full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2005/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 41	² 30	³ 19	⁴ 33	⁵ 32	⁶ 7	⁷ 10
⁸ 36	⁹ 41	¹⁰ 80	¹¹ 61	¹² 26	¹³ 19	¹⁴ 16
¹⁵ 21	¹⁶ 21	¹⁷ 84	¹⁸ 66	¹⁹ 39	²⁰ 18	²¹ 7
²² 35	²³ 31	²⁴ 66	²⁵ 39	²⁶ 29	²⁷ 28	²⁸ 31
²⁹ 38	³⁰ 46	³¹ 31

Messages by day:

August 1 (41 messages)

OT: Looking for beta testers for Two-Factor Authentication Service (mohit.muthanna at gmail.com (Mohit Muthanna))
OT: Looking for beta testers for Two-FactorAuthentication Service (listuser at seifried.org (Kurt Seifried))
OT: Looking for beta testers for Two-FactorAuthentication Service (mohit.muthanna at gmail.com (Mohit Muthanna))
Cisco IOS Shellcode Presentation (dufresne at winternet.com (Ron DuFresne))
[ GLSA 200508-01 ] Compress::Zlib: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Buffer overflow in BusinessMail email server system 4.60.00 (reedarvin at gmail.com (Reed Arvin))
Did you miss us yet? (dinis at ddplus.net (Dinis Cruz))
Re: [VulnWatch] The Java applet sandbox and stateful firewalls (dinis at ddplus.net (Dinis Cruz))
[USN-157-1] Mozilla Thunderbird vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[SECURITY] [DSA 771-1] New pdns packages fix denial of service (joey at infodrom.org (Martin Schulze))
<Cisco Message> Mike Lynn's controversial CiscoSecurity Presentation (list at guru.at (Christoph Gruber))
[USN-158-1] gzip utility vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-159-1] unzip vulnerability (martin.pitt at canonical.com (Martin Pitt))
courious blind sql topic.. (stfu at consultant.com (none neither))
Re: [VulnWatch] The Java applet sandbox and stateful firewalls (fw at deneb.enyo.de (Florian Weimer))
Cisco IOS Shellcode Presentation (moshe at raytech.co.il (moshe@...tech.co.il))
Cisco IOS Shellcode Presentation (ad at class101.org (ad@...ss101.org))
Cisco IOS Shellcode Presentation (milw0rm at gmail.com (milw0rm Inc.))
HACK IN THE BOX SECURITY CONFERENCE 2005 (alpha_n_demon at yahoo.com (alphademon))
Cisco IOS Shellcode Presentation (jlk at thrashyour.com (John Kinsella))
Cisco IOS Shellcode Presentation (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Weird URL (traqbug at gmail.com (Bug Traq))
Weird URL (steve at unixwiz.net (Steve Friedl))
Weird URL (admin at westdene.net (admin@...tdene.net))
Weird URL (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Weird URL (traqbug at gmail.com (Bug Traq))
Cisco IOS Shellcode Presentation (milw0rm at gmail.com (milw0rm Inc.))
Weird URL (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Weird URL (michealespinola at gmail.com (Micheal Espinola Jr))
Cisco IOS Shellcode Presentation (jlk at thrashyour.com (John Kinsella))
Weird URL (ncruz at net.ipl.pt (Nuno Cruz))
Best way to crack NT passwds (dlcmacosx at mac.com (David Chastain))
Cisco IOS Shellcode Presentation (jasonc at science.org (Jason Coombs))
RE: Getting a clue at Cisco (daniels at Ponderosatel.com (Daniel Sichel))
RE: Getting a clue at Cisco (frank at knobbe.us (Frank Knobbe))
Cisco IOS Shellcode Presentation (andre.ludwig at gmail.com (Andre Ludwig))
RE: Getting a clue at Cisco (bytejump at gmail.com (byte_jump))
RE: Getting a clue at Cisco (wintrmte at gmail.com (Sam Evans))
[ GLSA 200508-02 ] ProFTPD: Format string vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[gentoo-announce] [ GLSA 200508-02 ] ProFTPD: Format string vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Cisco IOS Shellcode Presentation (forensis.technica at gmail.com (Technica Forensis))

August 2 (30 messages)

Cisco IOS Shellcode Presentation (jasonc at science.org (Jason Coombs))
Cisco IOS Shellcode Presentation (ivanhec at gmail.com (Ivan C))
Cisco IOS Shellcode Presentation (measl at mfn.org (J.A. Terranson))
Undisclosed Sudo Vulnerability ? (iago at valhallalegends.com (Ron))
Cisco IOS Shellcode Presentation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Virus on web site (peterharvey at emergency.qld.gov.au (Peter B. Harvey (Information Security)))
Undisclosed Sudo Vulnerability ? (ben.hawkes at paradise.net.nz (Ben Hawkes))
REGUSTERFLY To The White Courtesy Phone Please? (Was: Re: Virus on web site) (measl at mfn.org (J.A. Terranson))
Weird URL (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
Weird URL (Jackson.McKinley at team.telstra.com (McKinley, Jackson))
Weird URL (irfan.syed at guoco.com (irfan.syed@...co.com))
Did you miss us yet? (dunceor at gmail.com (Dunceor .))
Hosting Provider Refuses to Share Server Logs - How to Proceed? (youreallythoughtiwouldgiveyoumy-dshield at yahoo.com (GeeEm))
[ GLSA 200508-03 ] nbSMTP: Format string vulnerability (koon at gentoo.org (Thierry Carrez))
ProRat Server 1.9 Fix-2 Debugging (expanders at libero.it (Expanders))
Cisco IOS Shellcode Presentation (michael.holstein at csuohio.edu (Michael Holstein))
Cisco IOS Shellcode Presentation (michael.holstein at csuohio.edu (Michael Holstein))
RE: Getting a clue at Cisco (asimmons at messagelabs.com (Andrew Simmons))
Hosting Provider Refuses to Share Server Logs - How to Proceed? (michael.holstein at csuohio.edu (Michael Holstein))
Hosting Provider Refuses to Share Server Logs - How to Proceed? (michael at stroeder.com (Michael Ströder))
Microsoft ActiveSync information leak and spoofing (3APA3A at SECURITY.NNOV.RU (3APA3A))
Cisco IOS Shellcode Presentation (bkfsec at sdf.lonestar.org (bkfsec))
Hosting Provider Refuses to Share Server Logs - How to Proceed? (michael.holstein at csuohio.edu (Michael Holstein))
Microsoft ActiveSync Remote Password Compromise (fulldisclosure at fogieonline.com (Seth Fogie))
Cisco IOS Shellcode Presentation (bkfsec at sdf.lonestar.org (bkfsec))
<Cisco Message> Mike Lynn's controversial Cisco Security Presentation (bkfsec at sdf.lonestar.org (bkfsec))
CAID 33239 - Computer Associates BrightStor ARCserve/Enterprise Backup Agents buffer overflow vulnerability (James.Williams at ca.com (Williams, James K))
Phrack #63 release is OUT (phrackstaff at phrack.org (phrackstaff@...ack.org))
Cisco IOS Shellcode Presentation (dlcmacosx at mac.com (David Chastain))
Virus on web site (ichhabekeineemail at gmx.net (Johannes Schneider))

August 3 (19 messages)

RE: Did you miss us yet? (securitymarket at hush.ai (securitymarket@...h.ai))
Virus on web site (peterharvey at emergency.qld.gov.au (Peter B. Harvey (Information Security)))
Cisco IOS Shellcode Presentation (dufresne at winternet.com (Ron DuFresne))
iDEFENSE Security Advisory 08.02.05: CA BrightStor ARCserve Backup Agent for MS SQL Server Buffer Overflow (labs-no-reply at idefense.com (iDEFENSE Labs))
Virus on web site (nick at virus-l.demon.co.uk (Nick FitzGerald))
Virus on web site (nick at virus-l.demon.co.uk (Nick FitzGerald))
Hosting Provider Refuses to Share Server Logs -How to Proceed? (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
[SECURITY] [DSA 772-1] New apt-cacher package fixes arbitrary command execution (joey at infodrom.org (Martin Schulze))
RE: Getting a clue at Cisco (lukasz at bromirski.net (Łukasz Bromirski))
MDKSA-2005:128 - Updated mozilla packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
taking their revenge @ cisco (michael.holstein at csuohio.edu (Michael Holstein))
Cisco IOS Shellcode Presentation (Thierry at sniff-em.com (Thierry Zoller))
Fernando Gont remote command execution and big mouth vulnerability (joxeankoret at gmail.com (Joxean Koret))
Fernando Gont remote command execution and big mouth vulnerability (joxeankoret at gmail.com (Joxean Koret))
Cisco IOS Shellcode Presentation (edge at indiana.edu (Edge, Ronald D))
Cisco CCO hacked (macmanus at gmail.com (macmanus@...il.com))
MDKSA-2005:129 - Updated apache2 packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:130 - Updated apache packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
hidden users on windows? (nathan.aguirre at gmail.com (nabiy))

August 4 (33 messages)

SixApart/LiveJournal's Denise Paolucci should resign. (deeplolz at yahoo.com (Deep Lolz))
Cisco CCO hacked (guninski at guninski.com (Georgi Guninski))
[Fwd: CCO Locksmith - Automated Reply] (jasonc at science.org (Jason Coombs))
Fernando Gont remote command execution and big mouth vulnerability (fernando at frh.utn.edu.ar (Fernando Gont))
DNSCON 8, Blackpool UK, 12-14th August 2005 (man2600 at gmail.com (Manchester 2600))
Fernando Gont remote command execution and big mouth vulnerability (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
Coldfusion Fusebox V4.1.0 Vulnerability (version5 at gmail.com (N.N.P))
Copyright Infringement Notification (dudevanwinkle at gmail.com (DudeVanWinkle))
linksys.com laughs (alexstrawman at gmail.com (Alex Strawman))
Fernando Gont remote command execution and big mouth vulnerability (joxeankoret at gmail.com (Joxean Koret))
linksys.com laughs (guninski at guninski.com (Georgi Guninski))
RE: linksys.com laughs (amrnems at hushmail.com (amrnems@...hmail.com))
Re: Cisco IOS Shellcode Presentation (amrnems at hushmail.com (amrnems@...hmail.com))
RE: linksys.com laughs (steve at unixwiz.net (Steve Friedl))
hidden users on windows? (xillwillx at gmail.com (Ill will))
[USN-160-1] Apache 2 vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
hidden users on windows? (nathan.aguirre at gmail.com (nabiy))
Mozilla Firefox InstallVersion->compareTo() vulnerability lowered severity status (avivra at gmail.com (Aviv Raff))
SixApart/LiveJournal's Denise Paolucci should resign. (bkfsec at sdf.lonestar.org (bkfsec))
Re: Full-Disclosure Digest, Vol 6, Issue 7 (dan at losangelescomputerhelp.com (Daniel H. Renner))
[USN-161-1] bzip2 utility vulnerability (martin.pitt at canonical.com (Martin Pitt))
RE: linksys.com laughs (zx at castlecops.com (Paul Laudanski))
taking their revenge @ cisco (frank at knobbe.us (Frank Knobbe))
taking their revenge @ cisco (toddtowles at brookshires.com (Todd Towles))
taking their revenge @ cisco (michael.holstein at csuohio.edu (Michael Holstein))
taking their revenge @ cisco (toddtowles at brookshires.com (Todd Towles))
Another Windows XP WGA bypass (tintin at sinhack.net (tintin))
Re: Mozilla Firefox InstallVersion->compareTo() vulnerability lowered severity status (berendjanwever at gmail.com (Berend-Jan Wever))
Cisco Self Defending Network (tgood at mindsecurity.net (Travis Good))
Malicious Code Analysis (m4ch3t3 at gmail.com (M4ch3T3 Hax))
Re: taking their revenge @ cisco (cmadams at hiwaay.net (Chris Adams))
MDKSA-2005:131 - Updated ethereal packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
Fernando Gont remote command execution and big mouth vulnerability (fernando at frh.utn.edu.ar (Fernando Gont))

August 5 (32 messages)

