full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2005/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 24	² 35	³ 14	⁴ 13
⁵ 18	⁶ 24	⁷ 23	⁸ 81	⁹ 49	¹⁰ 14	¹¹ 20
¹² 50	¹³ 39	¹⁴ 30	¹⁵ 22	¹⁶ 29	¹⁷ 13	¹⁸ 8
¹⁹ 24	²⁰ 19	²¹ 25	²² 46	²³ 27	²⁴ 8	²⁵ 7
²⁶ 43	²⁷ 74	²⁸ 53	²⁹ 33	³⁰ 23

Messages by day:

September 1 (24 messages)

Dameware critical hole (thegesus at gmail.com (TheGesus))
Dameware critical hole (fergdawg at netzero.net (Fergie (Paul Ferguson)))
Re: Call for new mailing lists @ SecurityFocus (X-POST) (frankdewit at home.nl (Frank de Wit))
PHP glob() filename disclosure vulnerability under safe_mode and open_basedir restriction (php at ter.dk (Peter Brodersen))
Re: Call for new mailing lists @ SecurityFocus (X-POST) (aphex at aphexer.dyndns.org (Alex Prinsier))
[ GLSA 200509-01 ] MPlayer: Heap overflow in ad_pcm.c (koon at gentoo.org (Thierry Carrez))
[SECURITY] [DSA 793-1] New sqwebmail packages fix cross-site scripting (joey at infodrom.org (Martin Schulze))
silc server and toolkit insecure temporary file creation (eromang at zataz.com (Eric Romang / ZATAZ.com))
[SECURITY] [DSA 779-2] New Mozilla Firefox packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
SUSE Security Announcement: kernel multiple security problems (SUSE-SA:2005:050) (meissner at suse.de (Marcus Meissner))
iDEFENSE Security Advisory 09.01.05: 3Com Network Supervisor Directory Traversal Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 09.01.05: Novell NetMail IMAPD Command Continuation Request Heap Overflow (labs-no-reply at idefense.com (iDEFENSE Labs))
CYBSEC - Multiple Vendor Web Vulnerability Scanner Arbitrary Script Injection Vulnerability (mnunez at cybsec.com (Mariano Nuñez Di Croce))
Re: Dameware critical hole (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
RE: Example firewall script (dufresne at winternet.com (Ron DuFresne))
Anyone noticing an increase in IOS HTTP scanning? (nms at metafore.ca (nms@...afore.ca))
Anyone noticing an increase in IOS HTTP scanning? (jlk at thrashyour.com (John Kinsella))
Anyone noticing an increase in IOS HTTP scanning? (hbrown at dyaptive.com (Hugh Brown))
Anyone noticing an increase in IOS HTTP scanning? (wo at andrew.cmu.edu (William O'Malley))
[USN-175-1] ntp server vulnerability (martin.pitt at canonical.com (Martin Pitt))
[SECURITY] [DSA 794-1] New polygen packages fix denial of service (joey at infodrom.org (Martin Schulze))
Anyone noticing an increase in IOS HTTP scanning? (julio at rfdslabs.com.br (Julio Cesar Fort))
Anyone noticing an increase in IOS HTTP scanning? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
No one else seeing the new MS05-039 worm yet? (smp.repicky at gmail.com (Matt))

September 2 (35 messages)

Multiple Phorum XSS and Session Hijacking vulnerabilities (wr0ck.lists at gmail.com (Scott Dewey))
Re: Fwd: Disk Cleaning Tools (ivanhec at gmail.com (Ivan .))
[SECURITY] [DSA 795-1] New proftpd packages fix format string vulnerability (mstone at klecker.debian.org (Michael Stone))
[SECURITY] [DSA 796-1] New affix packages fix remote command execution (mstone at klecker.debian.org (Michael Stone))
[SECURITY] [DSA 797-1] New zsync packages fix DOS (mstone at klecker.debian.org (Michael Stone))
SSH Bruteforce blocking script (mike.benjamin at clarinet.com.au (Michael L Benjamin))
SSH Bruteforce blocking script (abarrera at iron-gate.net (Alejandro Barrera))
SSH Bruteforce blocking script (mike.benjamin at clarinet.com.au (Michael L Benjamin))
SSH Bruteforce blocking script (mike.benjamin at clarinet.com.au (Michael L Benjamin))
SSH Bruteforce blocking script (cmt at burggraben.net (Christoph Moench-Tegeder))
SSH Bruteforce blocking script (mike.benjamin at clarinet.com.au (Michael L Benjamin))
SSH Bruteforce blocking script (cmt at burggraben.net (Christoph Moench-Tegeder))
SSH Bruteforce blocking script (fractalg at highspeedweb.net (Pedro Hugo ))
[SECURITY] [DSA 798-1] New phproupware packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
SSH Bruteforce blocking script (mike.benjamin at clarinet.com.au (Michael L Benjamin))
[SECURITY] [DSA 799-1] New webcalendar packages fix remote code execution (mstone at klecker.debian.org (Michael Stone))
[SECURITY] [DSA 800-1] New pcre3 packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
router naming (luka.research at gmail.com (luca developer))
fport results (xurron at gmail.com (X u r r o n))
router naming (javipolo at datagrama.net (Javi Polo))
router naming (peer at baden-online.de (Peer Janssen))
Re: router naming (luka.research at gmail.com (luka.research))
router naming (vb at bitsmart.com (vb))
Re: router naming (vb at bitsmart.com (vb))
router naming (brett.pfrommer at associates.dhs.gov (Pfrommer, Brett C))
router naming (michealespinola at gmail.com (Micheal Espinola Jr))
Re: router naming (luka.research at gmail.com (luka.research))
SSH Bruteforce blocking script (miah at chia-pet.org (miah))
FileZilla weakly-encrypted password vulnerability - advisory plus PoC code (M123303 at Richmond.ac.uk (PASTOR ADRIAN))
Re: Full-Disclosure Digest, Vol 7, Issue 4 (disclosure at wykkyd.securecoffee.com (Bardus Populus))
Multiple Phorum XSS and Session Hijacking vulnerabilities (brian at phorum.org (Brian Moon))
Multiple Phorum XSS and Session Hijacking vulnerabilities (wr0ck.lists at gmail.com (Scott Dewey))
FileZilla weakly-encrypted password vulnerability - advisory plus PoC code (brent.colflesh at ulticom.com (Brent Colflesh))
Re: Call for new mailing lists @ SecurityFocus (X-POST) (aphex at aphexer.dyndns.org (Alex Prinsier))
LSADump2 Crashing Windows (0h.fac3 at gmail.com (oh face))

September 3 (14 messages)

Re: Computer forensics to uncover illegal internet use (jasonc at science.org (Jason Coombs))
[SECURITY] [DSA 795-2] Updated i386 proftpd packages fix format string vulnerability (mstone at klecker.debian.org (Michael Stone))
router naming (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
RE: Computer forensics to uncover illegal internet use (dave at isecureu.com (dave kleiman))
LSADump2 Crashing Windows (jmcguire81 at cox.net (John McGuire))
LSADump2 Crashing Windows (dave at immunitysec.com (Dave Aitel))
[ GLSA 200509-02 ] Gnumeric: Heap overflow in the included PCRE library (koon at gentoo.org (Thierry Carrez))
RE: Computer forensics to uncover illegal internet use (tobin.craig at va.gov (Craig, Tobin (OIG)))
Re: router naming (dgerow at afflictions.org (Damian Gerow))
SSH Bruteforce blocking script (gerald at holl.co.at (Gerald Holl))
Who wrote Maximum Security? (joshua.russel at gmail.com (Joshua Russel))
Who wrote Maximum Security? (pablo.fernav at gmail.com (Pablo Fernandez))
Bush unready for terrorist attack, says Katrina (xploitable at gmail.com (n3td3v))
Who wrote Maximum Security? (fd at ew.nsci.us (fd@...nsci.us))

September 4 (13 messages)

Multiple PBX Systems Vulnerable to BBQ Overflows (iinternic at gmail.com (nick))
undetected stuff downloaded by pnp worm (infsec at gmail.com (Willem Koenings))
Multiple PBX Systems Vulnerable to BBQ Overflows (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Who wrote Maximum Security? (joshua.russel at gmail.com (Joshua Russel))
RE: Computer forensics to uncover illegal internet use (dave at isecureu.com (dave kleiman))
RE: Computer forensics to uncover illegal internet use (chromazine at sbcglobal.net (Steve Kudlak))
RE: Computer forensics to uncover illegal internet use (dave at isecureu.com (dave kleiman))
RE: Computer forensics to uncover illegal internet use (chromazine at sbcglobal.net (Steve Kudlak))
Re: undetected stuff downloaded by pnp worm (infsec at gmail.com (Willem Koenings))
Rediff Bol 7.0 WAB Contacts (viper31337 at yahoo.co.in (Gregory R. Panakkal))
RE: Computer forensics to uncover illegalinternet use (cfullerton at fullertoninfosec.com (Chuck Fullerton))
RE: Computer forensics to uncover illegalinternet use (chromazine at sbcglobal.net (Steve Kudlak))
RE: Computer forensics to uncover illegalinternet use (tobin.craig at va.gov (Craig, Tobin (OIG)))

September 5 (18 messages)

SSH Bruteforce blocking script (mike.benjamin at clarinet.com.au (Michael L Benjamin))
FW: SSH Bruteforce blocking script (mike.benjamin at clarinet.com.au (Michael L Benjamin))
FW: SSH Bruteforce blocking script (mike.benjamin at clarinet.com.au (Michael L Benjamin))
Who wrote Maximum Security? (mike.benjamin at clarinet.com.au (Michael L Benjamin))
FW: SSH Bruteforce blocking script (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
SUSE Security Announcement: php4, php5 remote code execution (SUSE-SA:2005:051) (meissner at suse.de (Marcus Meissner))
[SECURITY] [DSA 801-1] New ntp packages fix group id confusion (joey at infodrom.org (Martin Schulze))
Microsoft Windows keybd_event validation vulnerability (atarasco at gmail.com (Andres Tarasco))
LSADump2 Crashing Windows (nicolas.ruff at gmail.com (Nicolas RUFF))
anybody remember the name of this tool (bmartin at desic-sl.com (Bernardo Martín))
Revised paper on "ICMP attacks against TCP" (fernando at frh.utn.edu.ar (Fernando Gont))
XSS VULN IN ALL MYBB VERSIONS (INCLUDING PR2) (Dominic.Parikh at stpauls.richmond.sch.uk (Parikh, Dominic))
anybody remember the name of this tool (kc2lto at gmail.com (Ragone_Andrew))
[ GLSA 200509-03 ] OpenTTD: Format string vulnerabilities (dercorny at gentoo.org (Stefan Cornelius))
thesitewizard.com chfeedback.pl CRLF Injection (deathtrip at gmail.com (deathtrip))
Revised paper on "ICMP attacks against TCP" (pigrelax at yandex.ru (alex))
FW: RE: Computer forensics to uncoverillegalinternet use (dave at isecureu.com (dave kleiman))
RE: Computer forensics to uncoverillegalinternet use (dave at isecureu.com (dave kleiman))

