/WinVNC Multiple vulnerabilities (thorpflyer at yahoo.com (Simon Roberts))
Security of phpBB (ch0pstik at gmail.com (nick johnson))
thunderbird privacy... (houdini+full-disclosure at clanspum.net (Bill Weiss))
thunderbird privacy... (stan.bubrouski at gmail.com (Stan Bubrouski))
thunderbird privacy... (rodrigob at suespammers.org (Rodrigo Barbosa))
[ GLSA 200506-18 ] Tor: Information disclosure (koon at gentoo.org (Thierry Carrez))
[ GLSA 200506-19 ] SquirrelMail: Several XSS vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Intense School finally goes under, bought up by k-mart of security companies (larryblumenthal98 at yahoo.com (Larry Blumenthal))
OSX Safari "PAC" url DoS (mac at msg.net (mac@....net))

June 22 (18 messages)

Intense School finally goes under, bought up by k-mart of security companies (cdupuis at cccure.org (Clement Dupuis))
SUSE Security Announcement: SUN Java security problems (SUSE-SA:2005:032) (meissner at suse.de (Marcus Meissner))
Intense School finally goes under, bought up by k-mart of security companies (dan_20407 at msn.com (DAN MORRILL))
OSXvnc weakness (ad at class101.org (class))
iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti Multiple SQL Injection Vulnerabilities (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti config_settings.php Remote Code Execution Vulnerability (labs-no-reply at idefense.com (iDEFENSE Lab…)
iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti Remote File Inclusion Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
OSXvnc weakness (ch0pstik at gmail.com (nick johnson))
OSXvnc weakness (ad at class101.org (class))
[ GLSA 200506-20 ] Cacti: Several vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
MDKSA-2005:103 - Updated sudo packages fix race condition vulnerability (security at mandriva.com (Mandriva Security Team))
Portcullis Security Advisory 05-013 - VoIP - Asterisk Stack Overflow (wja at portcullis-security.com (Wade Alcorn))
Intense School finally goes under, bought up by k-mart of security companies (larryblumenthal98 at yahoo.com (Larry Blumenthal))
[ GLSA 200506-21 ] Trac: File upload vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Intense School finally goes under, bought up by k-mart of security companies (cdupuis at cccure.org (Clement Dupuis))
Intense School finally goes under, bought up by k-mart of security companies (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
iDEFENSE Security Advisory 06.22.05: IpSwitch WhatsUp Professional 2005 (SP1) SQL Injection Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
OSX Safari "PAC" url DoS (kkadow at gmail.com (Kevin))

June 23 (18 messages)

Multiple Vulnerabilities in Saeven.net's WhoisCart software. (sanisoft at linuxmail.org (Elzar Stuffenbach))
Intense School finally goes under, bought up by k-mart of security companies (randallm at fidmail.com (RMueller))
Windows IPSec Vulnerabilty - still exist (offtopic at mail.ru (offtopic))
Intense School finally goes under, bought up by k-mart of security companies (niek at asbak.coding-slaves.com (Niek))
[ GLSA 200506-22 ] sudo: Arbitrary command execution (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Windows IPSec Vulnerabilty - still exist (offtopic at mail.ru (offtopic@...l.ru))
'Quantification' of vulnerability rating (gkverma at gmail.com (Gaurav Kumar))
'Quantification' of vulnerability rating (lionel.ferette at belnet.be (Lionel Ferette))
Idea for GAIM add-on (maybe a Summer of Code Project) (bugsywinter at yahoo.com (james winter))
Idea for GAIM add-on (maybe a Summer of Code Project) (kf_lists at digitalmunition.com (KF (lists)))
Windows IPSec Vulnerabilty - still exist (jlongs2 at uic.edu (James Longstreet))
Idea for GAIM add-on (maybe a Summer of Code Project) (j.schipper at math.uu.nl (Joachim Schipper))
iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Agent CONNECT_CLIENT_AUTH Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Agent Error Status Remote DoS Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability: Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vul… (labs-no-reply at idefense.com (iDEFENSE…)
iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Server Remote Registry Access Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
Intense School finally goes under, bought up by k-mart of security companies (drcobra at gmail.com (watch out))
eEye Advisory - EEYEB-200505 - RealPlayer AVI Processing Overflow (Advisories at eeye.com (Advisories@...e.com))

June 24 (11 messages)

iDEFENSE Security Advisory 06.23.05: RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
[SOT] Some companies are just asking for it. (fwd) (measl at mfn.org (J.A. Terranson))
Windows IPSec Vulnerabilty - still exist (offtopic at mail.ru (offtopic))
Solaris 10 /usr/sbin/traceroute vulnerabilities (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
Solaris 10 /usr/sbin/traceroute vulnerabilities (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
Solaris 10 /usr/sbin/traceroute vulnerabilities (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
MDKSA-2005:104 - Updated squid packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:105 - Updated dbus packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
Re: Solaris 10 /usr/sbin/traceroute vulnerabilities (fjserna at ngsec.com ("Fermín J. Serna"))
Re: Solaris 10 /usr/sbin/traceroute vulnerabilities (moraski2 at Princeton.EDU (David T. Moraski II))
'Quantification' of vulnerability rating (tom at electric-sheep.org (Thomas))