Malicious Code Analysis (ngiles at hushmail.com (mike king))
Copyright Infringement Notification (jftucker at gmail.com (James Tucker))
Cisco CCO hacked (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Nate User Password Disclosed By Anonymous (saintlinu at yahoo.co.kr (saintlinu))
Malicious Code Analysis (dunceor at gmail.com (Dunceor .))
Malicious Code Analysis (tebodell at gmail.com (Ty Bodell))
Malicious Code Analysis (kruse at krusesecurity.dk (Peter Kruse))
Malicious Code Analysis (ngiles at hushmail.com (mike king))
Malicious Code Analysis (kruse at krusesecurity.dk (Peter Kruse))
Malicious Code Analysis (ngiles at hushmail.com (mike king))
[ GLSA 200508-04 ] Netpbm: Arbitrary code execution in pstopnm (koon at gentoo.org (Thierry Carrez))
Re: Mozilla Firefox InstallVersion->compareTo() vulnerability lowered severity status (avivra at gmail.com (Aviv Raff))
Fernando Gont remote command execution and big mouth vulnerability (infohacking.research at gmail.com (Hugo Vazquez Carapez))
"responsible disclosure" explanation (guninski at guninski.com (Georgi Guninski))
<Cisco Message> Mike Lynn's controvers (cripto at ecn.org (Anonymous))
Weird URL (bandwidth.user at gmail.com (Roy))
Malicious Code Analysis (infsec at gmail.com (Willem Koenings))
Root exploit in Lantonix Secure Console Server (c0ntexb at gmail.com (c0ntex))
Malicious Code Analysis (infsec at gmail.com (Willem Koenings))
Weird URL (bandwidth.user at gmail.com (Roy))
PowerDVD <= 4.0 local exploit (edward11 at postmaster.co.uk (edward GAGNON))
PowerDVD <= 4.0 local exploit (research at sec-consult.com (Bernhard Mueller))
Defeating Citi-Bank Virtual Keyboard Protection (mail at hackingspirits.com (Debasis Mohanty))
Defeating Citi-Bank Virtual Keyboard Protection (lcamtuf at dione.ids.pl (Michal Zalewski))
Defeating Citi-Bank Virtual Keyboard Protection (pferrie at symantec.com (Peter Ferrie))
Defeating Citi-Bank Virtual Keyboard Protection (mail at hackingspirits.com (Debasis Mohanty))
Defeating Citi-Bank Virtual Keyboard Protection (requiem at praetor.org (Jeremy Bishop))
Defeating Citi-Bank Virtual Keyboard Protection (lcamtuf at dione.ids.pl (Michal Zalewski))
Defeating Citi-Bank Virtual Keyboard Protection (lcamtuf at dione.ids.pl (Michal Zalewski))
iDEFENSE Security Advisory 08.05.05: EMC Navisphere Manager Directory Traversal Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
Defeating Citi-Bank Virtual Keyboard Protection (mail at hackingspirits.com (Debasis Mohanty))
Defeating Citi-Bank Virtual Keyboard Protection (mail at hackingspirits.com (Debasis Mohanty))

August 6 (7 messages)

Defeating Citi-Bank Virtual Keyboard Protection (lyal.collins at key2it.com.au (root))
Defeating Citi-Bank Virtual Keyboard Protection (fractalg at highspeedweb.net (fractalg@...hspeedweb.net))
Defeating Citi-Bank Virtual Keyboard Protection (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Defeating Citi-Bank Virtual Keyboard Protection (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
RE: CAID 33239 - Computer Associates BrightStor ARCserve/Enterprise Backup Agents buffer overflow vulnerability (James.Williams at ca.com (Williams, James K))
Defeating Citi-Bank Virtual Keyboard Protection (lyal.collins at key2it.com.au (root))
Weird URL (brundle at bk.ru (Seth Brundle))

August 7 (10 messages)

[ GLSA 200508-05 ] Heartbeat: Insecure temporary file creation (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Weird URL (gautam.bipin at gmail.com (Bipin Gautam))
Weird URL (gautam.bipin at gmail.com (Bipin Gautam))
Referers Are Evil (ripemd160 at gmail.com (Ripe Md))
[HAT-SQUAD][Release] Tiny MSN fuzzer (passwd demo) (ad at class101.org (ad@...ss101.org))
Referers Are Evil (gautam.bipin at gmail.com (Bipin Gautam))
Referers Are Evil (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Referers Are Evil (fd-0 at ml.turing-complete.org (Nicolas Rachinsky))
Referers Are Evil (steve at unixwiz.net (Steve Friedl))
Referers Are Evil (tim-security at sentinelchicken.org (Tim))

August 8 (36 messages)

Referers Are Evil (brian at dessent.net (Brian Dessent))
The icc_ex.c cannot work? (secunia.full.disclosure at gmail.com (leaf))
Arcor Customer P/W SAP App (S.McColl at ep-europost.de (Stephen McColl))
Recall: Arcor Customer P/W SAP App (S.McColl at ep-europost.de (Stephen McColl))
Recall: Arcor Customer P/W SAP App (vtlists at wyae.de (Volker Tanger))
IDS or IPS detection and bypass (ahmad1985 at gmail.com (Ahmad N))
perfect security architecture (network) (cobradead at gmail.com (C0BR4))
Advisory 13/2005: Remote code execution in SysCP (christopher.kunz at hardened-php.net (Christopher Kunz))
"responsible disclosure" explanation (fw at deneb.enyo.de (Florian Weimer))
"responsible disclosure" explanation (guninski at guninski.com (Georgi Guninski))
Recall: Arcor Customer P/W SAP App (tom at doctorunix.com (tom@...torunix.com))
Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: [Full-dicklosure] Weird URL (amrnems at hushmail.com (amrnems@...hmail.com))
IDS or IPS detection and bypass (michael.holstein at csuohio.edu (Michael Holstein))
Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re:[Full-dicklosure] Weird URL (full-disclosure at pchandyman.com.au (Greg))
ecc keys support in IE (raj_kap99 at yahoo.com (Rajeev Kapoor))
Defeating Citi-Bank Virtual Keyboard Protection (bart.lansing at hushmail.com (Bart Lansing))
Defeating Citi-Bank Virtual Keyboard Protection (nicob at nicob.net (Nicob))
perfect security architecture (network) (dan at losangelescomputerhelp.com (Daniel H. Renner))
What is this (arjunior at attps.com.br (Armando Rogerio Brandão Guimaraes Junior))
Port scanner for Windows CE (tmb at 65535.com (Tim Brown))
What is this (trains at doctorunix.com (trains@...torunix.com))
What is this (michael.hale at gmail.com (Michael Hale))
What is this (iago at valhallalegends.com (Ron))
Port scanner for Windows CE (pmelson at gmail.com (Paul Melson))
What is this (intrusiondetection at gmail.com (Jeremy))
What is this (kruse at krusesecurity.dk (Peter Kruse))
UNICODE For Windows XP Password Strings (Keyboard or other Character Entry Method) (infosecmonitor at gmail.com (ISM))
IDS or IPS detection and bypass (frank at knobbe.us (Frank Knobbe))
"responsible disclosure" explanation (jasonc at science.org (Jason Coombs))
IDS or IPS detection and bypass (fd at ew.nsci.us (fd@...nsci.us))
[USN-162-1] ekg and Gadu library vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[AppSecInc Advisory MYSQL05-V0002] Buffer Overflow in MySQL User Defined Functions (shatter at appsecinc.com (Team SHATTER))
[AppSecInc Advisory MYSQL05-V0003] Multiple Issues with MySQL User Defined Functions (shatter at appsecinc.com (Team SHATTER))
[AppSecInc Advisory MYSQL05-V0001] Improper Filtering of Directory Traversal Characters in MySQL User Defined Function… (shatter at appsecinc.com (Team SHATTER))
What is this (arjunior at attps.com.br (Armando Rogerio Brandão Guimaraes Junior))
Port scanner for Windows CE (B3r3n at argosnet.com (B3r3n))

August 9 (41 messages)

Recall: Arcor Customer P/W SAP App (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
perfect security architecture (network) (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Re: Re: Re: Re: Re: Re: Re: Re: Re: Re:Re:[Full-dicklosure] Weird URL (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
What is this (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
perfect security architecture (network) (charles.heselton at gmail.com (Charles Heselton))
Pipe dreams & candy canes [Was: perfect security architecture (network )] (fergdawg at netzero.net (Fergie (Paul Ferguson)))
Re: [AppSecInc Advisory MYSQL05-V0002] Buffer Overflow in MySQL User Defined Functions (davidl at ngssoftware.com (David Litchfield))
List Charter (johnc at grok.org.uk (John Cartwright))
perfect security architecture (network) (cfullerton at fullertoninfosec.com (Chuck Fullerton))
"responsible disclosure" explanation (jasonc at science.org (Jason Coombs))
[Fwd: GWAVA Sender Notification (Content filter)] (jasonc at science.org (Jason Coombs))
"responsible disclosure" (DDavis at pivx.com (Dominique Davis))
Group Airfare Travel Website Programming (evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor))
"responsible disclosure" explanation (an example of the fallacy of idealistic thought) (mattmurphy at kc.rr.com (Matthew Murphy))
Group Airfare Travel Website Programming (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
"responsible disclosure" explanation (an example of the fallacy of idealistic thought) (robert at dyadsecurity.com (robert@...dsecurity.com))
Plaxo? (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
"responsible disclosure" explanation (dan at losangelescomputerhelp.com (Daniel H. Renner))
Plaxo? (nick at virus-l.demon.co.uk (Nick FitzGerald))
"responsible disclosure" (jasonc at science.org (Jason Coombs))
"responsible disclosure" (jasonc at science.org (Jason Coombs))
New T&C poll: Was Lynn right? (nick at urgusabic.net (Nick Murison))
Re: Port scanner for Windows CE (aj at adexec.com (John Alexander))
Re: What is this (etomcat at freemail.hu (Feher Tamas))
Mozilla Firefox up to 1.0.6 and Mozilla Thunderbird up to 1.0 url string obfuscation (maru at scip.ch (Marc Ruef))
Mozilla Firefox up to 1.0.6 and Mozilla Thunderbird up to 1.0 url string obfuscation (tim-security at sentinelchicken.org (Tim))
Airscanner Mobile Security Advisory #05080501: IE & MIME By Design Loophole (fulldisclosure at fogieonline.com (Airscanner))
[USN-163-1] xpdf vulnerability (martin.pitt at canonical.com (Martin Pitt))
New Worm? (Dan at dbambach.net (Dan Bambach))
(no subject) (kartoffelguru at hush.com (kartoffelguru@...h.com))
(no subject) (kartoffelguru at hush.com (kartoffelguru@...h.com))
New Worm? (prandal at herefordshire.gov.uk (Randal, Phil))
(no subject) (kf_lists at digitalmunition.com (KF (lists)))
(no subject) - I wish that would work (kartoffelguru at hush.com (kartoffelguru@...h.com))
iDEFENSE Security Advisory 08.09.05: AWStats ShowInfoURL Remote Command Execution Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
RE: New Worm? (Dan at dbambach.net (Dan Bambach))
tool release: n.bug (felix.lindner at nruns.com (Felix Lindner))
(no subject) (stan.bubrouski at gmail.com (Stan Bubrouski))
perfect security architecture (network) (charles.heselton at gmail.com (Charles Heselton))
Operation Site-Key computer forensic searches ruled illegal (jasonc at science.org (Jason Coombs))
perfect security architecture (network) (aycan.irican at core.gen.tr (Aycan iRiCAN))

August 10 (80 messages)

