full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2006/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 9
² 24	³ 32	⁴ 58	⁵ 65	⁶ 62	⁷ 21	⁸ 9
⁹ 23	¹⁰ 65	¹¹ 44	¹² 28	¹³ 63	¹⁴ 9	¹⁵ 11
¹⁶ 28	¹⁷ 58	¹⁸ 63	¹⁹ 59	²⁰ 35	²¹ 4	²² 9
²³ 18	²⁴ 35	²⁵ 30	²⁶ 34	²⁷ 26	²⁸ 12	²⁹ 11
³⁰ 19	³¹ 27

Messages by day:

January 1 (9 messages)

Important announcement about CXS (yahooinsider at gmail.com (Joe Average))
Important announcement about CXS (infosecbofh at gmail.com (InfoSecBOFH))
Important announcement about CXS (nekramer at mindtheater.net (Nancy Kramer))
Important announcement about CXS (i.m.crazy.frog at gmail.com (crazy frog crazy frog))
New WMF exploit confirmed in spam attacks (erics at sunbelt-software.com (Eric Sites))
[xfocus-SD-060101]AIX getCommand&getShell two vulnerabilities (security at xfocus.org (XFOCUS Security Team))
H&R Block Tax Service sends mail with SSN on the label. (solo at dok.org (Troy Solo))
H&R Block Tax Service sends mail with SSN on thelabel. (exibar at thelair.com (Exibar))
Exploiting Uninitialized Data (mercy at felinemenace.org ('mercy))

January 2 (24 messages)

complaints about the government spying! (OFFTOPIC) (trejrco at gmail.com (TJ))
security response contact for speedbit.com? (gautam.bipin at gmail.com (Bipin Gautam))
Buffer Overflow vulnerability in Windows Display Manager [Suspected] (sumit.siddharth at gmail.com (Sumit Siddharth))
What's with the /event.php?q=... hits? (supadupa at gmail.com (Scott Edwards))
Antitoxin for "SQL Injection" (?) (asen-public at sage.de (Sen, Adem))
[inbox] Re: Good reasons for securing your website (skodliv at gmail.com (poo))
Buffer Overflow vulnerability in Windows Display Manager [Suspected] (lise_moorveld at yahoo.com (Lise Moorveld))
What's with the /event.php?q=... hits? (j.schipper at math.uu.nl (Joachim Schipper))
Antitoxin for "SQL Injection" (?) (devdas at dvb.homelinux.org (Devdas Bhagat))
Antitoxin for "SQL Injection" (?) (Vulnerability at messagelabs.com (Vulnerability Management))
Buffer Overflow vulnerability in Windows Display Manager [Suspected] (casiamo at gmail.com (casiamo))
Spy Agency Mined Vast Data Trove and other tales (archer at frmug.org (Vincent Archer))
Buffer Overflow vulnerability in Windows Display Manager [Suspected] (stan.bubrouski at gmail.com (Stan Bubrouski))
[USN-233-1] fetchmail vulnerability (martin.pitt at canonical.com (Martin Pitt))
Buffer Overflow vulnerability in Windows Display Manager [Suspected] (infosecbofh at gmail.com (InfoSecBOFH))
[USN-234-1] cpio vulnerability (martin.pitt at canonical.com (Martin Pitt))
Buffer Overflow vulnerability in Windows Display Manager [Suspected] (ad at heapoverflow.com (ad@...poverflow.com))
Trojan found on Linux server (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
Trojan found on Linux server (niek at asbak.coding-slaves.com (Niek))
Trojan found on Linux server (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
Trojan found on Linux server (se_cur_ity at hotmail.com (Morning Wood))
Antitoxin for "SQL Injection" (?) (asen-public at sage.de (Sen, Adem))
Trojan found on Linux server (fd at g-0.org (GroundZero Security))
Trojan found on Linux server (niek at asbak.coding-slaves.com (Niek))

January 3 (32 messages)

Advisory: XSS attack on Superonline.com email service. (nukedx at nukedx.com (nukedx@...edx.com))
Antitoxin for "SQL Injection" (?) (jftucker at gmail.com (James Tucker))
Buffer Overflow vulnerability in Windows Display Manager [Suspected] (sumit.siddharth at gmail.com (Sumit Siddharth))
WMF round-up, updates and de-mystification (ge at linuxbox.org (Gadi Evron))
Buffer Overflow vulnerability in Windows Display Manager [Suspected] (sumit.siddharth at gmail.com (Sumit Siddharth))
WMF round-up, updates and de-mystification (nekramer at mindtheater.net (Nancy Kramer))
Buffer Overflow vulnerability in Windows Display Manager [Suspected] (ad at heapoverflow.com (ad@...poverflow.com))
Win32 Heap Exploits (nicolas.ruff at gmail.com (Nicolas RUFF))
Buffer Overflow vulnerability in Windows Display Manager [Suspected] (infosecbofh at gmail.com (InfoSecBOFH))
Buffer Overflow vulnerability in Windows Display Manager [Suspected] (infosecbofh at gmail.com (InfoSecBOFH))
WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
Open Xchange XSS (thomas.pollet at gmail.com (Thomas Pollet))
Win32 Heap Exploits (ad at heapoverflow.com (ad@...poverflow.com))
Microsoft will release WMF patch on 10th Jan (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
[ GLSA 200601-01 ] pinentry: Local privilege escalation (koon at gentoo.org (Thierry Carrez))
Fwd: [WAY OFF TOPIC] complaints about the government spying! (forensis.technica at gmail.com (Technica Forensis))
Antitoxin for "SQL Injection" (?) (jan.muenther at nruns.com (Jan Muenther))
[security] Social Eng. with Windows Media Player and Codec Download (markoer at markoer.org (Marco Ermini))
WMF round-up, updates and de-mystification (pferrie at symantec.com (Peter Ferrie))
WMF round-up, updates and de-mystification (gat0r at toughguy.net (gat0r))
Antitoxin for "SQL Injection" (?) (markoer at markoer.org (Marco Ermini))
Undeletable user account. (hando311 at hotmail.com (James Bower))
RE: WMF round-up, updates and de-mystification (tkrpata at bjs.com (Krpata, Tyler))
WMF round-up, updates and de-mystification (ad at heapoverflow.com (ad@...poverflow.com))
Does this unofficial WMF patch cause printing problems? (valdis at antivirus.lv (Valdis Shkesters))
Buffer Overflow vulnerability in WindowsDisplay Manager [Suspected] (pvnick at gmail.com (Paul))
Undeletable user account. (requiem at praetor.org (Jeremy Bishop))
Does this unofficial WMF patch cause printing problems? (steve at unixwiz.net (Steve Friedl))
Re: Blocking WMF Files via Squid (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
Re: WMF round-up, updates and de-mystification (adam at homeport.org (Adam Shostack))
RE: [funsec] WMF round-up, updates and de-mystification (AlexE at sunbelt-software.com (Alex Eckelberry))

January 4 (58 messages)

e: [funsec] RE: WMF round-up, updates and de-mystification] (mattmurphy at kc.rr.com (Matthew Murphy))
MDKSA-2006:001 - Updated tkcvs packages fix insecure temporary file vulnerability (security at mandriva.com (Mandriva Security Team))
Re: Blocking WMF Files via Squid (fmargeli at sgp.gov.ar (fmargeli@....gov.ar))
MDKSA-2006:002 - Updated ethereal packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
WMF Exploit (colin.75 at btinternet.com (Colin Copley))
RSA Security's Contact Point for Vulnerability Reports (vin at theworld.com (Vin McLellan))
Outlook Express 6.0 : link destination obfuscation (romain.vergniol at cegedim.fr (Romain Vergniol))
Outlook Express 6.0 : link destination obfuscation (tewner at jct.ac.il (Michael Tewner))
Re: Trojan found on Linux server (assen at online.bg (Bulgaria Online - Assen Totin))
Undeletable user account. (michael.holstein at csuohio.edu (Michael Holstein))
WMF Exploit (forensis.technica at gmail.com (Technica Forensis))
WMF Exploit (ad at heapoverflow.com (ad@...poverflow.com))
WMF Exploit (toddtowles at brookshires.com (Todd Towles))
complaints about the governemnt spying! (Bart.Lansing at kohls.com (Bart.Lansing@...ls.com))
Rockliffe Directory Transversal Vulnerability (jzlatin at ramat.cc (Josh Zlatin))
Rockliffe Mailsite User Enumeration Flaw (jzlatin at ramat.cc (Josh Zlatin))
Outlook Express 6.0 : link destination obfuscation (romain.vergniol at cegedim.fr (Romain Vergniol))
Download Accelerator Plus can be tricked to download malicious file (gautam.bipin at gmail.com (Bipin Gautam))
Testing UTM devices. (squid at oranged.to (Jimmy Stewpot))
Rockliffe Directory Transversal Vulnerability (stan.bubrouski at gmail.com (Stan Bubrouski))
Unofficial Microsoft patches help hackers, not security (yahooinsider at gmail.com (Joe Average))
Unofficial Microsoft patches help hackers, not security (niek at asbak.coding-slaves.com (Niek))
Unofficial Microsoft patches help hackers, not security (yahooinsider at gmail.com (Joe Average))
Unofficial Microsoft patches help hackers, not security (niek at asbak.coding-slaves.com (Niek))
Unofficial Microsoft patches help hackers, not security (ccarpenter at dswa.net (Christopher Carpenter))
Rockliffe Directory Transversal Vulnerability (3APA3A at SECURITY.NNOV.RU (3APA3A))
Unofficial Microsoft patches help hackers, not security (toddtowles at brookshires.com (Todd Towles))
Unofficial Microsoft patches help hackers, not security (nocfed at gmail.com (nocfed))
Unofficial Microsoft patches help hackers, not security (gboyce at badbelly.com (gboyce))
Unofficial Microsoft patches help hackers, not security (Simon.Richter at hogyros.de (Simon Richter))
Unofficial Microsoft patches help hackers, not security (toddtowles at brookshires.com (Todd Towles))
RE: WMF round-up, updates and de-mystification (brance at jhu.edu (Brance Amussen))
Unofficial Microsoft patches help hackers, not security (dantrevino at yahoo.com (Dan Trevino))
Unofficial Microsoft patches help hackers, not security (mhoye at neon.polkaroo.net (Mike Hoye))
RE: WMF round-up, updates and de-mystification (marioc at computer.org (Mario Contestabile))
Unofficial Microsoft patches help hackers, not security (jasonjones at brookshires.com (Jason Jones))
RE: WMF round-up, updates and de-mystification (jbruce at unitedscience.com (James Bruce))
Unofficial Microsoft patches help hackers, not security (jworkman at pimpworks.org (Jeff Workman))
Undeletable user account. (trains at doctorunix.com (trains@...torunix.com))
RE: WMF round-up, updates and de-mystification (tkrpata at bjs.com (Krpata, Tyler))
Uninformed Journal Release Announcement: Volume 3 (fdlist at digitaloffense.net (Uninformed))
Interview: Ilfak Guilfanov (mattmurphy at kc.rr.com (Matthew Murphy))
RE: WMF round-up, updates and de-mystification (bania.piotr at gmail.com (Piotr Bania))
Unofficial Microsoft patches help hackers, not security (se_cur_ity at hotmail.com (Morning Wood))
Unofficial Microsoft patches help hackers, not security (toddtowles at brookshires.com (Todd Towles))
Unofficial Microsoft patches help hackers, not security (ad at heapoverflow.com (ad@...poverflow.com))
Unofficial Microsoft patches help hackers, not security (michael.holstein at csuohio.edu (Michael Holstein))
WMF Exploit (guninski at guninski.com (Georgi Guninski))
[ GLSA 200601-02 ] KPdf, KWord: Multiple overflows in included Xpdf code (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Unofficial Microsoft patches help hackers, not security (se_cur_ity at hotmail.com (Morning Wood))
WMF Exploit (guninski at guninski.com (Georgi Guninski))
WMF Exploit (toddtowles at brookshires.com (Todd Towles))
WMF round-up, updates and de-mystification (cristjc at comcast.net (Crist J. Clark))
WMF Exploit (cristjc at comcast.net (Crist J. Clark))
Re: Unzip *ALL* verisons ;)) (infozip at gmail.com (Johnny Lee))
WMF Exploit (jlauro at umflint.edu (Lauro, John))
[inbox] Breaking LoJack for Laptops (mattL at promortgagepartners.com (Matt Lavallee))
WMF Exploit (fdlist at digitaloffense.net (H D Moore))