September 6 (24 messages)

Shell32.dll.124.config (y0himba at technolounge.org (y0himba))
Shell32.dll.124.config (se_cur_ity at hotmail.com (Morning Wood))
Shell32.dll.124.config (y0himba at technolounge.org (y0himba))
Re: Call for new mailing lists @ SecurityFocus (X-POST) (madhat at unspecific.com (MadHat))
anybody remember the name of this tool (sergio.arcos at gmail.com (Martes13))
anybody remember the name of this tool (mike.benjamin at clarinet.com.au (Michael L Benjamin))
[USN-145-2] wget bug fix (martin.pitt at canonical.com (Martin Pitt))
Anyone noticing an increase in IOS HTTP scanning? (misiu_ at gmx.de (misiu))
Re: undetected stuff downloaded by pnp worm (etomcat at freemail.hu (Feher Tamas))
Microsoft Windows keybd_event validation vulnerability (fcharpen at xmcopartners.com (Frederic Charpentier))
Microsoft Windows keybd_event validation vulnerability (jerome.athias at free.fr (Jerome Athias))
Secunia Research: SqWebMail Conditional Comments Script Insertion Vulnerability (vuln at secunia.com (Secunia Research))
[ GLSA 200509-04 ] phpLDAPadmin: Authentication bypass (koon at gentoo.org (Thierry Carrez))
Re: Microsoft Windows keybd_event validationvulnerability (davek_throwaway at hotmail.com (Dave Korn))
Re: Shell32.dll.124.config (davek_throwaway at hotmail.com (Dave Korn))
[ GLSA 200509-05 ] Net-SNMP: Insecure RPATH (koon at gentoo.org (Thierry Carrez))
Re: Shell32.dll.124.config (y0himba at technolounge.org (y0himba))
SSH Bruteforce blocking script (miah at chia-pet.org (miah))
Microsoft Windows keybd_event validationvulnerability (mail at hackingspirits.com (Debasis Mohanty))
anybody remember the name of this tool (disclosure at wykkyd.securecoffee.com (Bardus Populus))
Microsoft Windows keybd_event validationvulnerability (fcharpen at xmcopartners.com (Frederic Charpentier))
Re: Call for new mailing lists @ SecurityFocus (X-POST) (chromazine at sbcglobal.net (Steve Kudlak))
RE: Computer forensics to uncover illegal internet use (tobin.craig at va.gov (Craig, Tobin (OIG)))
SSH Bruteforce blocking script (dufresne at winternet.com (Ron DuFresne))

September 7 (23 messages)

MDKSA-2005:156 - Updated ntp packages fix small security-related issue. (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:157 - Updated smb4k packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:158 - Updated mplayer packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
WebArchiveX - Unsafe Methods Vulnerability (brett.moore at security-assessment.com (Brett Moore))
Phone Forensics (JMadincea at cs.com (JMadincea@...com))
Phone Forensics (michael.holstein at csuohio.edu (Michael Holstein))
MDKSA-2005:159 - Updated kdeedu packages fix tempfile vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:160 - Updated kdebase packages fix potential local root vulnerability (security at mandriva.com (Mandriva Security Team))
Phone Forensics (hfortier at recon.cx (Hugo Fortier))
[SECURITY] [DSA 802-1] New cvs packages fix insecure temporary files (joey at infodrom.org (Martin Schulze))
[USN-176-1] kcheckpass vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-177-1] Apache 2 vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
USN-160-2: Apache vulnerability (martin.pitt at canonical.com (Martin Pitt))
RDP & Windows 2000 (jason.bridge at gmail.com (Jason Bridge))
Microsoft Windows keybd_event validation vulnerability (wangchunying at snda.com (cy.wang))
RDP & Windows 2000 (raoul at elforsoft.com (Raoul Nakhmanson-Kulish))
IIS 5.1 Source Disclosure Under FAT/FAT32 Volumes Using WebDAV (jerome.athias at free.fr (Jerome Athias))
Re: Microsoft Windows keybd_event validation vulnerability (bugtraq at planetcobalt.net (Ansgar -59cobalt- Wiechers))
[ GLSA 200509-06 ] Squid: Denial of Service vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Cisco Security Advisory: Cisco IOS Firewall Authentication Proxy for FTP and Telnet Sessions Buffer Overflow (psirt at cisco.com (Cisco Systems Product Securit…)
[ Suresec Advisories ] - Kcheckpass file creation vulnerability (advisories at suresec.org (Suresec Advisories))
Re: Considering nSight, any thoughts? (Final comment) (stevenrakick at yahoo.com (Steven Rakick))
RDP & Windows 2000 (lior.ateret at gmail.com (Lior Ateret))

September 8 (81 messages)

[SECURITY] [DSA 803-1] New Apache packages fix HTTP request smuggling (joey at infodrom.org (Martin Schulze))
RDP & Windows 2000 (raoul at elforsoft.com (Raoul Nakhmanson-Kulish))
[SECURITY] [DSA 804-1] New kdelibs packages fix backup file information leak (joey at infodrom.org (Martin Schulze))
Secunia Research: ALZip ACE Archive Handling Buffer Overflow (vuln at secunia.com (Secunia Research))
Secunia Research: NOD32 Anti-Virus ARJ Archive Handling Buffer Overflow (vuln at secunia.com (Secunia Research))
Quiet (y0himba at technolounge.org (y0himba))
mimicboard2 (se_cur_ity at hotmail.com (Morning Wood))
Quiet (xyberpix at xyberpix.com (xyberpix))
Quiet (kswain at nespower.com (Swain, Kenneth))
Far too quiet on the list. (augm58 at dsl.pipex.com (Paul Farrow))
Quiet (frlinux at gmail.com (FRLinux))
Quiet (kswain at nespower.com (Swain, Kenneth))
Secuirty Hole Found In Dave's Sock (dave.cawley at adelphia.com (Dave Cawley))
Secuirty Hole Found In Dave's Sock (y0himba at technolounge.org (y0himba))
Security Hole Found In Dave's Sock (smacdougall at idanalytics.com (MacDougall, Shane))
Secuirty Hole Found In Dave's Sock (y0himba at technolounge.org (y0himba))
Far too quiet on the list. (xyberpix at xyberpix.com (xyberpix))
Secuirty Hole Found In Dave's Sock (kswain at nespower.com (Swain, Kenneth))
Secuirty Hole Found In Dave's Sock (spamproof at nospammail.net (Rob))
Secuirty Hole Found In Dave's Sock (y0himba at technolounge.org (y0himba))
Secuirty Hole Found In Dave's Sock (dave.cawley at adelphia.com (Dave Cawley))
Secuirty Hole Found In Dave's Sock (y0himba at technolounge.org (y0himba))
Far too quiet on the list. (dave.cawley at adelphia.com (Dave Cawley))
Secuirty Hole Found In Dave's Sock (tobin.craig at va.gov (Craig, Tobin (OIG)))
Secuirty Hole Found In Dave's Sock (y0himba at technolounge.org (y0himba))
Secuirty Hole Found In Dave's Sock (dave.cawley at adelphia.com (Dave Cawley))
Secuirty Hole Found In Dave's Sock (eddiepena at yahoo.com (J Pena))
Secuirty Hole Found In Dave's Sock (y0himba at technolounge.org (y0himba))
Secuirty Hole Found In Dave's Sock (tobin.craig at va.gov (Craig, Tobin (OIG)))
Secuirty Hole Found In Dave's Sock (daniel at h0ppel.nerdcamp.net (Daniel))
Secuirty Hole Found In Dave's Sock (dave.cawley at adelphia.com (Dave Cawley))
Secuirty Hole Found In Dave's Sock (dave.cawley at adelphia.com (Dave Cawley))
Security Hole Found In Dave's Sock (tfrederick at ascentek.com (Ted Frederick))
Security Hole Found In Dave's Sock (y0himba at technolounge.org (y0himba))
Security Hole Found In Dave's Sock (miah at chia-pet.org (miah))
Secuirty Hole Found In Dave's Sock (dave.cawley at adelphia.com (Dave Cawley))
Security Hole Found In Dave's Sock (tfrederick at ascentek.com (Ted Frederick))
Security Hole Found In Dave's Sock (y0himba at technolounge.org (y0himba))
Security Hole Found In Dave's Sock (andre.ludwig at gmail.com (Andre Ludwig))
Security Hole Found In Dave's Sock (tobin.craig at va.gov (Craig, Tobin (OIG)))
Secuirty Hole Found In Dave's Sock (brudy at bruderer-research.com (Peter Bruderer))
Secuirty Hole Found In Dave's Sock (ghamblin at gmail.com (Glenn Hamblin))
Secuirty Hole Found In Dave's Sock (jlk at thrashyour.com (John Kinsella))
Secuirty Hole Found In Dave's Sock (y0himba at technolounge.org (y0himba))
Secuirty Hole Found In Dave's Sock (kswain at nespower.com (Swain, Kenneth))
Secuirty Hole Found In Dave's Sock (kswain at nespower.com (Swain, Kenneth))
Security Hole Found In Dave's Sock (raju at linux-delhi.org (Raj Mathur))
Security Hole Found In Dave's Sock (vun.list at gmail.com (John Smith))
Security Hole Found In Dave's Sock (tfrederick at ascentek.com (Ted Frederick))
Secuirty Hole Found In Dave's Sock (exibar at thelair.com (Exibar))
Security Hole Found In Dave's Sock (security at weretiger.ca (Grant Rietze))
Moderated? (phantom at h07.org (Enrico Kern))
Secuirty Hole Found In Dave's Sock (phil at redmoon.ch (Philipp Walther))
Secuirty Hole Found In Dave's Sock (exibar at thelair.com (Exibar))
Secuirty Hole Found In Dave's Sock (jbethune at town.kentville.ns.ca (Jason Bethune))
Moderated? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[SECURITY] [DSA 805-1] New Apache2 packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Security Hole Found In Dave's Sock (jsmith1001 at post.com (John Smith))
Secuirty Hole Found In Dave's Sock (mlande at bellsouth.net (Mary Landesman))
Re: Moderated? (davek_throwaway at hotmail.com (Dave Korn))
Socks Vulnerability Also Effects Underwear(Package Compromised) (y0himba at technolounge.org (y0himba))
Secuirty Hole Found In Dave's Sock - it gets worse.... (tbarrick at cox.net (Toby Barrick))
Re: Security hole in Dave's Sock - More implications (worried at covad.net (worried))
Secuirty Hole Found In Dave's Sock (duck.daf at gmail.com (Daffey Duck))
Moderated? (rara at navigo.com (Rachael Treu Gomes))
Secuirty Hole Found In Dave's Sock (vladimir at arobas.net (Vladimir Parkhaev))
Socks Vulnerability Also Effects Underwear(Package Compromised) (y0himba at technolounge.org (y0himba))
MDKSA-2005:161 - Updated apache2 packages to address multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
Crucial goes Ballistix (dudevanwinkle at gmail.com (DudeVanWinkle))
Secuirty Hole Found In Dave's Sock (nocmonkey at gmail.com (Danny))
Socks Vulnerability Also Effects Underwear(Package Compromised) (nocmonkey at gmail.com (Danny))
Secuirty Hole Found In Dave's Sock (exibar at thelair.com (Exibar))
Secuirty Hole Found In Dave's Sock (vladimir at arobas.net (Vladimir Parkhaev))
[Fwd: MM - #$%@ Kill Google!] (jasonc at science.org (Jason Coombs))
Socks Vulnerability Also Effects Underwear(Package Compromised) (mhoye at neon.polkaroo.net (Mike Hoye))
[Fwd: MM - #$%@ Kill Google!] (michealespinola at gmail.com (Micheal Espinola Jr))
Moderated? (ghamblin at gmail.com (Glenn Hamblin))
[Fwd: MM - #$%@ Kill Google!] (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Moderated? (andre.ludwig at gmail.com (Andre Ludwig))
Moderated? (leeq999 at gmail.com (Lee Quinton))
Worldwide WEP Vulnerability Disclosure (techn9ne at infiltrated.net (Spinoza DesCartes))

