full-disclosure mailing list - 2005/07

Messages by day:

July 1 (28 messages)

• xmlrpc exploit (your_grand_momma at hushmail.com (your_grand_momma@...hmail.com))
• Publishing exploit code - what is it good for (mike at alanpickel.com (Michael Evanchik))
• [SECURITY] [DSA 735-1] New sudo packages fix pathname validation race (mstone at klecker.debian.org (Michael Stone))
• plz suggest security for DLL functions (gkverma at gmail.com (Gaurav Kumar))
• Prevx Pro 2005 - Multiple Vulnerabilities (trihuynh at huynhsec.com (trihuynh@...nhsec.com))
• plz suggest security for DLL functions (abhisek.datta at gmail.com (Abhisek Datta))
• plz suggest security for DLL functions (gkverma at gmail.com (Gaurav Kumar))
• Re: Publishing exploit code - what is it good for (cjs at cynic.net (Curt Sampson))
• RE: Publishing exploit code - what is it good for (socrates at newsguy.com (Socrates))
• [SECURITY] [DSA 736-1] New spamassassin packages fix potential DOS (mstone at klecker.debian.org (Michael Stone))
• RE: Publishing exploit code - what is it good for (David_Morales at onr.navy.mil (Morales, David (Seta)))
• plz suggest security for DLL functions (securitynews at wanadoo.fr (securitynews))
• [ZH2005-14SA] Phishing problems on MSN (badpenguin79 at hotmail.com (Giovanni Delvecchio))
• Re: Published exploit codes foo foo foo (davek_throwaway at hotmail.com (Dave Korn))
• Zone-H Comics (astharot at zone-h.org (Gerardo 'Astharot' Di Giacomo))
• plz suggest security for DLL functions (upbupb at gmail.com (upb))
• plz suggest security for DLL functions (tim-security at sentinelchicken.org (Tim))
• plz suggest security for DLL functions (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• plz suggest security for DLL functions (tim-security at sentinelchicken.org (Tim))
• plz suggest security for DLL functions (michael.holstein at csuohio.edu (Michael Holstein))
• plz suggest security for DLL functions (michael.holstein at csuohio.edu (Michael Holstein))
• plz suggest security for DLL functions (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• plz suggest security for DLL functions (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• plz suggest security for DLL functions (michael.holstein at csuohio.edu (Michael Holstein))
• plz suggest security for DLL functions (devdas at dvb.homelinux.org (Devdas Bhagat))
• UnixWare 7.1.4 : Mozilla updated to 1.7.8 fixes security issues (please_reply_to_security at sco.com (please_reply_to_security@....com))
• Publishing exploit code - what is it good for (j.schipper at math.uu.nl (Joachim Schipper))
• Re: In-game /ignore crash in Soldier of Fortune II 1.03 (sgp at telsatgp.com.pl (Slawek))

• plz suggest security for DLL functions (johnlacour at gmail.com (John LaCour))
• Re: [VulnWatch] Microsoft Windows NTFS Information Disclosure (jftucker at gmail.com (James Tucker))
• Re: [VulnWatch] Microsoft Windows NTFS Information Disclosure (mattmurphy at kc.rr.com (Matthew Murphy))
• plz suggest security for DLL functions (gkverma at gmail.com (Gaurav Kumar))
• Advisory 03/2005: Cacti Multiple SQL Injection Vulnerabilities (sesser at hardened-php.net (Stefan Esser))
• Advisory 03/2005: Cacti Multiple SQL Injection Vulnerabilities [FIXED] (sesser at hardened-php.net (Stefan Esser))
• Advisory 04/2005: Cacti Remote Command Execution Vulnerability (sesser at hardened-php.net (Stefan Esser))
• Advisory 05/2005: Cacti Authentification/Addslashes Bypass Vulnerability (sesser at hardened-php.net (Stefan Esser))
• plz suggest security for DLL functions (sasha.lists at gmail.com (Sasha Goldshtein))
• Publishing exploit code - what is it good for (chayotemu at gmail.com (ChayoteMu))
• RE: Publishing exploit code - what is it good for (harry at slaptop.com (Harry Metcalfe))
• Re: Transamericana.org (tat at postmark.net (Antonio Henrique Oliveira))
• plz suggest security for DLL functions (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
• plz suggest security for DLL functions (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
• security contact for sargento (uncleron at hushmail.com (uncleron@...hmail.com))
• security contact for sargento (randallm at fidmail.com (Randall M))
• security contact for sargento (gem at rellim.com (Gary E. Miller))

• Solaris 9/10 ld.so fun (kf_lists at digitalmunition.com (KF (lists)))
• Re: plz suggest security for DLL functions (khermansen at ht-technology.com (Kristian Hermansen))
• JBoss jBPM 2.0: Remote code execution and classloader covert channel (marc.schoenefeld at gmx.org (Marc Schoenefeld))
• [ GLSA 200507-01 ] PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-01 ] PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability (koon at gentoo.org (Thierry Carrez))

• alert: the 111111 bug (stuart at cyberdelix.net (lsi))
• alert: the 111111 bug (pauls at utdallas.edu (Paul Schmehl))
• odd Adobe Acrobat thing... (se_cur_ity at hotmail.com (Morning Wood))
• Directory traversal vulnerability in "Quick & Dirty PHPSource Printer" 1.0 (seth at tautology.org (Seth Alan Woolley))
• [ZH2005-14SA] Phishing problems on MSN (badpenguin79 at hotmail.com (Giovanni Delvecchio))
• log4sh insecure temporary file creation (exploits at zataz.net (ZATAZ Audits))
• alert: the 111111 bug (larry at larryseltzer.com (Larry Seltzer))
• [ GLSA 200507-02 ] WordPress: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
• Re: alert: the 111111 bug (binder at arago.de (Thomas Binder))
• Re: alert: the 111111 bug (gabrielmt at gmail.com (Gabriel Moutinho))
• [ GLSA 200507-03 ] phpBB: Arbitrary command execution (vorlon at gentoo.org (Matthias Geerdsen))
• Re: odd Adobe Acrobat thing... (davek_throwaway at hotmail.com (Dave Korn))
• Re: alert: the 111111 bug (seclists at securinews.com (Paul Kurczaba))
• [SECURITY] [DSA 725-2] New ppxp packages fix local root exploit (joey at infodrom.org (Martin Schulze))
• pam_ldap/nss_ldap password leak in a master+slave+start_tls LDAP setup (tigger at gentoo.org (Rob Holland))
• Re: Directory traversal in source.php not fixed. (seth at tautology.org (Seth Alan Woolley))
• RE: Published exploit codes foo foo foo (eric at arcticbears.com (Eric Paynter))
• UPDATE: [ GLSA 200506-17 ] SpamAssassin 3, Vipul's Razor: Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• Re: Directory traversal in source.php not fixed. (kaf at szub.net (Kaf Oseo))
• Advisory 06/2005: Geeklog SQL Injection Vulnerability (sesser at hardened-php.net (Stefan Esser))
• DRUPAL-SA-2005-002 exploit (dab at digitalsec.net (dab))
• [gentoo-announce] [ GLSA 200507-02 ] WordPress: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-03 ] phpBB: Arbitrary command execution (vorlon at gentoo.org (Matthias Geerdsen))

• [Fwd: Returned post for forensics@...urityfocus.com] (jasonc at science.org (Jason Coombs))
• FW: [Vtun-Users] The unprecedented lawsuit against GNU is occurred in Korea. (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
• alert: the 111111 bug (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
• alert: the 111111 bug (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• Some VNC doubts : access server behind TCP/IP proxy or gateways (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
• Some VNC doubts : access server behind TCP/IP proxy or gateways (xillwillx at gmail.com (Ill will))
• Some VNC doubts : access server behind TCP/IP proxy or gateways (raghu.chinthoju at gmail.com (Raghu Chinthoju))
• [USN-147-1] PHP XMLRPC vulnerability (martin.pitt at canonical.com (Martin Pitt))
• Re: FD-V5-I5 [ GLSA 200507-01 ] PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability (tony at wefixtech.co.uk (Tony Dodd))
• Re: FD-V5-I5 [ GLSA 200507-01 ] PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability (sebastian at nohn.net (Sebastian Nohn))
• ekg insecure temporary file creation and arbitrary code execution (exploits at zataz.net (ZATAZ Audits))
• kpopper insecure temporary file creation (exploits at zataz.net (ZATAZ Audits))
• Re: Tools accepted by the courts (jasonc at science.org (Jason Coombs))
• RE: Tools accepted by the courts (tobin.craig at va.gov (Craig, Tobin (OIG)))
• Re: Tools accepted by the courts (gkverma at gmail.com (Gaurav Kumar))
• alert: the 111111 bug (mbs at mistrealm.com (mbs))
• Re: Tools accepted by the courts (jlauro at umflint.edu (Lauro, John))
• Re: Tools accepted by the courts (kf_lists at digitalmunition.com (KF (lists)))
• Some VNC doubts : access server behind TCP/IP proxy or gateways (j.schipper at math.uu.nl (Joachim Schipper))
• Drupal exploit [DRUPAL-SA-2005-002] (dab at digitalsec.net (dab))
• Re: Tools accepted by the courts (pauls at utdallas.edu (Paul Schmehl))
• [SECURITY] [DSA 734-1] New gaim packages fix denial of service (joey at infodrom.org (Martin Schulze))
• RE: Tools accepted by the courts (le at evidencetechnology.net (Evidence Technology))
• Quickblogger (se_cur_ity at hotmail.com (Morning Wood))
• Forensic evidence pros and cons (daniels at Ponderosatel.com (Daniel Sichel))
• RE: Publishing exploit code - what is it good for (wnorth at verizon.net (wnorth))
• XSS in nested tag in phpbb 2.0.16 (pigrelax at yandex.ru (alex))
• Re: Tools accepted by the courts (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• MyGuestbook Remote File Inclusion. (group at soulblack.com.ar (group@...lblack.com.ar))
• iDEFENSE Security Advisory 07.05.05: Adobe Acrobat Reader UnixAppOpenFilePerform() Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs…)
• Unpatched phpBB XSS [in 2.0.16] (anthrax101 at gmail.com (Aaron Horst))
• XSS in nested tag in phpbb 2.0.16 (anthrax101 at gmail.com (Aaron Horst))
• Solaris 9/10 ld.so fun (Glenn.Pitcher at MedImpact.com (Glenn Pitcher))
• OWASP-SoCal 07/19 Meeting - Speakers and Topics (Kartik.Trivedi at Foundstone.com (Kartik.Trivedi@...ndstone.com))
• RE: Tools accepted by the courts (nick at virus-l.demon.co.uk (Nick FitzGerald))
• RE: Tools accepted by the courts (pingywon at hotmail.com (pingywon))
• RE: Tools accepted by the courts (eric at arcticbears.com (Eric Paynter))