January 5 (65 messages)

Windows PHP 4.x "0-day" buffer overflow (mercenary at hushmail.com (mercenary@...hmail.com))
Stop aiding an industry that just hurts humanity (gluttony at gmail.com (Andrew A))
Unofficial Microsoft patches help hackers, not security (colweb at gmail.com (Colin))
WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
RE: Full-Disclosure Digest, Vol 11, Issue 5 (horatiu at provision.ro (Horatiu Bandoiu))
WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
Re: [funsec] WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
Re: WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
RE: WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
RE: WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
RE: WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
Re: Re[2]: [funsec] WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
RE: Full-Disclosure Digest, Vol 11, Issue 5 (infosecbofh at gmail.com (InfoSecBOFH))
RE: WMF round-up, updates and de-mystification (bania.piotr at gmail.com (Piotr Bania))
Open Letter on the Interpretation of "Vulnerability Statistics" (coley at mitre.org (Steven M. Christey))
OE - news:// stupid url handler behavior (se_cur_ity at hotmail.com (Morning Wood))
infosecbofh (frankdewit at home.nl (Frank de Wit))
Re: Unzip *ALL* verisons ;)) (Glenn.Everhart at chase.com (Glenn.Everhart@...se.com))
WMFs blocked with MIME (stuart at cyberdelix.net (lsi))
Stop aiding an industry that just hurts humanity (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
Stop aiding an industry that just hurts humanity (thegesus at gmail.com (TheGesus))
Re: Stop aiding an industry that just hurts humanity (davek_throwaway at hotmail.com (Dave Korn))
Re: OE - news:// stupid url handler behavior (davek_throwaway at hotmail.com (Dave Korn))
infosecbofh (fsegna at web.de (franco segna))
infosecbofh (alex_krycek at hush.com (Alex Krycek))
Rockliffe Directory Transversal Vulnerability (jzlatin at ramat.cc (Josh Zlatin))
OE - news:// stupid url handler behavior (jd.security at gmail.com (J4y D33))
Unofficial Microsoft patches help hackers, not security (bkfsec at sdf.lonestar.org (bkfsec))
infosecbofh (tewner at jct.ac.il (michael tewner))
infosecbofh (yahooinsider at gmail.com (Joe Average))
Exploiting WMF (tiny) FAQ (fdlist at digitaloffense.net (H D Moore))
infosecbofh (andre.ludwig at gmail.com (Andre Ludwig))
RE: Full-Disclosure Digest, Vol 11, Issue 5 (niek at asbak.coding-slaves.com (Niek))
[USN-235-1] sudo vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: Download Accelerator Plus can be tricked to download malicious file (gautam.bipin at gmail.com (Bipin Gautam))
infosecbofh (womber at gmail.com (womber))
infosecbofh (prb at lava.net (Peter Besenbruch))
[USN-236-1] xpdf vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
infosecbofh (fd at g-0.org (GroundZero Security))
Stop aiding an industry that just hurts humanity (piercede at pdx.edu (Dean Pierce))
infosecbofh (yahooinsider at gmail.com (Joe Average))
infosecbofh (c0ntexb at gmail.com (c0ntex))
Stop aiding an industry that just hurts humanity (Glenn.Everhart at chase.com (Glenn.Everhart@...se.com))
RE: Download Accelerator Plus can be tricked to download malicious file (napa at securitynation.com (NaPa))
infosecbofh (stan.bubrouski at gmail.com (Stan Bubrouski))
MS Patch Release for WMF Issue (Geoff.Shatz at pchelps.com (Geoff.Shatz@...elps.com))
infosecbofh (foofus at foofus.net (foofus@...fus.net))
infosecbofh (yahooinsider at gmail.com (Joe Average))
Raise n3td3v google rank (senator.crabgrass at comcast.net (senator.crabgrass@...cast.net))
infosecbofh (stan.bubrouski at gmail.com (Stan Bubrouski))
MS Patch Release for WMF Issue (stan.bubrouski at gmail.com (Stan Bubrouski))
RE: Download Accelerator Plus can be tricked to download malicious file (gautam.bipin at gmail.com (Bipin Gautam))
Microsoft patches WMF... Wine is still exploitable? (fdlist at digitaloffense.net (H D Moore))
Microsoft patches WMF... Wine is still exploitable? (meissner at suse.de (Marcus Meissner))
iDefense Security Advisory 01.05.06: Blue Coat WinProxy Remote DoS Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
iDefense Security Advisory 01.05.06: Blue Coat Systems WinProxy Host Header Stack Overflow Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fens…)
iDefense Security Advisory 01.05.06: Blue Coat WinProxy Telnet DoS Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
infosecbofh (srenna at lcssecuritygroup.com (srenna@...securitygroup.com))
infosecbofh (steve at unixwiz.net (Steve Friedl))
what we REALLY learned from WMF (ge at linuxbox.org (Gadi Evron))
what we REALLY learned from WMF (jlay at slave-tothe-box.net (James Lay))
so, who is going to bindiff the WMF patch first? Already done (ge at linuxbox.org (Gadi Evron))
RE: WMF round-up, updates and de-mystification (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
WMF round-up, updates and de-mystification (intertwingled at qwest.net (Anthony R. Nemmer))

January 6 (62 messages)

infosecbofh (yahooinsider at gmail.com (Joe Average))
Mozilla Firefox image Buffer Overflow Vulnerability (zeus.olimpusklan at gmail.com (zeus olimpusklan))
infosecbofh (johnc at grok.org.uk (John Cartwright))
Re: what we REALLY learned from WMF (ge at linuxbox.org (Gadi Evron))
Re: what we REALLY learned from WMF (ge at linuxbox.org (Gadi Evron))
Re: what we REALLY learned from WMF (ge at linuxbox.org (Gadi Evron))
Re: what we REALLY learned from WMF (sbradcpa at pacbell.net (Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]))
RE: what we REALLY learned from WMF (amarsden at jvsdet.org (Adrian Marsden))
Re: what we REALLY learned from WMF (sbradcpa at pacbell.net (Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]))
MDKSA-2006:003 - Updated poppler packages fix several vulnerabilities (security at mandriva.com (Mandriva Security Team))
WMF round-up, updates and de-mystification (srenna at lcssecuritygroup.com (Scott Renna))
what we REALLY learned from WMF (niek at asbak.coding-slaves.com (Niek))
Re: what we REALLY learned from WMF (sbradcpa at pacbell.net (Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]))
MDKSA-2006:004 - Updated pdftohtml packages fix several vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2006:005 - Updated xpdf packages fix several vulnerabilities (security at mandriva.com (Mandriva Security Team))
Survey on Vuln Disclosure: Request for Participation (rforno at infowarrior.org (Richard Forno))
MDKSA-2006:006 - Updated gpdf packages fix several vulnerabilities (security at mandriva.com (Mandriva Security Team))
MDKSA-2006:007 - Updated apache2 packages fix vulnerabilities (security at mandriva.com (Mandriva Security Team))
Did MS pull an Ilfak? (MS patch bindiff results) (ge at linuxbox.org (Gadi Evron))
what we REALLY learned from WMF (nick at virus-l.demon.co.uk (Nick FitzGerald))
RE: what we REALLY learned from WMF (don at videon-central.com (Donald N Kenepp))
Monitoring for Sober.Y with Squid and swatch (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
infosecbofh (infosecbofh at gmail.com (InfoSecBOFH))
RECON2006 - Call for paper (hfortier at recon.cx (Hugo Fortier))
[USN-237-1] nbd vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-238-1] Blender vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-238-2] Blender vulnerability (martin.pitt at canonical.com (Martin Pitt))
Re: [USN-237-1] nbd vulnerability (fw at deneb.enyo.de (Florian Weimer))
what we REALLY learned from WMF (fw at deneb.enyo.de (Florian Weimer))
Re: what we REALLY learned from WMF (ge at linuxbox.org (Gadi Evron))
Re: what we REALLY learned from WMF (c0ntexb at gmail.com (c0ntex))
[ GLSA 200601-03 ] HylaFAX: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
WMF Risk Analysis for Win9X anyone ? (rodrigob at suespammers.org (Rodrigo Barbosa))
RE: what we REALLY learned from WMF (amarsden at jvsdet.org (Adrian Marsden))
RE: what we REALLY learned from WMF (amarsden at jvsdet.org (Adrian Marsden))
Re: what we REALLY learned from WMF (Matt.Carpenter at alticor.com (Matt.Carpenter@...icor.com))
Re: what we REALLY learned from WMF (gavin at uksolutions.co.uk (Gavin Conway))
Re: what we REALLY learned from WMF (michael.holstein at csuohio.edu (Michael Holstein))
Open Letter on the Interpretation of "Vulnerability Statistics" (guninski at guninski.com (Georgi Guninski))
Re: what we REALLY learned from WMF (devdas at dvb.homelinux.org (Devdas Bhagat))
REWMF Risk Analysis for Win9X anyone ? (pferrie at symantec.com (Peter Ferrie))
WMFs blocked with MIME (j.schipper at math.uu.nl (Joachim Schipper))
FW: myspace - add hundreds of friends instantly and automatically with this awesome tool (mail at hackingspirits.com (Debasis Mohanty))
REWMF Risk Analysis for Win9X anyone ? (toddtowles at brookshires.com (Todd Towles))
FW: myspace - add hundreds of friends instantly and automatically with this awesome tool (compromise at gmail.com (Xavier))
Re: what we REALLY learned from WMF (davek_throwaway at hotmail.com (Dave Korn))
FW: myspace - add hundreds of friends instantly and automatically with this awesome tool (mail at hackingspirits.com (Debasis Mohanty))
Open Letter on the Interpretation of "Vulnerability Statistics" (coley at linus.mitre.org (Steven M. Christey))
Open Letter on the Interpretation of "Vulnerability Statistics" (guninski at guninski.com (Georgi Guninski))
SimpBook "message" Remote Cross-Site Scripting Vulnerability (zeus.olimpusklan at gmail.com (zeus olimpusklan))
infosecbofh (exibar at thelair.com (Exibar))
REWMF Risk Analysis for Win9X anyone ? (forensis.technica at gmail.com (Technica Forensis))
SimpBook "message" Remote Cross-Site Scripting Vulnerability (mbytesecurity.org at gmail.com (Mbyte Security))
Re: what we REALLY learned from WMF (se_cur_ity at hotmail.com (Morning Wood))
Open Letter on the Interpretation of "Vulnerability Statistics" (coley at linus.mitre.org (Steven M. Christey))
REWMF Risk Analysis for Win9X anyone ? (ad at heapoverflow.com (ad@...poverflow.com))
REWMF Risk Analysis for Win9X anyone ? (rodrigob at suespammers.org (Rodrigo Barbosa))
Re: WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
RE: WMF round-up, updates and de-mystification (infosecbofh at gmail.com (InfoSecBOFH))
infosecbofh (infosecbofh at gmail.com (InfoSecBOFH))
infosecbofh (pvnick at gmail.com (Paul))
MDKSA-2006:008 - Updated koffice packages fix several vulnerabilities (security at mandriva.com (Mandriva Security Team))