September 9 (49 messages)

[Fwd: MM - #$%@ Kill Google!] (michealespinola at gmail.com (Micheal Espinola Jr))
[Fwd: MM - #$%@ Kill Google!] (gareth.davies at mynetsec.com (Gareth Davies))
[SECURITY] [DSA 806-1] New cvs packages fix insecure temporary files (joey at infodrom.org (Martin Schulze))
Mozilla Firefox "Host:" Buffer Overflow (tommy at security-protocols.com (Tom Ferris))
Mozilla Firefox "Host:" Buffer Overflow (heikki at osafoundation.org (Heikki Toivonen))
Secuirty Hole Found In Dave's Sock (saintau at sdf.lonestar.org (Jackson McKinley))
Moderated (saintau at sdf.lonestar.org (Jackson McKinley))
OFFTOPIC Moderated (listuser at seifried.org (Kurt Seifried))
Moderated? (venom at gen-x.co.nz (VeNoMouS))
[USN-178-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Mozilla Firefox "Host:" Buffer Overflow (larry at larryseltzer.com (Larry Seltzer))
Moderated? (xyberpix at xyberpix.com (xyberpix))
Mozilla Firefox "Host:" Buffer Overflow (jerome.athias at free.fr (Jerome Athias))
Fwd: GWAVA Sender Notification (Content filter) (xyberpix at xyberpix.com (xyberpix))
List Charter (johnc at grok.org.uk (John Cartwright))
Mozilla Firefox "Host:" Buffer Overflow (dave at immunitysec.com (Dave Aitel))
Re: Socks Vulnerability Also EffectsUnderwear(Package Compromised) (davek_throwaway at hotmail.com (Dave Korn))
Re: Moderated? (davek_throwaway at hotmail.com (Dave Korn))
Worldwide WEP vulnerability (sil at infiltrated.net (J. Oquendo))
[Fwd: MM - #$%@ Kill Google!] (chromazine at sbcglobal.net (Steve Kudlak))
Mozilla Firefox "Host:" Buffer Overflow (milw0rm at gmail.com (milw0rm Inc.))
Top posting [was: MM - #$%@ Kill Google!] (dee at pestcontroldata.com (Dee Holtsclaw))
Mozilla Firefox "Host:" Buffer Overflow (youreallythoughtiwouldgiveyoumy-dshield at yahoo.com (n e w s))
Mozilla Firefox "Host:" Buffer Overflow (larry at larryseltzer.com (Larry Seltzer))
[USN-179-1] openssl weak default configuration (martin.pitt at canonical.com (Martin Pitt))
(TOOL) TAPiON (Polymorphic Decryptor Generator) Engine (bania.piotr at gmail.com (Piotr Bania))
Mozilla Firefox "Host:" Buffer Overflow (ipatches at hushmail.com (ipatches@...hmail.com))
[Fwd: MM - #$%@ Kill Google!] (zashev at gmail.com (Ivaylo Zashev))
Mozilla Firefox "Host:" Buffer Overflow (arr at watson.org (Andrew R. Reiter))
3 minor vulnerabilities in IPSwitch products (advisory at cirt.dk (CIRT.DK Advisory))
Mozilla Firefox "Host:" Buffer Overflow (dave at immunitysec.com (Dave Aitel))
Mozilla Firefox "Host:" Buffer Overflow (apolkosnik at gmail.com (Adam Polkosnik))
Mozilla Firefox "Host:" Buffer Overflow (arr at watson.org (Andrew R. Reiter))
Mozilla Firefox "Host:" Buffer Overflow (larry at larryseltzer.com (Larry Seltzer))
Mozilla Firefox "Host:" Buffer Overflow (toddtowles at brookshires.com (Todd Towles))
Mozilla Firefox "Host:" Buffer Overflow (larry at larryseltzer.com (Larry Seltzer))
iDEFENSE Security Advisory 09.09.05: GNU Mailutils 0.6 imap4d 'search' Format String Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
Re: Top posting [was: MM - #$%@ Kill Google!] (davek_throwaway at hotmail.com (Dave Korn))
Mozilla Firefox "Host:" Buffer Overflow (eballen1 at qwest.net (Bruce Ediger))
(TOOL) TAPiON (Polymorphic Decryptor Generator) Engine (abarrera at iron-gate.net (Alejandro Barrera))
(TOOL) TAPiON (Polymorphic Decryptor Generator) Engine (bania.piotr at gmail.com (Piotr Bania))
(TOOL) TAPiON (Polymorphic Decryptor Generator) Engine (abarrera at iron-gate.net (Alejandro Barrera))
Mozilla Firefox "Host:" Buffer Overflow (larry at larryseltzer.com (Larry Seltzer))
Mozilla Firefox Host: Buffer Overflow (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Mozilla Firefox Host: Buffer Overflow (larry at larryseltzer.com (Larry Seltzer))
Mozilla Firefox Host: Buffer Overflow (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Mozilla Firefox "Host:" Buffer Overflow (eballen1 at qwest.net (Bruce Ediger))
Mozilla Firefox "Host:" Buffer Overflow (eballen1 at qwest.net (Bruce Ediger))
Mozilla Firefox "Host:" Buffer Overflow (wari00 at gmail.com (Roberto Gomez Bolaños))

September 10 (14 messages)

Moderated? (rara at navigo.com (Rachael Treu Gomes))
Top posting [was: MM - #$%@ Kill Google!] (nick at virus-l.demon.co.uk (Nick FitzGerald))
Moderated? (ghamblin at gmail.com (Glenn Hamblin))
IE SP2 MHTML way to local intranet (renard_ex at yahoo.com (Alex Smith))
Revised paper on "ICMP attacks against TCP" (fernando at frh.utn.edu.ar (Fernando Gont))
Mozilla Firefox "Host:" Buffer Overflow Exploit (berendjanwever at gmail.com (Berend-Jan Wever))
multilinks.com security contact ? (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Revised paper on "ICMP attacks against TCP" (fw at deneb.enyo.de (Florian Weimer))
multilinks.com security contact ? (leeq999 at gmail.com (Lee Quinton))
Mozilla Firefox "Host:" Buffer Overflow (larry at larryseltzer.com (Larry Seltzer))
Mozilla Firefox "Host:" Buffer Overflow Exploit (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
Drama: Venomous and his F-D folder (xploitable at gmail.com (n3td3v))
Revised paper on "ICMP attacks against TCP" (lbromirski at mr0vka.eu.org (Łukasz Bromirski))
Drama: Venomous and his F-D folder (str0ke at milw0rm.com (str0ke@...w0rm.com))

September 11 (20 messages)

Drama: Venomous and his F-D folder (xploitable at gmail.com (n3td3v))
IIS 5.1 Source Disclosure Under FAT/FAT32 Volumes Using WebDAV (jericho at attrition.org (security curmudgeon))
Mozilla Firefox "Host:" Buffer Overflow Exploit (pvnick at gmail.com (Paul))
Mozilla Firefox "Host:" Buffer Overflow Exploit (kruse at krusesecurity.dk (Peter Kruse))
Vxer Vectors (xploitable at gmail.com (n3td3v))
Off topic. (randallm at fidmail.com (RMueller))
Off Topic: Attachment (randallm at fidmail.com (Randall M))
Re: Vxer Vectors (xploitable at gmail.com (n3td3v))
Mozilla Firefox "Host:" Buffer Overflow Exploit (guninski at guninski.com (Georgi Guninski))
Mozilla Firefox "Host:" Buffer Overflow Exploit (steve at unixwiz.net (Steve Friedl))
Mozilla Firefox "Host:" Buffer Overflow Exploit (avivra at gmail.com (Aviv Raff))
Drama: Venomous and his F-D folder (xploitable at gmail.com (n3td3v))
Mozilla Firefox "Host:" Buffer Overflow Exploit (guninski at guninski.com (Georgi Guninski))
Mozilla Firefox "Host:" Buffer Overflow Exploit (avivra at gmail.com (Aviv Raff))
Forensic help? (redleg18 at gmail.com (Red Leg))
Mozilla Firefox "Host:" Buffer Overflow Exploit (xillwillx at gmail.com (Ill will))
Forensic help? (jjjwicks at gmail.com (James Wicks))
Forensic help? (andfarm at gmail.com (Andrew Farmer))
FireFox "Host:" Buffer Overflow is not just exploitable on FireFox (berendjanwever at gmail.com (Berend-Jan Wever))
Off Topic: Attachment (vimages at well.com (Jim Race))