• Advisory 07/2005: Jaws Multiple Remote Code Execution Vulnerabilities (sesser at hardened-php.net (Stefan Esser))
• [SECURITY] [DSA 737-1] New clamav packages fix potential DOS (mstone at klecker.debian.org (Michael Stone))
• [SECURITY] [DSA 738-1] New razor packages fix potential DOS (mstone at klecker.debian.org (Michael Stone))
• Some VNC doubts : access server behind TCP/IPproxy or gateways (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
• Solaris Socket Hijack - solsockjack.c (c0ntexb at gmail.com (c0ntex))
• [ GLSA 200507-04 ] RealPlayer: Heap overflow vulnerability (koon at gentoo.org (Thierry Carrez))
• Unpatched phpBB XSS [in 2.0.16] (mail at code-foundation.de (Dominik Birk))
• [USN-148-1] zlib vulnerability (martin.pitt at canonical.com (Martin Pitt))
• [SECURITY] [DSA 739-1] New trac package fixes upload/download vulnerability (joey at infodrom.org (Martin Schulze))
• [ GLSA 200507-05 ] zlib: Buffer overflow (koon at gentoo.org (Thierry Carrez))
• iDEFENSE Labs Releases Process Stalker (labs-no-reply at idefense.com (iDEFENSE Labs))
• McAfee Intrushield IPS Abuse (c0ntexb at gmail.com (c0ntex))
• [USN-147-2] Fixed php4-pear packages for USN-147-1 (martin.pitt at canonical.com (Martin Pitt))
• GNATS - gen-index (pi3ki31ny at wp.pl (Adam Zabrocki))
• SUSE Security Announcement: zlib denial of service attack (SUSE-SA:2005:039) (meissner at suse.de (Marcus Meissner))
• SUSE Security Announcement: heimdal telnetd remote buffer overflow (SUSE-SA:2005:040) (meissner at suse.de (Marcus Meissner))
• [SECURITY] [DSA 740-1] New zlib packages fix denial of service (mstone at klecker.debian.org (Michael Stone))
• test (ainj at email.uc.edu (a))
• Re: Publishing exploit code - what is it good for (nop at alt.net (Lionel))
• [ GLSA 200507-05 ] zlib: Buffer overflow (fdlist at digitaloffense.net (H D Moore))
• eRoom Multiple Security Issues (c0ntexb at gmail.com (c0ntex))
• alert: the 111111 bug (dufresne at winternet.com (Ron DuFresne))
• alert: the 111111 bug (dufresne at winternet.com (Ron DuFresne))
• Re: alert: the 111111 bug (dufresne at winternet.com (Ron DuFresne))
• alert: the 111111 bug (pauls at utdallas.edu (Paul Schmehl))
• alert: the 111111 bug (steve at unixwiz.net (Steve Friedl))
• [ GLSA 200507-06 ] TikiWiki: Arbitrary command execution through XML-RPC (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• Re: ekg insecure temporary file creation and arbitrary code execution (gophi at apcoh.org (Adam Wysocki))
• Researching IMISERV (wupdt.exe) (rlh at hush.ai (rlh@...h.ai))
• [gentoo-announce] [ GLSA 200507-06 ] TikiWiki: Arbitrary command execution through XML-RPC (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200507-04 ] RealPlayer: Heap overflow vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-05 ] zlib: Buffer overflow (koon at gentoo.org (Thierry Carrez))

• Wireless Strengths Test (S8541093H at myrp.edu.sg (GOH HO YEE JOHN))
• MDKSA-2005:112 - Updated zlib packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
• Researching IMISERV (wupdt.exe) (reece.mills at charter.net (Reece Mills))
• [SECURITY] [DSA 741-1] New bzip2 packages prevent decompression bomb (joey at infodrom.org (Martin Schulze))
• NULL sessions vulnerabilities using alternate named pipes (Jean-Baptiste.Marchand at hsc.fr (Jean-Baptiste Marchand))
• RE: eRoom Multiple Security Issues (exibar at thelair.com (exibar@...lair.com))
• Great application for the Pinnacle ShowCenter 200 (edward_geraldino at hotmail.com (edward geraldino))
• Great application for the Pinnacle ShowCenter 200 (kf_lists at digitalmunition.com (KF (lists)))
• Great application for the Pinnacle ShowCenter 200 (michael.holstein at csuohio.edu (Michael Holstein))
• Researching IMISERV (wupdt.exe) (optik at wccnet.org (Rick))
• UPDATE: [ GLSA 200506-20 ] Cacti: Several vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [SECURITY] [DSA 742-1] New cvs packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
• Fwd: RE: eRoom Multiple Security Issues (c0ntexb at gmail.com (c0ntex))
• Advisory 08/2005: PunBB SQL Injection Vulnerability (sesser at hardened-php.net (Stefan Esser))
• Advisory 09/2005: PunBB arbitrary PHP code inclusion vulnerability (sesser at hardened-php.net (Stefan Esser))
• UPDATE: [ GLSA 200506-20 ] Cacti: Several vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] UPDATE: [ GLSA 200506-20 ] Cacti: Several vulnerabilities (koon at gentoo.org (Thierry Carrez))

• [SECURITY] [DSA 736-2] New spamassassin packages fix potential DOS (mstone at klecker.debian.org (Michael Stone))
• [SECURITY] [DSA 735-2] New sudo packages fix pathname validation race (mstone at klecker.debian.org (Michael Stone))
• Great application for the Pinnacle ShowCenter 200 (sean01 at accnet.com.au (Sean Crawford))
• Multiple Vulnerabilities in Saeven.net's WhoisCart software. (saeven at saeven.net (S. Alexandre M. Lemaire))
• Re: [USN-147-1] PHP XMLRPC vulnerability (jan at horde.org (Jan Schneider))
• Re: [USN-147-1] PHP XMLRPC vulnerability (jan at horde.org (Jan Schneider))
• Re: [USN-147-1] PHP XMLRPC vulnerability (mdz at canonical.com (Matt Zimmerman))
• Re: [USN-147-1] PHP XMLRPC vulnerability (mdz at canonical.com (Matt Zimmerman))
• SiteMinder Multiple Vulnerabilities (c0ntexb at gmail.com (c0ntex))
• [SECURITY] [DSA 743-1] New ht packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
• [SECURITY] [DSA 744-1] New fuse packages fix information disclosure (joey at infodrom.org (Martin Schulze))
• SUSE Security Announcement: php/pear XML RPC remote code execution (SUSE-SA:2005:041) (meissner at suse.de (Marcus Meissner))

• Google Adsense sponsors cracks/keygen/warez (ad at class101.org (ad@...ss101.org))
• Geeks who do art? (gshively at gmail.com (Geoff Shively))
• List Charter (johnc at grok.org.uk (John Cartwright))
• Google Adsense sponsors cracks/keygen/warez (deeper at gmail.com (Daniel))
• Google Adsense sponsors cracks/keygen/warez (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• Geeks who do art? (VitoB at comcast.net (VB))

• [SECURITY] [DSA 745-1] New drupal package fixes multiple vulnerabilities (mstone at klecker.debian.org (Michael Stone))
• Multiple Vulnerabilities in Saeven.net's WhoisCart software. (seth at tautology.org (Seth Alan Woolley))
• ID Board 1.1.3 SQL Injection Vulnerability (defa at systemli.org (Defa))
• [ GLSA 200507-07 ] phpWebSite: Multiple vulnerabilities (vorlon at gentoo.org (Matthias Geerdsen))
• how to hide files, services and process in windows 2k/xp/2k3 box (fatb at security.zz.ha.cn (fatb))
• how to hide files, services and process in windows 2k/xp/2k3 box (khaalel at gmail.com (khaalel))
• how to hide files, services and process in windows 2k/xp/2k3 box (securitynews at wanadoo.fr (securitynews))
• [SECURITY] [DSA 747-1] New egroupware packages fix remote command execution (mstone at klecker.debian.org (Michael Stone))
• [SECURITY] [DSA 749-1] New ettercap packages fix arbitrary code execution (mstone at klecker.debian.org (Michael Stone))
• [ GLSA 200507-08 ] phpGroupWare, eGroupWare: PHP script injection vulnerability (vorlon at gentoo.org (Matthias Geerdsen))
• [FLSA-2005:155505] Updated php packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:154991] Updated sharutils package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152908] Updated gftp package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152895] Updated mailman package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152835] Updated dhcp package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [gentoo-announce] [ GLSA 200507-08 ] phpGroupWare, eGroupWare: PHP script injection vulnerability (vorlon at gentoo.org (Matthias Geerdsen))
• [gentoo-announce] [ GLSA 200507-07 ] phpWebSite: Multiple vulnerabilities (vorlon at gentoo.org (Matthias Geerdsen))
• [gentoo-announce] [ GLSA 200507-08 ] phpGroupWare, eGroupWare: PHP script injection vulnerability (vorlon at gentoo.org (Matthias Geerdsen))