January 7 (21 messages)

Re: what we REALLY learned from WMF (dudevanwinkle at gmail.com (dudevanwinkle@...il.com))
infosecbofh (yoo.fok at gmail.com (fok yo))
REWMF Risk Analysis for Win9X anyone ? (fd at mchsi.com (Mark))
Open Letter on the Interpretation of "Vulnerability Statistics" (fw at deneb.enyo.de (Florian Weimer))
Open Letter on the Interpretation of "Vulnerability Statistics" (guninski at guninski.com (Georgi Guninski))
Open Letter on the Interpretation of "Vulnerability Statistics" (fw at deneb.enyo.de (Florian Weimer))
location (randallm at fidmail.com (Randall M))
location (ad at heapoverflow.com (ad@...poverflow.com))
Open Letter on the Interpretation of "Vulnerability Statistics" (guninski at guninski.com (Georgi Guninski))
Breaking Computrace LoJack Part II (obnoxious at hush.com (obnoxious@...h.com))
Re: Breaking Computrace LoJack Part II (labeneator at gmail.com (Lmwangi))
"WinProxy 6.0 R1c" Remote DoS Exploit (FistFuXXer at gmx.de (FistFucker))
"WinProxy 6.0 R1c" Remote Stack/SEH Overflow Exploit (FistFuXXer at gmx.de (FistFucker))
Open Letter on the Interpretation of "Vulnerability Statistics" (coley at linus.mitre.org (Steven M. Christey))
RE: Windows PHP 4.x "0-day" buffer overflow (lucretias at shaw.ca (LE Backup))
MDKSA-2006:009 - Updated apache2-mod_auth_pgsql packages fix several vulnerabilities (xsecurity at mandriva.com (Mandriva Security Team))
Full-Disclosure starts moderating n3td3v Security Group (malformed at gmail.com (no-reply))
Full-Disclosure starts moderating n3td3v SecurityGroup (y0himba at technolounge.org (y0himba))
Full-Disclosure starts moderating n3td3vSecurityGroup (y0himba at technolounge.org (y0himba))
[ GLSA 200601-04 ] VMware Workstation: Vulnerability in NAT networking (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Full-Disclosure list has been taken over by Script Kids (malformed at gmail.com (no-reply))

January 8 (9 messages)

Open Letter on the Interpretation of "Vulnerability Statistics" (infosecbofh at gmail.com (InfoSecBOFH))
Open Letter on the Interpretation of "Vulnerability Statistics" (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
AOL Multiple Cross Site Scripting Vulnerability (simo at morx.org (simo@...x.org))
AIM Multiple Cross Site Scripting Vulnerability (simo at morx.org (simo@...x.org))
2x 0day Microsoft Windows Excel (ad at heapoverflow.com (ad@...poverflow.com))
2x 0day Microsoft Windows Excel (guninski at guninski.com (Georgi Guninski))
RE: Windows PHP 4.x "0-day" buffer overflow (mercenary at hushmail.com (mercenary@...hmail.com))
2x 0day Microsoft Windows Excel (ad at heapoverflow.com (ad@...poverflow.com))
2x 0day Microsoft Windows Excel (guninski at guninski.com (Georgi Guninski))

January 9 (23 messages)

Open Letter on the Interpretation of "Vulnerability Statistics" (infosecbofh at gmail.com (InfoSecBOFH))
Open Letter on the Interpretation of "Vulnerability Statistics" (dudevanwinkle at gmail.com (dudevanwinkle@...il.com))
[USN-239-1] libapache2-mod-auth-pgsql vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-236-2] xpdf vulnerabilities in kword, kpdf (martin.pitt at canonical.com (Martin Pitt))
[USN-235-2] sudo vulnerability (martin.pitt at canonical.com (Martin Pitt))
Open Letter on the Interpretation of "Vulnerability Statistics" (guninski at guninski.com (Georgi Guninski))
[SECURITY] [DSA 929-1] New petris packages fix buffer overflow (mstone at klecker.debian.org (Michael Stone))
BSD Securelevels: Circumventing protection of files flagged immutable (release at redteam-pentesting.de (RedTeam Pentesting))
Time modification flaw in BSD securelevels on NetBSD and Linux (release at redteam-pentesting.de (RedTeam Pentesting))
[SECURITY] [DSA 930-1] New smstools packages fix format string vulnerability (mstone at klecker.debian.org (Michael Stone))
Full-Disclosure starts moderating n3td3vSecurityGroup (john.r.bond at gmail.com (John Bond))
[SECURITY] [DSA 931-1] New xpdf packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Sidewinder Command/Safemode Exploit 4.1 (PHP.Chaploit) (mducharme at cybergeneration.com (Maxime Ducharme))
[SECURITY] [DSA 932-1] New kpdf packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Open Letter on the Interpretation of "Vulnerability Statistics" (mdz at debian.org (Matt Zimmerman))
MD:Pro - Malware Distribution Project (anthony.aykut at frame4.com (Anthony Aykut))
Open Letter on the Interpretation of "Vulnerability Statistics" (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
you can now be arrested for being annoying on the 'net (exibar at thelair.com (Exibar))
iDefense Security Advisory 01.09.06: Multiple Vendor mod_auth_pgsql Format String Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
FWD Cisco IOS Remote Command Execution Vulnerability (jan_unmoderated at yahoo.com (terry comma))
FWD Cisco IOS Remote Command Execution Vulnerability (ad at heapoverflow.com (ad@...poverflow.com))
PoC for the 2 new WMF vulnerabilities (DoS) (andrey at securityelf.org (Andrey Bayora))
Secunia Research: ADOdb Insecure Test Scripts Security Issues (vuln at secunia.com (Secunia Research))

January 10 (65 messages)

Advisory:XSS vulnerability on WebWiz Forums <= 6.34 (search_form.asp) (nukedx at nukedx.com (nukedx@...edx.com))
PoC for the 2 new WMF vulnerabilities (DoS) (nocmonkey at gmail.com (Danny))
PoC for the 2 new WMF vulnerabilities (DoS) (kf_lists at digitalmunition.com (KF (lists)))
Open Letter on the Interpretation of "Vulnerability Statistics" (infosecbofh at gmail.com (InfoSecBOFH))
[FLSA-2006:136323] Updated gettext package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:152803] Updated lesstif packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:152907] Updated htdig packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:152922] Updated ethereal packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:168375] Updated mozilla packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
PoC for the 2 new WMF vulnerabilities (DoS) (shirkdog_list at hotmail.com (M. Shirk))
PoC for the 2 new WMF vulnerabilities (DoS) (stan.bubrouski at gmail.com (Stan Bubrouski))
[SECURITY] [DSA 933-1] New hylafax packages fix arbitrary command execution (mstone at klecker.debian.org (Michael Stone))
[SECURITY] [DSA 934-1] New pound packages fix multiple vulnerabilities (mstone at klecker.debian.org (Michael Stone))
(no subject) (lirrypalma at gmail.com (Eduardo Palma))
Penetration Testing : A Third Party Hacker. (6ackpace at gmail.com (6ackpace))
you can now be arrested for being annoying on the 'net (guninski at guninski.com (Georgi Guninski))
you can now be arrested for being annoying onthe 'net (jasonc at science.org (Jason Coombs))
PoC for the 2 new WMF vulnerabilities (DoS) (andrey at securityelf.org (Andrey Bayora))
Gerald Eisenhaur (dudevanwinkle at gmail.com (dudevanwinkle@...il.com))
PoC for the 2 new WMF vulnerabilities (DoS) (mbringle at pivx.com (Michael Bringle))
BSD Securelevels: Circumventing protection of files flagged immutable (krahmer at suse.de (Sebastian Krahmer))
PoC for the 2 new WMF vulnerabilities (DoS) (se_cur_ity at hotmail.com (Morning Wood))
Gerald Eisenhaur (infosecbofh at gmail.com (InfoSecBOFH))
List Charter (johnc at grok.org.uk (John Cartwright))
PoC for the 2 new WMF vulnerabilities (DoS) (drewmasters at gmail.com (Drew Masters))
Gerald Eisenhaur (mbytesecurity.org at gmail.com (Mbyte Security))
Open Letter on the Interpretation of "Vulnerability Statistics" (infohacking.research at gmail.com (Hugo Vazquez Carapez))
Penetration Testing : A Third Party Hacker. (stacksmasher at gmail.com (Stack Smasher))
Gerald Eisenhaur (dudevanwinkle at gmail.com (dudevanwinkle@...il.com))
[SECURITY] [DSA 930-2] New smstools packages fix format string vulnerability (mstone at klecker.debian.org (Michael Stone))
you can now be arrested for being annoying onthe 'net (uncleron at hushmail.com (uncleron@...hmail.com))
[SECURITY] [DSA 935-1] New libapache2-mod-auth-pgsql packages fix arbitrary code execution (mstone at klecker.debian.org (Michael Stone))
Re: you can now be arrested for being annoyingonthe 'net (davek_throwaway at hotmail.com (Dave Korn))
Gerald Eisenhaur (edcarp at gmail.com (Ed Carp))
PoC for the 2 new WMF vulnerabilities (DoS) (Ed at unityitservices.co.uk (Edward Pearson))
iDefense Security Advisory 01.10.06: Sun Solaris uustat Buffer Overflow Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
2x 0day Microsoft Windows Excel (ad at heapoverflow.com (ad@...poverflow.com))
PoC for the 2 new WMF vulnerabilities (DoS) (toddtowles at brookshires.com (Todd Towles))
Gerald Eisenhaur (fsegna at web.de (franco segna))
PoC for the 2 new WMF vulnerabilities (DoS) (toddtowles at brookshires.com (Todd Towles))
SecurID with Active Directory ? (steven at lovebug.org (Steven))
Re: SCO Openserver 5.0.x exploit (wh1t3h4t3 at yahoo.co.uk (Micheal Turner))
Blind port scanning with sequential TCP numbers (wh1t3h4t3 at yahoo.co.uk (Micheal Turner))
SUID root overflows in UNICOS and partial shellcode (wh1t3h4t3 at yahoo.co.uk (Micheal Turner))
bitwarz Security Team a.k.a !bST (bitwarz at gmail.com (!bSt bitwarz Security Team))
ntpd stack evasion exploit (bitwarz at gmail.com (!bSt bitwarz Security Team))
Gerald Eisenhaur (pmelson at gmail.com (Paul Melson))
Dud Tuesday? (joshua.russel at gmail.com (Joshua Russel))
Dud Tuesday? (toddtowles at brookshires.com (Todd Towles))
AspTopSites SQL injection (se_cur_ity at hotmail.com (Morning Wood))
DEFCON London January meeting - Thursday 19th. (majormal at pirate-radio.org (Major Malfunction))
mysec.org Security Advisory : Xmame buffer overflow, with a possibility of privilege escalation. (xwings.net at gmail.com (KaiJern Lau))
ntpd stack evasion exploit (venglin at freebsd.lublin.pl (Przemyslaw Frasunek))
[ GLSA 200601-05 ] mod_auth_pgsql: Multiple format string vulnerabilities (dercorny at gentoo.org (Stefan Cornelius))
MS06-003 (kyphros at gmail.com (Mike Owen))
ntpd stack evasion 0day exploit (bitwarz at gmail.com (!bSt bitwarz Security Team))
[EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability (Advisories at eeye.com (Advisories))
[EEYEB-2000801] - Windows Embedded Open Type (bania.piotr at gmail.com (Piotr Bania))
[ GLSA 200601-06 ] xine-lib, FFmpeg: Heap-based buffer overflow (dercorny at gentoo.org (Stefan Cornelius))
How to Determine My System Vulnerabilities (Eugene.Smith at mpls.frb.org (Eugene.Smith@...s.frb.org))
How to Determine My System Vulnerabilities (wesleymcgrew at gmail.com (Robert Wesley McGrew))
Host IDS (b.hines at comcast.net (b.hines@...cast.net))
How to Determine My System Vulnerabilities (stan.bubrouski at gmail.com (Stan Bubrouski))
ntpd stack evasion exploit (ad at heapoverflow.com (ad@...poverflow.com))
How to Determine My System Vulnerabilities (infosecbofh at gmail.com (InfoSecBOFH))