Insecure http pages referencing https form-actions. (fd at ew.nsci.us (fd@...nsci.us))
IDS or IPS detection and bypass (ivanhec at gmail.com (Ivan .))
Help put a stop to incompetent computer forensics (jasonc at science.org (Jason Coombs))
Re: Mozilla Firefox up to 1.0.6 and Mozilla Thunderbird up to 1.0 url string obfuscation (alexamici at fastwebnet.it (Alessandro Amici))
"responsible disclosure" explanation (an exampleof the fallacy of idealistic thought) (dsi at iss.net (Ingevaldson, Dan (ISS Atlanta)))
Insecure http pages referencing https form-actions. (nick at virus-l.demon.co.uk (Nick FitzGerald))
Insecure http pages referencing https form-actions. (fd at ew.nsci.us (fd@...nsci.us))
Insecure http pages referencing https form-actions. (fd at ew.nsci.us (fd@...nsci.us))
Help put a stop to incompetent computer forensics (cday at asgardgroup.com (Christopher Day))
Insecure http pages referencing https (jeff-kell at utc.edu (Jeff Kell))
Plaxo? (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Insecure http pages referencing httpsform-actions. (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Operation Site-Key computer forensic searches ruled illegal (measl at mfn.org (J.A. Terranson))
Plaxo? (full-disclosure at pchandyman.com.au (Greg))
"responsible disclosure" explanation (an exampleof the fallacy of idealistic thought) (guninski at guninski.com (Georgi Guninski))
The best 0-day exploit source (ahmad1985 at gmail.com (Ahmad N))
The best 0-day exploit source (deeper at gmail.com (Daniel))
Help put a stop to incompetent computer forensics (jftucker at gmail.com (James Tucker))
Plaxo? (mis at seiden.com (mis@...den.com))
The best 0-day exploit source (tuytumadre at att.net (tuytumadre@....net))
The best 0-day exploit source (sec-list at nolog.org (sec-list@...og.org))
The best 0-day exploit source (javipolo at datagrama.net (Javi Polo))
RES: The best 0-day exploit source (ribeiro at microcity.com.br (Jose Ribeiro Junior))
RES: The best 0-day exploit source (jftucker at gmail.com (James Tucker))
The best 0-day exploit source (nullman at gmail.com (nullman))
Help put a stop to incompetent computer forensics (trains at doctorunix.com (trains@...torunix.com))
Insecure http pages referencing https form-actions. (lmeiners at cybsec.com (Leandro Meiners))
perfect security architecture (network) (cfullerton at fullertoninfosec.com (Chuck Fullerton))
The best 0-day exploit source (sec-list at nolog.org (sec-list@...og.org))
"responsible disclosure" explanation (an exampleof the fallacy of idealistic thought) (Ken at infosec101.org (Ken Pfeil))
Plaxo? (toddtowles at brookshires.com (Todd Towles))
Evolution multiple remote format string bugs (sitic at pts.se (sitic@....se))
The best 0-day exploit source (stefan.schlott at informatik.uni-ulm.de (Stefan Schlott))
The best 0-day exploit source (javier.reoyo at interdominios.com (Javier Reoyo))
The best 0-day exploit source (wedgenix at gmail.com (Brian Beck))
The best 0-day exploit source (adip at gmx.net (Adi Pircalabu))
The best 0-day exploit source (jlongs2 at uic.edu (James Longstreet))
The best 0-day exploit source (beckett.samuel at gmail.com (Samuel Beckett))
The best 0-day exploit source (srenna at lcssecuritygroup.com (srenna@...securitygroup.com))
Cross-site http authentication (justasfire at gmail.com (JustAsFire))
Antivirus (jbethune at town.kentville.ns.ca (Jason Bethune))
Antivirus (jbethune at town.kentville.ns.ca (Jason Bethune))
Antivirus (larry at larryseltzer.com (Larry Seltzer))
Antivirus (evan.waite at itracks.com (Evan Waite))
Antivirus (jbethune at town.kentville.ns.ca (Jason Bethune))
Antivirus (jbethune at town.kentville.ns.ca (Jason Bethune))
Antivirus (cfullerton at fullertoninfosec.com (Chuck Fullerton))
The best 0-day exploit source (xyberpix at xyberpix.com (xyberpix))
The best 0-day exploit source (toddtowles at brookshires.com (Todd Towles))
Antivirus (fractalg at highspeedweb.net (Pedro Hugo))
Antivirus (larry at larryseltzer.com (Larry Seltzer))
Fw: Antivirus (sergio at undercafe.cl (SACAR1))
Antivirus (jbethune at town.kentville.ns.ca (Jason Bethune))
Antivirus (jbethune at town.kentville.ns.ca (Jason Bethune))
MDKSA-2005:132 - Updated heartbeat packages fix temporary file vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:133 - Updated netpbm packages fix temporary file vulnerabilities (security at mandriva.com (Mandriva Security Team))
Antivirus (sean at idreus.com (Sean Milheim (iDREUS Corporation)))
The best 0-day exploit source (bugtraq at cgisecurity.net (bugtraq@...security.net))
"responsible disclosure" explanation (an (bugtraq at cgisecurity.net (bugtraq@...security.net))
The best 0-day exploit source (crg at digitalsec.net (Crg))
The best 0-day exploit source (milw0rm at gmail.com (milw0rm Inc.))
Privilege escalation in Linksys WLAN Monitor v2.0. (reedarvin at gmail.com (Reed Arvin))
Antivirus (slopez at intellicomp.cl (Sergio López C.))
perfect security architecture (network) (cobradead at gmail.com (C0BR4))
The best 0-day exploit source (mhoye at neon.polkaroo.net (Mike Hoye))
The best 0-day exploit source (michael.holstein at csuohio.edu (Michael Holstein))
Insecure http pages referencing https form-actions. (fd at ew.nsci.us (fd@...nsci.us))
Re: Operation Site-Key computer forensic searches ruled illegal (jasonc at science.org (Jason Coombs))
Insecure http pages referencing https form-actions. (fd at ew.nsci.us (fd@...nsci.us))
Re: Help put a stop to incompetent computer forensics (jasonc at science.org (Jason Coombs))
DNSCON 8, Blackpool 12-14th August 2005 Update (man2600 at gmail.com (Manchester 2600))
Re: Help put a stop to incompetent computer forensics (Thierry at sniff-em.com (Thierry Zoller))
msn passwd checker C# source (ad at class101.org (ad@...ss101.org))
Re: Help put a stop to incompetent computer forensics (jasonc at science.org (Jason Coombs))
Re: Help put a stop to incompetent computer fore nsics (fergdawg at netzero.net (Fergie (Paul Ferguson)))
Re: Help put a stop to incompetent computer forensics (Thierry at sniff-em.com (Thierry Zoller))
Re: Help put a stop to incompetent computer forensics (BlueBoar at thievco.com (Blue Boar))
Re: Help put a stop to incompetent computer forensics (jasonc at science.org (Jason Coombs))
Re: Help put a stop to incompetent computer forensics (ekamerling at snaplen.com (Erik Kamerling))
Privilege escalation in Nortel Contivity VPN Client V05_01.030 (jeff.peadro at gmail.com (Jeff Peadro))

August 11 (61 messages)

Re: Help put a stop to incompetent computer forensics (jasonc at science.org (Jason Coombs))
Re: Help put a stop to incompetent computer forensics (forensis.technica at gmail.com (Technica Forensis))
Help put a stop to incompetent computer forensics (forensis.technica at gmail.com (Technica Forensis))
Re: Help put a stop to incompetent computer forensics (Thierry at sniff-em.com (Thierry Zoller))
Re: Help put a stop to incompetent computer forensics (dankney at sunsetfilms.com (Donald J. Ankney))
Re: Help put a stop to incompetent computer forensics (forensis.technica at gmail.com (Technica Forensis))
Re: Help put a stop to incompetent computerforensics (hummer at domeranger.com (hummer@...eranger.com))
[FLSA-2005:157701] Updated Apache httpd packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:157696] Updated gzip package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:129284] Updated spamassassin package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:152889] Updated mc packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
Re: Help put a stop to incompetent computer forensics (jasonc at science.org (Jason Coombs))
Re: Help put a stop to incompetent computer forensics (jasonc at science.org (Jason Coombs))
Re: Help put a stop to incompetent computer fore nsics (fergdawg at netzero.net (Fergie (Paul Ferguson)))
Re: Help put a stop to incompetent computerforensics (cfullerton at fullertoninfosec.com (Chuck Fullerton))
Re: Help put a stop to incompetent computerforensics (jasonc at science.org (Jason Coombs))
Re: Help put a stop to incompetent computer forensics (jasonc at science.org (Jason Coombs))
Re: Help put a stop to incompetent computerforensics (cfullerton at fullertoninfosec.com (Chuck Fullerton))
Re: Help put a stop to incompetent computer forensics (RGolodner at Aetea.com (Richard Golodner))
WGA patch for LegitCheckControl.dll (m.mohr at laposte.net (M. Mohr))
Motorist wins case after maths whizzes break speed camera code (fwd) (measl at mfn.org (J.A. Terranson))
Help put a stop to incompetent computerforensics (full-disclosure at pchandyman.com.au (Greg))
Help put a stop to incompetent computer forensics - Who the hell cares? (coardump at gmail.com (cranium pain))
Re: Help put a stop to incompetent computerforensics (abaker at gmail.com (ASB))
Antivirus (prandal at herefordshire.gov.uk (Randal, Phil))
WGA patch for LegitCheckControl.dll (mail at hackingspirits.com (Debasis Mohanty))
ISS vs. Cisco: Chapter 2 (fx at phenoelit.de (FX))
Re: iDEFENSE Security Advisory 08.09.05: AWStats ShowInfoURL Remote Command Execution Vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: Compromising pictures of Microsoft Internet Explorer! (lcamtuf at dione.ids.pl (Michal Zalewski))
Help put a stop to incompetent computer forensics - Who the hell cares? (jftucker at gmail.com (James Tucker))
Re: Help put a stop to incompetent computer forensics (nick at virus-l.demon.co.uk (Nick FitzGerald))
[USN-164-1] netpbm vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: Help put a stop to incompetent computerforensics (bla at darton.edu (Brian Anderson))
Stop the Trojan War! (bart.lansing at hushmail.com (Bart Lansing))
[USN-166-1] Evolution vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-165-1] heartbeat vulnerability (martin.pitt at canonical.com (Martin Pitt))
Verizon Wireless Personal Data Advisory (jonathan at nuclearelephant.com (Jonathan Zdziarski))
Motorist wins case after maths whizzes break speed camera code (fwd) (jlongs2 at uic.edu (James Longstreet))
Motorist wins case after maths whizzes breakspeed camera code (fwd) (kswain at nespower.com (Swain, Kenneth))
SUSE Security Announcement: Mozilla various security problems (SUSE-SA:2005:045) (meissner at suse.de (Marcus Meissner))
Re: ISS vs. Cisco: Chapter 2 (fw at deneb.enyo.de (Florian Weimer))
new meaning (bancroft at america.net (Vic Bancroft))
The best 0-day exploit source (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Help put a stop to incompetent computer forensics- Who the hell cares? (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Antivirus (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Re: iDEFENSE Security Advisory 08.09.05: AWStats (labs-no-reply at idefense.com (iDFEENSE Labs))
"responsible disclosure" explanation (an example of the fallacy of idealistic thought) (fw at deneb.enyo.de (Florian Weimer))
Motorist wins case after maths whizzes break speed camera code (fwd) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Motorist wins case after maths whizzes break spe ed camera code (fwd) (fergdawg at netzero.net (Fergie (Paul Ferguson)))
"responsible disclosure" explanation (anexample of the fallacy of idealistic thought) (jasonc at science.org (Jason Coombs))
[SECURITY] [DSA 773-1] New amd64 packages fix several bugs (joey at infodrom.org (Martin Schulze))
Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) (reedarvin at gmail.com (Reed Arvin))
MDKSA-2005:134 - Updated xpdf packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:135 - Updated kdegraphics packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:136 - Updated gpdf packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:137 - Updated ucd-snmp packages fix a DoS vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:138 - Updated cups packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
Fudforum: incompletely check of user rights in tree view gaining access to all messages (alex at systemli.org (Alexander Heidenreich))
Windows 2000 universal exploit for MS05-039 (sl0ppy at hush.ai (sl0ppy@...h.ai))
Re: Help put a stop to incompetentcomputerforensics (ccozad at cosco.com.au (cozadc/Cozad, Chris))
Re: iDEFENSE Security Advisory 08.09.05: AWStats ShowInfoURL Remote Command Execution Vulnerability (eldy at users.sourceforge.net (Laurent Destailleur (Eldy)))

August 12 (26 messages)

Bluetooth: Theft of Link Keys for Fun and Profit? (kf_lists at digitalmunition.com (KF (lists)))
Re: Help put a stop to incompetent computerforensics (measl at mfn.org (J.A. Terranson))
Re: Help put a stop to incompetent computerforensics (jasonc at science.org (Jason Coombs))
Re: Help put a stop to incompetent computerforensics (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Help put a stop to incompetent computerforensics (ekamerling at snaplen.com (Erik Kamerling))
Re: Help put a stop to incompetent computerforensics (nick at virus-l.demon.co.uk (Nick FitzGerald))
WiGA Workaround (onestepto at yahoo.com.au (Paul))
Wine, the implicit Microsoft Windows Genuine Advantage (supadupa at gmail.com (Scott Edwards))
Wine, the implicit Microsoft Windows Genuine Advantage (javipolo at datagrama.net (Javi Polo))
Multiple directory traversal vulnerabilities in Claroline (robbedekeyzer at hotmail.com (fdsf hfdhfjk))
My Bulletin Board RC 4 Vulnerabilities (phuket.bugtraq at gmail.com (phuket))
Wine, the implicit Microsoft Windows Genuine Advantage (full-disclosure at kharkerlake.net (Christian "Khark" Lauf))
Wine, the implicit Microsoft Windows Genuine Advantage (meissner at suse.de (Marcus Meissner))
Wine, the implicit Microsoft Windows Genuine Advantage (frick at sc-networks.com (Christoph Frick))
[SECURITY] [DSA 774-1] New fetchmail packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
"responsible disclosure" explanation (anexample of the fallacy of idealistic thought) (perfectirijillo at gmail.com (J u a n))
[USN-168-1] Gaim vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Re: Considering nSight, any thoughts? (nospam at techemail.com (Jeff Boston))
FW: Updated Version & Exploit - Privilege escalation in Nortel Contivity VPN Client V05_01.030 (jeff.peadro at gmail.com (Jeff Peadro))
Bluetooth: Theft of Link Keys for Fun and Profit? (adam.laurie at thebunker.net (Adam Laurie))
Bluetooth: Theft of Link Keys for Fun and Profit? (Thierry at sniff-em.com (Thierry Zoller))
Bluetooth: Theft of Link Keys for Fun and Profit? (kf_lists at digitalmunition.com (KF (lists)))
Insecure directory permissions of default installation of Kaspersky Anti-Virus for Unix/Linux File Servers will lead t… (pbieringer at aerasec.de (Dr. Peter Bie…)
Bluetooth: Theft of Link Keys for Fun and Profit? (adam.laurie at thebunker.net (Adam Laurie))
Bluetooth: Theft of Link Keys for Fun and Profit? (kf_lists at digitalmunition.com (KF (lists)))
Bluetooth: Theft of Link Keys for Fun and Profit? (milw0rm at gmail.com (milw0rm Inc.))