June 25 (1 message)

prdelka.blackart.org.uk (wh1t3h4t3 at yahoo.co.uk (Micheal Turner))

June 26 (1 message)

Call for Participation: Summerschool Applied IT-Security 2005 (ilja at netric.org (Ilja))

June 27 (9 messages)

Yahoo Messenger privacy vulnerability in Yahoo 360 (xploitable at gmail.com (n3td3v))
Re: Yahoo Messenger privacy vulnerability in Yahoo 360 (xploitable at gmail.com (n3td3v))
[ GLSA 200506-23 ] Clam AntiVirus: Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
PHP: Calendar Buffer Overflow (FistFuXXer at gmx.de (FistFucker))
[USN-143-1] Linux amd64 kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
PHP: Calendar Buffer Overflow (FistFuXXer at gmx.de (FistFucker))
Denial of Service Vulnerability in True North Software, Inc. IA eMailServer Corporate Edition Version: 5.2.2. Build: 1051. (reedarvin at gmail.com (Reed Arvin))
SUSE Security Announcement: RealPlayer remote buffer overflow (SUSE-SA:2005:037) (meissner at suse.de (Marcus Meissner))
[USN-144-1] dbus vulnerability (martin.pitt at canonical.com (Martin Pitt))

June 28 (15 messages)

Solaris 9/10 ld.so fun (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
Solaris 9/10 ld.so fun (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
multihtml exploit vulnerability advisory (potkettle at gmail.com (Pot Kettle Industries))
PHP: Calendar Buffer Overflow (martin.pitt at canonical.com (Martin Pitt))
Multiple buffer overflows exist in Infradig Systems Inframail Advantage Server Edition 6.0 (reedarvin at gmail.com (Reed Arvin))
have a look here (the.soylent at gmail.com (the.soylent))
PHP: Calendar Buffer Overflow (sesser at php.net (Stefan Esser))
[USN-145-1] wget vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Solaris 9/10 ld.so fun (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
Solaris 9/10 ld.so fun (chopin at sgh.waw.pl (Piotr KUCHARSKI))
have a look here (Rik.Bobbaers at cc.kuleuven.be (Rik Bobbaers))
MDKSA-2005:106 - Updated spamassassin packages fix DoS vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:107 - Updated ImageMagick packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
Mozilla Multiple Product JavaScript Issue (advisories at kurczaba.com (Kurczaba Associates Advisories))
Security Advisory - phpBB 2.0.15 PHP-code injection bug (ronvdaal at zarathustra.linux666.com (ronvdaal))

June 29 (27 messages)

Solaris 9/10 ld.so fun (charles.heselton at gmail.com (Charles Heselton))
SEC-CONSULT SA-20050629-0 (research at sec-consult.com (Bernhard Mueller))
Security Advisory - phpBB 2.0.15 PHP-code injection bug (andfarm at gmail.com (Andrew Farmer))
SEC-CONSULT SA-20050629-0 (research at sec-consult.com (Bernhard Mueller))
[USN-146-1] Ruby vulnerability (martin.pitt at canonical.com (Martin Pitt))
SEC-CONSULT SA-20050629-0 (jerome.athias at free.fr (Jerome Athias))
[ GLSA 200506-24 ] Heimdal: Buffer overflow vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Solaris 9/10 ld.so fun (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
Security Advisory - phpBB 2.0.15 PHP-code injection bug (tatercrispies at gmail.com (Tatercrispies))
Mozilla Multiple Product JavaScript Issue (evilninja at gmx.net (evilninja))
iDEFENSE Security Advisory 06.29.05: Clam AntiVirus ClamAV Cabinet File Handling DoS Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 06.29.05: Clam AntiVirus ClamAV MS-Expand File Handling DoS Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
Cisco Security Advisory: RADIUS Authentication Bypass (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Re: Full-Disclosure Digest, Vol 4, Issue 37 (splat.the.cat at gmail.com (Tim Hortons))
Security Advisory - phpBB 2.0.15 PHP-code injection bug (siegfri3d at gmail.com (Siegfried))
Advisory 02/2005: Remote code execution in Serendipity (christopher.kunz at hardened-php.net (Christopher Kunz))
Cisco Security Advisory: RADIUS Authentication Bypass (cstone at pobox.com (cstone))
Jack Szeszycki (Jack_Szeszycki at viscount.com.au (Jack_Szeszycki@...count.com.au))
In-game /ignore crash in Soldier of Fortune II 1.03 (aluigi at autistici.org (Luigi Auriemma))
Jack Szeszycki (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Jack Szeszycki (jasonc at science.org (Jason Coombs))
Jack Szeszycki (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[DRUPAL-SA-2005-002] Drupal 4.6.2 / 4.5.4 fixes input validation issue (uwe at hermann-uwe.de (Uwe Hermann))
[DRUPAL-SA-2005-003] Drupal 4.6.2 / 4.5.4 fixes critical XML-RPC issue (uwe at hermann-uwe.de (Uwe Hermann))
Advisory 02/2005: Remote code execution in Serendipity (christopher.kunz at hardened-php.net (Christopher Kunz))
Advisory 02/2005: Remote code execution in Serendipity (davefd at davewking.com (Dave King))
Solaris 9/10 ld.so fun (Casper.Dik at Sun.COM (Casper.Dik@....COM))