January 11 (44 messages)

[FLSA-2006:167803] Updated mysql packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
ntpd stack evasion exploit (sean01 at accnet.com.au (Sean Crawford))
ntpd stack evasion exploit (theall at tifaware.com (George A. Theall))
How to Determine My System Vulnerabilities (prb at lava.net (prb@...a.net))
IronWall webserver remote file access. (hwclock at gmail.com (hwclock))
How to Determine My System Vulnerabilities (se_cur_ity at hotmail.com (Morning Wood))
How to Determine My System Vulnerabilities (nick at virus-l.demon.co.uk (Nick FitzGerald))
How to Determine My System Vulnerabilities (umphress at gmail.com (Chris Umphress))
MDKSA-2006:010 - Updated cups packages fix several vulnerabilities (xsecurity at mandriva.com (Mandriva Security Team))
MDKSA-2006:011 - Updated tetex packages fix several vulnerabilities (xsecurity at mandriva.com (Mandriva Security Team))
Re: SecurID with Active Directory ? (vin at TheWorld.com (vin@...World.com))
should have been..' How to Determine My System Vulnerabilities' (sean01 at accnet.com.au (Sean Crawford))
mysec.org Security Advisory : Xmame buffer overflow, with a possibility of privilege escalation. (xwings.net at gmail.com (KaiJern Lau))
Re: SecurID with Active Directory ? (se_cur_ity at hotmail.com (Morning Wood))
ntpd stack evasion 0day exploit (skodliv at gmail.com (poo))
[SECURITY] [DSA 936-1] New libextractor packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Gerald Eisenhaur (fsegna at web.de (franco segna))
How to Determine My System Vulnerabilities (mjcarter at ihug.co.nz (Mike))
How to Determine My System Vulnerabilities (mjcarter at ihug.co.nz (Mike))
How to Determine My System Vulnerabilities (mjcarter at ihug.co.nz (Mike))
How to Determine My System Vulnerabilities (mjcarter at ihug.co.nz (Mike))
Gerald Eisenhaur (john.r.bond at gmail.com (John Bond))
ntpd stack evasion 0day exploit (siegfri3d at gmail.com (Siegfried))
ntpd stack evasion 0day exploit (bignell at gmail.com (Graham Bignell))
should have been..' How to Determine My System Vulnerabilities' (yoo.fok at gmail.com (fok yo))
[CIRT.DK] Apple QuickTime 7.0.3 and earlier - JPG/PICT Buffer Overflow (advisory at cirt.dk (CIRT.DK Advisory))
Re: iDefense Security Advisory 12.22.05: Linux Kernel Socket Buffer Memory Exhaustion DoS Vulnerability (paul at starzetz.de (Paul Starzetz))
[CIRT.DK] Apple QuickTime 7.0.3 and earlier - JPG/PICT Buffer Overflow (virus at nolog.org (virus@...og.org))
[USN-240-1] bogofilter vulnerability (martin.pitt at canonical.com (Martin Pitt))
QUICKTIME vuln: Apple pulls a Microsoft stunt (advisory at cirt.dk (CIRT.DK Advisory))
Cisco Security Advisory: Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (C… (psirt at cisco.com (Cisco Systems Produ…)
[EEYEB-20051220] Apple QuickTime QTIF Stack Overflow (Advisories at eeye.com (Advisories))
[EEYEB-20051117B] Apple iTunes (QuickTime.qts) Heap Overflow (Advisories at eeye.com (Advisories))
[EEYEB-20051117A] Apple QuickTime STSD Atom Heap Overflow (Advisories at eeye.com (Advisories))
[EEYEB-20051031] Apple QuickTime Malformed GIF Heap Overflow (Advisories at eeye.com (Advisories))
Updated Advisories - Incorrect CVE Information (Advisories at eeye.com (Advisories))
test (ron at pirates.armstrong.edu (ron))
Re: ntpd stack evasion exploit (davek_throwaway at hotmail.com (Dave Korn))
Microsoft fixes patches more quickly under pressures of full disclosure (lists at venom600.org (Ben Nelson))
Re: ntpd stack evasion exploit (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
WMF Exploit (waldoalvarez00 at gmail.com (wac))
Critical excel vulnerability for sale, read inside. (ad at heapoverflow.com (ad@...poverflow.com))
Open Letter on the Interpretation of "Vulnerability Statistics" (fw at deneb.enyo.de (Florian Weimer))
[EEYEB-20051117B] Apple iTunes (QuickTime.qts) Heap Overflow (senatorfrog at gmail.com (Mark Senior))

January 12 (28 messages)

Bluetooth on Kodak PictureMaker Kiosks... (kf_lists at digitalmunition.com (KF (lists)))
Bluetooth on Kodak PictureMaker Kiosks... (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
Open Letter on the Interpretation of "Vulnerability Statistics" (mdz at debian.org (Matt Zimmerman))
Session data pollution vulnerabilities in web applications (alla at scanit.be (Alla Bezroutchko))
[SECURITY] [DSA 903-2] New unzip packages fix unauthorised permissions modification (joey at infodrom.org (Martin Schulze))
[USN-241-1] Apache vulnerabilities (adconrad at ubuntu.com (Adam Conrad))
[SECURITY] [DSA 937-1] New tetex-bin packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 938-1] New koffice packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Re: Re: ntpd stack evasion exploit (davek_throwaway at hotmail.com (Dave Korn))
Re: [EEYEB-20051117B] Apple iTunes (QuickTime.qts)Heap Overflow (davek_throwaway at hotmail.com (Dave Korn))
Cisco Security Advisory: Access Point Memory Exhaustion from ARP Attacks (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Session data pollution vulnerabilities in web applications (frank at knobbe.us (Frank Knobbe))
Session data pollution vulnerabilities in web applications (email-fulldisclosure at hotmail.com (mailinglist mailinglist))
Advisory 01/2006: PHP ext/session HTTP Response Splitting Vulnerability (sesser at hardened-php.net (Stefan Esser))
Advisory 02/2006: PHP ext/mysqli Format String Vulnerability (sesser at hardened-php.net (Stefan Esser))
WMF exploit atempt from game4all.biz?? (fsm at colmena.org (Francisco Sáa Muñoz))
Re: what we REALLY learned from WMF (waldoalvarez00 at gmail.com (wac))
FWD Cisco IOS Remote Command Execution Vulnerability (amit_juniperind at yahoo.co.in (Amit Sharma))
2x 0day Microsoft Windows Excel (amit_juniperind at yahoo.co.in (Amit Sharma))
2x 0day Microsoft Windows Excel (stan.bubrouski at gmail.com (Stan Bubrouski))
Re: Session data pollution vulnerabilities inweb applications (davek_throwaway at hotmail.com (Dave Korn))
Re: Session data pollution vulnerabilities inweb applications (frank at knobbe.us (Frank Knobbe))
EUSecWest papers and CanSecWest CFP (dr at kyx.net (Dragos Ruiu))
ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
2x 0day Microsoft Windows Excel (ad at heapoverflow.com (ad@...poverflow.com))
Fortinet Advisory - Apple QuickTime Player StripOffsets Improper Memory Access (secresearch at fortinet.com (secresearch@...tinet.com))
Fortinet Advisory - Apple QuickTime Player ImageWidth Denial of Service Vulnerability (secresearch at fortinet.com (secresearch@...tinet.com))
Fortinet Advisory - Apple QuickTime Player StripByteCounts Buffer Overflow Vulnerability (secresearch at fortinet.com (secresearch@...tinet.com))

January 13 (63 messages)