• [ Suresec Advisories ] - Linux kernel ia32 compatibility (ia64/x86-64) race condition (advisories at suresec.org (Suresec Advisories))
• how to bypass rouge machine detection techniques (gkverma at gmail.com (Gaurav Kumar))
• [SECURITY] [DSA 750-1] New dhcpcd packages fix denial of service (joey at infodrom.org (Martin Schulze))
• how to bypass rouge machine detection techniques (cmacfarlane at Drummond-Miller.co.uk (Cassidy Macfarlane))
• how to bypass rouge machine detection techniques (jlauro at umflint.edu (Lauro, John))
• [SECURITY] [DSA 748-1] New ruby1.8 packages fix arbitrary command execution (mstone at klecker.debian.org (Michael Stone))
• [ Suresec Advisories ] - Linux kernel ia32 compatibility (ia64/x86-64) race condition (ju at heisec.de (Juergen Schmidt))
• [ GLSA 200507-09 ] Adobe Acrobat Reader: Buffer overflow vulnerability (vorlon at gentoo.org (Matthias Geerdsen))
• [ GLSA 200507-10 ] Ruby: Arbitrary command execution through XML-RPC (koon at gentoo.org (Thierry Carrez))
• [SECURITY] [DSA 751-1] New squid packages fix IP spoofing vulnerability (joey at infodrom.org (Martin Schulze))
• how to hide files, services and process (cosmin at cti.depaul.edu (Stejerean, Cosmin))
• WASC-Articles: 'DOM Based Cross Site Scripting or XSS of the Third Kind: A look at an overlooked flavor of XSS' (contact at webappsec.org (contact@...appsec.or…)
• [SECURITY] [DSA 752-1] New gzip packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
• CoffeeWars VI: Call for Beans (foofus at foofus.net (foofus@...fus.net))
• how to bypass rouge machine detection techniques (pmelson at gmail.com (Paul Melson))
• how to bypass rouge machine detection techniques (gkverma at gmail.com (Gaurav Kumar))
• how to bypass rouge machine detection techniques (michael.holstein at csuohio.edu (Michael Holstein))
• how to bypass rogue machine detection techniques (devdas at dvb.homelinux.org (Devdas Bhagat))
• Re: Problems with the Oracle Critical Patch Update for April 2005 (cesarc56 at yahoo.com (Cesar))
• [FLSA-2005:123014] Updated openssh packages fix a security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152583] Updated telnet packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
• how to bypass rogue machine detection techn iques (BFetch at texpac.com (Fetch, Brandon))
• Possible security issue with FreeBSD 5.4 jailing and BPF (ronvdaal at zarathustra.linux666.com (ronvdaal))
• ASP.NET RCP/Encoded Web service DOS (spilabs at spidynamics.com (SPI Labs))
• [gentoo-announce] [ GLSA 200507-10 ] Ruby: Arbitrary command execution through XML-RPC (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-09 ] Adobe Acrobat Reader: Buffer overflow vulnerability (vorlon at gentoo.org (Matthias Geerdsen))
• [gentoo-announce] [ GLSA 200507-10 ] Ruby: Arbitrary command execution through XML-RPC (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-09 ] Adobe Acrobat Reader: Buffer overflow vulnerability (vorlon at gentoo.org (Matthias Geerdsen))

• Re: XSS in nested tag in phpbb 2.0.16 (zx at castlecops.com (Paul Laudanski))
• MDKSA-2005:113 - Updated clamav packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
• MDKSA-2005:114 - Updated leafnode packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
• MDKSA-2005:115 - Updated mplayer packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
• MDKSA-2005:116 - Updated cpio packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
• NateOn Messenger Version 3.0 Directory listing vulnerability (saintlinu at yahoo.co.kr (saintlinu))
• [SECURITY] [DSA 753-1] New gedit packages fix denial of service (joey at infodrom.org (Martin Schulze))
• Telefonica Moviestar - any security issues? (colweb at gmail.com (Colin))
• Possible security issue with FreeBSD 5.4 jailing and BPF (simon at FreeBSD.org (Simon L. Nielsen))
• Possible security issue with FreeBSD 5.4 jailing and BPF (ronvdaal at zarathustra.linux666.com (ronvdaal))
• Possible security issue with FreeBSD 5.4 jailing and BPF (simon at FreeBSD.org (Simon L. Nielsen))
• how to bypass rogue machine detection techniques (amrnems at hushmail.com (amrnems@...hmail.com))
• Possible security issue with FreeBSD 5.4 jailing and BPF (rwatson at FreeBSD.org (Robert Watson))
• Cisco Security Advisory: Cisco CallManager Memory Handling Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
• DMA[2005-0712a] - 'Nokia Affix Bluetooth btftp client buffer overflow' (kf_lists at digitalmunition.com (KF (lists)))
• MA[2005-0712b] - 'Nokia Affix Bluetooth btsrv/btobex poor use of system()' (kf_lists at digitalmunition.com (KF (lists)))
• iDEFENSE Security Advisory 07.12.05: Microsoft Word 2000 and Word 2002 Font Parsing Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs…)
• Detecting vulnerable zlib versions (CAN-2005-2096) (fw at deneb.enyo.de (Florian Weimer))
• Advisory 10/2005: Yawp/YaWiki Remote URL Include Vulnerability (sesser at hardened-php.net (Stefan Esser))
• [ GLSA 200507-11 ] MIT Kerberos 5: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• Secunia published adviso without respecting release date ! (exploits at zataz.net (Eric Romang))
• PacSec/core05 Call For Papers (dr at kyx.net (Dragos Ruiu))
• [badroot security] Security Experts (badroot31337 at yahoo.com (John Travolta))
• ICMP Security Vulnerabilities - NEW (cough) (vvandal at well.com (Vic Vandal))
• ICMP Security Vulnerabilities - NEW (cough) (eric at arcticbears.com (Eric Paynter))
• [FLSA-2005:152777] Updated ImageMagick packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [badroot security] Security Experts (badroot31337 at yahoo.com (John Travolta))
• how to bypass rogue machine detection techniques (Marek.Isalski at smuht.nwest.nhs.uk (Marek Isalski))
• [gentoo-announce] [ GLSA 200507-11 ] MIT Kerberos 5: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200507-11 ] MIT Kerberos 5: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))

• ICMP Security Vulnerabilities - NEW (cough) (jeff-kell at utc.edu (Jeff Kell))
• MDKSA-2005:117 - Updated dhcpcd packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
• MDKSA-2005:118 - Updated ruby packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
• ICMP Security Vulnerabilities - NEW (cough) (tuytumadre at att.net (tuytumadre@....net))
• Security contact at Nortel? (michel.arboi at gmail.com (Michel Arboi))
• APPLE Darwin Streaming Server Web Admin Remote Denial of Serivce (smaillist at gmail.com (Sowhat .))
• [badroot security] Security Experts (randallm at fidmail.com (Randall M))
• [SECURITY] [DSA 754-1] New centericq packages fix insecure temporary file creation (joey at infodrom.org (Martin Schulze))
• [SECURITY] [DSA 755-1] New tiff packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
• Cisco Security Advisory: Cisco ONS 15216 OADM Telnet Denial-of-Service Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Response Team…)
• [badroot security] Security Experts (cosmin at cti.depaul.edu (Stejerean, Cosmin))
• Cisco Security Advisory:Cisco Security Agent Vulnerable to Crafted IP attack (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
• how to hide windows services and registry via drivers hook? (fatb at security.zz.ha.cn (fatb))
• [SECURITY] [DSA 756-1] New squirrelmail packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
• Endless loop in NetPanzer 0.8 (aluigi at autistici.org (Luigi Auriemma))
• Advisory: Oracle Forms Insecure Temporary File Handling (ak at red-database-security.com (Kornbrust, Alexander))
• Advisory: Oracle JDeveloper passes Plaintext Password (ak at red-database-security.com (Kornbrust, Alexander))
• Advisory: Oracle JDeveloper Plaintext Passwords (ak at red-database-security.com (Kornbrust, Alexander))
• Advisory: Oracle Forms Builder Password in Temp Files (ak at red-database-security.com (Kornbrust, Alexander))
• Multiple High Risk Vulnerabilities in Oracle E-Business Suite 11i (alerts at integrigy.com (Integrigy Security))
• [ GLSA 200507-12 ] Bugzilla: Unauthorized access and information disclosure (koon at gentoo.org (Thierry Carrez))
• Secunia published adviso without respectingrelease date ! (ad at class101.org (ad@...ss101.org))
• iDEFENSE Labs Releases Multipot (labs-no-reply at idefense.com (iDEFENSE Labs))
• [gentoo-announce] [ GLSA 200507-12 ] Bugzilla: Unauthorized access and information disclosure (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-12 ] Bugzilla: Unauthorized access and information disclosure (koon at gentoo.org (Thierry Carrez))

