full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2005/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 19	² 6
³ 39	⁴ 42	⁵ 31	⁶ 44	⁷ 29	⁸ 9	⁹ 13
¹⁰ 20	¹¹ 47	¹² 36	¹³ 22	¹⁴ 25	¹⁵ 12	¹⁶ 13
¹⁷ 12	¹⁸ 9	¹⁹ 9	²⁰ 29	²¹ 30	²² 8	²³ 4
²⁴ 14	²⁵ 26	²⁶ 21	²⁷ 25	²⁸ 28	²⁹ 7	³⁰ 25
³¹ 26

Messages by day:

October 2 (6 messages)

October 3 (39 messages)

October 4 (42 messages)

October 5 (31 messages)

Bigger burger roll needed (randallm at fidmail.com (Randall M))
Bigger burger roll needed (michealespinola at gmail.com (Micheal Espinola Jr))
Bigger burger roll needed (jericho at attrition.org (security curmudgeon))
Cyrilic (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Re: Careless LEO Forensics and Suicides (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
[SECURITY] [DSA 843-1] New arc packages fix insecure temporary files (joey at infodrom.org (Martin Schulze))
Cyrilic (raoul at elforsoft.com (Raoul Nakhmanson-Kulish))
[SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass (joey at infodrom.org (Martin Schulze))
[ GLSA 200510-04 ] Texinfo: Insecure temporary file creation (koon at gentoo.org (Thierry Carrez))
Secunia Research: ALZip Multiple Archive Handling Buffer Overflow (vuln at secunia.com (Secunia Research))
Publicly Disclosing A Vulnerability (perrymonj at networkarmor.com (Josh Perrymon))
Publicly Disclosing A Vulnerability (xyberpix at xyberpix.com (xyberpix))
Publicly Disclosing A Vulnerability (c0ntexb at gmail.com (c0ntex))
Publicly Disclosing A Vulnerability (phased at mail.ru (phased))
Publicly Disclosing A Vulnerability (steve at unixwiz.net (Steve Friedl))
Publicly Disclosing A Vulnerability (toddtowles at brookshires.com (Todd Towles))
Publicly Disclosing A Vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Publicly Disclosing A Vulnerability (dankney at sunsetfilms.com (Donald J. Ankney))
Publicly Disclosing A Vulnerability (Simon.Richter at hogyros.de (Simon Richter))
Tellme 1.2 (se_cur_ity at hotmail.com (Morning Wood))
Publicly Disclosing A Vulnerability (m at rtij.nl (Martijn Lievaart))
Publicly Disclosing A Vulnerability (pmelson at gmail.com (Paul Melson))
Publicly Disclosing A Vulnerability (fx at phenoelit.de (FX))
Publicly Disclosing A Vulnerability (perrymonj at networkarmor.com (Josh Perrymon))
Publicly Disclosing A Vulnerability (adesautels at comcast.net (Adriel Desautels))
Careless Law Enforcement ComputerForensicsLacking InfoSec Expertise Causes Suicides (full-disclosure at pchandyman.com.au (Greg))
cisco.com password compromised (allanz at gmail.com (Allan zhang))
WASC Threat Classification in 4 languages (contact at webappsec.org (contact@...appsec.org))
cisco.com password compromised (toddtowles at brookshires.com (Todd Towles))
cisco.com password compromised (hackerwacker at cybermesa.com (james edwards))
cisco.com password compromised (jerome.athias at free.fr (Jerome Athias))

October 6 (44 messages)

October 7 (29 messages)

October 8 (9 messages)

October 9 (13 messages)

October 10 (20 messages)

October 11 (47 messages)

October 12 (36 messages)

October 13 (22 messages)