Advisory: MiniNuke CMS System <= 1.8.2 (news.asp) SQL Injection vulnerability (nukedx at nukedx.com (nukedx@...edx.com))
Advisory: MiniNuke CMS System <= 1.8.2 (membership.asp) remote user password change exploit (nukedx at nukedx.com (nukedx@...edx.com))
Advisory: MiniNuke CMS System <= 1.8.2 (news.asp) SQL Injection vulnerability (nukedx at nukedx.com (nukedx@...edx.com))
MDKSA-2006:012 - Updated kdegraphics packages fix several vulnerabilities (security at mandriva.com (Mandriva Security Team))
Fortinet Advisory - Apple QuickTime Player StripByteCounts Buffer Overflow Vulnerability (vulnmonitor at fortinet.com (Fortinet Research))
Fortinet Advisory - Apple QuickTime Player StripOffsets Improper Memory Acces (vulnmonitor at fortinet.com (Fortinet Research))
Fortinet Advisory: Apple Quick Time Player ImageWidth Denial of Service Vulnerability (vulnmonitor at fortinet.com (Fortinet Research))
Fortinet Security Advisory: "Apple QuickTime Player Improper Memory Access Vulnerability" (vulnmonitor at fortinet.com (Fortinet Research))
Fortinet Advisory: "Apple QuickTime Player ImageWidth Integer Overflow Vulnerability" (vulnmonitor at fortinet.com (Fortinet Research))
Fortinet Advisory: Apple QuickTime Player Color Map Entry Size Buffer Overflow (vulnmonitor at fortinet.com (Fortinet Research))
MDKSA-2006:013 - Updated kolab packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
DMA[2006-0112a] - 'Toshiba Bluetooth Stack Directory Transversal' (kf_lists at digitalmunition.com (KF (lists)))
Fortinet Advisory - Apple QuickTime Player StripByteCounts Buffer Overflow Vulnerability (pvnick at gmail.com (Paul))
[ GLSA 200601-07 ] ClamAV: Remote execution of arbitrary code (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200601-08 ] Blender: Heap-based buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200601-09 ] Wine: Windows Metafile SETABORTPROC vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[SECURITY] [DSA 939-1] New fetchmail packages fix denial of service (joey at infodrom.org (Martin Schulze))
Session data pollution vulnerabilities in web applications (alla at scanit.be (Alla Bezroutchko))
[SECURITY] [DSA 940-1] New gpdf packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Fortinet Advisory - Apple QuickTime Player StripOffsets Improper Memory Access (virus at nolog.org (virus@...og.org))
Session data pollution vulnerabilities in web applications (yboily at gmail.com (Yvan Boily))
Session data pollution vulnerabilities in web applications (frank at knobbe.us (Frank Knobbe))
Odd My_Photo.zip in email (xillwillx at gmail.com (Ill will))
SUSE Security Announcement: novell-nrm remote heap overflow (SUSE-SA:2006:002) (meissner at suse.de (Marcus Meissner))
Fortinet Advisory - Apple QuickTime PlayerStripByteCounts Buffer Overflow Vulnerability (tommy at security-protocols.com (Tom Ferris))
WMF ..... Is it possible to do a "Forensics Analysis" before 27th Dec (pejman.gohari at gmail.com (Pejman GOHARI))
Farmers wife 4.4 sp1 remote SYSTEM access (kokanin at gmail.com (Knud Erik Højgaard))
WMF ..... Is it possible to do a "ForensicsAnalysis" before 27th Dec (Tim.Saunders at aquilauk.co.uk (Tim Saunders))
What is the ulitmate vulnerability ? (ktucker1022 at yahoo.com (K Tucker))
What is the ulitmate vulnerability ? (piercede at pdx.edu (Dean Pierce))
Steve Gibson smokes crack? (se_cur_ity at hotmail.com (Morning Wood))
iDefense Security Advisory 01.13.06: Novell SUSE Linux Enterprise Server Remote Manager Heap Overflow (labs-no-reply at idefense.com (labs-no-reply@...fense.co…)
What is the ulitmate vulnerability ? (b.hines at comcast.net (b.hines@...cast.net))
Re: [ GLSA 200601-09 ] Wine: Windows Metafile SETABORTPROC vulnerability (amurkland at merydion.com (Austin Murkland))
Re: [ GLSA 200601-09 ] Wine: Windows MetafileSETABORTPROC vulnerability (toddtowles at brookshires.com (Todd Towles))
Steve Gibson smokes crack? (stan.bubrouski at gmail.com (Stan Bubrouski))
Steve Gibson smokes crack? (toddtowles at brookshires.com (Todd Towles))
Steve Gibson smokes crack? (toddtowles at brookshires.com (Todd Towles))
Steve Gibson smokes crack? (jasonc at science.org (Jason Coombs))
Re: [ GLSA 200601-09 ] Wine: Windows MetafileSETABORTPROC vulnerability (bkfsec at sdf.lonestar.org (bkfsec))
Steve Gibson smokes crack? (nfobro at gmail.com (eric williams))
Steve Gibson smokes crack? (nfobro at gmail.com (eric williams))
Steve Gibson smokes crack? (bkfsec at sdf.lonestar.org (bkfsec))
Steve Gibson smokes crack? (stan.bubrouski at gmail.com (Stan Bubrouski))
Steve Gibson smokes crack? (stan.bubrouski at gmail.com (Stan Bubrouski))
Steve Gibson smokes crack? (stan.bubrouski at gmail.com (Stan Bubrouski))
Steve Gibson smokes crack? (jasonc at science.org (Jason Coombs))
Steve Gibson smokes crack? (toddtowles at brookshires.com (Todd Towles))
Steve Gibson smokes crack? (bkfsec at sdf.lonestar.org (bkfsec))
Worm? (David.Byrne at echostar.com (Byrne, David))
Worm? (kokanin at gmail.com (Knud Erik Højgaard))
Re: [ GLSA 200601-09 ] Wine:Windows MetafileSETABORTPROC vulnerability (pferrie at symantec.com (Peter Ferrie))
Worm? (stan.bubrouski at gmail.com (Stan Bubrouski))
Steve Gibson smokes crack (william at lefkovics.net (William Lefkovics))
Steve Gibson smokes crack? (merlyn at stonehenge.com (Randal L. Schwartz))
Re: [ GLSA 200601-09 ] Wine:Windows MetafileSETABORTPROC vulnerability (nfobro at gmail.com (eric williams))
Steve Gibson smokes crack? (nfobro at gmail.com (eric williams))
Steve Gibson smokes crack? (stan.bubrouski at gmail.com (Stan Bubrouski))
Steve Gibson smokes crack? (pferrie at symantec.com (Peter Ferrie))
Re: [ GLSA 200601-09 ] Wine:Windows MetafileSETABORTPROC vulnerability (bkfsec at sdf.lonestar.org (bkfsec))
Steve Gibson smokes crack? (nfobro at gmail.com (eric williams))
Steve Gibson smokes crack? (toddtowles at brookshires.com (Todd Towles))
Worm? (Don.Jarmon at Intergraph.com (Jarmon, Don R))

January 14 (9 messages)

ntpd stack evasion exploit (dudevanwinkle at gmail.com (Dude VanWinkle))
Steve Gibson smokes crack? (guninski at guninski.com (Georgi Guninski))
Steve Gibson smokes crack? (guninski at guninski.com (Georgi Guninski))
Steve Gibson smokes crack? (fd at blad3.ro (blad3))
Steve Gibson smokes crack? (stan.bubrouski at gmail.com (Stan Bubrouski))
Firefox 1.5 allow cross-domain posting to secured pages (lists at mccanless.us (lists))
Steve Gibson smokes crack? (blsonne at rogers.com (Byron Sonne))
Steve Gibson smokes crack? (guninski at guninski.com (Georgi Guninski))
TAUSEC returns - next Sunday (22/jan) (ge at linuxbox.org (Gadi Evron))

January 15 (11 messages)

overflow protection software ? (fatb at security.zz.ha.cn (fatb))
overflow protection software ? (thyes at gmx.net (Frank Thyes))
EZDatabase Directory Transversal, XSS and Path Disclosure Vulnerability (josh at ramat.cc (Josh Zlatin))
Re: [CIRT.DK] Apple QuickTime 7.0.3 and earlier - JPG/PICT Buffer Overflow (lolhat at gmail.com (Lol Hat))
Ultimate Auction <=3.67 (druck_von_rechts at gmx.de (Querkopf))
DMA[2006-0115a] - 'AmbiCom Bluetooth Object Push Overflow' (kf_lists at digitalmunition.com (KF (lists)))
EZDatabase Directory Transversal, XSS and Path Disclosure Vulnerability (siegfri3d at gmail.com (Siegfried))
Announcement: The Web Application Firewall Evaluation Criteria v1 Released (contact at webappsec.org (contact@...appsec.org))
Steve Gibson smokes crack? (pferrie at symantec.com (Peter Ferrie))
Re: [ GLSA 200601-09 ] Wine:Windows MetafileSETABORTPROC vulnerability (pferrie at symantec.com (Peter Ferrie))
Re: [ GLSA 200601-09 ]Wine:Windows MetafileSETABORTPROC vulnerability (pferrie at symantec.com (Peter Ferrie))

January 16 (28 messages)

Worm? (thegesus at gmail.com (TheGesus))
Worm? (simon at snosoft.com (SNOsoft))
Re: [ GLSA 200601-09 ] Wine: Windows Metafile SETABORTPROC vulnerability (lionel.ferette at belnet.be (Lionel Ferette))
[SECURITY] [DSA 941-1] New tuxpaint packages fix insecure temporary file creation (joey at infodrom.org (Martin Schulze))
[Fwd: Trusted partnerfor fund safekeeping and investment] (sysadmin at agent.co.il (Ag. System Administrator))
[SECURITY] [DSA 942-1] New albatross packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
[Fwd: Trusted partnerfor fund safekeeping andinvestment] (me at n33t.org (Nick Hyatt))
WEP-Client-Communication-Dumbdown (WCCD) Vulnerability (security at hammerjammer.net (security@...merjammer.net))
Virata-EmWeb DSL modems (krasn at globalnetworks.gr (Dinos))
NS1 decryption (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
[USN-242-1] mailman vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-243-1] tuxpaint vulnerability (martin.pitt at canonical.com (Martin Pitt))
[ GLSA 200601-10 ] Sun and Blackdown Java: Applet privilege escalation (koon at gentoo.org (Thierry Carrez))
overflow protection software ? (cary at campbell.com (Cary Barker))
[SECURITY] [DSA 943-1] New Perl packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
RE: Session data pollution vulnerabilities in web applications (kc_smith at clark.net (Keenan Smith))
Secure Delete for Windows (fd at g-0.org (GroundZero Security))
WehnTrust - When you have to trust Wehntrust (Thierry at Zoller.lu (Thierry Zoller))
WehnTrust - When you have to trust Wehntrust (fdlist at digitaloffense.net (H D Moore))
WehnTrust - When you have to trust Wehntrust (Thierry at Zoller.lu (Thierry Zoller))
NS1 decryption (bojan99 at gmail.com (Bojan))
ACT P202S VoIP wireless phone multiple undocumented ports/services (shawnmer at gmail.com (Shawn Merdinger))
Senao SI-7800H VoIP wireless phone wdbrpc debug service UDP/17185 (shawnmer at gmail.com (Shawn Merdinger))
Clipcomm CPW-100E VoIP wireless handset phone open debug service TCP/60023 (shawnmer at gmail.com (Shawn Merdinger))
MPM HP-180W VoIP wireless desktop phone undocumented port UDP/9090 (shawnmer at gmail.com (Shawn Merdinger))
ZyXel P2000W (Version 2) VoIP wireless phone undocumented port UDP/9090 (shawnmer at gmail.com (Shawn Merdinger))
Clipcomm CP-100E VoIP wireless desktop phone open debug service TCP/60023 (shawnmer at gmail.com (Shawn Merdinger))
MDKSA-2006:014 - Updated wine packages fix WMF vulnerability (security at mandriva.com (Mandriva Security Team))

January 17 (58 messages)