August 13 (19 messages)

Fw: US-CERT Technical Cyber Security Alert TA05-224A -- VERITAS Backup Exec Uses Hard-Coded Authentication Credentials (jasonc at science.org (Jason Coombs))
Fw: US-CERT Technical Cyber Security Alert TA05-224A -- VERITAS Backup Exec Uses Hard-Coded Authenticatio (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Help put a stop to incompetent computer forensics (measl at mfn.org (J.A. Terranson))
Re: Help put a stop to incompetent computer fore nsics (fergdawg at netzero.net (Fergie (Paul Ferguson)))
Re: Help put a stop to incompetent computer fore nsics (measl at mfn.org (J.A. Terranson))
Re: Help put a stop to incompetent computerforensics (jasonc at science.org (Jason Coombs))
Re: Help put a stop to incompetent computerforensics (steve at unixwiz.net (Steve Friedl))
[OT] (was Re: Re: Help put a stop to incompetent computerforensics) (measl at mfn.org (J.A. Terranson))
Wiretapped Conversation (omar at wmsu.edu.ph (D. Omar Shariff Jaafar))
Low security hole affecting Mentor's ADSLFR4II router (netsys at machine.org.uk (Tim Brown))
bash vulnerability? (sharivegas at gmail.com (Shari Vegas))
bash vulnerability? (amne at gentoo.org (Wernfried Haas))
bash vulnerability? (amne at gentoo.org (Wernfried Haas))
bash vulnerability? (sean01 at accnet.com.au (Sean Crawford))
XSS at Citibank.co.uk (andrew.rse at gmail.com (Andrew Smtih))
bash vulnerability? (calibrovidmar at ccni.it (Matija Vidmar))
Fw: US-CERT Technical Cyber Security Alert TA05-224A -- VERITAS Backup Exec Uses Hard-Coded Authentication Credentials (forensis.technica at gmail.com (Technic…)
bash vulnerability? (t4c at ghcif.de (Milan 't4c' Berger))
bash vulnerability? (andre.breiler at null-mx.org (Andre' Breiler))

August 14 (16 messages)

XSS at Citibank.co.uk (jnduncan at cisco.com (Jim Duncan))
XSS at Citibank.co.uk (bruen at coldrain.net (bruen@...drain.net))
XSS at Citibank.co.uk (frankdewit at home.nl (Frank de Wit))
XSS Nordstroms.com (jeff.peadro at gmail.com (Jeff Peadro))
XSS www.jg-tc.com (jeff.peadro at gmail.com (Jeff Peadro))
bash vulnerability? (nobody at tatooine.homelinux.net (starwars))
(TOOL ANNOUNCEMENT) Efilter - automatic exception reporting utility (bania.piotr at gmail.com (Piotr Bania))
IMAP scans? Something going on I should know about? (jlay at slave-tothe-box.net (James Lay))
STG Security Advisory: [SSA-20050812-27] Discuz! arbitrary script upload vulnerability (advisory at stgsecurity.com (SSR Team))
IMAP scans? Something going on I should knowabout? (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
IMAP scans? Something going on I should knowabout? (str0ke at milw0rm.com (str0ke@...w0rm.com))
IMAP scans? Something going on I should knowabout? (frlinux at gmail.com (FRLinux))
IMAP scans? Something going on I should knowabout? (milw0rm at gmail.com (milw0rm Inc.))
The Cisco media frenzy (xploitable at gmail.com (n3td3v))
bash vulnerability? (fd at ew.nsci.us (fd@...nsci.us))
RSA XSS Vulnerabilities (rodrigo at rgsc.cl (Rodrigo Gutierrez))

August 15 (21 messages)

(no subject) (sil at infiltrated.net (J. Oquendo))
IMAP scans? Something going on I shouldknowabout? (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
[DRUPAL-SA-2005-004] Drupal 4.6.3 / 4.5.5 fixes critical XML-RPC issue (uwe at hermann-uwe.de (Uwe Hermann))
The Cisco media frenzy (ghosts at gmail.com (ghost))
[ GLSA 200508-06 ] Gaim: Remote execution of arbitrary code (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
bash vulnerability? (jaymzu at gmail.com (Jay))
Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) (nobnop at gmail.com (NoBrain NoPain))
[SECURITY] [DSA 775-1] New Mozilla packages fix frame injection spoofing vulnerability (joey at infodrom.org (Martin Schulze))
Advisory 14/2005: PEAR XML_RPC Remote PHP Code Injection Vulnerability (sesser at hardened-php.net (Stefan Esser))
Advisory 15/2005: PHPXMLRPC Remote PHP Code Injection Vulnerability (sesser at hardened-php.net (Stefan Esser))
Virus Outbreak Attacking MS05-039 WIN2K (mjcarter at ihug.co.nz (Mike))
[SECURITY] [DSA 761-2] New heartbeat packages fix insecure temporary files (joey at infodrom.org (Martin Schulze))
Virus Outbreak Attacking MS05-039 WIN2K (andrew.rse at gmail.com (Andrew Smith))
Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) (reedarvin at gmail.com (Reed Arvin))
Virus Outbreak Attacking MS05-039 WIN2K (toddtowles at brookshires.com (Todd Towles))
Virus Outbreak Attacking MS05-039 WIN2K (jan at boyakasha.dk (Jan Nielsen))
Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) (sec-list at nolog.org (sec-list@...og.org))
Virus Outbreak Attacking MS05-039 WIN2K (jstewart at lurhq.com (Joe Stewart))
Virus Outbreak Attacking MS05-039 WIN2K (toddtowles at brookshires.com (Todd Towles))
Re: Defeating Citi-Bank Virtual Keyboard Protection (gautam.bipin at gmail.com (Bipin Gautam))
Evading URL Filtering(websense) software configured in Transparent (or Sniffing) mode, without using a remote proxy. (sledge.hammer at sinhack.net (Sledge Ham…)

August 16 (21 messages)

Apple Mac Tiger 10.4 weblog server (se_cur_ity at hotmail.com (Morning Wood))
MDKSA-2005:139 - Updated gaim packages fix yet more vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:140 - Updated proftpd packages fix format string vulnerabilities (security at mandriva.com (Mandriva Security Team))
[ GLSA 200508-07 ] AWStats: Arbitrary code execution using malicious Referrer information (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200508-08 ] Xpdf, Kpdf, GPdf: Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
SUSE Security Announcement: apache, apache2 request smuggling problem (SUSE-SA:2005:046) (meissner at suse.de (Marcus Meissner))
bash vulnerability? (Rik.Bobbaers at cc.kuleuven.be (Rik Bobbaers))
Virus Outbreak Attacking MS05-039 WIN2K (auto447062 at hushmail.com (auto447062@...hmail.com))
bash vulnerability? (jaymzu at gmail.com (Jay))
Operator Shell (osh) Stack-based Buffer Overflow (core at bokeoa.com (Charles Stevenson))
bash vulnerability? (boris.jordanov at gmail.com (Boris Jordanov / Борис Йорданов))
bash vulnerability? (lsw at digitalsec.net (luke))
bash vulnerability? (Rik.Bobbaers at cc.kuleuven.be (Rik Bobbaers))
[SECURITY] [DSA 776-1] New clamav packages fix several problems (joey at infodrom.org (Martin Schulze))
bash vulnerability? (greed at pobox.com (Graham Reed))
Disney Down? (cdwilde at gmail.com (David Wilde))
Disney Down? (fergdawg at netzero.net (Fergie (Paul Ferguson)))
Disney Down? (dr at allnix.net (Dave @ Allnix, LLC))
Disney Down? (aprotas at eeye.com (Andre Protas))
Disney Down? (sk3tch at sk3tch.net (sk3tch@...tch.net))
Disney Down? (poof at fansubber.com (Poof))

August 17 (84 messages)