• hPRoTeCT Labs Releases More Asinine Stuff No One Cares About (hprotect at hushmail.com (hprotect@...hmail.com))
• acct-6.3.2 has a bug! (nsnangelz at gmail.com (Not Silenced Angelz Inc. LABz))
• [SECURITY] [DSA 746-1] New packages fix remote command execution in phpgroupware (mstone at klecker.debian.org (Michael Stone))
• MDKSA-2005:119 - Updated krb5 packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
• MDKSA-2005:120 - Updated mozilla-firefox packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
• [VulnWatch]Windows Netman Service Local DOS Vulnerability (bkbll at cnhonker.net (bkbll))
• Re:[VulnWatch]Windows Netman Service Local DOS Vulnerability (bkbll at cnhonker.net (bkbll))
• [ GLSA 200507-13 ] pam_ldap and nss_ldap: Plain text authentication leak (koon at gentoo.org (Thierry Carrez))
• Secunia published adviso without respectingrelease date ! (kiwi at oav.net (Xavier Beaudouin))
• acct-6.3.2 has a bug! (evilninja at gmx.net (evilninja))
• MS05-036 (dlcmacosx at mac.com (David Chastain))
• Re: MS05-036 (davek_throwaway at hotmail.com (Dave Korn))
• ICMP Security Vulnerabilities - NEW (cough) (fernando at frh.utn.edu.ar (Fernando Gont))
• iDEFENSE Security Advisory 07.14.05: Sophos Anti-Virus Zip File Handling DoS Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
• ICMP Security Vulnerabilities - NEW (cough) (cloder at loder.us (Chad Loder))
• Multiple ZeroLen Attachments (tony at breckcomm.com ({tonyFelice}))
• [gentoo-announce] [ GLSA 200507-13 ] pam_ldap and nss_ldap: Plain text authentication leak (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-13 ] pam_ldap and nss_ldap: Plain text authentication leak (koon at gentoo.org (Thierry Carrez))

• LSS Security Advisory: Winamp remote buffer overflow vulnerability (ljuranic at lss.hr (Leon Juranic))
• Silently fixed security bugs in Oracle Critical Patch Update July 2005 (ak at red-database-security.com (Kornbrust, Alexander))
• [ GLSA 200507-14 ] Mozilla Firefox: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
• Rooting Linux with a floppy (sanandres at gmail.com (Sumy))
• Rooting Linux with a floppy (listuser at seifried.org (Kurt Seifried))
• Rooting Linux with a floppy (sec-list at nolog.org (sec-list@...og.org))
• Rooting Linux with a floppy (dunceor at gmail.com (Dunceor .))
• Foundstone security contact? (gotfiltered at yahoo.com (Found Security))
• Rooting Linux with a floppy (jlauro at umflint.edu (Lauro, John))
• Multiple ZeroLen Attachments (jerome.athias at free.fr (Jerome Athias))
• Rooting Linux with a floppy (geggam at gmail.com (Dan Becker))
• Rooting Linux with a floppy (Rik.Bobbaers at cc.kuleuven.be (Rik Bobbaers))
• thunderbird privacy... (stevex11 at sbcglobal.net (Steve Kudlak))
• Rooting Linux with a floppy (harry at cc.kuleuven.ac.be (Harry de Grote))
• [ GLSA 200507-15 ] PHP: Script injection through XML-RPC (koon at gentoo.org (Thierry Carrez))
• Rooting Linux with a floppy (nc at ncartron.org (Nicolas CARTRON))
• Compromising pictures of Microsoft Internet Explorer! (lcamtuf at dione.ids.pl (Michal Zalewski))
• Rooting Linux with a floppy (jlongs2 at uic.edu (James Longstreet))
• Rooting Linux with a floppy (iago at valhallalegends.com (Ron))
• Compromising pictures of Microsoft Internet Explorer! (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
• Rooting Linux with a floppy (eric at arcticbears.com (Eric Paynter))
• Rooting Linux with a floppy (Patrick.Dolan at phns.com (Dolan, Patrick))
• Why Vulnerability Databases can't do everything (coley at mitre.org (Steven M. Christey))
• [ GLSA 200507-16 ] dhcpcd: Denial of Service vulnerability (koon at gentoo.org (Thierry Carrez))
• hehelol (kingcope at gmx.net (kcope))
• Stack-Based Buffer Overflow in Sybase EAServer 4.2.5 to 5.2 (spilabs at spidynamics.com (SPI Labs))
• RE: Why Vulnerability Databases can't do everything (aaron_kempf at hotmail.com (aaron_kempf@...mail.com))
• [gentoo-announce] [ GLSA 200507-16 ] dhcpcd: Denial of Service vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-15 ] PHP: Script injection through XML-RPC (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-14 ] Mozilla Firefox: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-16 ] dhcpcd: Denial of Service vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-16 ] dhcpcd: Denial of Service vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-15 ] PHP: Script injection through XML-RPC (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-14 ] Mozilla Firefox: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200507-16 ] dhcpcd: Denial of Service vulnerability (koon at gentoo.org (Thierry Carrez))

• [FLSA-2005:158149] Updated mozilla packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:154272] Updated gdk-pixbuf packages fix a security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152925] Updated mysql packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152917] Updated curl packages fix a security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152891] Updated cpio package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152874] Updated samba packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152841] Updated openssl packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152838] Updated gd packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152769] Updated kdelibs/kdebase packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
• Security contact at Nortel? (jericho at attrition.org (security curmudgeon))
• Security contact at Nortel? (measl at mfn.org (J.A. Terranson))
• [ZH2005-16SA] Insecure temporary file creation in Skype for Linux (badpenguin79 at hotmail.com (Giovanni Delvecchio))
• [ZH2005-16SA] Insecure temporary file creation in Skype for Linux (badpenguin79 at hotmail.com (Giovanni Delvecchio))
• Why Vulnerability Databases can't do everything (guninski at guninski.com (Georgi Guninski))
• Why Vulnerability Databases can't do everything (ph0enix at justonemorething.org (ph0enix))
• Why Vulnerability Databases can't do everything (guninski at guninski.com (Georgi Guninski))
• Secunia published adviso withoutrespectingrelease date ! (kiwi at oav.net (Xavier Beaudouin))
• Secunia published adviso withoutrespectingrelease date ! (jerome.athias at free.fr (Jerome Athias))
• [FLSA-2005:152900] Updated squirrelmail package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152844] Updated PostgreSQL packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
• Why Vulnerability Databases can't do everything (jasonc at science.org (Jason Coombs))
• Why Vulnerability Databases can't do everything (measl at mfn.org (J.A. Terranson))
• Compromising pictures of Microsoft Internet Explorer! (tuytumadre at att.net (tuytumadre@....net))
• Rooting Linux with a floppy (als at thangorodrim.de (als@...ngorodrim.de))
• hehelol (als at thangorodrim.de (als@...ngorodrim.de))
• hehelol (maxxess at gmail.com (Niklas))