Nessus becoming closed. [was: Call to participate] (thegesus at gmail.com (TheGesus))
Bigger burger roll needed (jftucker at gmail.com (James Tucker))
password vaults- (capegeo at opengroup.org (George Capehart))
password vaults- (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
[SECURITY] [DSA 864-1] New Ruby 1.8 packages fix safety bypass (joey at infodrom.org (Martin Schulze))
Microsoft EFS (fjgarrido at tecvd.com (Fco. Jose Garrido Matamoros))
Microsoft Outlook Web Access (ppetkov at gnucitizen.org (Petko Petkov))
[SECURITY] [DSA 865-1] New hylafax packages fix insecure temporary files (joey at infodrom.org (Martin Schulze))
WRT54G directory trasversial vulnerability (Thierry at sniff-em.com (Thierry Zoller))
WRT54G directory trasversial vulnerability (Thierry at sniff-em.com (Thierry Zoller))
On the linux kernel and stack randomization (justliketocode at yahoo.com (none none))
Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service (bania.piotr at gmail.com (Piotr Bania))
NEW USA FFIES Guidance (mmadison at fnni.com (Madison, Marc))
password vaults- (mmadison at fnni.com (Madison, Marc))
password vaults- (bart.lansing at hushmail.com (Bart Lansing))
[USN-203-1] Abiword vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Microsoft Outlook Web Access (pablo at vernocchi.com.ar (Vernocchi, Pablo))
iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
Secunia Research: AhnLab V3 Antivirus ALZ/UUE/XXE Archive Handling Buffer Overflow (vuln at secunia.com (Secunia Research))
TYPSoft ftpd (se_cur_ity at hotmail.com (Morning Wood))
Redmond Report: Yahoo for IM (rmueller at fidnet.com (Randall M))

October 14 (25 messages)

October 15 (12 messages)

October 16 (13 messages)

Security Scanners (adesautels at comcast.net (Adriel Desautels))
Call to participate: GNessUs security scanner (adesautels at comcast.net (Adriel Desautels))
Exploiting Windows Device Drivers Whitepaper (bania.piotr at gmail.com (Piotr Bania))
annoying bug in Windows XP (bits_n_bytes at gmx.de (Frank Dietrich))
annoying bug in Windows XP (poof at fansubber.com (Poof))
annoying bug in Windows XP (native.code at gmail.com (Native.Code))
annoying bug in Windows XP (mvp at joeware.net (joe))
Mozilla Thunderbird SMTP down-negotiation weakness (tim-security at sentinelchicken.org (Tim))
annoying bug in Windows XP (jerome.athias at free.fr (Jerome Athias))
annoying bug in Windows XP (Thierry at sniff-em.com (Thierry Zoller))
annoying bug in Windows XP (bits_n_bytes at gmx.de (Frank Dietrich))
Ciscos VPN-Client-Passwords can be decrypted (Thierry at sniff-em.com (Thierry Zoller))
Re: [Dailydave] Exploiting Windows Device Drivers Whitepaper (fw at deneb.enyo.de (Florian Weimer))

October 17 (12 messages)

Lynx Remote Buffer Overflow (metaur at telia.com (Ulf Harnhammar))
annoying bug in Windows XP (amir.fd at unoc.net (Amir Malik))
[ GLSA 200510-14 ] Perl, Qt-UnixODBC, CMake: RUNPATH issues (koon at gentoo.org (Thierry Carrez))
flexbackup default config insecure temporary file creation (exploits at zataz.net (ZATAZ Audits))
[USN-206-1] Lynx vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-207-1] PHP vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-208-1] graphviz vulnerability (martin.pitt at canonical.com (Martin Pitt))
SUSE Security Announcement: OpenWBEM (SUSE-SA:2005:060) (krahmer at suse.de (Sebastian Krahmer))
[ GLSA 200510-15 ] Lynx: Buffer overflow in NNTP processing (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200510-16 ] phpMyAdmin: Local file inclusion vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[USN-208-1] SSH server vulnerability (martin.pitt at canonical.com (Martin Pitt))
PHP Safedir Restriction Bypass Vulnerabilities (slythers at gmail.com (peter MC tachatte))

October 18 (9 messages)

October 19 (9 messages)

October 20 (29 messages)

October 21 (30 messages)

October 22 (8 messages)