September 12 (50 messages)

Drama: Venomous and his F-D folder (kf_lists at digitalmunition.com (KF (lists)))
Forensic help? (kf_lists at digitalmunition.com (KF (lists)))
Forensic help? (dave at isecureu.com (dave kleiman))
Forensic help? (jasonc at science.org (Jason Coombs))
Forensic help? (pauls at utdallas.edu (Paul Schmehl))
Forensic help? (redleg18 at gmail.com (Red Leg))
Forensic help? (redleg18 at gmail.com (Red Leg))
Releasing vulnerability information in blogs - a new trend? (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Off topic. (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Off Topic: Attachment (tim-security at sentinelchicken.org (Tim))
Automated mass abuse of form mailers (kju-fd at fqdn.org (Michael Holzt))
Forensic help? (brian.sims at siemens.com (Sims Brian))
Automated mass abuse of form mailers (fd at stroobant.be (Luc Stroobant))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (druid at stonedcoder.org (druid@...nedcoder.org))
Forensic help? (jjjwicks at gmail.com (James Wicks))
Secuirty Hole Found In Dave's Sock (misiu_ at gmx.de (misiu))
Automated mass abuse of form mailers (sk at groundzero-security.com (sk))
Releasing vulnerability information in blogs - a new trend? (jerome.athias at free.fr (Jerome Athias))
Automated mass abuse of form mailers (lists at irregular.ch (Matthias Kestenholz))
Forensic help? (redleg18 at gmail.com (Red Leg))
[USN-181-1] Mozilla products vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-182-1] X server vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: Forensics help? (redleg18 at gmail.com (Red Leg))
Automated mass abuse of form mailers (xploitable at gmail.com (n3td3v))
Re: Automated mass abuse of form mailers (davek_throwaway at hotmail.com (Dave Korn))
[SECURITY] [DSA 807-1] New mod_ssl packages fix acl restriction bypass (joey at infodrom.org (Martin Schulze))
Automated mass abuse of form mailers (xploitable at gmail.com (n3td3v))
Forensic help? (kc2lto at gmail.com (Ragone_Andrew))
Forensic help? (pauls at utdallas.edu (Paul Schmehl))
Forensic help? (kf_lists at digitalmunition.com (KF (lists)))
Forensic help? (als at thangorodrim.de (als@...ngorodrim.de))
Forensic help? (toddtowles at brookshires.com (Todd Towles))
Forensic help? (kf_lists at digitalmunition.com (KF (lists)))
[USN-83-2] LessTif 1 vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[ GLSA 200509-07 ] X.Org: Heap overflow in pixmap allocation (koon at gentoo.org (Thierry Carrez))
Sawmill XSS vuln (Mark.Terry at nta-monitor.com (Mark Terry))
Re: Automated mass abuse of form mailers (gautam.bipin at gmail.com (Bipin Gautam))
Automated mass abuse of form mailers (xploitable at gmail.com (n3td3v))
Re: Automated mass abuse of form mailers (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
BulkSMS flow? (full-disclosure at csilva.org (Carlos Silva aka |Danger_Man|))
Forensic help? (nick at virus-l.demon.co.uk (Nick FitzGerald))
[SECURITY] [DSA 808-1] New tdiary packages fix Cross Site Request Forgery (joey at infodrom.org (Martin Schulze))
Automated mass abuse of form mailers (dufresne at winternet.com (Ron DuFresne))
Forensic help? (letoff at gmail.com (Christophe Garault))
Automated mass abuse of form mailers (xploitable at gmail.com (n3td3v))
Secuirty Hole Found In Dave's Sock (nick at virus-l.demon.co.uk (Nick FitzGerald))
[ GLSA 200509-08 ] Python: Heap overflow in the included PCRE library (koon at gentoo.org (Thierry Carrez))
Automated mass abuse of form mailers (dufresne at winternet.com (Ron DuFresne))
Fun, Misc and OT posts - a new mailing list (ge at linuxbox.org (Gadi Evron))
Re: Forensics help? (druid at stonedcoder.org (druid@...nedcoder.org))

September 13 (39 messages)

Mozilla Firefox "Host:" Buffer Overflow (wari00 at gmail.com (Roberto Gomez Bolaños))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (fd at ew.nsci.us (fd@...nsci.us))
Forensic help? (fd at ew.nsci.us (fd@...nsci.us))
[SECURITY] [DSA 809-1] New squid packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Re: Automated mass abuse of form mailers (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Re: Forensics help? (fd at ew.nsci.us (fd@...nsci.us))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (gem at rellim.com (Gary E. Miller))
MDKSA-2005:162 - Updated squid packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:163 - Updated MySQL packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (fd at ew.nsci.us (fd@...nsci.us))
Mozilla Firefox "Host:" Buffer Overflow Exploit (dveditz at cruzio.com (Daniel Veditz))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (gem at rellim.com (Gary E. Miller))
Re: Full-Disclosure Digest, Vol 7, Issue 2 (gem at rellim.com (Gary E. Miller))
Far too quiet on the list. (javipolo at datagrama.net (Javi Polo))
Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability (h4cky0u.org at gmail.com (h4cky0u))
[USN-183-1] Squid vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Re: Forensics help? (compuwar at gmail.com (Paul Robertson))
[SECURITY] [DSA 810-1] New Mozilla packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability (Updated) (h4cky0u.org at gmail.com (h4cky0u))
Can executable file(can't read) still be coredumped in solaris ? (alert7 at xfocus.org (alert7))
Re: Forensics help? (redleg18 at gmail.com (Red Leg))
btscanner 2.0 released (bluetooth at pentest.co.uk (bluetooth@...test.co.uk))
LDU Version 801 vulnerable (info at g-0.org (GroundZero Software))
"New" Brazilian Home Banking Trojan (fractalg at highspeedweb.net (Pedro Hugo))
"New" Brazilian Home Banking Trojan (prandal at herefordshire.gov.uk (Randal, Phil))
"New" Brazilian Home Banking Trojan (prandal at herefordshire.gov.uk (Randal, Phil))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (dufresne at winternet.com (Ron DuFresne))
Re: Re: Automated mass abuse of form mailers (davek_throwaway at hotmail.com (Dave Korn))
iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Router Remote Administration Fixed Encryption Key Vulnerability (labs-no-reply at idefense.com (iDEFENSE L…)
iDEFENSE Security Advisory 09.13.05: Linksys WRT54G 'restore.cgi' Configuration Modification Design Error Vulnerabilit… (labs-no-reply at idefense.com (iDEFENSE…)
iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Management Interface DoS Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 09.13.05: Linksys WRT54G 'upgrade.cgi' Firmware Upload Design Error Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Router Remote Administration apply.cgi Buffer Overflow Vulnerabili… (labs-no-reply at idefense.com (iDEFENSE…)
FireFox Host: Buffer Overflow is not just exploitable on FireFox (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
security at netscape.org says Error 550 (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Exploiting a Worm (iangizak at hotmail.com (Ian Gizak))
Exploiting a Worm (iangizak at hotmail.com (Ian Gizak))
Exploiting a Worm (nick at virus-l.demon.co.uk (Nick FitzGerald))
NUL Character Evasion (ju at heisec.de (ju@...sec.de))

September 14 (30 messages)

Exploiting a Worm (augm58 at dsl.pipex.com (Paul Farrow))
Exploiting a Worm (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Exploiting a Worm (lyal.collins at key2it.com.au (Lyal Collins))
security at netscape.com not working - Bug report forms in use (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (peer at baden-online.de (Peer Janssen))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (gem at rellim.com (Gary E. Miller))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (gem at rellim.com (Gary E. Miller))
PGPNet Upgrade path ? (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Exploiting a Worm (ivanhec at gmail.com (Ivan .))
Commonwealth Bank Cross-Site-Scripting advisory (enune at fribble.net (Calum Power))
[SECURITY] [DSA 811-1] New common-lisp-controller packages fix arbitrary code injection (joey at infodrom.org (Martin Schulze))
MDKSA-2005:164 - Updated XFree86/x.org packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
FireFox Host: Buffer Overflow is not justexploitable on FireFox (kruse at krusesecurity.dk (Peter Kruse))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (wolfy at nobugconsulting.ro (lonely wolf))
Mozilla / Mozilla Firefox authentication weakness (3APA3A at SECURITY.NNOV.RU (3APA3A))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (peer at baden-online.de (Peer Janssen))
WiFi encryption performance comparrison? (paulday at toll.com.au (Paul Day))
Mozilla Firefox "Host:" Buffer Overflow Exploit (larry at larryseltzer.com (Larry Seltzer))
Secunia Research: AVIRA Antivirus ACE Archive Handling Buffer Overflow (vuln at secunia.com (Secunia Research))
WiFi encryption performance comparrison? (xyberpix at xyberpix.com (Xyberpix))
Security Conference (rbidule at gmail.com (Ron Bidule))
Exploiting a Worm (frank at knobbe.us (Frank Knobbe))
Fwd: SF new mailing list announcement: BS 7799 Security (xploitable at gmail.com (n3td3v))
Mozilla / Mozilla Firefox authentication weakness (dveditz at cruzio.com (Daniel Veditz))
Fwd: SF new mailing list announcement: BS 7799Security (ad at class101.org (ad@...ss101.org))
Exploiting an online store (perrymonj at networkarmor.com (Josh perrymon))
Exploiting an online store (tquinlan at capitaliq.com (Thomas Quinlan))
Oracle Reports: Generic SQL Injection Vulnerability via Lexical References (ak at red-database-security.com (Kornbrust, Alexander))

September 15 (22 messages)