• RE: Why Vulnerability Databases can't do everything (jericho at attrition.org (security curmudgeon))
• Compromising pictures of Microsoft Internet Explorer! (mattmurphy at kc.rr.com (Matthew Murphy))
• Compromising pictures of Microsoft Internet Explorer! (dave at immunitysec.com (Dave Aitel))
• *****SPAM***** Re: Compromising pictures of Microsoft Internet Explorer! (guninski at guninski.com (Georgi Guninski))
• Compromising pictures of Microsoft Internet Explorer! (lcamtuf at dione.ids.pl (Michal Zalewski))
• [gentoo-announce] [ GLSA 200506-19 ] SquirrelMail: Several XSS vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200506-18 ] Tor: Information disclosure (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200506-16 ] cpio: Directory traversal vulnerability (lewk at gentoo.org (Luke Macken))
• [gentoo-announce] [ GLSA 200506-15 ] PeerCast: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200506-21 ] Trac: File upload vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200506-20 ] Cacti: Several vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200506-17 ] SpamAssassin 3, Vipul's Razor: Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200506-12 ] MediaWiki: Cross-site scripting vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] UPDATE: [ GLSA 200505-06 ] TCPDump: Decoding routines Denial of Service vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200506-11 ] Gaim: Denial of Service vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200506-10 ] LutelWall: Insecure temporary file creation (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200506-09 ] gedit: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200506-08 ] GNU shtool, ocaml-mysql: Insecure temporary file creation (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200505-18 ] Net-SNMP: fixproc insecure temporary file creation (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200505-15 ] gdb: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] ERRATA: [ GLSA 200505-13 ] FreeRADIUS: SQL injection and Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] UPDATE: [ GLSA 200504-23 ] Kommander: Insecure remote script execution (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200506-22 ] sudo: Arbitrary command execution (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200506-14 ] Sun and Blackdown Java: Applet privilege escalation (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200506-13 ] webapp-config: Insecure temporary file handling (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200506-07 ] Ettercap: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200506-03 ] Dzip: Directory traversal vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200506-02 ] Mailutils: SQL Injection (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200505-20 ] Mailutils: Multiple vulnerabilities in imap4d and mail (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200505-19 ] gxine: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200505-17 ] Qpopper: Multiple Vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200505-16 ] ImageMagick, GraphicsMagick: Denial of Service vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200505-14 ] Cheetah: Untrusted module search path (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200505-13 ] FreeRADIUS: Buffer overflow and SQL injection vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200505-12 ] PostgreSQL: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200505-10 ] phpBB: Cross-Site Scripting Vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-21 ] RealPlayer, Helix Player: Buffer overflow vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200504-14 ] monkeyd: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-13 ] OpenOffice.Org: DOC document Heap Overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-12 ] rsnapshot: Local privilege escalation (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200504-11 ] JunkBuster: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-08 ] phpMyAdmin: Cross-site scripting vulnerability (lewk at gentoo.org (Luke Macken))
• [gentoo-announce] UPDATE: [ GLSA 200503-35 ] Smarty: Template vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200506-24 ] Heimdal: Buffer overflow vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200506-23 ] Clam AntiVirus: Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-30 ] phpMyAdmin: Insecure SQL script installation (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-22 ] KDE kimgio: PCX handling buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-20 ] openMosixview: Insecure temporary file creation (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200504-19 ] MPlayer: Two heap overflow vulnerabilities (vorlon at gentoo.org (Matthias Geerdsen))
• [gentoo-announce] [ GLSA 200503-26 ] Sylpheed, Sylpheed-claws: Message reply overflow (lewk at gentoo.org (Luke Macken))
• [gentoo-announce] [ GLSA 200503-24 ] LTris: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200506-01 ] Binutils, elfutils: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200505-09 ] Gaim: Denial of Service and buffer overflow vulnerabilties (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200505-06 ] TCPDump: Decoding routines Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200505-05 ] gzip: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200505-01 ] Horde Framework: Multiple XSS vulnerabilities (lewk at gentoo.org (Luke Macken))
• [gentoo-announce] [ GLSA 200504-18 ] Mozilla Firefox, Mozilla Suite: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200503-25 ] OpenSLP: Multiple buffer overflows (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200503-23 ] rxvt-unicode: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200503-19 ] MySQL: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200506-06 ] libextractor: Multiple overflow vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200506-05 ] SilverCity: Insecure file permissions (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200506-04 ] Wordpress: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-29 ] Pound: Buffer overflow vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200504-28 ] Heimdal: Buffer overflow vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-25 ] Rootkit Hunter: Insecure temporary file creation (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-17 ] XV: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-16 ] CVS: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-15 ] PHP: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200504-09 ] Axel: Vulnerability in HTTP redirection handling (vorlon at gentoo.org (vorlon@...too.org))
• [gentoo-announce] [ GLSA 200504-10 ] Gld: Remote execution of arbitrary code (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-07 ] GnomeVFS, libcdaudio: CDDB response overflow (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200504-06 ] sharutils: Insecure temporary file creation (lewk at gentoo.org (Luke Macken))
• [gentoo-announce] [ GLSA 200504-05 ] Gaim: Denial of Service issues (lewk at gentoo.org (Luke Macken))
• [gentoo-announce] [ GLSA 200504-04 ] mit-krb5: Multiple buffer overflows in telnet client (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200504-03 ] Dnsmasq: Poisoning and Denial of Service vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200504-02 ] Sylpheed, Sylpheed-claws: Buffer overflow on message display (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200503-37 ] LimeWire: Disclosure of sensitive information (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200503-36 ] netkit-telnetd: Buffer overflow (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200503-35 ] Smarty: Template vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200503-34 ] mpg321: Format string vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200503-33 ] IPsec-Tools: racoon Denial of Service (vorlon at gentoo.org (Matthias Geerdsen))
• [gentoo-announce] [ GLSA 200503-32 ] Mozilla Thunderbird: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200503-31 ] Mozilla Firefox: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200503-27 ] Xzabite dyndnsupdate: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200503-22 ] KDE: Local Denial of Service (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200503-21 ] Grip: CDDB response overflow (lewk at gentoo.org (Luke Macken))
• [gentoo-announce] [ GLSA 200503-20 ] curl: NTLM response buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200505-08 ] HT Editor: Multiple buffer overflows (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200505-02 ] Oops!: Remote code execution (lewk at gentoo.org (Luke Macken))
• [gentoo-announce] [ GLSA 200504-27 ] xine-lib: Two heap overflow vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200504-26 ] Convert-UUlib: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-23 ] Kommander: Insecure remote script execution (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200504-01 ] telnet-bsd: Multiple buffer overflows (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200503-30 ] Mozilla Suite: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200503-29 ] GnuPG: OpenPGP protocol attack (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200503-28 ] Sun Java: Web Start argument injection vulnerability (koon at gentoo.org (Thierry Carrez))
• [gentoo-announce] [ GLSA 200505-07 ] libTIFF: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [gentoo-announce] [ GLSA 200505-04 ] GnuTLS: Denial of Service vulnerability (vorlon at gentoo.org (Matthias Geerdsen))
• 7 more messages

• Shorewall MACLIST Problem (blitz at post891.org (Patrick Blitz))
• Rooting Linux with a floppy (sec-list at nolog.org (sec-list@...og.org))
• [ GLSA 200507-17 ] Mozilla Thunderbird: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
• [SECURITY] [DSA 758-1] New heimdal packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
• [SECURITY] [DSA 759-1] New phppgadmin packages fix directory traversal vulnerability (joey at infodrom.org (Martin Schulze))
• hehelol (scoutts at bcs.org.uk (Steven Coutts))
• hehelol (devis at easynix.net (devis))
• RE: Why Vulnerability Databases can't do everything (aaron_kempf at hotmail.com (aaron_kempf@...mail.com))
• Broadcast format string and buffer-overflow in Race Driver 1.20 (aluigi at autistici.org (Luigi Auriemma))
• NTLM HTTP Authentication is insecure by design - a new writeup by Amit Klein (aksecurity at hotpop.com (Amit Klein (AKsecurity)))
• RE: Why Vulnerability Databases can't do everything (eric at arcticbears.com (Eric Paynter))
• [SECURITY] [DSA 760-1] New ekg packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
• [TOOLS] CIRT.DK WebRoot Version v.1.7 (advisory at cirt.dk (CIRT.DK Advisory))
• ALT-N MDaemon multiple vulnerabilities (kingcope at gmx.net (kcope))

• Advice RE Site Exploit (cdwilde at gmail.com (David Wilde))
• Advice RE Site Exploit (fdlist at digitaloffense.net (H D Moore))
• MDKSA-2005:121 - Updated nss_ldap/pam_ldap packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
• [SECURITY] [DSA 761-1] New heartbeat packages fix insecure temporary files (joey at infodrom.org (Martin Schulze))
• [SECURITY] [DSA 762-1] New affix packages fix arbitrary command and code execution (joey at infodrom.org (Martin Schulze))
• NTLM HTTP Authentication is insecure by design - a new writeup by Amit Klein (3APA3A at SECURITY.NNOV.RU (3APA3A))
• Advice RE Site Exploit (mhoye at neon.polkaroo.net (Mike Hoye))
• Anonymous Web Attacks via Dedicated Mobile Services (ppetkov at gnucitizen.org (Petko Petkov))
• Re: Full-Disclosure Digest, Vol 5, Issue 43 (tanvirlodi at yahoo.com (Tanvir))
• NTLM authorization. (tanvirlodi at yahoo.com (Tanvir))
• [ISR] - Novell Groupwise WebAccess Cross-Site Scripting (famato at infobyte.com.ar (Francisco Amato))
• Oracle Advisory: Run any OS Command via unauthorized Oracle Reports (ak at red-database-security.com (Kornbrust, Alexander))
• Oracle Advisory: Overwrite any file via desname in Oracle Reports (ak at red-database-security.com (Kornbrust, Alexander))
• Oracle Advisory: Read parts of any XML-file via customize parameter in Oracle Reports (ak at red-database-security.com (Kornbrust, Alexander))
• Oracle Advisory: Run any OS Command via unauthorized Oracle Forms (ak at red-database-security.com (Kornbrust, Alexander))
• Oracle Advisory: Various Cross-Site-Scripting Vulnerabilities in Oracle Reports (ak at red-database-security.com (Kornbrust, Alexander))
• Oracle Advisory: Read parts of any file via desformat in Oracle Reports (ak at red-database-security.com (Kornbrust, Alexander))
• Re: SiteMinder Multiple Vulnerabilities (James.Williams at ca.com (Williams, James K))
• Anonymous Web Attacks via Dedicated MobileServices (se_cur_ity at hotmail.com (Morning Wood))
• Re: SiteMinder Multiple Vulnerabilities (solution) (James.Williams at ca.com (Williams, James K))
• [TOOLS] CIRT.DK WebRoot Version v.1.7 (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• Re: NTLM HTTP Authentication is insecure by design - a new writeup by Amit Klein (aksecurity at hotpop.com (Amit Klein (AKsecurity)))
• Mozilla cleartext credentials leak bug report to excuse myself (Re[2]: NTLM HTTP Authentication is insecure by design - a … (3APA3A at SECURITY.NNOV.RU (3APA3A))
• (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 rev.4 - HP-UX TCP/IP Remote Denial of Service (DoS)) (fernando at frh.utn.edu.ar (Fernando Gont))

• ICMP Security Vulnerabilities - NEW (cough) (fernando at frh.utn.edu.ar (Fernando Gont))
• thctest (netsniper at mail.ru (netsniper))
• PatchAdvisor Vulnerability Alert - Cisco CallManager Remote Denial of Service Vulnerability (vicky at patchadvisor.com (Vicky Ames))
• [ GLSA 200507-18 ] MediaWiki: Cross-site scripting vulnerability (koon at gentoo.org (Thierry Carrez))
• thctest (joxeankoret at gmail.com (Joxean Koret))
• thctest (joxeankoret at gmail.com (Joxean Koret))
• thctest (crg at digitalsec.net (Crg))
• PeanutHull Local Privilege Escalation Vulnerability (smaillist at gmail.com (Sowhat .))
• Trivial BGP attacks (ICMP-based blind throughput-reduction attack) (fernando at frh.utn.edu.ar (Fernando Gont))
• ICMP-based blind performance-degrading attack (fernando at frh.utn.edu.ar (Fernando Gont))
• Popup spam attempts on port 2??? (jlay at slave-tothe-box.net (James Lay))
• Yahoo telnet scans? (jlay at slave-tothe-box.net (James Lay))
• Snatching IP on LAN, how to DoS/block such machines? (maxxess at gmail.com (Niklas))
• Snatching IP on LAN, how to DoS/block such machines? (mmadison at fnni.com (Madison, Marc))
• [TOOLS] CIRT.DK WebRoot Version v.1.7 (seclists at securinews.com (Paul Kurczaba))
• Snatching IP on LAN, how to DoS/block such machines? (maxxess at gmail.com (Niklas))
• Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 rev.4 (fernando at frh.utn.edu.ar (Fernando Gont))
• Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 rev.4 (avalon at caligula.anu.edu.au (Darren Reed))
• Re: ICMP-based blind performance-degrading attack (fernando at frh.utn.edu.ar (Fernando Gont))
• Re: ICMP-based blind performance-degrading attack (avalon at caligula.anu.edu.au (Darren Reed))