Question (frank at knobbe.us (Frank Knobbe))
Question (rodrigob at suespammers.org (Rodrigo Barbosa))
[ GLSA 200510-19 ] cURL: NTLM username stack overflow (koon at gentoo.org (Thierry Carrez))
Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability (sesser at hardened-php.net (Stefan Esser))
phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit. (alphakgen at gmail.com (K-Gen Gen))
Vulnerability in AL-Caricatier, V.2.5 And Prior Versions (mohajali2k4 at gmail.com (God Of Death (G.O.D)))
vhost enumeration (Thierry at sniff-em.com (Thierry Zoller))
Different signatures on mirror sites for ethereal 0.10.13 (prozente at gmail.com (prozente@...il.com))

October 23 (4 messages)

October 24 (14 messages)

MS Access SQL injection column enumeration (upbupb at gmail.com (upb))
php < 4.4.1 htaccess apache dos (exploits at zataz.net (Eric Romang / ZATAZ.com))
Revised draft on ICMP attacks (fernando at gont.com.ar (Fernando Gont))
Revised draft on ICMP attacks (joxeankoret at gmail.com (Joxean Koret))
Web App Auditings (willy at mailinator.com (William))
Web App Auditings (pigrelax at yandex.ru (alex))
vhost enumeration (tkrpata at bjs.com (Krpata, Tyler))
Web App Auditings (darkuncle at gmail.com (Scott Francis))
Web App Auditings (darkuncle at gmail.com (Scott Francis))
vhost enumeration (trains at doctorunix.com (trains@...torunix.com))
iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability (labs-no-reply at idefense.com (iDEFENSE Labs))
Fwd: Vulnerability in Ar-blog ver 5.2 and prior versions (mohajali2k4 at gmail.com (M.o.H.a.J.a.L.i))

October 25 (26 messages)

October 26 (21 messages)

October 27 (25 messages)

October 28 (28 messages)

October 29 (7 messages)

October 30 (25 messages)

Funny smtp helo in the logs (aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh))
Re: Microsoft AntiSpyware falling furtherbehind (valdis at antivirus.lv (Valdis Shkesters))
Funny smtp helo in the logs (Thierry at sniff-em.com (Thierry Zoller))
for IE researchers, found a link crashing IE (ad at class101.org (ad@...ss101.org))
Funny smtp helo in the logs (trains at doctorunix.com (trains@...torunix.com))
for IE researchers, found a link crashing IE (ad at class101.org (ad@...ss101.org))
for IE researchers, found a link crashing IE (Thierry at sniff-em.com (Thierry Zoller))
for IE researchers, found a link crashing IE (ad at class101.org (ad@...ss101.org))
for IE researchers, found a link crashing IE (ad at class101.org (ad@...ss101.org))
for IE researchers, found a link crashing IE (ad at class101.org (ad@...ss101.org))
for IE researchers, found a link crashing IE (ad at class101.org (ad@...ss101.org))
for IE researchers, found a link crashing IE (ad at class101.org (ad@...ss101.org))
for IE researchers, found a link crashing IE (security at moritz-naumann.com (Moritz Naumann))
Re: Microsoft AntiSpyware falling further behind (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Funny smtp helo in the logs (wqrkjhfkasdjhfa.0.lexi at spamgourmet.com (Lexi))
[ GLSA 200510-25 ] Ethereal: Multiple vulnerabilities in protocol dissectors (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200510-26 ] XLI, Xloadimage: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
for IE researchers, found a link crashing IE (Thierry at sniff-em.com (Thierry Zoller))
for IE researchers, found a link crashing IE (manuel at ekerazha.com (Manuel "ekerazha" C.))
for IE researchers, found a link crashing IE (ad at class101.org (ad@...ss101.org))
[Fwd: Re: for IE researchers, found a link crashing IE] (misiu_ at gmx.de (misiu))
for IE researchers, found a link crashing IE (manuel at ekerazha.com (Manuel "ekerazha" C.))
Funny smtp helo in the logs (fjgarrido at tecvd.com (Fco. Jose Garrido Matamoros))
for IE researchers, found a link crashing IE (full-disclosure at pchandyman.com.au (Greg))
for IE researchers, found a link crashing IE (ad at class101.org (ad@...ss101.org))

October 31 (26 messages)

680 messages