pnp worm unknown variant - post infection actions (se_cur_ity at hotmail.com (Morning Wood))
pnp worm unknown variant - post infection actions (jasonc at science.org (Jason Coombs))
Re: pnp worm unknown variant - post infection actions (se_cur_ity at hotmail.com (Morning Wood))
Disney Down? (se_cur_ity at hotmail.com (Morning Wood))
Re: pnp worm unknown variant - post infectionactions (fractalg at highspeedweb.net (frac))
Re: pnp worm unknown variant - post infection actions (jasonc at science.org (Jason Coombs))
phpWebSite 0.10.1 Full SQL Injection (h4cky0u.org at gmail.com (h4cky0u))
Re: pnp worm unknown variant - post infection actions (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Global CompuSearch (jasonc at science.org (Jason Coombs))
Re: pnp worm unknown variant - post infection actions (jasonc at science.org (Jason Coombs))
[Fwd: Re: Global CompuSearch] (jasonc at science.org (Jason Coombs))
Re: pnp worm unknown variant - post infection actions (nick at virus-l.demon.co.uk (Nick FitzGerald))
[Fwd: Re: Global CompuSearch] (jasonc at science.org (Jason Coombs))
[Fwd: Re: Global CompuSearch] (leife at dls.net (Leif Ericksen))
[Fwd: Re: Global CompuSearch] (measl at mfn.org (J.A. Terranson))
Re: Webcast of crypto rump session this year! (fwd) (measl at mfn.org (J.A. Terranson))
Disney Down? (m4xatsgv at gmail.com (Frank Stein))
Disney Down? (se_cur_ity at hotmail.com (Morning Wood))
Disney Down? (prb at lava.net (Peter Besenbruch))
Re: pnp worm unknown variant - post infectionactions (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Re: pnp worm unknown variant - post infectionactions (jasonc at science.org (Jason Coombs))
Re: pnp worm unknown variant - postinfectionactions (se_cur_ity at hotmail.com (Morning Wood))
Re: pnp worm unknown variant - post infectionactions (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
[SECURITY] [DSA 777-1] New Mozilla packages fix frame injection spoofing vulnerability (joey at infodrom.org (Martin Schulze))
[Fwd: Global CompuSearch] (jasonc at science.org (Jason Coombs))
Re: Global CompuSearch (jasonc at science.org (Jason Coombs))
svchost.exe try to send http outside (howard.lee at guoco.com (howard.lee@...co.com))
svchost.exe try to send http outside (josh at tkos.co.il (Josh Zlatin-Amishav))
svchost.exe try to send http outside (mjcarter at ihug.co.nz (Mike))
svchost.exe try to send http outside (howard.lee at guoco.com (howard.lee@...co.com))
Disney Down? (michealespinola at gmail.com (Micheal Espinola Jr))
svchost.exe try to send http outside (fd at mchsi.com (Mark))
svchost.exe try to send http outside (Simon.Richter at hogyros.de (Simon Richter))
Disney Down? (xyberpix at xyberpix.com (xyberpix))
Disney Down? (larry at larryseltzer.com (Larry Seltzer))
Disney Down? (larry at larryseltzer.com (Larry Seltzer))
Re: pnp worm unknown variant - post infectionactions (mmadison at fnni.com (Madison, Marc))
Unicode Buffer Overflow in WinFtp Server 1.6.8 (fdonato at autistici.org (Donato Ferrante))
Re: svchost.exe try to send http outside (davek_throwaway at hotmail.com (Dave Korn))
phpWebSite 0.10.1 Full SQL Injection (kevin at tux.appstate.edu (Kevin Wilcox))
phpWebSite 0.10.1 Full SQL Injection (h4cky0u.org at gmail.com (h4cky0u))
Disney Down? (jan at boyakasha.dk (Jan Nielsen))
Disney Down? (vun.list at gmail.com (John Smith))
Disney Down? (fergdawg at netzero.net (Fergie (Paul Ferguson)))
Disney Down? (mikeyoung at milestechnologies.com (Michael Young))
Disney Down? (jan at boyakasha.dk (Jan Nielsen))
Disney Down? (dudevanwinkle at gmail.com (DudeVanWinkle))
Re: pnp worm unknown variant - postinfectionactions (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: pnp worm unknown variant - post infectionactions (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[ GLSA 200508-09 ] bluez-utils: Bluetooth device name validation vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Disney Down? (michealespinola at gmail.com (Micheal Espinola Jr))
Re: Global CompuSearch (deliciousbrains at gmail.com (deliciousbrains))
Cisco Security Advisory: Cisco Clean Access Unauthenticated API Access (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Disney Down? (larry at larryseltzer.com (Larry Seltzer))
disney OT, herding the cattle (dudevanwinkle at gmail.com (DudeVanWinkle))
[Fwd: Re: Global CompuSearch] (pauls at utdallas.edu (Paul Schmehl))
It's not that simple... [Was: Re: Disney Down?] (fergdawg at netzero.net (Fergie (Paul Ferguson)))
svchost.exe try to send http outside (pauls at utdallas.edu (Paul Schmehl))
Re: pnp worm unknown variant - post infectionactions (foofus at foofus.net (foofus@...fus.net))
svchost.exe try to send http outside (mailinglists at cirt.dk (CIRT.DK Mailinglists))
Buffer-overflow in Chris Moneymaker's World Poker Championship 1.0 (aluigi at autistici.org (Luigi Auriemma))
Disney Down? (fd at ew.nsci.us (fd@...nsci.us))
Disney Down? (fifi at HAX.ORG (Mike Sawicki))
It's not that simple... [Was: Re: Disney Down?] (michealespinola at gmail.com (Micheal Espinola Jr))
Re: pnp worm unknown variant - post infectionactions (jasonc at science.org (Jason Coombs))
It's not that simple... [Was: Re: Disney Down?] (prb at lava.net (Peter Besenbruch))
[Fwd: Re: Global CompuSearch] (jasonc at science.org (Jason Coombs))
PHPFreeNews v1.40 and prior Multiple Vulnerabilities (h4cky0u.org at gmail.com (h4cky0u))
It's not that simple... [Was: Re: Disney Down?] (geoincidents at nls.net (Geo.))
Disney Down? (jan at boyakasha.dk (Jan Nielsen))
Disney Down? (jasonc at science.org (Jason Coombs))
[Fwd: Global CompuSearch] (michael.holstein at csuohio.edu (Michael Holstein))
It's not that simple... [Was: Re: Disney Down?] (michealespinola at gmail.com (Micheal Espinola Jr))
It's not that simple... [Was: Re: Disney Down?] (dufresne at winternet.com (Ron DuFresne))
It's not that simple... [Was: Re: Disney Down?] (dufresne at winternet.com (Ron DuFresne))
Re: It's not that simple... (fw at deneb.enyo.de (Florian Weimer))
Re: It's not that simple... (jasonc at science.org (Jason Coombs))
Disney Down? (fd at ew.nsci.us (fd@...nsci.us))
Re: It's not that simple... (listuser at seifried.org (Kurt Seifried))
Sub_level attaq! (sub_level at mixmail.com (Miseo Sub Level))
Re: It's not that simple... (michealespinola at gmail.com (Micheal Espinola Jr))
Re: It's not that simple... (jasonc at science.org (Jason Coombs))
Disney Down? (imipak at gmail.com (imipak))
Internet Explorer 6 Meta Refresh Parsing Weakness (info at moritz-naumann.com (Moritz Naumann))

August 18 (66 messages)

Re: It's not that simple... (yossarian at planet.nl (yossarian))
Re: It's not that simple... (jasonc at science.org (Jason Coombs))
svchost.exe try to send http outside (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Internet Explorer 6 Meta Refresh Parsing Weakness (tuytumadre at att.net (tuytumadre@....net))
Bluez hcid popen() explained. (kf_lists at digitalmunition.com (KF (lists)))
[Fwd: Re: Global CompuSearch] (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
MDKSA-2005:141 - Updated evolution packages fixes format string vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:142 - Updated libtiff packages fixes vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:143 - Updated kdegraphics packages fix kfax vulnerability (security at mandriva.com (Mandriva Security Team))
svchost.exe try to send http outside (howard.lee at guoco.com (howard.lee@...co.com))
Re: It's not that simple... (fw at deneb.enyo.de (Florian Weimer))
NULL sessions on Windows 2000 systems [Was: Re: Re: It's not that simple...] (jbm.lists at gmail.com (Jean-Baptiste Marchand))
COM objects and MSIE vulnerabilities recap + additional fix (berendjanwever at gmail.com (Berend-Jan Wever))
Bypassing the new /GS protection in VC++ 7.1 (dwarkeeper at gmail.com (D K))
Internet Explorer 0-Day (houser at hush.com (houser@...h.com))
mutt buffer overflow (pvalchev at sightly.net (Peter Valchev))
Sub_level attaq! (tuytumadre at att.net (tuytumadre@....net))
Internet Explorer 0-Day (gilles.demarty at gmail.com (Gilles DEMARTY))
Juniper Netscreen VPN Username Enumeration Vulnerability (Roy.Hills at nta-monitor.com (Roy Hills))
Internet Explorer 0-Day (nick at virus-l.demon.co.uk (Nick FitzGerald))
Internet Explorer 0-Day (ratnakumarch at visualsoft-tech.com (Ratnakumar C H))
mutt buffer overflow (j at pureftpd.org (Frank Denis (Jedi/Sector One)))
[Fwd: Re: Global CompuSearch] (nick at virus-l.demon.co.uk (Nick FitzGerald))
ATutor 1.5.1 and prior multiple XSS Vulnerabilities (h4cky0u.org at gmail.com (h4cky0u))
w-agora 4.2.0 and prior Remote Directory Travel Vulnerability (h4cky0u.org at gmail.com (h4cky0u))
Re: ATutor 1.5.1 and prior multiple XSS Vulnerabilities (h4cky0u.org at gmail.com (h4cky0u))
NULL sessions on Windows 2000 systems [Was: Re: Re:It's not that simple...] (yossarian at planet.nl (yossarian))
Sub_level attaq! (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: It's not that simple... (pmelson at gmail.com (Paul Melson))
Re: It's not that simple... (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: It's not that simple... (michealespinola at gmail.com (Micheal Espinola Jr))
Re: It's not that simple... (michealespinola at gmail.com (Micheal Espinola Jr))
Re: It's not that simple... (pwicks at oxygen.com (James Patterson Wicks))
Sensitive Information Disclosure Vulnerability in Kinetics Kiosk Product (jasonc at science.org (Jason Coombs))
Internet Explorer 0-Day (kc2lto at gmail.com (Ragone_Andrew))
Internet Explorer 0-Day (abedra at westervillelibrary.org (Aaron J. Bedra))
Juniper Netscreen VPN Username Enumeration Vulnerability (synfinatic at gmail.com (ADT))
Sensitive Information Disclosure Vulnerability in Kinetics Kiosk Product (wintrmte at gmail.com (Sam Evans))
Re: MS not telling enough (jasonc at science.org (Jason Coombs))
Sensitive Information Disclosure Vulnerability in Kinetics Kiosk Product (prb at lava.net (Peter Besenbruch))
Re: MS not telling enough (thegesus at gmail.com (TheGesus))
Re: MS not telling enough (perfectirijillo at gmail.com (J u a n))
Re: MS not telling enough - ethics (dan_20407 at msn.com (DAN MORRILL))
Re: MS not telling enough (pauls at utdallas.edu (Paul Schmehl))
Re: MS not telling enough - ethics (thegesus at gmail.com (TheGesus))
Re: Not telling enough - ethics/shmethics (sil at infiltrated.net (J. Oquendo))
Re: MS not telling enough - ethics (requiem at praetor.org (Jeremy Bishop))
Sub_level attaq! (guninski at guninski.com (Georgi Guninski))
Re: MS not telling enough - ethics (dan_20407 at msn.com (DAN MORRILL))
Juniper Netscreen VPN Username Enumeration Vulnerability (synfinatic at gmail.com (ADT))
UnixWare 7.1.4 UnixWare 7.1.3 : cpio race condition and directory traversal issues fixed. (please_reply_to_security at sco.com (please_reply_to_security@....co…)
MDKSA-2005:144 - Updated wxPythonGTK packages several vulnerabilities (security at mandriva.com (Mandriva Security Team))
Re: not telling enough - ethics (bet at rahul.net (Bennett Todd))
powerbook fixing guides (Chris_Dahms at rapid7.com (Chris_Dahms@...id7.com))
bash vulnerability? (nocfed at gmail.com (nocfed))
bash vulnerability? (nocfed at gmail.com (nocfed))
It's not that simple... [Was: Re: Disney Down?] (fd at ew.nsci.us (fd@...nsci.us))
Re: MS not telling enough (tuytumadre at att.net (tuytumadre@....net))
Operator Shell (osh) Stack-based Buffer Overflow Amendment (core at bokeoa.com (Charles Stevenson))
Re: MS not telling enough (georger at nls.net (Geo.))
Multiple directory traversal vulnerabilities in Claroline ... NOT (robbedekeyzer at hotmail.com (Robbe De Keyzer))
Internet Explorer 0-Day (milw0rm at gmail.com (milw0rm Inc.))
Internet Explorer 6 Meta Refresh Parsing Weakness (info at moritz-naumann.com (Moritz Naumann))
Re: Sensitive Information Disclosure Vulnerability in Kinetics Kiosk Product (jdyson at treachery.net (Jay D. Dyson))
bash vulnerability? (jlauro at umflint.edu (Lauro, John))
Juniper Netscreen VPN Username Enumeration Vulnerability (Roy.Hills at nta-monitor.com (Roy Hills))

August 19 (39 messages)

Disney Down? (pingywon at hotmail.com (pingywon))
It's not that simple... [Was: Re: Disney Down?] (nick at virus-l.demon.co.uk (Nick FitzGerald))
Fwd: Tor security advisory: DH handshake flaw (chris at eff.org (Chris Palmer))
Re: MS not telling enough - ethics (measl at mfn.org (J.A. Terranson))
The Cisco media frenzy (blsonne at rogers.com (Byron L. Sonne))
Re: MS not telling enough - ethics (ivanhec at gmail.com (Ivan .))
Fwd: Tor security advisory: DH handshake flaw (fwd) (measl at mfn.org (J.A. Terranson))
Bypassing the new /GS protection in VC++ 7.1 (secunia.full.disclosure at gmail.com (leaf))
[MISC] When people ask for security holes as features (fwd) (measl at mfn.org (J.A. Terranson))
windows netstat (ratnakumarch at visualsoft-tech.com (Ratnakumar C H))
windows netstat (0wnj00 at gmail.com (Owned You))
Bypassing the new /GS protection in VC++ 7.1 (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[ GLSA 200508-10 ] Kismet: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200508-11 ] Adobe Reader: Buffer Overflow (koon at gentoo.org (Thierry Carrez))
Bypassing the new /GS protection in VC++ 7.1 (trains at doctorunix.com (trains@...torunix.com))
Re: windows netstat (davek_throwaway at hotmail.com (Dave Korn))
Re: Not telling enough - ethics/shmethics (jftucker at gmail.com (James Tucker))
Re: MS not telling enough - ethics (jericho at attrition.org (security curmudgeon))
Re: MS not telling enough (jftucker at gmail.com (James Tucker))
It's not that simple... [Was: Re: Disney Down?] (jftucker at gmail.com (James Tucker))
morphed into certification argument (was : MS not telling enough - ethics) (michael.holstein at csuohio.edu (Michael Holstein))
Re: Sensitive Information Disclosure Vulnerability in Kinetics Kiosk Product (zow at llnl.gov (Zow Terry Brugger))
[USN-169-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Secunia Research: HAURI Anti-Virus Compressed Archive Directory Traversal (vuln at secunia.com (Secunia Research))
[SECURITY] [DSA 778-1] New mantis packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
FrSIRT False Alarm (dudevanwinkle at gmail.com (DudeVanWinkle))
FrSIRT False Alarm (toddtowles at brookshires.com (Todd Towles))
FrSIRT False Alarm (sixsigma98 at hotmail.com (Ray P))
FrSIRT False Alarm (dudevanwinkle at gmail.com (DudeVanWinkle))
[USN-170-1] gnupg vulnerability (martin.pitt at canonical.com (Martin Pitt))
Disney Down? (forensis.technica at gmail.com (Technica Forensis))
The Cisco media frenzy (forensis.technica at gmail.com (Technica Forensis))
Disney Down? (dankney at sunsetfilms.com (Donald J. Ankney))
Disney Down? (michealespinola at gmail.com (Micheal Espinola Jr))
Disney Down? (chromazine at sbcglobal.net (Steve Kudlak))
Disney Down? (michealespinola at gmail.com (Micheal Espinola Jr))
It's not that simple... [Was: Re: Disney Down?] (barrie at reboot-robot.net (Barrie Dempster))
CCC Congress 2005 (fulld at wasn.org (Burak Cifter))
Re: Erroneous Informations - Multiple directory traversal vulnerabilities in Claroline (hugues.peeters at claroline.net (Hugues Peeters))