MDKSA-2006:015 - Updated hylafax packages fix eval injection vulnerabilities (security at mandriva.com (Mandriva Security Team))
Sun Java Update Scheduler gets placed in autostart without absolute path quotes (pvnick at gmail.com (Paul))
MDKSA-2006:016 - Updated clamav packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
NS1 decryption (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
WEP-Client-Communication-Dumbdown (WCCD) Vulnerability (re-send) (security at hammerjammer.net (security@...merjammer.net))
Secure Delete for Windows (measl at mfn.org (J.A. Terranson))
Secure Delete for Windows (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
ERRATA: [ GLSA 200601-09 ] Wine: Windows Metafile SETABORTPROC vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Secure Delete for Windows (virus at nolog.org (virus@...og.org))
Secure Delete for Windows (jasonc at science.org (Jason Coombs))
[SECURITY] [DSA 944-1] New mantis packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
[Fwd: Trusted partnerfor fund safekeeping and investment] (michael.holstein at csuohio.edu (Michael Holstein))
Re: WehnTrust - When you have to trust Wehntrust (davek_throwaway at hotmail.com (Dave Korn))
[SECURITY] [DSA 945-1] New antiword packages fix insecure temporary file creation (joey at infodrom.org (Martin Schulze))
Secure Delete for Windows (fd at g-0.org (GroundZero Security))
Secure Delete for Windows (fd at g-0.org (GroundZero Security))
DM Primer error handling weakness & an old CAM BO revisited (karma at designfolks.com.au (Karma))
Secunia Research: Mozilla Thunderbird Attachment Spoofing Vulnerability (vuln at secunia.com (Secunia Research))
Reverse Engineering WMF Exploit Code (ge at linuxbox.org (Gadi Evron))
Re: WehnTrust - When you have to trust Wehntrust (davek_throwaway at hotmail.com (Dave Korn))
Secure Delete for Windows (yboily at gmail.com (Yvan Boily))
PC Firewall Choices (steven at lovebug.org (Steven))
Oracle Database 10g Rel. 2- Transparent Data Encryption plaintext masterkey in SGA (ak at red-database-security.com (Kornbrust, Alexander))
Oracle DBMS - Access Control Bypass in Login (shulman at imperva.com (Amichai Shulman))
Oracle Reports - Read parts of files via customize(fixed after 875 days) (ak at red-database-security.com (Kornbrust, Alexander))
Oracle Reports - Overwrite any application server file via desname (fixed after 889 days) (ak at red-database-security.com (Kornbrust, Alexander))
Oracle Reports - Read parts of files via desname (fixed after 874 days) (ak at red-database-security.com (Kornbrust, Alexander))
Secure Delete for Windows (michael.holstein at csuohio.edu (Michael Holstein))
Oracle Database 10g Rel. 2 - Event 10053 logs TDE wallet password in cleartext (ak at red-database-security.com (Kornbrust, Alexander))
Secure Delete for Windows (yboily at gmail.com (Yvan Boily))
Secure Delete for Windows (sk at groundzero-security.com (sk))
Oracle Reports - Read parts of files via customize(fixed after 875 days) (Thierry at Zoller.lu (Thierry Zoller))
Secure Delete for Windows (y0himba at technolounge.org (y0himba))
Secure Delete for Windows (jasonc at science.org (Jason Coombs))
[ TZO-012006 ] Checkpoint VPN-1 SecureClient insecure usage of CreateProcess() (Thierry at Zoller.lu (Thierry Zoller))
Secure Delete for Windows (fd at g-0.org (GroundZero Security))
Oracle Reports - Read parts of files via customize(fixed after 875 days) (kf_lists at digitalmunition.com (KF (lists)))
Secure Delete for Windows (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Secure Delete for Windows (ad at heapoverflow.com (ad@...poverflow.com))
Secure Delete for Windows (greybrimstone at aim.com (greybrimstone@....com))
Security Bug in MSVC (se_cur_ity at hotmail.com (Morning Wood))
Vulnerability/Penetration Testing Tools (greybrimstone at aim.com (greybrimstone@....com))
PC Firewall Choices (se_cur_ity at hotmail.com (Morning Wood))
Security Bug in MSVC (ad at heapoverflow.com (ad@...poverflow.com))
Oracle Reports - Read parts of files via customize(fixed after 875 days) (greybrimstone at aim.com (greybrimstone@....com))
Security Bug in MSVC (stan.bubrouski at gmail.com (Stan Bubrouski))
PC Firewall Choices (nicwerner at gmail.com (Nic Werner))
Security Bug in MSVC (jasonc at science.org (Jason Coombs))
PC Firewall Choices (full-disclosure2 at pchandyman.com.au (Greg))
Secure Delete for Windows (fd at g-0.org (GroundZero Security))
Secure Delete for Windows (fd at g-0.org (GroundZero Security))
iDefense Security Advisory 01.17.06: Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability (labs-no-reply at idefense.com (labs-no-rep…)
iDefense Security Advisory 01.17.06: EMC Legato Networker nsrd.exe Heap Overflow Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
iDefense Security Advisory 01.17.06: EMC Legato Networker nsrexecd.exe Heap Overflow Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
iDefense Security Advisory 01.17.06: EMC Legato Networker nsrd.exe DoS Vulnerability (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
PC Firewall Choices (nicwerner at gmail.com (Nic Werner))
PC Firewall Choices (full-disclosure2 at pchandyman.com.au (Greg))
Re: Secure Delete for Windows (davek_throwaway at hotmail.com (Dave Korn))

January 18 (63 messages)

Oracle Database 10g Rel. 1 - SQL Injection in SYS.KUPV$FT_INT (ak at red-database-security.com (Kornbrust, Alexander))
Oracle Database 10g Rel. 1 - SQL Injection in SYS.KUPV$FT (ak at red-database-security.com (Kornbrust, Alexander))
Vulnerability/Penetration Testing Tools (fdlist at digitaloffense.net (H D Moore))
Vulnerability/Penetration Testing Tools (ge at linuxbox.org (Gadi Evron))
Vulnerability/Penetration Testing Tools (fdlist at digitaloffense.net (H D Moore))
Secure Delete for Windows (measl at mfn.org (J.A. Terranson))
PC Firewall Choices (me at n33t.org (Nick Hyatt))
Secure Delete for Windows (measl at mfn.org (J.A. Terranson))
PC Firewall Choices (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Secure Delete for Windows (jasonc at science.org (Jason Coombs))
PC Firewall Choices (very at unprivate.com (Very Unprivate))
Startup company (shyaam at gmail.com (Shyaam))
PC Firewall Choices (me at n33t.org (Nick Hyatt))
PC Firewall Choices (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
PC Firewall Choices (michaelslists at gmail.com (Michael Silk))
Vulnerability/Penetration Testing Tools (greybrimstone at aim.com (greybrimstone@....com))
Vulnerability/Penetration Testing Tools (greybrimstone at aim.com (greybrimstone@....com))
Vulnerability/Penetration Testing Tools (greybrimstone at aim.com (greybrimstone@....com))
PC Firewall Choices (greybrimstone at aim.com (greybrimstone@....com))
PC Firewall Choices (greybrimstone at aim.com (greybrimstone@....com))
Vulnerability/Penetration Testing Tools (yboily at gmail.com (Yvan Boily))
Startup company (yboily at gmail.com (Yvan Boily))
PC Firewall Choices (me at n33t.org (Nick Hyatt))
Vulnerability/Penetration Testing Tools (ge at linuxbox.org (Gadi Evron))
[USN-244-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
PC Firewall Choices (nekramer at mindtheater.net (Nancy Kramer))
Security Bug in MSVC (j.schipper at math.uu.nl (Joachim Schipper))
PC Firewall Choices (juliao.duartenn at oblog.pt (Juliao Duartenn))
Startup company (dudevanwinkle at gmail.com (Dude VanWinkle))
PC Firewall Choices (j.schipper at math.uu.nl (Joachim Schipper))
Google's Blogger.com classic HTTP response splitting vulnerability (meder at o0o.nu (Meder Kydyraliev))
Vulnerability/Penetration Testing Tools (mmadison at fnni.com (Madison, Marc))
Vulnerability/Penetration Testing Tools (mmadison at fnni.com (Madison, Marc))
ICQ Cross Site Scripting Vulnerability (simo at morx.org (simo@...x.org))
Question for the Windows pros (pauls at utdallas.edu (Paul Schmehl))
CAID 33756 - DM Deployment Common Component Vulnerabilities (James.Williams at ca.com (Williams, James K))
Cisco Security Advisory: Cisco Call Manager Privilege Escalation (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Cisco Security Advisory: Cisco Call Manager Denial of Service (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Startup company (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Question for the Windows pros (stuartd at gmail.com (Stuart Dunkeld))
Cisco Security Advisory: IOS Stack Group Bidding Protocol Crafted Packet DoS (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Vulnerability/Penetration Testing Tools (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Question for the Windows pros (pauls at utdallas.edu (Paul Schmehl))
Vulnerability/Penetration Testing Tools (mmadison at fnni.com (Madison, Marc))
Question for the Windows pros (frank at knobbe.us (Frank Knobbe))
Vulnerability/Penetration Testing Tools (yboily at gmail.com (Yvan Boily))
Question for the Windows pros (pauls at utdallas.edu (Paul Schmehl))
Vulnerability/Penetration Testing Tools (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Vulnerability/Penetration Testing Tools (andre.ludwig at gmail.com (Andre Ludwig))
Vulnerability/Penetration Testing Tools (gaylord at dirtcheapemail.com (Clark Gaylord))
Security Bug in MSVC (se_cur_ity at hotmail.com (Morning Wood))
Question for the Windows pros (yboily at gmail.com (Yvan Boily))
Question for the Windows pros (pauls at utdallas.edu (Paul Schmehl))
Re: Security Bug in MSVC (davek_throwaway at hotmail.com (Dave Korn))
Question for the Windows pros (frank at knobbe.us (Frank Knobbe))
Secure Delete for Windows (bkfsec at sdf.lonestar.org (bkfsec))
Re: Security Bug in MSVC (jasonc at science.org (Jason Coombs))
Article: "Security Testing Demystified" (mail at hackingspirits.com (Debasis Mohanty))
Re: Security Bug in MSVC (bkfsec at sdf.lonestar.org (bkfsec))
Fortinet Advisory: BitComet URI Buffer Overflow Vulnerability (vulnmonitor at fortinet.com (Fortinet Research))
Question for the Windows pros (pauls at utdallas.edu (Paul Schmehl))
Question for the Windows pros (frank at knobbe.us (Frank Knobbe))
Question for the Windows pros (pauls at utdallas.edu (Paul Schmehl))

January 19 (59 messages)