Mozilla / Mozilla Firefox authentication weakness (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Exploiting an online store (ge at linuxbox.org (Gadi Evron))
FireFox Host: Buffer Overflow is not justexploitable on FireFox (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Exploiting an online store (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
FF IDN buffer overflow workaround works in Netscape too (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
[FLSA-2005:163274] Updated CUPS packages fix security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:163047] Updated squirrelmail package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:162680] Updated Zlib packagea fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2005:160202] Updated mozilla packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
Exploiting an online store (perrymonj at networkarmor.com (Josh Perrymon))
Exploiting an online store (lyal.collins at key2it.com.au (lyal.collins))
[SECURITY] [DSA 812-1] New turqstat packages fix buffer overflow (joey at infodrom.org (Martin Schulze))
NUL Character Evasion (James.Williams at ca.com (Williams, James K))
[SECURITY] [DSA 813-1] New centericq packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Security Conference (rbidule at gmail.com (Ron Bidule))
gtkdiskfree insecure temporary file creation (exploits at zataz.net (ZATAZ Audits))
[SECURITY] [DSA 814-1] New lm-sensors packages fix insecure temporary file (joey at infodrom.org (Martin Schulze))
SimpleCDR-X - Insecure tempfile handling (jonas.thambert at hush.ai (jonas.thambert@...h.ai))
Re: Full-Disclosure Digest, Vol 7, Issue 25 (fd at ew.nsci.us (fd@...nsci.us))
Exploiting an online store (fd at ew.nsci.us (fd@...nsci.us))
NUL Character Evasion (fd at ew.nsci.us (fd@...nsci.us))
Re: gtkdiskfree insecure temporary file creation (juha-matti.laurio at netti.fi (Juha-Matti Laurio))

September 16 (29 messages)

Exploiting an online store (nick at virus-l.demon.co.uk (Nick FitzGerald))
[FLSA-2005:152919] Updated grip package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
NUL Character Evasion (kluge at fujitsu.com.au (Steffen Kluge))
FileZilla (client) public credentials vulnerability (M123303 at Richmond.ac.uk (PASTOR ADRIAN))
NUL Character Evasion (3APA3A at SECURITY.NNOV.RU (3APA3A))
[SECURITY] [DSA 815-1] New kdebase packages fix local root vulnerability (joey at infodrom.org (Martin Schulze))
(TOOL) TAPiON ver 0.1c (bania.piotr at gmail.com (Piotr Bania))
gwcc insecure temporary file creation (exploits at zataz.net (ZATAZ Audits))
ncompress insecure temporary file creation (exploits at zataz.net (ZATAZ Audits))
arc insecure temporary file creation (exploits at zataz.net (ZATAZ Audits))
Message for D1g1t4lLeech ZATAZ Audit has discovered this bug the 2005-09-05 D1g1t4lLeech you are a true Leecher ;) (exploits at zataz.net (ZATAZ Audits))
LSADump2 Crashing Windows (nicolas.ruff at gmail.com (Nicolas RUFF))
PGPNet Upgrade path ? (m at rtij.nl (Martijn Lievaart))
Message for D1g1t4lLeech ZATAZ Audit has discovered this bug the 2005-09-05 D1g1t4lLeech you are a true Leecher ; ) (siegfri3d at gmail.com (Siegfried))
NUL Character Evasion (James.Williams at ca.com (Williams, James K))
FireFox Host: Buffer Overflow is not just exploitable on FireFox (milw0rm at gmail.com (milw0rm Inc.))
PGPNet Upgrade path ? (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Forensic help? (compuwar at gmail.com (Paul Robertson))
FileZilla (client) public credentials vulnerability (tobiasu at tmux.org (Tobias Ulmer))
[CIRT.DK - Advisory 37] TAC Vista Webstation 3.0 Directory Traversal bug in webinterface (advisory at cirt.dk (CIRT.DK Advisory))
FireFox Host: Buffer Overflow is not just exploitable on FireFox (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Search Results w/Trojan? (edgardo at u.washington.edu ('FoR ReaLz' E. Balansay))
Search Results w/Trojan? (fergdawg at netzero.net (Fergie (Paul Ferguson)))
Greyhats Security back online (pvnick at gmail.com (Paul))
PGPNet Upgrade path ? (gem at rellim.com (Gary E. Miller))
Search Results w/Trojan? (mmadison at fnni.com (Madison, Marc))
Search Results w/Trojan? (edgardo at u.washington.edu ('FoR ReaLz' E. Balansay))
Greyhats Security fixed (pvnick at gmail.com (Paul))
Re: Search Results w/ Trojan? (Tim.Dyke at worksafebc.com (Dyke, Tim))

September 17 (13 messages)

Re: Search Results w/ Trojan? (edgardo at u.washington.edu ('FoR ReaLz' E. Balansay))
Re: Search Results w/ Trojan? (craig at getvirushelp.com (craig@...virushelp.com))
Search Results w/Trojan? (fd at ew.nsci.us (fd@...nsci.us))
Ethics and ramblins on Full DissClosure (sil at infiltrated.net (J. Oquendo))
Web Application Security Analyzer for PHP-Nuke/phpBB CMS (zx at castlecops.com (Paul Laudanski))
SA Security Bulletin: Unique attack vector uncovered during packet analysis (sasb at Safe-mail.net (sasb@...e-mail.net))
[ GLSA 200509-09 ] Py2Play: Remote execution of arbitrary Python code (koon at gentoo.org (Thierry Carrez))
[ GLSA 200509-10 ] Mailutils: Format string vulnerability in imap4d (koon at gentoo.org (Thierry Carrez))
ERRATA: [ GLSA 200507-20 ] Shorewall: Security policy bypass (koon at gentoo.org (Thierry Carrez))
FireFox Host: Buffer Overflow is not just exploitable on FireFox (gautam.bipin at gmail.com (Bipin Gautam))
FireFox Host: Buffer Overflow is not just exploitable on FireFox (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Small Linux Kernel Patch To Check For Shdr (justliketocode at yahoo.com (none none))
PGPNet Upgrade path ? (m at rtij.nl (Martijn Lievaart))

September 18 (8 messages)

PGPNet Upgrade path ? (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
SA Security Bulletin: Unique attack vectoruncovered during packet analysis (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Shazara security contact? (berendjanwever at gmail.com (Berend-Jan Wever))
Celebrating our 500th member (xploitable at gmail.com (n3td3v))
Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability (h4cky0u.org at gmail.com (h4cky0u))
Re: Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability (h4cky0u.org at gmail.com (h4cky0u))
[ GLSA 200509-11 ] Mozilla Suite, Mozilla Firefox: Buffer overflow (koon at gentoo.org (Thierry Carrez))
Celebrating our 345622th spam mail (FistFuXXer at gmx.de (FistFucker))

September 19 (24 messages)

Cisco IOS hacked? (ciscoioshehehe at yandex.ru (ciscoioshehehe))
[ GLSA 200509-12 ] Apache, mod_ssl: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
[ GLSA 200509-13 ] Clam AntiVirus: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
Fwd: Cisco IOS hacked? (jd.security at mailinator.com (J4y D33))
RUXCON 2005 Update (cfp at ruxcon.org.au (RUXCON Call for Papers))
[USN-184-1] umount vulnerability (martin.pitt at canonical.com (Martin Pitt))
OSS means slower patches (ivanhec at gmail.com (Ivan .))
OSS means slower patches (michaelslists at gmail.com (Michael Silk))
OSS means slower patches (ivanhec at gmail.com (Ivan .))
OSS means slower patches (draht at novell.com (Roman Drahtmueller))
OSS means slower patches (michaelslists at gmail.com (Michael Silk))
OSS means slower patches (bkfsec at sdf.lonestar.org (bkfsec))
OSS means slower patches (jericho at attrition.org (security curmudgeon))
OSS means slower patches (bkfsec at sdf.lonestar.org (bkfsec))
killbits? should have named them kibbles and bits (xillwillx at gmail.com (Ill will))
LSADump2 Crashing Windows (nicolas.ruff at gmail.com (Nicolas RUFF))
[ GLSA 200509-12 ] Apache, mod_ssl: Multiple vulnerabilities (koon at gentoo.org (koon@...too.org))
ERRATA: [ GLSA 200507-20 ] Shorewall: Security policy bypass (koon at gentoo.org (koon@...too.org))
Cisco IOS hacked? (mlists at arhont.com (Andrei Mikhailovsky))
RE: Full-Disclosure Digest unsubscribed (herbert_d_hay at msn.com (herbert hay))
Cisco IOS hacked? (ciscoioshehehe at yandex.ru (ciscoioshehehe))
OSS means slower patches (jlauro at umflint.edu (Lauro, John))
Re: Cisco IOS hacked? (raven at softjoys.com (Kirill Bolshakov))
VLAN Hopping, myth or reality? (yersinia at wasahero.org (Yersinia Authors))

September 20 (19 messages)

MDKSA-2005:138-1 - Updated cups packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
VLAN Hopping, myth or reality? (swmike at swm.pp.se (Mikael Abrahamsson))
[USN-185-1] CUPS vulnerability (martin.pitt at canonical.com (Martin Pitt))
bacula insecure temporary file creation (eromang at zataz.com (Eric Romang / ZATAZ.com))
Secunia Research: Opera Mail Client Attachment Spoofing and Script Insertion (vuln at secunia.com (Secunia Research))
phpBB 2.0.17 remote avatar size bug (smok3f00 at gmail.com (SmOk3))
[ GLSA 200509-14 ] Zebedee: Denial of Service vulnerability (koon at gentoo.org (Thierry Carrez))
[ GLSA 200509-15 ] util-linux: umount command validation error (koon at gentoo.org (Thierry Carrez))
Re: Cisco IOS hacked? (steve.smithp at gmail.com (Steve Smith))
Cisco IOS hacked? (->CAN-2005-2451) (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
MDKSA-2005:165 - Updated cups packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
Debian Security Host Bandwidth Saturation (joey at infodrom.org (Martin Schulze))
Re: arc insecure temporary file creation (joey at infodrom.org (Joey Schulze))
Checkpoint VPN DoS woes (sil at infiltrated.net (J. Oquendo))
phpBB 2.0.17 remote avatar size bug (brian at dessent.net (Brian Dessent))
UnixWare 7.1.4 : LibTIFF < 3.72 malformed data code exec (please_reply_to_security at sco.com (please_reply_to_security@....com))
UnixWare 7.1.4 : LibTIFF < 3.72 malformed data code exec (xyberpix at xyberpix.com (xyberpix))
phpBB 2.0.17 remote avatar size bug (pvnick at gmail.com (Paul))
Google Secure Access or "How to have people download a trojan." (berendjanwever at gmail.com (Berend-Jan Wever))