August 20 (18 messages)

Off topic. To the list Admins or anyone that can help me (waldoalvarez00 at gmail.com (waldo alvarez))
windows netstat (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Off topic. To the list Admins or anyone that can help me (ahaning at gmail.com (Andrew Haninger))
SQL Injeciton. (GabbarRang at netscape.net (Gabbar Sing))
SQL Injeciton. (requiem at praetor.org (Jeremy Bishop))
windows netstat (gautam.singh at gmail.com (Gautam R. Singh))
Off topic. To the list Admins or anyone that can help me (measl at mfn.org (J.A. Terranson))
SQL Injeciton. (GabbarRang at netscape.net (Gabbar Sing))
FrSIRT False Alarm (ad at class101.org (ad@...ss101.org))
[RETRO AUDITING] Elm remote buffer overflow in Expires header (metaur at telia.com (Ulf Harnhammar))
[SECURITY] [DSA 779-1] New Mozilla Firefox packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
[USN-171-1] PHP4 vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
FrSIRT False Alarm (pvnick at gmail.com (Paul))
FrSIRT False Alarm (ad at class101.org (ad@...ss101.org))
FrSIRT False Alarm (Thierry at sniff-em.com (Thierry Zoller))
FrSIRT False Alarm (pvnick at gmail.com (Paul))
Re: ATutor 1.5.1 and prior multiple XSS Vulnerabilities (mayank_priya7 at rediffmail.com (mayank priya))
FrSIRT False Alarm (jerome.athias at free.fr (Jérôme ATHIAS))

August 21 (7 messages)

Zotob Worm Remover (xillwillx at gmail.com (Ill will))
Off topic. To the list Admins or anyone that can help me (waldoalvarez00 at gmail.com (wac))
Re: MS not telling enough - ethics (ivanhec at gmail.com (Ivan .))
Zotob Worm Remover (pingywon at hotmail.com (pingywon))
Re: Secunia Research: HAURI Anti-Virus Compressed Archive Directory Traversal (gega-it at web.de (Andreas Marx))
Zotob Worm Remover (ad at class101.org (ad@...ss101.org))
BBCode [IMG] [/IMG ] Tag Vulnerability (h4cky0u.org at gmail.com (h4cky0u))

August 22 (35 messages)

Zotob Worm Remover (xploitable at gmail.com (n3td3v))
Zotob Worm Remover (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
ELM < 2.5.8 Remote Exploit POC (c0ntexb at gmail.com (c0ntex))
BBCode [IMG] [/IMG ] Tag Vulnerability (Jan_Kantert at web.de (Jan Kantert))
SUSE Security Announcement: Adobe Reader Plugin buffer overflow (SUSE-SA:2005:047) (meissner at suse.de (Marcus Meissner))
[SECURITY] [DSA 780-1] New kpdf packages fix denial of service (joey at infodrom.org (Martin Schulze))
BBCode [IMG] [/IMG ] Tag Vulnerability (milw0rm at gmail.com (milw0rm Inc.))
Re: BBCode [IMG] [/IMG] Tag Vulnerability (zx at castlecops.com (Paul Laudanski))
Zotob Worm Remover (toddtowles at brookshires.com (Todd Towles))
An old/new security list (dave at immunitysec.com (Dave Aitel))
An old/new security list (thegesus at gmail.com (TheGesus))
Re: BBCode [IMG] [/IMG] Tag Vulnerability (frick at sc-networks.de (Christoph Frick))
[ Suresec Advisories ] - Several MacOS X vulnerabilities (advisories at suresec.org (Suresec Advisories))
It's not that simple... [Was: Re: Disney Down?] (dufresne at winternet.com (Ron DuFresne))
Re: BBCode [IMG] [/IMG] Tag Vulnerability (zx at castlecops.com (Paul Laudanski))
I am not at the office (Jerry.Eblin at rrsc.com (Jerry Eblin))
Zotob Worm Remover (xploitable at gmail.com (n3td3v))
DMA[2005-0818a] - 'Apple OSX dsidentity privilege abuse' (kf_lists at digitalmunition.com (KF (lists)))
Cisco Security Advisory: SSL Certificate Validation Vulnerability in IDS Management Software (psirt at cisco.com (Cisco Systems Product Security Incident Resp…)
Cisco Security Advisory: Cisco Intrusion Prevention System Vulnerable to Privilege Escalation (psirt at cisco.com (Cisco Systems Product Security Incident Resp…)
Zotob Worm Remover (toddtowles at brookshires.com (Todd Towles))
Re: FrSIRT False Alarm (davek_throwaway at hotmail.com (Dave Korn))
Zotob Worm Remover (xploitable at gmail.com (n3td3v))
Zotob Worm Remover (xillwillx at gmail.com (Ill will))
An old/new security list (xillwillx at gmail.com (Ill will))
Re: FrSIRT False Alarm (xillwillx at gmail.com (Ill will))
Zotob Worm Remover (toddtowles at brookshires.com (Todd Towles))
32919 - Computer Associates Message Queuing (CAM/CAFT) multiple vulnerabilities (James.Williams at ca.com (Williams, James K))
Zotob Worm Remover (dufresne at winternet.com (Ron DuFresne))
Zotob Worm Remover (toddtowles at brookshires.com (Todd Towles))
Zotob Worm Remover (jan at boyakasha.dk (Jan Nielsen))
Zotob Worm Remover (jftucker at gmail.com (James Tucker))
Zotob Worm Remover (toddtowles at brookshires.com (Todd Towles))
SQL Injection and PHP Code Injection Vulnerabilities in PHPKit 1.6.1 (phuket.bugtraq at gmail.com (phuket))
Zotob Worm Remover (stuart at serverpeak.com (Stuart Low))

August 23 (31 messages)

MDKSA-2005:145 - Updated openvpn packages fix several vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:146 - Updated php-pear packages fix more PEAR XML-RPC vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:147 - Updated slocate packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:148 - Updated vim packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
Zotob Worm Remover (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Zotob Worm Remover (pingywon at hotmail.com (pingywon))
An old/new security list (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Zotob Worm Remover (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
An old/new security list (jeff-kell at utc.edu (Jeff Kell))
Port 8041 Syn flood (rvarada at gmail.com (Rajesh))
Problems with unsuscribing (sven.suetterlin at dts.de (Suetterlin, Sven))
Problems with unsuscribing (jallen at logicaldevelopments.com.au (Justin Allen))
[SECURITY] [DSA 782-1] New bluez-utils packages fix arbitrary command execution (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 781-1] New Mozilla Thunderbird packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Problems with unsuscribing (measl at mfn.org (J.A. Terranson))
New Tool: Oracle Password Checker (ak at red-database-security.com (Kornbrust, Alexander))
I am not at the office (measl at mfn.org (J.A. Terranson))
An old/new security list (forensis.technica at gmail.com (Technica Forensis))
[USN-172-1] lm-sensors vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-173-1] PCRE vulnerability (martin.pitt at canonical.com (Martin Pitt))
Zotob Worm Remover (dufresne at winternet.com (Ron DuFresne))
Problems with unsuscribing (dufresne at winternet.com (Ron DuFresne))
Server crash in Ventrilo 2.3.0 (aluigi at autistici.org (Luigi Auriemma))
Re: Secunia Research: HAURI Anti-Virus Compressed Archive Directory Traversal (coley at mitre.org (Steven M. Christey))
Re: Secunia Research: HAURI Anti-Virus Compressed Archive Directory Traversal (kf_lists at digitalmunition.com (KF (lists)))
Re: Secunia Research: HAURI Anti-Virus Compressed Archive Directory Traversal (kf_lists at digitalmunition.com (KF (lists)))
Re: Secunia Research: HAURI Anti-Virus Compressed Archive Directory Traversal (mark.sec at gmail.com (Mark Sec))
Zotob Worm Remover (madhat at unspecific.com (MadHat))
An old/new security list (pvnick at gmail.com (Paul))
[spam] Re: An old/new security list (exibar at thelair.com (Exibar))
Re: Secunia Research: HAURI Anti-Virus Compressed Archive Directory Traversal (coley at linus.mitre.org (Steven M. Christey))

August 24 (66 messages)