June 30 (47 messages)

phpBB 2.0.15 exploit (w0op!) (dab at digitalsec.net (dab))
Advisory 02/2005: Remote code execution in Serendipity (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
verify ssl cert command line (davefd at davewking.com (Dave King))
[SECURITY] [DSA 733-1] New crip packages fix insecure temporary files (joey at infodrom.org (Martin Schulze))
Publishing exploit code - what is it good for (aviram at beyondsecurity.com (Aviram Jenik))
Publishing exploit code - what is it good for (bruen at coldrain.net (bruen@...drain.net))
Publishing exploit code - what is it good for (j.schipper at math.uu.nl (Joachim Schipper))
Publishing exploit code - what is it good for (hdw at kallisti.se (Anders B Jansson))
Publishing exploit code - what is it good for (Glenn.Everhart at chase.com (Glenn.Everhart@...se.com))
Re: Jack Szeszycki (davek_throwaway at hotmail.com (Dave Korn))
Publishing exploit code - what is it good for (bugtraq at cgisecurity.net (bugtraq@...security.net))
Random number prediction (avosani.gabriele at libero.it (Gabriele Avosani))
Random number prediction (anthrax101 at gmail.com (Aaron Horst))
Jack Szeszycki (comeherenow at gmail.com (`Zidane Tribal))
Publishing exploit code - what is it good for (xillwillx at gmail.com (Ill will))
Microsoft Windows NTFS Information Disclosure (mattmurphy at kc.rr.com (Matthew Murphy))
Cisco Router IOS History Bug (OPinson-Roxburgh at getech.co.uk (Oliver Pinson-Roxburgh))
Publishing exploit code - what is it good for (joxeankoret at gmail.com (Joxean Koret))
Re: Publishing exploit code - what is it good for (gem at rellim.com (Gary E. Miller))
RE: Publishing exploit code - what is it good for (matthewhuston at gmail.com (Matt Huston))
SEC-CONSULT SA-20050629-0 (info at moritz-naumann.com (Moritz Naumann))
Publishing exploit code - what is it good for (emf at obfuscation.org (Erik Fichtner))
Publishing exploit code - what is it good for (emechler at techometer.net (Erick Mechler))
Re: Publishing exploit code - what is it good for (John.Horn at tucsonaz.gov (John Horn))
Re: Publishing exploit code - what is it good for (Matt.Carpenter at alticor.com (Matt.Carpenter@...icor.com))
Re: Publishing exploit code - what is it good for (smilner at trinityz.com (Steve Milner))
Publishing exploit code - what is it good for (michael.holstein at csuohio.edu (Michael Holstein))
Publishing exploit code - what is it good for (toddtowles at brookshires.com (Todd Towles))
RE: Publishing exploit code - what is it good for (Jim.Slora at phra.com (James C Slora Jr))
Re: Publishing exploit code - what is it good for (reinke at securityspace.com (Thomas Reinke))
Re: Publishing exploit code - what is it good for (maddenj at skynet.ie (John Madden))
Re: Publishing exploit code - what is it good for (skip at taygeta.com (Skip Carter))
Publishing exploit code - what is it good for (devnull at Rodents.Montreal.QC.CA (devnull@...ents.Montreal.QC.CA))
Publishing exploit code - what is it good for (jasonc at science.org (Jason Coombs))
Publishing exploit code - what is it good for (jjjwicks at gmail.com (James Wicks))
Publishing exploit code - what is it good for (kenneth.d.ng at gmail.com (Kenneth Ng))
RE: Published exploit codes foo foo foo (sil at infiltrated.net (J. Oquendo))
RE: Publishing exploit code - what is it good for (Marvin.Simkin at asu.edu (Marvin Simkin))
Publishing exploit code - what is it good for (kf_lists at digitalmunition.com (KF (lists)))
Re: Publishing exploit code - what is it good for (menscher at uiuc.edu (Damian Menscher))
Re: [VulnWatch] Microsoft Windows NTFS Information Disclosure (mattmurphy at kc.rr.com (Matthew Murphy))
Publishing exploit code - what is it good for (raghu.chinthoju at rediffmail.com (Raghu Chinthoju))
MDKSA-2005:108 - Updated squirrelmail packages fix XSS vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:109 - Updated php-pear packages fix remotely exploitable vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:110 - Updated 2.6 kernel packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:111 - Updated 2.4 kernel packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
Re: [VulnWatch] Microsoft Windows NTFS Information Disclosure (klassen at uvic.ca (Melvin Klassen))

433 messages