September 21 (25 messages)

UnixWare 7.1.4 : LibTIFF < 3.72 malformed data code exec (tim-security at sentinelchicken.org (Tim))
UnixWare 7.1.4 : LibTIFF < 3.72 malformed data code exec (kf_lists at digitalmunition.com (KF (lists)))
perldiver (se_cur_ity at hotmail.com (Morning Wood))
MDKSA-2005:166 - Updated clamv packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:167 - Updated util-linux packages fix umount vulnerability (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:168 - Updated masqmail packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
Google Secure Access or "How to have people download a trojan." (yboily at gmail.com (Yvan Boily))
Paper - How It's Difficult to Ruin a Good Name: An Analysis of Reputational Risk (ken at ftusecurity.com (Kenneth F. Belva))
PDF's unsafe? (geoincidents at nls.net (Geo.))
PDF's unsafe? (michealespinola at gmail.com (Micheal Espinola Jr))
PDF's unsafe? (ahaning at gmail.com (Andrew Haninger))
PDF's unsafe? (brent.colflesh at ulticom.com (Brent Colflesh))
PDF's unsafe? (michealespinola at gmail.com (Micheal Espinola Jr))
PDF's unsafe? (ad at class101.org (ad@...ss101.org))
PDF's unsafe? (michealespinola at gmail.com (Micheal Espinola Jr))
Google Secure Access or "How to have people download a trojan." (str0ke at milw0rm.com (str0ke@...w0rm.com))
PDF's unsafe? (geoincidents at nls.net (Geo.))
PDF's unsafe? (michealespinola at gmail.com (Micheal Espinola Jr))
PDF's unsafe? (mattmurphy at kc.rr.com (Matthew Murphy))
PDF's unsafe? (y0himba at technolounge.org (y0himba))
PDF's unsafe? (alexindef at rogers.com (Alex))
Google Secure Access or "How to have people download a trojan." (pvnick at gmail.com (Paul Nickerson))
Google Secure Access or "How to have people download a trojan." (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Google Secure Access or "How to have people download a trojan." (xillwillx at gmail.com (Ill will))
RE: perldiver (learnperlidiot at hushmail.com (learnperlidiot@...hmail.com))

September 22 (46 messages)

Google Secure Access or "How to have people download a trojan." (yboily at gmail.com (Yvan Boily))
So how does THIS work? (jlay at slave-tothe-box.net (James Lay))
So how does THIS work? (brian at dessent.net (Brian Dessent))
So how does THIS work? Solved. (jlay at slave-tothe-box.net (James Lay))
Google Secure Access or "How to have people download a trojan." (xillwillx at gmail.com (Ill will))
Google Secure Access or "How to have people download a trojan." (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Google Secure Access or "How to have people download a trojan." (yboily at gmail.com (Yvan Boily))
PDF's unsafe? (martin.pitt at canonical.com (Martin Pitt))
Google Secure Access or "How to have people download a trojan." (yboily at gmail.com (Yvan Boily))
Google Secure Access or "How to have peopledownload a trojan." (berendjanwever at gmail.com (Berend-Jan Wever))
Internet Exploiter meets FireFox (berendjanwever at gmail.com (Berend-Jan Wever))
[SECURITY] [DSA 817-1] New python2.2 packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Google Secure Access or "How to have peopledownload a trojan." (michaelslists at gmail.com (Michael Silk))
[SECURITY] [DSA 816-1] New XFree86 packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
PDF's unsafe? (gautam.bipin at gmail.com (Bipin Gautam))
Av, spyware, ddl trojan assesment (sherwill22 at tmail.com (Sherwyn Williams))
Microsoft IE 5.2.3 for Mac OSX crash (marco.mella at telecomitalia.it (Marco Mella))
Av, spyware, ddl trojan assesment (primate at mindspring.com (Neil Carpenter))
Microsoft IE 5.2.3 for Mac OSX crash (marco.mella at telecomitalia.it (Marco Mella))
Microsoft IE 5.2.3 Mac OSX crash (marco.mella at telecomitalia.it (Mella Marco))
R: Microsoft IE 5.2.3 Mac OSX crash (marco.mella at telecomitalia.it (Mella Marco))
Re: PDF's unsafe? (gmontgomery at gapsinc.com (Gina H Montgomery))
Apple OSX - TextEdit bug (marco.mella at telecomitalia.it (Mella Marco))
R: Microsoft IE 5.2.3 Mac OSX crash (kiwi at oav.net (Xavier Beaudouin))
Google Secure Access or "How to have people download a trojan." (full-disclosure at nospam.wafel.org (Jorrit Kronjee))
R: Microsoft IE 5.2.3 Mac OSX crash (marco.mella at telecomitalia.it (Marco Mella))
[SECURITY] [DSA 818-1] New kdeedu packages fix insecure temporary files (joey at infodrom.org (Martin Schulze))
Google Secure Access or "How to have people download a trojan." (pvnick at gmail.com (Paul Nickerson))
Protty v.01A (beta) - shellcode execution protection library for Windows NT based systems (bania.piotr at gmail.com (Piotr Bania))
FireFox exploit updated (berendjanwever at gmail.com (Berend-Jan Wever))
OpenServer 6.0.0 : TCP Remote ICMP Denial Of Service Vulnerabilities (please_reply_to_security at sco.com (please_reply_to_security@....com))
RE: perldiver (se_cur_ity at hotmail.com (Morning Wood))
Google Secure Access or "How to have people download a trojan." (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
I love the American way of life (xploitable at gmail.com (n3td3v))
Call to Arms: Rita Scams (ge at linuxbox.org (Gadi Evron))
[scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting (maru at scip.ch (Marc Ruef))
I love the American way of life (toddtowles at brookshires.com (Todd Towles))
I love the American way of life (michealespinola at gmail.com (Micheal Espinola Jr))
Wifi worm? (gluttony at gmail.com (Andrew A))
Google Secure Access or "How to have people download a trojan." (stan.bubrouski at gmail.com (Stan Bubrouski))
Wifi worm? (toddtowles at brookshires.com (Todd Towles))
Call to Arms: Rita Scams (cstone at pobox.com (cstone))
I love the American way of life (mrceconnor at bellsouth.net (c.e. gene connor))
Rita Scams Call to Arms - Update (ge at linuxbox.org (Gadi Evron))
[scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting (brion at pobox.com (Brion Vibber))
OWASP SoCal Chapter Meeting - Sept 27, 2005 (Kartik.Trivedi at Foundstone.com (Kartik.Trivedi@...ndstone.com))

September 23 (27 messages)

Google Secure Access or "How to have peopledownload a trojan." (ccozad at cosco.com.au (cozadc/Cozad, Chris))
Google Secure Access or "How to havepeopledownload a trojan." (pvnick at gmail.com (Paul))
Google Secure Access or "How to have peopledownload a trojan." (kf_lists at digitalmunition.com (KF (lists)))
Re: Av, spyware, ddl trojan assesment (nick at virus-l.demon.co.uk (Nick FitzGerald))
[scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting (timt at spiderlinks.org (tim tompkins))
Secunia Research: 7-Zip ARJ Archive Handling Buffer Overflow (vuln at secunia.com (Secunia Research))
[SECURITY] [DSA 819-1] New python2.1 packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Google Secure Access or "How to havepeopledownload a trojan." (allan.vanleeuwen at orangemail.nl (Leeuwen, Allan van))
Recall: Google Secure Access or "How to havepeopledownload a trojan." (allan.vanleeuwen at orangemail.nl (Leeuwen, Allan van))
SecureW2 TLS security problem (jas at extundo.com (Simon Josefsson))
SAP Security Contact (lmeiners at cybsec.com (Leandro Meiners))
Re: SecureW2 TLS security problem (davek_throwaway at hotmail.com (Dave Korn))
SAP Security Contact (hracciatti at gmail.com (Hernán M. Racciatti))
PGPNet Upgrade path ? (m at rtij.nl (Martijn Lievaart))
PDF's unsafe? (mark at dolphtech.com (Mark W. Webb))
Secunia Research: PowerArchiver ACE/ARJ Archive Handling Buffer Overflow (vuln at secunia.com (Secunia Research))
I love the American way of life (xploitable at gmail.com (n3td3v))
I love the American way of life (toddtowles at brookshires.com (Todd Towles))
PDF's unsafe? (xyberpix at xyberpix.com (Xyberpix))
Re: I love the American way of life (simon.biles at gmail.com (Simon Biles))
[USN-186-1] Mozilla and Firefox vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
SAP Security Contact (felix.lindner at nruns.com (Felix Lindner))
Re: I love the American way of life (xyberpix at xyberpix.com (Xyberpix))
Hijacking Bluetooth Headsets for Fun and Profit? (kf_lists at digitalmunition.com (KF (lists)))
Re: Rita Scams Call to Arms - Update (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
help us determine what's a Rita phish (ge at linuxbox.org (Gadi Evron))
Recall: Google Secure Access or "How to havepeopledownload a trojan." (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

September 24 (8 messages)

[SECURITY] [DSA 820-1] New courier packages fix cross-site scripting (joey at infodrom.org (Martin Schulze))
[ GLSA 200509-16 ] Mantis: XSS and SQL injection vulnerabilities (koon at gentoo.org (Thierry Carrez))
[ GLSA 200509-17 ] Webmin, Usermin: Remote code execution through PAM authentication (koon at gentoo.org (Thierry Carrez))
Cisco IOS hacked? (jan at boyakasha.dk (Jan Nielsen))
Russian hackers attack internet (xploitable at gmail.com (n3td3v))
Russian hackers attack internet (leeq999 at gmail.com (Lee Quinton))
It's time for some warez - wzdftpd remote exploit (kingcope at gmx.net (kcope))
It's time for some warez - Qpopper poppassd local r00t exploit (kingcope at gmx.net (kcope))

September 25 (7 messages)