[spam] Re: An old/new security list (jftucker at gmail.com (James Tucker))
mplayer overflow (sven at sven-tantau.de (Sven Tantau))
beginning to count the time (edgardo.zavala at gmail.com (Edgardo Zavala))
beginning to count the time (AG at IPFW.NET (Adam Gardner))
beginning to count the time (dentonj at gmail.com (Jeffrey Denton))
Port 8041 Syn flood (saintau at sdf.lonestar.org (Jackson McKinley))
beginning to count the time (dmargoli+lists at af0.net (Dan Margolis))
Port 8041 Syn flood (rvarada at gmail.com (Rajesh))
[SECURITY] [DSA 783-1] New mysql packages fix insecure temporary file (joey at infodrom.org (Martin Schulze))
Is this a phishing attempt? (winsoc at googlemail.com (winsoc))
Is this a phishing attempt? (njh at bandsman.co.uk (Nigel Horne))
[ GLSA 200508-13 ] PEAR XML-RPC, phpxmlrpc: New PHP script injection vulnerability (koon at gentoo.org (Thierry Carrez))
talk.google.com (jasonc at science.org (Jason Coombs))
talk.google.com (Stuart.Carter at bbcel.co.uk (Stuart Carter))
talk.google.com (andrew.rse at gmail.com (Andrew Smith))
talk.google.com (Stuart.Carter at bbcel.co.uk (Stuart Carter))
anybody remember the name of this tool (trihuynh at huynhsec.com (trihuynh@...nhsec.com))
LeapFTP .lsq Buffer Overflow Vulnerability (smaillist at gmail.com (Sowhat .))
talk.google.com (andrew.rse at gmail.com (Andrew Smith))
talk.google.com (Stuart.Carter at bbcel.co.uk (Stuart Carter))
talk.google.com (Stuart.Carter at bbcel.co.uk (Stuart Carter))
talk.google.com (geoincidents at nls.net (Geo.))
talk.google.com (cdupuis at cccure.org (Clement Dupuis))
Port 8041 Syn flood (michael.hale at gmail.com (Michael Hale))
talk.google.com (andrew.rse at gmail.com (Andrew Smith))
talk.google.com (tquinlan at capitaliq.com (Thomas Quinlan))
talk.google.com (tquinlan at capitaliq.com (Thomas Quinlan))
talk.google.com (brian at dessent.net (Brian Dessent))
talk.google.com (javipolo at datagrama.net (Javi Polo))
talk.google.com (harry at behrens.com (Harry Behrens))
talk.google.com (tdavis at sonicdev.com (Tyler Davis))
anybody remember the name of this tool (gkverma at gmail.com (Gaurav Kumar))
Miscrosoft Registry Editor 5.1/XP/2K long string key vulnerability (sprog at online.ru (Igor Franchuk))
Secunia Research: HAURI Anti-Virus ACE Archive Handling Buffer Overflow (vuln at secunia.com (Secunia Research))
talk.google.com (jerome.athias at free.fr (Jérôme ATHIAS))
AV Reaction Times of the latest MS05-039-based Worm Attacks (gega-it at web.de (Andreas Marx))
Secunia Research: SqWebMail Attached File Script Insertion Vulnerability (vuln at secunia.com (Secunia Research))
anybody remember the name of this tool (crg at digitalsec.net (Crg))
talk.google.com (sikurezza at nexlab.it (sikurezza@...lab.it))
anybody remember the name of this tool (root at infiltrated.net (J. Oquendo))
Miscrosoft Registry Editor 5.1/XP/2K long string key vulnerability (jerome.athias at free.fr (Jérôme ATHIAS))
[RLSA_01-2005] QNX inputtrap arbitrary file read vulnerability (julio at rfdslabs.com.br (Julio Cesar Fort))
(no subject) (fdonato at autistici.org (Donato Ferrante))
talk.google.com (jftucker at gmail.com (James Tucker))
[USN-173-2] PCRE vulnerability (martin.pitt at canonical.com (Martin Pitt))
Miscrosoft Registry Editor 5.1/XP/2K long string key vulnerability (gilles.demarty at gmail.com (Gilles DEMARTY))
talk.google.com (david at crlf.net (David Maxwell))
talk.google.com (jftucker at gmail.com (James Tucker))
Miscrosoft Registry Editor 5.1/XP/2K long string key vulnerability (jftucker at gmail.com (James Tucker))
Miscrosoft Registry Editor 5.1/XP/2K long stringkey vulnerability (aprotas at eeye.com (Andre Protas))
talk.google.com (chema at sl-form.com (José María Mateos))
FW: Dumador-Varianten gesucht / looking for variants of Dumador (craig.soderland at sap.com (Soderland, Craig))
Miscrosoft Registry Editor 5.1/XP/2K long string key vulnerability (trik-news at gmx.de (Spiro Trikaliotis))
Re: LeapFTP .lsq Buffer Overflow Vulnerability (c0d3rz_team at yahoo.com (Kaveh Razavi))
[ GLSA 200508-14 ] TikiWiki, eGroupWare: Arbitrary command execution through XML-RPC (koon at gentoo.org (Thierry Carrez))
beginning to count the time (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Is this a phishing attempt? (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
anybody remember the name of this tool (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
talk.google.com (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
HOWTO: Crack Oracle Security like a peanut? (jeroen at isvet.nl (Jeroen))
anybody remember the name of this tool (iago at valhallalegends.com (Ron))
talk.google.com (nc at ncartron.org (Nicolas CARTRON))
anybody remember the name of this tool (twebster at blackhillscorp.com (twebster@...ckhillscorp.com))
beginning to count the time (naveedafzal at gmail.com (naveed))
FrSIRT False Alarm (naveedafzal at gmail.com (naveed))
Re: LeapFTP .lsq Buffer Overflow Vulnerability (augm58 at dsl.pipex.com (Paul Farrow))

August 25 (39 messages)

beginning to count the time (edgardo.zavala at gmail.com (Edgardo Zavala))
talk.google.com (rduque at the-beach.net (Ruben Duque))
talk.google.com (mohit.muthanna at gmail.com (Mohit Muthanna))
talk.google.com (mohit.muthanna at gmail.com (Mohit Muthanna))
talk.google.com (dmargoli+lists at af0.net (Dan Margolis))
Re: Miscrosoft Registry Editor 5.1/XP/2K long string key vulnerability (ngiles at hushmail.com (mike king))
FrSIRT False Alarm (xillwillx at gmail.com (Ill will))
[ GLSA 200508-15 ] Apache 2.0: Denial of Service vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200508-16 ] Tor: Information disclosure (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
talk.google.com (Stuart.Carter at bbcel.co.uk (Stuart Carter))
Can executable file(can't read) still be coredumped in solaris ? (alert7 at xfocus.org (alert7))
Re: LeapFTP .lsq Buffer Overflow Vulnerability (alacrity at gmail.com (Damien Palmer))
HOWTO: Crack Oracle Security like a peanut? (simon at lab.b-care.net (Simon Marechal))
MS05-039 spreading was: AV Reaction Times of the latest MS05-039-based Worm Attacks (trains at doctorunix.com (trains@...torunix.com))
HOWTO: Crack Oracle Security like a peanut? (fabien.kraemer at gmail.com (Fabien Kraemer))
[SECURITY] [DSA 784-1] New courier packages fix denial of service (joey at infodrom.org (Martin Schulze))
talk.google.com (pmelson at gmail.com (Paul Melson))
Advisory: iTAN not as secure as claimed (release at redteam-pentesting.de (release@...team-pentesting.de))
talk.google.com (routerg at gmail.com (My Name))
Re: Miscrosoft Registry Editor 5.1/XP/2K long string key vulnerability (michealespinola at gmail.com (Micheal Espinola Jr))
NOVL-2005010098073 GroupWise Password Caching (ereed at novell.com (Ed Reed))
FrSIRT False Alarm (avivra at gmail.com (Aviv Raff))
NOVL-2005010098073 GroupWise Password Caching (atarasco at gmail.com (Andres Tarasco))
MS05_039 Exploitation (different languages) (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
Possibly OT: Tracing us (Was: Re: talk.google.com) (auto447062 at hushmail.com (auto447062@...hmail.com))
[SECURITY] [DSA 785-1] New libpam-ldap packages fix authentication bypass (joey at infodrom.org (Martin Schulze))
talk.google.com (aprotas at eeye.com (Andre Protas))
talk.google.com (jftucker at gmail.com (James Tucker))
[ GLSA 200508-17 ] libpcre: Heap integer overflow (dercorny at gentoo.org (Stefan Cornelius))
iDEFENSE Labs Releases File Format Fuzzing Tools and Announces Quarterly Award Winners (labs-no-reply at idefense.com (iDEFENSE Labs))
talk.google.com (aprotas at eeye.com (Andre Protas))
MS05_039 Exploitation (different languages) (ad at class101.org (ad@...ss101.org))
FrSIRT False Alarm (ad at class101.org (ad@...ss101.org))
MDKSA-2005:149 - Updated lm_sensors packages fix temporary file vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:150 - Updated bluez-utils packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:151 - Updated pcre packages fix integer overflow vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:152 - Updated php packages fix integer overflow vulnerability (security at mandriva.com (Mandriva Security Team))
Re: MS05_039 Exploitation (different languages) (fmourron at exaprobe.com (Fabrice MOURRON))
Cross Reference List of Virus and Worm Names available (gega-it at web.de (Andreas Marx))

August 26 (29 messages)

[ GLSA 200508-12 ] Evolution: Format string vulnerabilities (dercorny at gentoo.org (Stefan Cornelius))
talk.google.com (forensis.technica at gmail.com (Technica Forensis))
talk.google.com (jallen at logicaldevelopments.com.au (Justin Allen))
talk.google.com (jallen at logicaldevelopments.com.au (Justin Allen))
Is this a phishing attempt? (forensis.technica at gmail.com (Technica Forensis))
Is this a phishing attempt? (fergdawg at netzero.net (Fergie (Paul Ferguson)))
talk.google.com (dmargoli+lists at af0.net (Daniel Margolis))
Is this a phishing attempt? (evildagmar at gmail.com (Dagmar d'Surreal))
[SECURITY] [DSA 786-1] New simpleproxy packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Simple PHP Blog File Upload and User Credentials Exposure Vulnerabilities (wr0ck at xorcrew.net (Scott Dewey))
[SECURITY] [DSA 787-1] New backup-manager package fixes several vulnerabilities (joey at infodrom.org (Martin Schulze))
[ GLSA 200508-18 ] PhpWiki: Arbitrary command execution through XML-RPC (koon at gentoo.org (Thierry Carrez))
Multi-Languages OPcodes DB (jerome.athias at free.fr (Jerome Athias))
talk.google.com (jftucker at gmail.com (James Tucker))
Example firewall script (bmartin at desic-sl.com (Bernardo Martín))
Re: MS05_039 Exploitation (different languages) (sanjayr at intoto.com (Sanjay Rawat))
Sophos Antivirus Library Remote Heap Overflow (list at rem0te.com (list@...0te.com))
Re: MS05_039 Exploitation (different languages) (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
Example firewall script (jlay at slave-tothe-box.net (James Lay))
22nd Chaos Communication Congress 2005: Call for Papers (fukami at berlin.ccc.de (fukami))
[USN-174-1] courier vulnerability (martin.pitt at canonical.com (Martin Pitt))
RE: Example firewall script (ericscher at mac.com (ericscher@....com))
Re: Bash vulnerability? (th3r007m45t3r at hotmail.com (Rootmaster G))
talk.google.com (Mark.Senior at gov.ab.ca (Mark Senior))
Re: Bash vulnerability? (gilles.demarty at gmail.com (Gilles DEMARTY))
talk.google.com (xillwillx at gmail.com (Ill will))
Re: Bash vulnerability? (octetstream at gmail.com (Octal))
Re: Bash vulnerability? (abedra at westervillelibrary.org (Aaron J. Bedra))
Re: Bash vulnerability? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

August 27 (28 messages)

DMA[2005-0826a] - 'Nokia Affix Bluetooth btsrv poor use of popen()' (kf_lists at digitalmunition.com (KF (lists)))
MDKSA-2005:153 - Updated gnumeric packages fix integer overflow vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:154 - Updated python packages fix integer overflow vulnerability (security at mandriva.com (Mandriva Security Team))
[inbox] Re: Is this a phishing attempt? (exibar at thelair.com (Exibar))
RE: Sophos Antivirus Library Remote Heap Overflow (dowlingg at sullcrom.com (Dowling, Gabrielle))
talk.google.com (xploitable at gmail.com (n3td3v))
[inbox] Example firewall script (exibar at thelair.com (Exibar))
RE: Example firewall script (ericscher at mac.com (ericscher@....com))
securityfocus.com outage? (xploitable at gmail.com (n3td3v))
RE: Example firewall script (measl at mfn.org (J.A. Terranson))
talk.google.com (wesleymcgrew at gmail.com (Robert Wesley McGrew))
RE: Example firewall script (jftucker at gmail.com (James Tucker))
securityfocus.com outage? (xploitable at gmail.com (n3td3v))
Re: Tool for Identifying Rogue Linksys Routers (pvnick at gmail.com (Paul))
securityfocus.com outage? (pvnick at gmail.com (Paul))
securityfocus.com outage? (xploitable at gmail.com (n3td3v))
securityfocus.com outage? (steve at unixwiz.net (Steve Friedl))
securityfocus.com outage? (israel at ochosting.com (Israel Lopez - OCHosting Lead Network Administrator))
securityfocus.com outage? (hummer at domeranger.com (hummer@...eranger.com))
securityfocus.com outage? (fergdawg at netzero.net (Fergie (Paul Ferguson)))
RE: Example firewall script (jan at boyakasha.dk (Jan Nielsen))
RE: Example firewall script (mayhem at recursiva.org (mayhem))
securityfocus.com outage? (rodrigob at suespammers.org (Rodrigo Barbosa))
securityfocus.com outage? (xploitable at gmail.com (n3td3v))
Re: securityfocus.com outage? (naveedafzal at gmail.com (naveed))
RE: Example firewall script (measl at mfn.org (J.A. Terranson))
Eric Scher - "Ball-less" Poster Boy (measl at mfn.org (J.A. Terranson))
Synopsis (measl at mfn.org (J.A. Terranson))