• MDKSA-2005:122 - Updated kdelibs packages fix vulnerability in kate and kwrite (security at mandriva.com (Mandriva Security Team))
• MDKSA-2005:123 - Updated shorewall packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
• [SECURITY] [DSA 763-1] New zlib packages fix buffer overflow (mstone at klecker.debian.org (Michael Stone))
• [TOOLS] CIRT.DK WebRoot Version v.1.7 (skrewz at skrewz.dk (Anders Breindahl))
• Re: ICMP-based blind performance-degrading attack (fulldisc at loder.us (Chad Loder))
• [SECURITY] [DSA 764-1] New cacti packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
• [USN-149-1] Firefox vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
• Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 (avalon at caligula.anu.edu.au (Darren Reed))
• RE: thctest (official response :-) (vh at thc.org (vh))
• [USN-150-1] KDE library vulnerability (martin.pitt at canonical.com (Martin Pitt))
• RE: thctest (official response :-) (your_grand_momma at hushmail.com (your_grand_momma@...hmail.com))
• [USN-151-1] zlib vulnerability (martin.pitt at canonical.com (Martin Pitt))
• RE: thctest (official response :-) (johncurtis at softhome.net (johncurtis@...thome.net))
• [USN-152-1] PAM/NSS LDAP vulnerabilitiy (martin.pitt at canonical.com (Martin Pitt))
• Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 (Casper.Dik at Sun.COM (Casper.Dik@....COM))
• Whax v.3.0 Live CD released (muts at whitehat.co.il (muts))
• PHPTopSites (se_cur_ity at hotmail.com (Morning Wood))
• OWA login redirection - Mitigation (se_cur_ity at hotmail.com (Morning Wood))
• ICMP Security Vulnerabilities - NEW (cough) (vvandal at well.com (Vic Vandal))

• Advisory 11/2005: Multiple vulnerabilities in Contrexx (christopher.kunz at hardened-php.net (Christopher Kunz))
• ICMP-based blind connection-reset attack (fernando at frh.utn.edu.ar (Fernando Gont))
• Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 (fernando at frh.utn.edu.ar (Fernando Gont))
• Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 (fernando at frh.utn.edu.ar (Fernando Gont))
• [TOOLS] CIRT.DK WebRoot Version v.1.7 (seclists at securinews.com (Paul Kurczaba))
• [ GLSA 200507-19 ] zlib: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [ GLSA 200507-20 ] Shorewall: Security policy bypass (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [TOOLS] CIRT.DK WebRoot Version v.1.7 (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 (avalon at caligula.anu.edu.au (Darren Reed))
• Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954 (dhudes at hudes.org (Dana Hudes))
• apache.org files are infected? (sevenkingonline at yahoo.com (Seven King))
• apache.org files are infected? (christopher.kunz at hardened-php.net (Christopher Kunz))
• apache.org files are infected? (larry at larryseltzer.com (Larry Seltzer))
• apache.org files are infected? (crg at digitalsec.net (Crg))
• apache.org files are infected? (dan at f-box.org (Daniel Bartlett))
• apache.org files are infected? (ahaning at gmail.com (Andrew Haninger))
• apache.org files are infected? (larry at larryseltzer.com (Larry Seltzer))
• apache.org files are infected? (Marek.Isalski at smuht.nwest.nhs.uk (Marek Isalski))
• apache.org files are infected? (phased at mail.ru (phased))
• User privilege escalation exploit. (sunos5.8 at hotmail.com (No Sue Please))
• [USN-151-2] zlib vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
• apache.org files are infected? (ahaning at gmail.com (Andrew Haninger))
• apache.org files are infected? (larry at larryseltzer.com (Larry Seltzer))
• ICMP Security Vulnerabilities - NEW (cough) (vvandal at well.com (Vic Vandal))
• Re: apache.org files are infected? (davek_throwaway at hotmail.com (Dave Korn))
• apache.org files are infected? (michael.holstein at csuohio.edu (Michael Holstein))
• apache.org files are infected? (tuytumadre at att.net (tuytumadre@....net))
• VERITAS NETBACKUP 5.1 'TIME_STAMP' VULNERABILITY (ad at class101.org (ad@...ss101.org))
• [Argeniss] Oracle 9R2 Unpatched vulnerability on CWM2_OLAP_AW_AWUTIL package (cesarc56 at yahoo.com (Cesar))

• MDKSA-2005:124 - Updated zlib packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
• ICMP attacks against TCP: Conclusions (fernando at frh.utn.edu.ar (Fernando Gont))
• HT vulnerability & vendors (propolice at gmail.com (Eduardo Tongson))
• ICMP attacks against TCP: Conclusions (phased at mail.ru (phased))
• ICMP attacks against TCP: Conclusions (frlinux at gmail.com (FRLinux))
• Snatching IP on LAN, how to DoS/block such machines? (j.schipper at math.uu.nl (Joachim Schipper))
• ICMP attacks against TCP: Conclusions (sp0rrr at gmail.com (Spencer Spore))
• Anonymous Web Attacks via DedicatedMobileServices (Bojan.Zdrnja at LSS.hr (Bojan Zdrnja))

• Re: Snatching IP on LAN, how to DoS/block such machines? (khermansen at ht-technology.com (Kristian Hermansen))
• [FLSA-2005:154276] Updated krb5 packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
• [FLSA-2005:152842] Updated lvm package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))

• Anonymous Web Attacks via DedicatedMobileServices (ppetkov at gnucitizen.org (Petko Petkov))
• ClamAV Multiple Rem0te Buffer Overflows (list at rem0te.com (list@...0te.com))
• FW: [PTsecurity] MaxPatrol Network Security Scanner - Free unlimited version has been released. (pigrelax at yandex.ru (alex))
• Help poor children in Uganda (guninski at guninski.com (Georgi Guninski))
• Webcam Google Map (evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor))
• FW: [PTsecurity] MaxPatrol Network Security Scanner - Free unlimited version has been released. (deeper at gmail.com (Daniel))
• [ GLSA 200507-21 ] fetchmail: Buffer Overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [ GLSA 200507-22 ] sandbox: Insecure temporary file handling (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• FW: [PTsecurity] MaxPatrol Network Security Scanner - Free unlimited version has been released. (pigrelax at yandex.ru (alex))
• [ GLSA 200507-23 ] Kopete: Vulnerability in included Gadu library (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [USN-149-2] Fixed Firefox packages for USN-149-1 (martin.pitt at canonical.com (Martin Pitt))
• NMRC @ DefCon (dc13 at nmrc.org (dc13@...c.org))

• (as apllied to Full Trust Asp.Net vulnerabilities) Re: Compromising pictures of Microsoft Internet Explorer! (dinis at ddplus.net (Dinis Cruz))
• Denial of service vulnerability in FTPshell Server Version 3.38 (reedarvin at gmail.com (Reed Arvin))
• HAURI live update. Arbitrary remote file download and execute vulnerability (saintlinu at yahoo.co.kr (Park Gyutae))
• SPIDynamics WebInspect Cross-Application Scripting (XAS) (3APA3A at SECURITY.NNOV.RU (3APA3A))
• [USN-153-1] fetchmail vulnerability (martin.pitt at canonical.com (Martin Pitt))
• Re: ClamAV Multiple Rem0te Buffer Overflows (nick at mobilia.it (nick))
• INFOHACKING and illusion brazilian b0ys ownage (infohacking.research at gmail.com (Hugo Vazquez Carapez))
• INFOHACKING and illusion brazilian b0ys ownage (weinert at sys2.de (Michael Weinert))
• Re: ClamAV Multiple Rem0te Buffer Overflows (stelian.ene at gecadtech.com (Stelian Ene))
• INFOHACKING and illusion brazilian b0ys ownage (beckett.samuel at gmail.com (Samuel Beckett))
• INFOHACKING and illusion brazilian b0ys ownage (bugtraq at cgisecurity.net (bugtraq@...security.net))
• [USN-154-1] vim vulnerability (martin.pitt at canonical.com (Martin Pitt))
• INFOHACKING and illusion brazilian b0ys ownage (milw0rm at gmail.com (milw0rm Inc.))
• INFOHACKING and illusion brazilian b0ys ownage (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• INFOHACKING and illusion brazilian b0ys ownage (deeper at gmail.com (Daniel))
• INFOHACKING and illusion brazilian b0ys ownage (rodrigob at suespammers.org (Rodrigo Barbosa))
• INFOHACKING and illusion brazilian b0ys ownage (diego.casati at gmail.com (Diego Casati))
• [ GLSA 200507-24 ] Mozilla Suite: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• [squid-users] FW: INFOHACKING and illusion brazilian b0ys own age (robertc at squid-cache.org (Robert Collins))
• CYBSEC - Security Advisory: Default Configuration Information Disclosure in Lotus Domino (lmeiners at cybsec.com (Leandro Meiners))
• [ GLSA 200507-25 ] Clam AntiVirus: Integer overflows (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• INFOHACKING and illusion brazilian b0ys ownage (jlay at slave-tothe-box.net (James Lay))
• INFOHACKING and illusion brazilian b0ys ownage (ahaning at gmail.com (Andrew Haninger))
• [USN-155-1] Mozilla vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
• INFOHACKING and illusion brazilian b0ys ownage (toddtowles at brookshires.com (Todd Towles))
• iDEFENSE/VeriSign - VCP Program Changes (labs-no-reply at idefense.com (iDEFENSE Labs))
• INFOHACKING and illusion brazilian b0ys ownage (infohacking.research at gmail.com (Hugo Vazquez Carapez))