GeSHi Local PHP file inclusion 1.0.7.2 (max at jestsuper.pl (Maksymilian Arciemowicz))
ContentServ features remote file disclosure (qobaiashi at gmx.net (qobaiashi@....net))
It's time for some warez - Qpopper poppassd local r00t exploit (hhoffman at ip-solutions.net (Harry Hoffman))
[USN-186-2] Ubuntu 4.10 packages for USN-186-1 Firefox security update (martin.pitt at canonical.com (Martin Pitt))
[USN-187-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Server crash and motd deletion in MultiTheftAuto 0.5 patch 1 (aluigi at autistici.org (Luigi Auriemma))
It's time for some warez - Qpopper poppassd local r00t exploit (kingcope at gmx.net (kcope))

September 26 (43 messages)

Checkpoint VPN DoS woes (sixsigma98 at hotmail.com (Ray P))
CORE-Impact license bypass (c0ntexb at gmail.com (c0ntex))
[scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting (brion at pobox.com (brion@...ox.com))
offtopic: text/plain vs multipart/alternative (Re: Internet Exploiter meets FireFox) (3APA3A at SECURITY.NNOV.RU (3APA3A))
Russian hackers attack internet (3APA3A at SECURITY.NNOV.RU (3APA3A))
RE: CORE-Impact license bypass (c0ntex) (antispam at gawab.com (TerryToh))
ElseNot project (layne at elsenot.com (layne@...enot.com))
RE: CORE-Impact license bypass (c0ntex) (c0ntexb at gmail.com (c0ntex))
RE: CORE-Impact license bypass (c0ntex) (andre.ludwig at gmail.com (Andre Ludwig))
RE: CORE-Impact license bypass (c0ntex) (xyberpix at xyberpix.com (Xyberpix))
Mac OS X - malloc() local privilege escalation vulnerability. (3APA3A at SECURITY.NNOV.RU (3APA3A))
Retrieve info in Protected Storage of other users (lpf at exemail.com.au (lpf@...mail.com.au))
Re: Request to publish your Proof of Concept (esc1.html) (guninski at guninski.com (Georgi Guninski))
in-line coax monitoring device (alex_krycek at hush.com (Alex Krycek))
in-line coax monitoring device (byte.busters at gmail.com (byte busters))
CORE-Impact license bypass (se_cur_ity at hotmail.com (Morning Wood))
Re: Request to publish your Proof of Concept (esc1.html) (gautam.bipin at gmail.com (Bipin Gautam))
Re: in-line coax monitoring device (davek_throwaway at hotmail.com (Dave Korn))
CORE-Impact license bypass (c0ntexb at gmail.com (c0ntex))
RealPlayer && HelixPlayer Remote Format String Exploit (c0ntexb at gmail.com (c0ntex))
Re: Request to publish your Proof of Concept (esc1.html) (str0ke at milw0rm.com (str0ke))
Re: Request to publish your Proof of Concept (esc1.html) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
CORE-Impact license bypass (perrymonj at networkarmor.com (Josh Perrymon))
Re: in-line coax monitoring device (Mark.Senior at gov.ab.ca (Mark Senior))
CORE-Impact license bypass (toddtowles at brookshires.com (Todd Towles))
Re: in-line coax monitoring device (vtlists at wyae.de (Volker Tanger))
CORE-Impact license bypass (jasonjones at brookshires.com (Jason Jones))
CORE-Impact license bypass (c0ntexb at gmail.com (c0ntex))
CORE-Impact license bypass (perrymonj at networkarmor.com (Josh Perrymon))
CORE-Impact license bypass (c0ntexb at gmail.com (c0ntex))
Re: in-line coax monitoring device (alex_krycek at hush.com (Alex Krycek))
[ GLSA 200509-18 ] Qt: Buffer overflow in the included zlib library (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Re: in-line coax monitoring device (michael.holstein at csuohio.edu (Michael Holstein))
CORE-Impact license bypass (exibar at thelair.com (Exibar))
CORE-Impact license bypass (c0ntexb at gmail.com (c0ntex))
in-line coax monitoring device (michael.holstein at csuohio.edu (Michael Holstein))
Re: in-line coax monitoring device (michael.holstein at csuohio.edu (Michael Holstein))
CORE-Impact license bypass (mmaiffret at eeye.com (Marc Maiffret))
Re: Request to publish your Proof of Concept(esc1.html) (ad at class101.org (ad@...ss101.org))
CORE-Impact license bypass (perrymonj at networkarmor.com (Josh Perrymon))
CORE-Impact license bypass (c0ntexb at gmail.com (c0ntex))
GeSHi Local PHP file inclusion 1.0.7.2 (brion at pobox.com (Brion Vibber))
Nokia 7610, 3210 denial of service in OBEX. (aramosf at unsec.net (A. Ramos))

September 27 (74 messages)

MDKSA-2005:169 - Updated mozilla-firefox packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2005:170 - Updated mozilla packages fix multiple vulnerabilities (security at mandriva.com (Mandriva Security Team))
Retrieve info in Protected Storage of other users (nicolas.ruff at gmail.com (Nicolas RUFF))
urgent info require (lifesaver68 at hotmail.com (adnan habib))
Worm phone home site question (odinanne at comcast.net (odinanne))
Announce: RSBAC v1.2.5 released (ao at rsbac.org (Amon Ott))
Worm phone home site question (guirad_g at epita.fr (ggfirst))
Worm phone home site question (michael.holstein at csuohio.edu (Michael Holstein))
Third issue of the Zone-H Comics (astharot at zone-h.org (Gerardo 'Astharot' Di Giacomo))
Worm phone home site question (gluttony at gmail.com (Andrew A))
Worm phone home site question (phased at mail.ru (phased))
Re: Re: in-line coax monitoring device (davek_throwaway at hotmail.com (Dave Korn))
CORE-Impact license bypass (exibar at thelair.com (Exibar))
[ISR] - Novell GroupWise Client Integer Overflow (famato at infobyte.com.ar (Francisco Amato))
CORE-Impact license bypass (research at sec-consult.com (Bernhard Mueller))
Third issue of the Zone-H Comics (xploitable at gmail.com (n3td3v))
Third issue of the Zone-H Comics (joxeankoret at gmail.com (Joxean Koret))
Third issue of the Zone-H Comics (richardh at sec-1.com (Richard Horsman))
Third issue of the Zone-H Comics (joxeankoret at gmail.com (Joxean Koret))
Third issue of the Zone-H Comics (xploitable at gmail.com (n3td3v))
Third issue of the Zone-H Comics (sil at infiltrated.net (J. Oquendo))
Third issue of the Zone-H Comics (str0ke at milw0rm.com (str0ke))
Third issue of the Zone-H Comics (bart.lansing at hushmail.com (Bart Lansing))
Third issue of the Zone-H Comics (xploitable at gmail.com (n3td3v))
CORE-Impact license bypass (dotsecure at gmail.com (Martin Mkrtchian))
Third issue of the Zone-H Comics (kf_lists at digitalmunition.com (KF (lists)))
Third issue of the Zone-H Comics (xploitable at gmail.com (n3td3v))
Third issue of the Zone-H Comics (str0ke at milw0rm.com (str0ke))
CORE-Impact license bypass (c0ntexb at gmail.com (c0ntex))
Third issue of the Zone-H Comics (xploitable at gmail.com (n3td3v))
Third issue of the Zone-H Comics (andre.ludwig at gmail.com (Andre Ludwig))
Third issue of the Zone-H Comics (Ken at infosec101.org (Ken Pfeil))
Third issue of the Zone-H Comics (andre.ludwig at gmail.com (Andre Ludwig))
Third issue of the Zone-H Comics (str0ke at milw0rm.com (str0ke))
Third issue of the Zone-H Comics (andre.ludwig at gmail.com (Andre Ludwig))
Third issue of the Zone-H Comics (bkfsec at sdf.lonestar.org (bkfsec))
Third issue of the Zone-H Comics (xploitable at gmail.com (n3td3v))
Third issue of the Zone-H Comics (xploitable at gmail.com (n3td3v))
Third issue of the Zone-H Comics (sil at infiltrated.net (J. Oquendo))
Third issue of the Zone-H Comics (andre.ludwig at gmail.com (Andre Ludwig))
Third issue of the Zone-H Comics (andre.ludwig at gmail.com (Andre Ludwig))
[ISR] - Novell GroupWise Client Integer Overflow (famato at infobyte.com.ar (famato@...obyte.com.ar))
Third issue of the Zone-H Comics (xploitable at gmail.com (n3td3v))
Third issue of the Zone-H Comics (nfobro at gmail.com (eric williams))
Third issue of the Zone-H Comics (toddtowles at brookshires.com (Todd Towles))
Third issue of the Zone-H Comics (toddtowles at brookshires.com (Todd Towles))
Third issue of the Zone-H Comics (frankdewit at home.nl (Frank de Wit))
Third issue of the Zone-H Comics (jericho at attrition.org (security curmudgeon))
[ISR] - Novell GroupWise Client Integer Overflow (famato at infobyte.com.ar (famato@...obyte.com.ar))
Third issue of the Zone-H Comics (bkfsec at sdf.lonestar.org (bkfsec))
Third issue of the Zone-H Comics (xploitable at gmail.com (n3td3v))
Third issue of the Zone-H Comics (andre.ludwig at gmail.com (Andre Ludwig))
O-O-O (frankdewit at home.nl (Frank de Wit))
Third issue of the Zone-H Comics (andre.ludwig at gmail.com (Andre Ludwig))
Third issue of the Zone-H Comics (xploitable at gmail.com (n3td3v))
Third issue of the Zone-H Comics (andre.ludwig at gmail.com (Andre Ludwig))
O-O-O (xploitable at gmail.com (n3td3v))
Third issue of the Zone-H Comics (DDavis at pivx.com (Dominique Davis))
Third issue of the Zone-H Comics (jericho at attrition.org (security curmudgeon))
O-O-O (kf_lists at digitalmunition.com (KF (lists)))
Third issue of the Zone-H Comics (DDavis at pivx.com (Dominique Davis))
Third issue of the Zone-H Comics (xploitable at gmail.com (n3td3v))
CORE-Impact license bypass (asimmons at messagelabs.com (Andrew Simmons))
Third issue of the Zone-H Comics (DDavis at pivx.com (Dominique Davis))
Re: [ISR] - Novell GroupWise Client Integer Overflow (cristjc at comcast.net (Crist J. Clark))
Third issue of the Zone-H Comics (andre.ludwig at gmail.com (Andre Ludwig))
O-O-O (frankdewit at home.nl (Frank de Wit))
[ GLSA 200509-19 ] PHP: Vulnerabilities in included PCRE and XML-RPC libraries (koon at gentoo.org (Thierry Carrez))
CORE-Impact license bypass (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Third issue of the Zone-H Comics (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Third issue of the Zone-H Comics (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Third issue of the Zone-H Comics (toddtowles at brookshires.com (Todd Towles))
Third issue of the Zone-H Comics (DDavis at pivx.com (Dominique Davis))
Third issue of the Zone-H Comics (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))