August 28 (31 messages)

talk.google.com (xploitable at gmail.com (n3td3v))
RE: Example firewall script (jasonc at science.org (Jason Coombs))
RE: Example firewall script (measl at mfn.org (J.A. Terranson))
talk.google.com (y0himba at technolounge.org (y0himba))
Is this a phishing attempt? (waldoalvarez00 at gmail.com (wac))
[inbox] Re: Is this a phishing attempt? (evildagmar at gmail.com (Dagmar d'Surreal))
[inbox] Re: Is this a phishing attempt? (steve at unixwiz.net (Steve Friedl))
J. A. Terranson (ericscher at mac.com (ericscher@....com))
J. A. Terranson (kf_lists at digitalmunition.com (KF (lists)))
talk.google.com (wesleymcgrew at gmail.com (Robert Wesley McGrew))
Re: Bash vulnerability? (abedra at westervillelibrary.org (Aaron Bedra))
J. A. Terranson (ij3n0spam at gmail.com (James_gmail-ij))
Re: Sophos Antivirus Library Remote Heap Overflow (list at rem0te.com (list@...0te.com))
[inbox] RE: Example firewall script (exibar at thelair.com (Exibar))
[inbox] RE: RE: Example firewall script (exibar at thelair.com (Exibar))
Re: securityfocus.com outage? (xploitable at gmail.com (n3td3v))
Re: securityfocus.com outage? (Bob.Beringer at usa.net (Bob Beringer))
Eric Scher - "Ball-less" Poster Boy (fd at ew.nsci.us (fd@...nsci.us))
Eric Scher - "Ball-less" Poster Boy (ad at class101.org (ad@...ss101.org))
Eric Scher - "Ball-less" Poster Boy (measl at mfn.org (J.A. Terranson))
J. A. Terranson (measl at mfn.org (J.A. Terranson))
J. A. Terranson (janus at volny.cz (Honza Vlach))
violent words (peer at baden-online.de (Peer Janssen))
J. A. Terranson (mjcarter at ihug.co.nz (mjcarter@...g.co.nz))
violent words (y0himba at technolounge.org (y0himba))
violent words (measl at mfn.org (J.A. Terranson))
J. A. Terranson (measl at mfn.org (J.A. Terranson))
Re: Re: violent words (hescominsoon at emmanuelcomputerconsulting.com (hescominsoon@...anuelcomputerconsulting.com))
violent words (y0himba at technolounge.org (y0himba))
violent words (nbilogorskiy at fortinet.com (Nick Bilogorskiy))
J. A. Terranson (prb at lava.net (Peter Besenbruch))

August 29 (38 messages)

J. A. Terranson (steve_r125 at yahoo.co.uk (Steve R))
violent words (pvnick at gmail.com (Paul))
J. A. Terranson (ghosts at gmail.com (ghost))
violent words (stevex11 at sbcglobal.net (Steve Kudlak))
[HV-FUN] Interactve MS Vulnerabilities maps (vuln at hexview.com (vuln@...view.com))
Really ODD 12 byte UDP attempts (jlay at slave-tothe-box.net (James Lay))
Xcon2005 papers released (alert7 at xfocus.org (alert7))
Really ODD 12 byte UDP attempts (BlueBoar at thievco.com (Blue Boar))
Really ODD 12 byte UDP attempts (michael.hale at gmail.com (Michael Hale))
J. A. Terranson (stevex11 at sbcglobal.net (Steve Kudlak))
Re: JA (disclosure at wykkyd.securecoffee.com (Bardus Populus))
J. A. Terranson (atte.peltomaki at f-secure.com (Atte Peltomaki))
J. A. Terranson (joxeankoret at gmail.com (Joxean Koret))
Chung's Donut Shop Release: Hacking Sprint PCS Vision (alexia183 at sbcglobal.net (ara rhea))
Secunia Research: SqWebMail HTML Emails Script Insertion Vulnerability (vuln at secunia.com (Secunia Research))
RE: Example firewall script (bmartin at desic-sl.com (Bernardo Martín))
RE: Example firewall script (iptables) (bmartin at desic-sl.com (Bernardo Martín))
Really ODD 12 byte UDP attempts (jlay at slave-tothe-box.net (James Lay))
[SECURITY] [DSA 788-1] New kismet packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Re: JA (exibar at thelair.com (Exibar))
Julie Terranson (winsoc at googlemail.com (winsoc))
RE: Example firewall script (iptables) (hdw at kallisti.se (Anders B Jansson))
[SECURITY] [DSA 789-1] New PHP 4 packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
J. A. Terranson (measl at mfn.org (J.A. Terranson))
Land Down Under 801 And Prior Multiple SQL Injection Vulnerabilities (h4cky0u.org at gmail.com (h4cky0u))
J. A. Terranson (michealespinola at gmail.com (Micheal Espinola Jr))
Multiple vulnerabilities in BFCommand & Control for Battlefield 1942 and Vietnam (aluigi at autistici.org (Luigi Auriemma))
Eric Scher - "Ball-less" Poster Boy (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Chung's Donut Shop Release: Hacking Sprint PCS Vision (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
J. A. Terranson (jsmith1001 at post.com (John Smith))
iDEFENSE Security Advisory 08.29.05: Adobe Version Cue VCNative Arbitrary Library Loading Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 08.29.05: Adobe Version Cue VCNative Arbitrary File Overwrite Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 08.29.05: Symantec AntiVirus 9 Corporate Edition Local Privilege Escalation Vulnerability (labs-no-reply at idefense.com (iDEFENSE…)
Re: Chung's Donut Shop Release: Hacking Sprint PCS Vision (toonces.foo at gmail.com (Steven Smith))
SimplePHPBlog Arbitrary File Deletion and Sample Exploit (ken at ftusecurity.com ('ken'@FTU))
The Wireless Networking Excuse (yahoo123456 at hushmail.com (yahoo123456@...hmail.com))
Re: Xcon2005 papers released (alert7) (liudieyu at umbrella.name (liudieyu@...rella.name))
Re: Tool for Identifying Rogue Linksys Routers (gboyce at badbelly.com (Gregory Boyce))

August 30 (46 messages)

MDKSA-2005:155 - Updated apache2 packages fix integer overflow vulnerability (security at mandriva.com (Mandriva Security Team))
Re: The Wireless Networking Excuse (womber at gmail.com (womber))
BNBT EasyTracker Remote Denial of Service Vulnerability (smaillist at gmail.com (Sowhat .))
Re: The Wireless Networking Excuse (fd at ew.nsci.us (fd@...nsci.us))
Re: The Wireless Networking Excuse (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
No one else seeing the new MS05-039 worm yet? (vvandal at well.com (Vic Vandal))
[SECURITY] [DSA 790-1] New phpldapadmin packages fix unauthorised access (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 791-1] New maildrop packages fix arbitrary group mail command execution (joey at infodrom.org (Martin Schulze))
RE: Example firewall script (iptables) (bmartin at desic-sl.com (Bernardo Martín))
[USN-173-3] Fixed apache2 packages for USN-173-2 (martin.pitt at canonical.com (Martin Pitt))
RE: Example firewall script (rara at navigo.com (Rachael Treu Gomes))
Julie Terranson (skodliv at gmail.com (poo))
The Wireless Networking Excuse (saintau at sdf.lonestar.org (Jackson McKinley))
e107 0.6 forum_post.php create new topics in non-existing forums (marc.ruef at computec.ch (Marc Ruef))
Out of Office AutoReply: Julie Terranson (skodliv at gmail.com (poo))
Out of Office Reply - Julie Terranson (winsoc at googlemail.com (winsoc))
[UNTRUE] Gadu-Gadu supposedly fixed the invisible detection vulnerability? (maciej at soltysiak.com (Maciej Soltysiak))
Out of Office Reply - Julie Terranson (jsmith1001 at post.com (John Smith))
Out of Office Reply - Julie Terranson (skodliv at gmail.com (poo))
No one else seeing the new MS05-039 worm yet? (se_cur_ity at hotmail.com (Morning Wood))
No one else seeing the new MS05-039 worm yet? (something.anonymous at gmail.com (Something Anonymous))
Massive Enumeration Toolset (ppetkov at gnucitizen.org (Petko Petkov))
SUSE Security Announcement: pcre integer overflows (SUSE-SA:2005:048) (meissner at suse.de (Marcus Meissner))
RE: Example firewall script (iptables) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
No one else seeing the new MS05-039 worm yet? (se_cur_ity at hotmail.com (Morning Wood))
No one else seeing the new MS05-039 worm yet? (infsec at gmail.com (Willem Koenings))
[ GLSA 200508-19 ] lm_sensors: Insecure temporary file creation (koon at gentoo.org (Thierry Carrez))
SUSE Security Announcement: php4/php5 Pear::XML_RPC code injection and PCRE integer overflow problems (SUSE-SA:2005:049… (meissner at suse.de (Marcus Meissner))
[ GLSA 200508-20 ] phpGroupWare: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
Massive Enumeration Toolset (ppetkov at gnucitizen.org (Petko Petkov))
Massive Enumeration Toolset (crittendeniv at gmail.com (CrittendenIV))
Massive Enumeration Toolset (perrymonj at networkarmor.com (Josh perrymon))
Massive Enumeration Toolset (crittendeniv at gmail.com (CrittendenIV))
Massive Enumeration Toolset (y0himba at technolounge.org (y0himba))
Massive Enumeration Toolset (se_cur_ity at hotmail.com (Morning Wood))
Massive Enumeration Toolset (y0himba at technolounge.org (y0himba))
Massive Enumeration Toolset (crittendeniv at gmail.com (CrittendenIV))
Massive Enumeration Toolset (perrymonj at networkarmor.com (Josh perrymon))
Massive Enumeration Toolset (crittendeniv at gmail.com (CrittendenIV))
Massive Enumeration Toolset (se_cur_ity at hotmail.com (Morning Wood))
Massive Enumeration Toolset (crittendeniv at gmail.com (CrittendenIV))
Massive Enumeration Toolset (MET-support@...citizen.org) (kf_lists at digitalmunition.com (KF (lists)))
Massive Enumeration Toolset (ppetkov at gnucitizen.org (Petko Petkov))
Massive Enumeration Toolset (MET-support@...citizen.org) (ppetkov at gnucitizen.org (Petko Petkov))
No one else seeing the new MS05-039 worm yet? (vvandal at well.com (Vic Vandal))
No one else seeing the new MS05-039 worm yet? (pferrie at symantec.com (Peter Ferrie))

August 31 (31 messages)

No one else seeing the new MS05-039 worm yet? (fd at ew.nsci.us (fd@...nsci.us))
RE: Example firewall script (fd at ew.nsci.us (fd@...nsci.us))
Proxy navigation problem. (pablorolon at bvconline.com.ar (Pablo A. Rolon))
RE: Example firewall script (iptables) (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
RE: Example firewall script (iptables) (fd at ew.nsci.us (fd@...nsci.us))
J. A. Terranson (chromazine at sbcglobal.net (Steve Kudlak))
Re: JA (chromazine at sbcglobal.net (Steve Kudlak))
Re: BNBT EasyTracker Remote Denial of Service Vulnerability (smaillist at gmail.com (Sowhat .))
ELSA Lancom Router Discloses the Administrator Password to Remote Users (winsoc at googlemail.com (winsoc))
[SECURITY] [DSA 792-1] New pstotext packages fix arbitrary command execution (joey at infodrom.org (Martin Schulze))
[USN-173-4] PCRE vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Indiatimes Messenger 6.0 Buffer Overflow (Remote) (viper31337 at yahoo.co.in (ViPeR))
Disk Cleaning Tools (builder173 at hotmail.com (Bob the Builder))
Fwd: Disk Cleaning Tools (winsoc at googlemail.com (winsoc))
Fwd: Disk Cleaning Tools (Marek.Isalski at smuht.nwest.nhs.uk (Marek Isalski))
Disk Cleaning Tools (the.soylent at gmail.com (the.soylent))
Disk Cleaning Tools (h4cky0u.org at gmail.com (h4cky0u))
[ GLSA 200508-21 ] phpWebSite: Arbitrary command execution through XML-RPC and SQL injection (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200508-22 ] pam_ldap: Authentication bypass vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Fwd: Disk Cleaning Tools (builder173 at hotmail.com (Bob the Builder))
Disk Cleaning Tools (exibar at thelair.com (Exibar))
Fwd: Disk Cleaning Tools (exibar at thelair.com (Exibar))
Disk Cleaning Tools (michael.holstein at csuohio.edu (Michael Holstein))
Fwd: Disk Cleaning Tools (se_cur_ity at hotmail.com (Morning Wood))
Fwd: Disk Cleaning Tools (y0himba at technolounge.org (y0himba))
Re: Fwd: Disk Cleaning Tools (davek_throwaway at hotmail.com (Dave Korn))
Dameware critical hole (ad at class101.org (ad@...ss101.org))
Possible issue for shared computers (xploitable at gmail.com (n3td3v))
Possible issue for shared computers (frlinux at gmail.com (FRLinux))
Re: Call for new mailing lists @ SecurityFocus (X-POST) (frankdewit at home.nl (Frank de Wit))
Re: Call for new mailing lists @ SecurityFocus (X-POST) (ah at securityfocus.com (Alfred Huger))

1081 messages