• New Whitepaper "Software Misuse: from malicious actions to mind control" (andrey at securityelf.org (Andrey Bayora))
• iDEFENSE/VeriSign - VCP Program Changes (measl at mfn.org (J.A. Terranson))
• iDEFENSE/VeriSign - VCP Program Changes (jasonc at science.org (Jason Coombs))
• Beware trojaned exploits! (securitymarket at hush.ai (securitymarket@...h.ai))
• Our Industry Is Seriously Ethics Impaired (measl at mfn.org (J.A. Terranson))
• [ISR] - Novell GroupWise Client Remote Buffer Overflow (famato at infobyte.com.ar (Francisco Amato))
• Beware trojaned exploits! (mark.sec at gmail.com (Mark Sec))
• [SECURITY] [DSA 766-1] New webcalendar package fixes information disclosure (joey at infodrom.org (Martin Schulze))
• [SECURITY] [DSA 765-1] New heimdal packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
• Sv: [SECURITY] [DSA 766-1] New webcalendar package fixes information disclosure (lelle.holm at katsof.stockholm.se (Lennart Holm))
• [ GLSA 200507-26 ] GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• Defeating Microsoft WGA Validation Check (goose7k at yahoo.ca (goosee007))
• security contact of ipsca.com (raghu.chinthoju at gmail.com (Raghu Chinthoju))
• security contact of ipsca.com (maxim at francoudi.com (Maxim Kostioukov))
• Our Industry Is Seriously Ethics Impaired (ajones1 at gmail.com (Adam Jones))
• Beware trojaned exploits! (iago at valhallalegends.com (Ron))
• Our Industry Is Seriously Ethics Impaired (shrdlu at deaddrop.org (Etaoin Shrdlu))
• Our Industry Is Seriously Ethics Impaired (perfectirijillo at gmail.com (J u a n))
• Our Industry Is Seriously Ethics Impaired (phased at mail.ru (phased))
• Beware trojaned exploits! (str0ke at milw0rm.com (str0ke@...w0rm.com))
• Our Industry Is Seriously Ethics Impaired (measl at mfn.org (J.A. Terranson))
• Beware trojaned exploits! (ad at class101.org (ad@...ss101.org))
• Beware trojaned exploits! (str0ke at milw0rm.com (str0ke@...w0rm.com))
• [SECURITY] [DSA 767-1] New ekg packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
• Our Industry Is Seriously Ethics Impaired (jftucker at gmail.com (James Tucker))
• Our Industry Is Seriously Ethics Impaired (tim-security at sentinelchicken.org (Tim))
• [SECURITY] [DSA 768-1] New phpbb2 packages fix cross-site scripting (joey at infodrom.org (Martin Schulze))
• Our Industry Is Seriously Ethics Impaired (guninski at guninski.com (Georgi Guninski))
• Our Industry Is Seriously Ethics Impaired (jftucker at gmail.com (James Tucker))
• Our Industry Is Seriously Ethics Impaired (jasonc at science.org (Jason Coombs))
• Defeating Microsoft WGA Validation Check (mail at hackingspirits.com (Debasis Mohanty))
• Our Industry Is Seriously Ethics Impaired (adf at code511.com (adf--at--Code511.com))
• SPIDynamics WebInspect Cross-ApplicationScripting (XAS) (dan_20407 at msn.com (DAN MORRILL))
• Our Industry Is Seriously Ethics Impaired (dan_20407 at msn.com (DAN MORRILL))
• bluetooth devices list ? (mark.sec at gmail.com (Mark Sec))
• Our Industry Is Seriously Ethics Impaired (mmadison at fnni.com (Madison, Marc))
• Our Industry Is Seriously Ethics Impaired (jericho at attrition.org (security curmudgeon))
• Our Industry Is Seriously Ethics Impaired (asimmons at messagelabs.com (Andrew Simmons))

• Our Industry Is Seriously Ethics Impaired (James.Williams at ca.com (Williams, James K))
• MDKSA-2005:125 - Updated clamav packages fix more vulnerabilities (security at mandriva.com (Mandriva Security Team))
• UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : RPCBind updated to prevent remote Denial of Service attack (please_reply_to_security at sco.com (please_reply_to…)
• ThinkSECURE's AIRRAID - "Asia's 1st Ever Wireless Hacking Tournament" (security at hammerjammer.net (security@...merjammer.net))
• [ GLSA 200507-27 ] Ethereal: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
• NETBIOS SMB IPC$ unicode share access (ramachandrand at gro.com (Ramachandrand))
• NETBIOS SMB IPC$ unicode share access (beckett.samuel at gmail.com (Samuel Beckett))
• NETBIOS SMB IPC$ unicode share access (measl at mfn.org (J.A. Terranson))
• NETBIOS SMB IPC$ unicode share access (jerome.athias at free.fr (Jerome Athias))
• Our Industry Is Seriously Ethics Impaired (grisu at guru.at (Christoph Gruber))
• Our Industry Is Seriously Ethics Impaired (grisu at guru.at (Christoph Gruber))
• SPIDynamics WebInspect Cross-ApplicationScripting (XAS) (3APA3A at SECURITY.NNOV.RU (3APA3A))
• Re: bluetooth devices list ? (oguz at intellect.com.tr (OguzTekeli))
• [USN-149-3] Ubuntu 4.10 update for Firefox vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
• (Fwd) Cisco, ISS file suit against rogue researcher (stuart at cyberdelix.net (lsi))
• Our Industry Is Seriously Ethics Impaired (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• NETBIOS SMB IPC$ unicode share access (michael.holstein at csuohio.edu (Michael Holstein))
• NETBIOS SMB IPC$ unicode share access (michael.holstein at csuohio.edu (Michael Holstein))
• Considering nSight, any opinions? (jason.heschel at gmail.com (Jason Heschel))
• Considering nSight, any opinions? (jason.heschel at gmail.com (Jason Heschel))
• Re: Considering nSight, any options? (stevenrakick at yahoo.com (Steven Rakick))
• Considering nSight, any opinions? (measl at mfn.org (J.A. Terranson))
• [USN-155-2] Updated Epiphany packages to match Mozilla security update (martin.pitt at canonical.com (Martin Pitt))
• Advisory 12/2005: UseBB Multiple Vulnerabilities (sesser at hardened-php.net (Stefan Esser))
• Our Industry Is Seriously Ethics Impaired (grisu at guru.at (Christoph Gruber))
• Re: bluetooth devices list ? (jerome.athias at free.fr (Jerome Athias))
• IpSwitch IMAIL Server IMAPD Remote r00t Exploit by kcope (kingcope at gmx.net (kcope))
• Cross Site Scripting vulnerabilities in GForge (joxeankoret at yahoo.es (Joxean Koret))