September 28 (53 messages)

Re: Re: in-line coax monitoring device (fd at ew.nsci.us (fd@...nsci.us))
CORE-Impact license bypass (fd at ew.nsci.us (fd@...nsci.us))
Third issue of the Zone-H Comics (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Third issue of the Zone-H Comics (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Re: Re: in-line coax monitoring device (vtlists at wyae.de (Volker Tanger))
Third issue of the Zone-H Comics (fd at ew.nsci.us (fd@...nsci.us))
CORE-Impact license bypass (research at sec-consult.com (Bernhard Mueller))
urgent info require (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Suggestion for IDS (fajarep at gmail.com (Fajar Edisya Putera))
Suggestion for IDS (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Suggestion for IDS (peer at baden-online.de (Peer Janssen))
Suggestion for IDS (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Suggestion for IDS (sil at infiltrated.net (J. Oquendo))
[SECURITY] [DSA 821-1] New python2.3 packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
in-line coax monitoring device (alex_krycek at hush.com (Alex Krycek))
CORE-Impact license bypass (sk at groundzero-security.com (sk))
Exploring Windows CE Shellcode (tim.hurman at pentest.co.uk (Tim Hurman))
(no subject) (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Suggestion for IDS (michael.holstein at csuohio.edu (Michael Holstein))
Suggestion for IDS (michael.holstein at csuohio.edu (Michael Holstein))
Suggestion for IDS (eslerj at gmail.com (Joel Esler))
O-O-O (colweb at gmail.com (Colin))
(no subject) (ademar.gonzalez at gmail.com (Ademar Gonzalez))
Suggestion for IDS (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Suggestion for IDS (pauls at utdallas.edu (Paul Schmehl))
Suggestion for IDS (pauls at utdallas.edu (Paul Schmehl))
Suggestion for IDS (michael.holstein at csuohio.edu (Michael Holstein))
Suggestion for IDS (jan at boyakasha.dk (Jan Nielsen))
(no subject) cpshost.dll (ventura.vitor at gmail.com (Vitor Ventura))
Is the Bottom Line Impacted by Security Breaches? (ken at ftusecurity.com (Kenneth F. Belva))
Suggestion for IDS (paul at istic.net (Paul S. Brown))
Suggestion for IDS (vventura at cesce.pt (Vitor Ventura))
Suggestion for IDS (kpawloski at gmail.com (Kevin Pawloski))
Suggestion for IDS (pol at geekstuff.tv (Paul S. Brown))
Suggestion for IDS (michael.holstein at csuohio.edu (Michael Holstein))
Suggestion for IDS (wolfgang at sweet-haven.com (Lew Wolfgang))
Is the Bottom Line Impacted by Security Breaches? (michael.holstein at csuohio.edu (Michael Holstein))
Suggestion for IDS (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Suggestion for IDS (michael.holstein at csuohio.edu (Michael Holstein))
OpenServer 5.0.7 OpenServer 6.0.0 : UnZip File Permissions Change Vulnerability (please_reply_to_security at sco.com (please_reply_to_security@....com))
IDS features (was: Suggestion for IDS) (abarrera at iron-gate.net (Alejandro Barrera))
Suggestion for IDS (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Suggestion for IDS (jbrown at thrupoint.net (Brown, James))
Re: Is the Bottom Line Impacted by Security Breaches? (michael.holstein at csuohio.edu (Michael Holstein))
Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC (mail at hackingspirits.com (Debasis Mohanty))
Is the Bottom Line Impacted by Security Breaches? (frank at knobbe.us (Frank Knobbe))
Is the Bottom Line Impacted by Security Breaches? (toddtowles at brookshires.com (Todd Towles))
Suggestion for IDS (mlsecurity at lab42.ch (Reto Inversini))
Is the Bottom Line Impacted by Security Breaches? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Active Directory and IIS on production servers, and clustering (mlsecurity at lab42.ch (Reto Inversini))
IDS features (was: Suggestion for IDS) (kpawloski at gmail.com (Kevin Pawloski))
Is the Bottom Line Impacted by Security Breaches? (ken at ftusecurity.com (Kenneth F. Belva))
SquirrelMail Address Add Plugin XSS (info at moritz-naumann.com (Moritz Naumann))

September 29 (33 messages)

Suggestion for IDS (pauls at utdallas.edu (Paul Schmehl))
Suggestion for IDS (pauls at utdallas.edu (Paul Schmehl))
Suggestion for IDS (pauls at utdallas.edu (Paul Schmehl))
urgent info require (ivanhec at gmail.com (Ivan .))
Need comparison of netscreen and cyberguard (lifesaver68 at hotmail.com (adnan habib))
Need comparison of netscreen and cyberguard (ivanhec at gmail.com (Ivan .))
[SECURITY] [DSA 797-2] Updated zsync i386 packages fix build error (mstone at klecker.debian.org (Michael Stone))
Is the Bottom Line Impacted by Security Breaches? (kurt.buff at gmail.com (Kurt Buff))
[NRVA05-08] - Arbitrary file download by NateOn Messagener's ActiveX and DoS (saintlinu at yahoo.co.kr (saintlinu))
Suggestion for IDS (arif.jatmoko at sea.ccamatil.com (arif.jatmoko@....ccamatil.com))
Is the Bottom Line Impacted by Security Breaches? (fd at ew.nsci.us (fd@...nsci.us))
Need comparison of netscreen and cyberguard (Mike.Cudmore at dft.gsi.gov.uk (Mike Cudmore))
[SECURITY] [DSA 822-1] New gtkdiskfree packages fix insecure temporary file (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 823-1] New util-linux packages fix privilege escalation (joey at infodrom.org (Martin Schulze))
ITIL Security Management Kits and Docs (winsoc at googlemail.com (winsoc))
Re: Is the Bottom Line Impacted by Security Breaches? (ircgnet at gmail.com (IRCGNet))
Suggestion for IDS (randallm at fidmail.com (Randall M))
[USN-188-1] AbiWord vulnerability (martin.pitt at canonical.com (Martin Pitt))
ASM memory allocation signatures (skemet at gmail.com (S S))
[USN-189-1] cpio vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[SECURITY] [DSA 824-1] New ClamAV packages fix denial of service (joey at infodrom.org (Martin Schulze))
Suggestion for IDS (michael.holstein at csuohio.edu (Michael Holstein))
Suggestion for IDS (michael.holstein at csuohio.edu (Michael Holstein))
Suggestion for IDS (michael.holstein at csuohio.edu (Michael Holstein))
Serendipity: Account Hijacking / CSRF Vulnerability (enji at infosys.tuwien.ac.at (Nenad Jovanovic))
Re: Is the Bottom Line Impacted by Security Breaches? (bkfsec at sdf.lonestar.org (bkfsec))
[SECURITY] [DSA 825-1] New loop-aes-utils packages fix privilege escalation (joey at infodrom.org (Martin Schulze))
[USN-190-1] SNMP vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-191-1] unzip vulnerability (martin.pitt at canonical.com (Martin Pitt))
Update of ciscocrack.c (Jerome.Poggi at hsc-labs.com (Jerome Poggi))
Suggestion for IDS (Mark.Senior at gov.ab.ca (Mark Senior))
Re: Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC (zx at castlecops.com (Paul Laudanski))
ASM memory allocation signatures (pvnick at gmail.com (Paul))

September 30 (23 messages)

[SECURITY] [DSA 826-1] New helix-player packages fix multiple vulnerabilities (mstone at klecker.debian.org (Michael Stone))
[SECURITY] [DSA 827-1] New backupninja packages fix insecure temporary file (mstone at klecker.debian.org (Michael Stone))
Coverage Analysis & Graphs (halvar.flake at sabre-security.com (halvar.flake@...re-security.com))
Zone Labs response to "Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC" (security at zonelabs.com (Zone Labs Security Team))
[SECURITY] [DSA 828-1] New squid packages fix denial of service (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 809-2] New squid packages fix denial of service (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 829-1] New mysql packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
exploit frameworks (dave at immunitysec.com (Dave Aitel))
[SECURITY] [DSA 830-1] New ntlmaps packages fix information leak (joey at infodrom.org (Martin Schulze))
[ GLSA 200509-20 ] AbiWord: RTF import stack-based buffer overflow (koon at gentoo.org (Thierry Carrez))
[SECURITY] [DSA 831-1] New mysql-dfsg packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
RE: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein (gordey at itsecurity.ru (Sergey V. Gordeychik))
apachetop insecure temporary file creation (exploits at zataz.net (ZATAZ Audits))
[ GLSA 200509-21 ] Hylafax: Insecure temporary file creation in xferfaxstats script (koon at gentoo.org (Thierry Carrez))
[SECURITY] [DSA 832-1] New gopher packages fix several buffer overflows (joey at infodrom.org (Martin Schulze))
Contact to webmaster of messages.yahoo.com - bbs application sends broken HTTP header (pbieringer at aerasec.de (Peter Bieringer))
SA Security Bulletin: Zorch Vulnerability in Rhino Snarf Java Interpretor (apexpoizen at Safe-mail.net (apexpoizen@...e-mail.net))
[USN-192-1] Squid vulnerability (martin.pitt at canonical.com (Martin Pitt))
iDEFENSE Security Advisory 09.30.05: RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
Re: Bypassing Personal Firewall (Zone Alarm Pro)Using DDE-IPC (mail at hackingspirits.com (Debasis Mohanty))
Buffer-overflow and directory traversal bugs in Virtools Web Player 3.0.0.100 (aluigi at autistici.org (Luigi Auriemma))
UPDATE: [ GLSA 200509-11 ] Mozilla Suite, Mozilla Firefox: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
Re: Bypassing Personal Firewall (Zone Alarm Pro)Using DDE-IPC (zx at castlecops.com (Paul Laudanski))

888 messages