PC Firewall Choices (johnlacour at gmail.com (John LaCour))
overflow protection software ? (fatb at security.zz.ha.cn (fatb))
HITBSecConf2005 Videos Released ! (praburaajan at gmail.com (Praburaajan))
Practical Wireless Deployment Methodology (PWDM) (security at hammerjammer.net (security@...merjammer.net))
Question for the Windows pros (research at sec-consult.com (Bernhard Mueller))
Vulnerability/Penetration Testing Tools (dudevanwinkle at gmail.com (Dude VanWinkle))
Hash Type? (bcerhart at bcerhart.com (bcerhart@...rhart.com))
Question for the Windows pros (nicolas.ruff at gmail.com (Nicolas RUFF))
overflow protection software ? (nicolas.ruff at gmail.com (Nicolas RUFF))
MBT Xss vulnerability (sant.jadhav at gmail.com (MuNNa))
MBT Xss vulnerability (native.code at gmail.com (Native.Code))
Re: PC Firewall Choices (davek_throwaway at hotmail.com (Dave Korn))
Re: Re: Security Bug in MSVC (davek_throwaway at hotmail.com (Dave Korn))
Re: Question for the Windows pros (davek_throwaway at hotmail.com (Dave Korn))
Re: Question for the Windows pros (davek_throwaway at hotmail.com (Dave Korn))
Vulnerability/Penetration Testing Tools (greybrimstone at aim.com (greybrimstone@....com))
Startup company (greybrimstone at aim.com (greybrimstone@....com))
PC Firewall Choices (greybrimstone at aim.com (greybrimstone@....com))
Re: Question for the Windows pros (davek_throwaway at hotmail.com (Dave Korn))
Re: PC Firewall Choices (stan.bubrouski at gmail.com (Stan Bubrouski))
Re: PC Firewall Choices (stan.bubrouski at gmail.com (Stan Bubrouski))
Re: PC Firewall Choices (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Question for the Windows pros (pauls at utdallas.edu (Paul Schmehl))
Question for the Windows pros (pauls at utdallas.edu (Paul Schmehl))
Re: Question for the Windows pros (pauls at utdallas.edu (Paul Schmehl))
Question for the Windows pros (jerome.athias at free.fr (Jerome Athias))
PC Firewall Choices (greybrimstone at aim.com (greybrimstone@....com))
Startup company (greybrimstone at aim.com (greybrimstone@....com))
Question for the Windows pros (pauls at utdallas.edu (Paul Schmehl))
Vulnerability/Penetration Testing Tools (greybrimstone at aim.com (greybrimstone@....com))
Vulnerability/Penetration Testing Tools (greybrimstone at aim.com (greybrimstone@....com))
Vulnerability/Penetration Testing Tools (Thierry at Zoller.lu (Thierry Zoller))
Vulnerability/Penetration Testing Tools (greybrimstone at aim.com (greybrimstone@....com))
Vulnerability/Penetration Testing Tools - [TCO THread] (greybrimstone at aim.com (greybrimstone@....com))
Vulnerability/Penetration Testing Tools (greybrimstone at aim.com (greybrimstone@....com))
Vulnerability/Penetration Testing Tools (exibar at thelair.com (Exibar))
MBT Xss vulnerability (greybrimstone at aim.com (greybrimstone@....com))
Vulnerability/Penetration Testing Tools (michael.holstein at csuohio.edu (Michael Holstein))
Vulnerability/Penetration Testing Tools (greybrimstone at aim.com (greybrimstone@....com))
Vulnerability/Penetration Testing Tools (fd at g-0.org (GroundZero Security))
Vulnerability/Penetration Testing Tools (greybrimstone at aim.com (greybrimstone@....com))
Vulnerability/Penetration Testing Tools (greybrimstone at aim.com (greybrimstone@....com))
Re: Re: PC Firewall Choices (davek_throwaway at hotmail.com (Dave Korn))
Re: Re: PC Firewall Choices (davek_throwaway at hotmail.com (Dave Korn))
Security Bug in MSVC (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
Vulnerability/Penetration Testing Tools [AutoScan] (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Security Bug in MSVC (redsand at redsand.net (redsand))
Security Bug in MSVC (otter_e at yahoo.com (Otter E))
MDKSA-2006:017 - Updated mod_auth_ldap packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
Re: Re: PC Firewall Choices (stan.bubrouski at gmail.com (Stan Bubrouski))
Security Bug in MSVC (stan.bubrouski at gmail.com (Stan Bubrouski))
Re: Re: PC Firewall Choices (full-disclosure2 at pchandyman.com.au (Greg))
Vulnerability/Penetration Testing Tools [AutoScan] (greybrimstone at aim.com (greybrimstone@....com))
Re: Re: PC Firewall Choices (stan.bubrouski at gmail.com (Stan Bubrouski))
PC Firewall Choices (stan.bubrouski at gmail.com (Stan Bubrouski))
Security Bug in MSVC (ad at heapoverflow.com (ad@...poverflow.com))
Security Bug in MSVC (redsand at redsand.net (redsand))
Security Bug in MSVC (ad at heapoverflow.com (ad@...poverflow.com))
MBT Xss vulnerability (sant.jadhav at gmail.com (MuNNa))

January 20 (35 messages)

Security Bug in MSVC (se_cur_ity at hotmail.com (Morning Wood))
Re: Re: PC Firewall Choices (nekramer at mindtheater.net (Nancy Kramer))
Re: Re: PC Firewall Choices (full-disclosure2 at pchandyman.com.au (Greg))
Re: Re: PC Firewall Choices (stan.bubrouski at gmail.com (Stan Bubrouski))
Re: Re: PC Firewall Choices (full-disclosure2 at pchandyman.com.au (Greg))
FW: Re: Re: PC Firewall Choices (an alternative choice) (williamderieux at gmail.com (William DeRieux))
FW: Re: Re: PC Firewall Choices (an alternative choice) (williamderieux at gmail.com (William DeRieux))
Re: Re: PC Firewall Choices (nekramer at mindtheater.net (Nancy Kramer))
Re: Re: PC Firewall Choices (hummer at domeranger.com (hummer@...eranger.com))
Possible large botnet (pablo_esterban at hotmail.com (Pablo Esterban))
Re: Re: PC Firewall Choices (nekramer at mindtheater.net (Nancy Kramer))
[SECURITY] [DSA 946-1] New sudo packages fix privilege escalation (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 947-1] New ClamAV packages fix heap overflow (mstone at klecker.debian.org (Michael Stone))
[USN-245-1] KDE library vulnerability (martin.pitt at canonical.com (Martin Pitt))
Possible large botnet (obnoxious at hush.com (obnoxious@...h.com))
[SECURITY] [DSA 948-1] New kdelibs packages fix buffer overflow (mstone at klecker.debian.org (Michael Stone))
[SECURITY] [DSA 949-1] New crawl packages fix potential group games execution (joey at infodrom.org (Martin Schulze))
new nokia bluetooth worms... (kf_lists at digitalmunition.com (KF (lists)))
RockLiffe MailSite wconsole.dll Denial of Service/Script Injection Vulnerability (os2a.bto at gmail.com (OS2A BTO))
Possible large botnet (stan.bubrouski at gmail.com (Stan Bubrouski))
MBT Xss vulnerability (jerome.athias at free.fr (Jerome Athias))
MBT Xss vulnerability (stan.bubrouski at gmail.com (Stan Bubrouski))
MBT Xss vulnerability (stan.bubrouski at gmail.com (Stan Bubrouski))
Re: Re: PC Firewall Choices (stan.bubrouski at gmail.com (Stan Bubrouski))
MBT Xss vulnerability (stan.bubrouski at gmail.com (Stan Bubrouski))
MDKSA-2006:018 - Updated kernel packages fix several vulnerabilities (security at mandriva.com (Mandriva Security Team))
MBT Xss vulnerability (sant.jadhav at gmail.com (MuNNa))
Personal firewalls. (craig.soderland at sap.com (Soderland, Craig))
MBT Xss vulnerability (se_cur_ity at hotmail.com (Morning Wood))
MBT Xss vulnerability (stan.bubrouski at gmail.com (Stan Bubrouski))
MBT Xss vulnerability (stan.bubrouski at gmail.com (Stan Bubrouski))
Personal firewalls. (degeneracypressure at gmail.com (Eliah Kagan))
Personal firewalls. (Thierry at Zoller.lu (Thierry Zoller))
Personal firewalls. (degeneracypressure at gmail.com (Eliah Kagan))
Personal firewalls. (williamderieux at gmail.com (William DeRieux))

January 21 (4 messages)

Personal firewalls. (nekramer at mindtheater.net (Nancy Kramer))
MDKSA-2006:019 - Updated kdelibs packages fix vulnerability (security at mandriva.com (Mandriva Security Team))
MBT Xss vulnerability (sant.jadhav at gmail.com (MuNNa))
Personal firewalls. (dudevanwinkle at gmail.com (Dude VanWinkle))

January 22 (9 messages)

[ GLSA 200601-11 ] KDE kjs: URI heap overflow vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
MBT Xss vulnerability (native.code at gmail.com (Native.Code))
private imap4d exploit (crash_x31337 at yahoo.co.uk (crash-x gay))
private imap4d exploit (crash.ix at gmail.com (crash-x))
private imap4d exploit (str0ke at milw0rm.com (str0ke))
private imap4d exploit (crash.ix at gmail.com (crash-x))
private imap4d exploit (crash.ix at gmail.com (crash-x))
private imap4d exploit (str0ke at milw0rm.com (str0ke))
private imap4d exploit (crash_x31337 at yahoo.co.uk (crash-x gay))

January 23 (18 messages)

private imap4d exploit (c0ntexb at gmail.com (c0ntex))
[SECURITY] [DSA 950-1] New CUPS packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
private imap4d exploit (measl at mfn.org (J.A. Terranson))
private imap4d exploit (c0ntexb at gmail.com (c0ntex))
[SECURITY] [DSA 951-1] New trac packages fix SQL injection and cross-site scripting (joey at infodrom.org (Martin Schulze))
ZoneAlarm phones home (ivanhec at gmail.com (Ivan .))
All you WMF haxxors are belong to...... Mr Moore (coardump at gmail.com (cranium pain))
Re: All you WMF haxxors are belong to...... Mr Moore (coardump at gmail.com (cranium pain))
Possible large botnet (fsegna at web.de (franco segna))
Re: All you WMF haxxors are belong to...... Mr Moore (Rik.Bobbaers at cc.kuleuven.be (Rik Bobbaers))
Re: All you WMF haxxors are belong to...... Mr Moore (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[SECURITY] [DSA 952-1] New libapache-auth-ldap packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
All you WMF haxxors are belong to...... Mr Moore (fdlist at digitaloffense.net (H D Moore))
Re: Question for the Windows pros (nicolas.ruff at gmail.com (Nicolas RUFF))
CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability (James.Williams at ca.com (Williams, James K))
All you WMF haxxors are belong to...... Mr Moore (fdlist at digitaloffense.net (H D Moore))
Personal firewalls. (degeneracypressure at gmail.com (Eliah Kagan))
iDefense Security Advisory 01.23.06: Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow V… (labs-no-reply at idefense.com (labs-no-…)