• SPIDynamics WebInspect Cross-ApplicationScripting (XAS) (epeterson at spidynamics.com (Erik Peterson))
• Re: bluetooth devices list ? (cwaters at networkchemistry.com (Waters, Chris))
• Defeating Microsoft WGA Validation Check (mike at alanpickel.com (Michael Evanchik))
• Microsoft MSN MESSENGER PATCH PLUS. Download exclusivo para usurios registrados. (tommy at security-protocols.com (Tom Ferris))
• [FLSA-2005:163559] Updated php packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
• nProtect solutions arbitrary file download and execute vulnerability (saintlinu at yahoo.co.kr (Park Gyutae))
• Defeating Microsoft WGA Validation Check (supadupa at gmail.com (Scott Edwards))
• MDKSA-2005:126 - Updated fetchmail packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
• MDKSA-2005:127 - Updated mozilla-thunderbird packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
• [SECURITY] [DSA 769-1] New gaim packages fix denial of service (joey at infodrom.org (Martin Schulze))
• Cisco Security Advisory: IPv6 Crafted Packet Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
• [USN-156-1] TIFF vulnerability (martin.pitt at canonical.com (Martin Pitt))
• Cisco IOS Shellcode Presentation (larryblumenthal98 at yahoo.com (Larry Blumenthal))
• [SECURITY] [DSA 770-1] New gopher packages fix insecure temporary file creation (joey at infodrom.org (Martin Schulze))
• [Fwd: Boing Boing: Michael Lynn's controversial Cisco security presentation] (aumckinl at cisco.com (Austin McKinley))
• Cisco IOS Shellcode Presentation (nick at virus-l.demon.co.uk (Nick FitzGerald))
• Considering nSight, any opinions? (dmaidlow at openspatial.com (Darrin Maidlow))
• Cisco IOS Shellcode Presentation (measl at mfn.org (J.A. Terranson))
• Cisco IOS Shellcode Presentation (michealespinola at gmail.com (Micheal Espinola Jr))
• PHP Command/Safemode Exploit (infsec at gmail.com (Willem Koenings))
• Cisco IOS Shellcode Presentation (kf_lists at digitalmunition.com (KF (lists)))
• Cisco IOS Shellcode Presentation (ad at class101.org (ad@...ss101.org))
• Cisco IOS Shellcode Presentation (michael.holstein at csuohio.edu (Michael Holstein))
• Cisco IOS Shellcode Presentation (michealespinola at gmail.com (Micheal Espinola Jr))
• Cisco IOS Shellcode Presentation (michael.holstein at csuohio.edu (Michael Holstein))
• Cisco IOS Shellcode Presentation (frank at knobbe.us (Frank Knobbe))
• Cisco IOS Shellcode Presentation (jasonc at science.org (Jason Coombs))
• Cisco IOS Shellcode Presentation (measl at mfn.org (J.A. Terranson))
• Cisco IOS Shellcode Presentation (jasonc at science.org (Jason Coombs))
• Cisco IOS Shellcode Presentation (srenna at lcssecuritygroup.com (srenna@...securitygroup.com))
• Cisco IOS Shellcode Presentation (jasonc at science.org (Jason Coombs))
• Cisco IOS Shellcode Presentation (michael.holstein at csuohio.edu (Michael Holstein))
• Cisco IOS Shellcode Presentation (eric.lauzon at abovesecurity.com (Eric Lauzon))
• Cisco IOS Shellcode Presentation (steve at unixwiz.net (Steve Friedl))
• Cisco IOS Shellcode Presentation (jasonc at science.org (Jason Coombs))
• Cisco IOS Shellcode Presentation (michael.holstein at csuohio.edu (Michael Holstein))
• Cisco IOS Shellcode Presentation (arr at watson.org (Andrew R. Reiter))
• Cisco IOS Shellcode Presentation (eric.lauzon at abovesecurity.com (Eric Lauzon))
• Cisco IOS Shellcode Presentation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• Cisco IOS Shellcode Presentation (tim-security at sentinelchicken.org (Tim))
• Cisco IOS Shellcode Presentation (geoincidents at nls.net (Geo.))
• Cisco IOS Shellcode Presentation (arr at watson.org (Andrew R. Reiter))
• Cisco IOS Shellcode Presentation (mmadison at fnni.com (Madison, Marc))
• Cisco IOS Shellcode Presentation (tim-security at sentinelchicken.org (Tim))
• Cisco IOS Shellcode Presentation (steve at unixwiz.net (Steve Friedl))
• Cisco IOS Shellcode Presentation (jlk at thrashyour.com (John Kinsella))
• Cisco IOS Shellcode Presentation (lists at domain-logic.com (Randall Perry))
• Cisco IOS Shellcode Presentation (security at brvenik.com (Jason))
• PHP Command/Safemode Exploit (christopher.kunz at hardened-php.net (Christopher Kunz))
• Cisco IOS Shellcode Presentation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• PHP Command/Safemode Exploit (christopher.kunz at hardened-php.net (Christopher Kunz))
• Cisco IOS Shellcode Presentation (Jochen.Kaiser at rrze.uni-erlangen.de (Jochen Kaiser))
• Indiatimes Shopping Cart XSS (Cross Site Scripting) Attacks (mail at hackingspirits.com (Debasis Mohanty))
• Cisco IOS Shellcode Presentation (dufresne at winternet.com (Ron DuFresne))
• Cisco IOS Shellcode Presentation (dufresne at winternet.com (Ron DuFresne))
• Cisco IOS Shellcode Presentation (jasonc at science.org (Jason Coombs))
• Cisco IOS Shellcode Presentation (dufresne at winternet.com (Ron DuFresne))
• Cisco IOS Shellcode Presentation (rara at navigo.com (Rachael Gomes))
• Re: Intel Hyperthreading Cache Vulnerability (was: Cisco IOS Shellcode Presentation) (tim-security at sentinelchicken.org (Tim))
• Cisco IOS Shellcode Presentation (sil at infiltrated.net (J. Oquendo))
• Cisco IOS Shellcode Presentation (arr at watson.org (Andrew R. Reiter))
• Cisco IOS Shellcode Presentation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• Cisco IOS Shellcode Presentation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• PHP Command/Safemode Exploit (infsec at gmail.com (Willem Koenings))
• Cisco IOS Shellcode Presentation (dufresne at winternet.com (Ron DuFresne))
• Defeating Microsoft WGA Validation Check (paul at freezz.demon.nl (Paul))
• Cisco IOS Shellcode Presentation (sil at politrix.org (J. Oquendo))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (rsmoak at cisco.com (Russell Smoak))

• Kshout Data Disclosure (group at soulblack.com.ar (group@...lblack.com.ar))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (deeper at gmail.com (Daniel))
• Cisco IOS Shellcode Presentation (measl at mfn.org (J.A. Terranson))
• Cisco IOS Shellcode Presentation (frank at knobbe.us (Frank Knobbe))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (bob.hacker at gmail.com (Tony Montana))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (measl at mfn.org (J.A. Terranson))
• Cisco IOS Shellcode Presentation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• Cisco IOS Shellcode Presentation (arr at watson.org (Andrew R. Reiter))
• Cisco IOS Shellcode Presentation (measl at mfn.org (J.A. Terranson))
• Cisco IOS Shellcode Presentation (measl at mfn.org (J.A. Terranson))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (jasonc at science.org (Jason Coombs))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (measl at mfn.org (J.A. Terranson))
• Cisco IOS Shellcode Presentation (jasonc at science.org (Jason Coombs))
• Cisco IOS Shellcode Presentation (rodrigo at intellicomp.cl (Rodrigo Gutierrez))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (frank at knobbe.us (Frank Knobbe))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (measl at mfn.org (J.A. Terranson))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (jasonc at science.org (Jason Coombs))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (measl at mfn.org (J.A. Terranson))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (jasonc at science.org (Jason Coombs))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (measl at mfn.org (J.A. Terranson))
• <Cisco Message> Mike Lynn's controversialCisco Security Presentation (lyal.collins at key2it.com.au (Lyal Collins))
• Cisco IOS Shellcode Presentation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• Cisco IOS Shellcode Presentation (jasonc at science.org (Jason Coombs))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (measl at mfn.org (J.A. Terranson))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (jasonc at science.org (Jason Coombs))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (measl at mfn.org (J.A. Terranson))
• Cisco IOS Shellcode Presentation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• <Cisco Message> Mike Lynn's controversial Cisco Security Presentation (steve at unixwiz.net (Steve Friedl))
• Lynn Preso. (ciscolover at hushmail.com (ciscolover@...hmail.com))
• Lynn Preso. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
• Best way to crack NT passwds (xurron at gmail.com (X u r r o n))
• Best way to crack NT passwds (ad at class101.org (ad@...ss101.org))
• Best way to crack NT passwds (3APA3A at SECURITY.NNOV.RU (3APA3A))
• Best way to crack NT passwds (augm58 at dsl.pipex.com (Paul Farrow))
• Cisco IOS Shellcode Presentation (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
• Best way to crack NT passwds (ad at class101.org (ad@...ss101.org))
• Cisco IOS Shellcode Presentation (stuart at cyberdelix.net (lsi))
• Best way to crack NT passwds (augm58 at dsl.pipex.com (Paul Farrow))
• Cisco IOS Shellcode Presentation (geoincidents at nls.net (Geo.))
• <Cisco Message> Mike Lynn's controversial CiscoSecurity Presentation (dan_20407 at msn.com (DAN MORRILL))
• Re: Defeating Microsoft WGA Validation Check (shellcode666 at gmail.com (shellcode))
• Cisco IOS Shellcode Presentation (michealespinola at gmail.com (Micheal Espinola Jr))
• Cisco IOS Shellcode Presentation (steve at unixwiz.net (Steve Friedl))
• <Cisco Message> Mike Lynn's controversial CiscoSecurity Presentation (guninski at guninski.com (Georgi Guninski))
• [ GLSA 200507-28 ] AMD64 x86 emulation base libraries: Buffer overflow (koon at gentoo.org (Thierry Carrez))
• Lynn Preso. (hescominsoon at emmanuelcomputerconsulting.com (William Warren))
• <Cisco Message> Mike Lynn's controversialCiscoSecurity Presentation (geoincidents at nls.net (Geo.))
• Cisco IOS Shellcode Presentation (michealespinola at gmail.com (Micheal Espinola Jr))
• Cisco IOS Shellcode Presentation (steve at unixwiz.net (Steve Friedl))
• Best way to crack NT passwds (ad at class101.org (ad@...ss101.org))
• Best way to crack NT passwds (cdupuis at cccure.org (Clement Dupuis))
• The Java applet sandbox and stateful firewalls (fw at deneb.enyo.de (Florian Weimer))
• Undisclosed Sudo Vulnerability ? (joel.esler at rcert-s.army.mil (Esler, Joel - Contractor))
• re: Undisclosed Sudo Vulnerability ? (Todd.Miller at courtesan.com (Todd C. Miller))

• <Cisco Message> Mike Lynn's controversial CiscoSecurity Presentation (BFetch at texpac.com (Fetch, Brandon))
• Undisclosed Sudo Vulnerability ? (listuser at seifried.org (Kurt Seifried))
• Undisclosed Sudo Vulnerability ? (listuser at seifried.org (Kurt Seifried))
• RE: Cisco IOS Shellcode Presentation (neville.aga at gmail.com (Neville Aga))
• Did you miss us yet? (phrackstaff at gmail.com (Phrack Staff))
• Best way to crack NT passwds (ken at ipl31.net (Ken))
• Best way to crack NT passwds (xurron at gmail.com (X u r r o n))
• <Cisco Message> Mike Lynn's controversial CiscoSecurity Presentation (duck.daf at gmail.com (Daffey Duck))
• Undisclosed Sudo Vulnerability ? (jclausing at isc.sans.org (Jim Clausing))
• RE: Cisco IOS Shellcode Presentation (jason.heschel at gmail.com (Jason Heschel))
• re: Undisclosed Sudo Vulnerability ? (frank at knobbe.us (Frank Knobbe))
• Cisco IOS Shellcode Presentation (michealespinola at gmail.com (Micheal Espinola Jr))
• [ GLSA 200507-29 ] pstotext: Remote execution of arbitrary code (dercorny at gentoo.org (Stefan Cornelius))
• re: Undisclosed Sudo Vulnerability ? (Todd.Miller at courtesan.com (Todd C. Miller))
• Best way to crack NT passwds (admin at karsten.pcn.de (Karsten Gessner))

823 messages

Powered by blists - more mailing lists