January 24 (35 messages)

oracle security checklist (security.list.06 at gmail.com (victor gonzalez))
Improper Character Handling In PHP Based Scripts like PhpBB, IPB etc. (h4cky0u.org at gmail.com (h4cky0u))
Improper Character Handling In PHP Based Scriptslike PhpBB, IPB etc. (Ed at unityitservices.co.uk (Edward Pearson))
Improper Character Handling In PHP Based Scriptslike PhpBB, IPB etc. (Ed at unityitservices.co.uk (Edward Pearson))
Improper Character Handling In PHP BasedScriptslike PhpBB, IPB etc. (Ed at unityitservices.co.uk (Edward Pearson))
Improper Character Handling In PHPBasedScriptslike PhpBB, IPB etc. (oscar.fajardo at atosorigin.com (Oscar Fajardo))
Improper Character Handling In PHP BasedScriptslike PhpBB, IPB etc. (discojonny at gmail.com (Disco Jonny))
Improper Character Handling In PHP BasedScriptslike PhpBB, IPB etc. (brian at dessent.net (Brian Dessent))
Improper Character Handling In PHP Based Scripts like PhpBB, IPB etc. (3APA3A at SECURITY.NNOV.RU (3APA3A))
Improper Character Handling In PHP Based Scriptslike PhpBB, IPB etc. (patrickhof at web.de (Patrick Hof))
Improper Character Handling In PHP Based Scripts like PhpBB, IPB etc. (ad at heapoverflow.com (ad@...poverflow.com))
Malware Contest - CSRRT-LUU (adulau at uucp.foo.be (Alexandre Dulaunoy))
Re: Re: PC Firewall Choices (greybrimstone at aim.com (greybrimstone@....com))
private imap4d exploit (greybrimstone at aim.com (greybrimstone@....com))
oracle security checklist (subscriptions at hartsuijker.com (Maarten Hartsuijker))
private imap4d exploit (Rik.Bobbaers at cc.kuleuven.be (Rik Bobbaers))
Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) (ge at linuxbox.org (Gadi Evron))
[USN-246-1] imagemagick vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[SECURITY] [DSA 953-1] New flyspray packages fix cross-site scripting (joey at infodrom.org (Martin Schulze))
BlackWorm technical information (ge at linuxbox.org (Gadi Evron))
BlackWorm technical information (ad at heapoverflow.com (ad@...poverflow.com))
BlackWorm technical information (ad at heapoverflow.com (ad@...poverflow.com))
BlackWorm technical information (redsand at redsand.net (redsand))
BlackWorm naming confusing [CME entry now available] (ge at linuxbox.org (Gadi Evron))
BlackWorm naming confusing [CME entry now available] (b.hines at comcast.net (b.hines@...cast.net))
RE: BlackWorm naming confusing [CME entry nowavailable] (erics at sunbelt-software.com (Eric Sites))
Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) (dudevanwinkle at gmail.com (Dude VanWinkle))
What A Click! [Internet Explorer] (mikx at mikx.de (mikx))
Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included) (exibar at thelair.com (Exibar))
BlackWorm technical information (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
BlackWorm technical information (kyphros at gmail.com (Mike Owen))
Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included) (mjcarter at ihug.co.nz (mjcarter@...g.co.nz))
Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included) (exibar at thelair.com (Exibar))
Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included) (ad at heapoverflow.com (ad@...poverflow.com))
[FLSA-2006:152845] Updated perl packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))

January 25 (30 messages)

Improper Character Handling In PHP BasedScriptslike PhpBB, IPB etc. (dveditz at cruzio.com (Daniel Veditz))
Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included) (prb at lava.net (prb@...a.net))
Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
can a brother get some disclosure? (info at pcsage.biz (PCSC Information Services))
Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included) (prb at lava.net (prb@...a.net))
private imap4d exploit (nodialtone at comcast.net (nodialtone))
[SECURITY] [DSA 954-1] New wine packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included) (colweb at gmail.com (Col))
IBM mqseries (indianz at indianz.ch (indianz@...ianz.ch))
Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
can a brother get some disclosure? (Ed at unityitservices.co.uk (Edward Pearson))
[SECURITY] [DSA 947-2] New clamav packages fix heap overflow (mstone at klecker.debian.org (Michael Stone))
[SECURITY] [DSA 955-1] New mailman packages fix denial of service (mstone at klecker.debian.org (Michael Stone))
BlackWorm naming confusing [CME entry now available] (greybrimstone at aim.com (greybrimstone@....com))
HYSA-2006-001 phpBB 2.0.19 search.php and profile.php DOS Vulnerability (h4cky0u.org at gmail.com (h4cky0u))
HYSA-2006-001 phpBB 2.0.19 search.php andprofile.php DOS Vulnerability (Ed at unityitservices.co.uk (Edward Pearson))
Re: Full-Disclosure Digest, Vol 11, Issue 58 (joeljose420 at gmail.com (Joel Jose))
[OT] Re: can a brother get some disclosure? (tim-security at sentinelchicken.org (Tim))
[OT] Re: can a brother get some disclosure? (kponds at gmail.com (Kevin Ponds))
IBM mqseries (fcharpen at xmcopartners.com (Frederic Charpentier))
Workaround for unpatched Oracle PLSQL Gateway flaw (davidl at ngssoftware.com (David Litchfield))
[OT] Re: can a brother get some disclosure? (sschappert at molecular-inversion-dynamics.com (Scott Schappert))
[OT] Re: can a brother get some disclosure? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Updated ipsec-tools packages fix vulnerability (security at mandriva.com (security@...driva.com))
[OT] Re: can a brother get some disclosure? (c0ntexb at gmail.com (c0ntex))
HYSA-2006-002 Phpclanwebsite 1.23.1 Multiple Vulnerabilities (h4cky0u.org at gmail.com (h4cky0u))
BlackWorm: 2 million infected? ISP notifications. (ge at linuxbox.org (Gadi Evron))
Updated mozilla-thunderbird packages fix vulnerability (security at mandriva.com (security@...driva.com))
Re: Full-Disclosure Digest, Vol 11, Issue 59 (info at pcsage.biz (PCSC Information Services))
Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) (kkadow at gmail.com (Kevin))

January 26 (34 messages)

Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) (frank at knobbe.us (Frank Knobbe))
Re: Full-Disclosure Digest, Vol 11, Issue 59 (yboily at gmail.com (Yvan Boily))
Re: Full-Disclosure Digest, Vol 11, Issue 58 (joeljose420 at gmail.com (Joel Jose))
[OT] Re: can a brother get some disclosure? (kponds at gmail.com (Kevin Ponds))
Re: BlackWorm: 2 million infected? ISP notifications. (topsecretbattlesquad at gmail.com (Top Secret Battle squad))
Re: BlackWorm: 2 million infected? ISP notifications. (thegesus at gmail.com (TheGesus))
Re: BlackWorm: 2 million infected? ISP notifications. (topsecretbattlesquad at gmail.com (Top Secret Battle squad))
[SECURITY] [DSA 956-1] New lsh-utils packages fix local vulnerabilities (joey at infodrom.org (Martin Schulze))
OSVDB - 2005 Recap and Status Update (jkouns at opensecurityfoundation.org (jkouns))
HYSA-2006-001 phpBB 2.0.19 search.php andprofile.php DOS Vulnerability (skodliv at gmail.com (poo))
[ GLSA 200601-12 ] Trac: Cross-site scripting vulnerability (dercorny at gentoo.org (Stefan Cornelius))
[OT] Re: can a brother get some disclosure? (sschappert at molecular-inversion-dynamics.com (Scott Schappert))
[OT] Re: can a brother get some disclosure? (stan.bubrouski at gmail.com (Stan Bubrouski))
HYSA-2006-001 phpBB 2.0.19 search.php andprofile.php DOS Vulnerability (Ed at unityitservices.co.uk (Edward Pearson))
SUSE Security Announcement: nfs-server/rpc.mountd remote code execution (SUSE-SA:2006:005) (meissner at suse.de (Marcus Meissner))
Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack (psirt at cisco.com (Cisco Systems Product Security Incident Response Te…)
[Fwd: Workaround for unpatched Oracle PLSQL Gateway flaw] (noelk at bc.edu (noelk))
Cisco Security Advisory: Cisco VPN 3000Concentrator Vulnerable to Crafted HTTP Attack (jlay at slave-tothe-box.net (James Lay))
Cisco Security Advisory: Cisco VPN 3000Concentrator Vulnerable to Crafted HTTP Attack (slamboy at gmail.com (Jason Mayer))
[SECURITY] [DSA 957-1] New ImageMagick packages fix arbitrary command execution (joey at infodrom.org (Martin Schulze))
Cisco Security Advisory: Cisco VPN3000Concentrator Vulnerable to Crafted HTTP Attack (dciccaro at cisco.com (Dario Ciccarone (dciccaro)))
[ GLSA 200601-13 ] Gallery: Cross-site scripting vulnerability (dercorny at gentoo.org (Stefan Cornelius))
Disaster Recovery in Oregon? (b.hines at comcast.net (b.hines@...cast.net))
Re: ZoneAlarm phones home (davek_throwaway at hotmail.com (Dave Korn))
Shareaza Remote Vulnerability (whatstheaddress at gmail.com (Ryan Smith))
Shareaza Remote Vulnerability (toddtowles at brookshires.com (Todd Towles))
Shareaza Remote Vulnerability (toddtowles at brookshires.com (Todd Towles))
(offtopic) Lame postmaster at Radware? (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
Re: (offtopic) Lame postmaster at Radware? (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
[ MDKSA-2006:022 ] - Updated perl-Convert-UUlib packages fix vulnerability (security at mandriva.com (security@...driva.com))
[Argeniss] Oracle Database Buffer overflows vulnerabilities in public procedures of XDB.DBMS_XMLSCHEMA{_INT} (cesarc56 at yahoo.com (Cesar))
Shareaza Remote Vulnerability (ad at heapoverflow.com (ad@...poverflow.com))
[ MDKSA-2006:023 ] - Updated perl-Net_SSLeay packages fix vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:024 ] - Updated ImageMagick packages fix vulnerabilities (security at mandriva.com (security@...driva.com))

January 27 (26 messages)

Re: [security] What A Click! [Internet Explorer] (yossarian at planet.nl (yossarian))
BlackWorm: statistics and numbers (ge at linuxbox.org (Gadi Evron))
[ MDKSA-2006:025 ] - Updated net-snmp packages fix vulnerabilities (security at mandriva.com (security@...driva.com))
CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability [v1.1] (James.Williams at ca.com (Williams, James K))
Re: ZoneAlarm phones home (ivanhec at gmail.com (Ivan .))
Recent trends in network secuirty??? (6ackpace at gmail.com (6ackpace))
Recent trends in network secuirty??? (prb at lava.net (prb@...a.net))
RE: [funsec] BlackWorm: statistics and numbers (gary at intrepid.com (Gary Funck))
[SECURITY] [DSA 958-1] New drupal packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Shareaza Remote Vulnerability (whatstheaddress at gmail.com (Ryan Smith))
Bypass Genuine Check (nientiedt at gmx.de (Nientiedt))
Shareaza Remote Vulnerability (ad at heapoverflow.com (ad@...poverflow.com))
Bypass Genuine Check (ad at heapoverflow.com (ad@...poverflow.com))
Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) (bugtraq at nospam.snakeoil.de (Holger van Lengerich))
Linux shellcodes (wh1t3h4t3 at yahoo.co.uk (Micheal Turner))
POSITIF-securityframework (na_forum at wp.pl (POSITIF))
POSITIF-securityframework (c0ntexb at gmail.com (c0ntex))
POSITIF-securityframework (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Vulnerability/Penetration Testing Tools (davek_throwaway at hotmail.com (Dave Korn))
Re: Re: ZoneAlarm phones home (davek_throwaway at hotmail.com (Dave Korn))
Re: [security] What A Click! [Internet Explorer] (yossarian at planet.nl (yossarian))
Re: Re: ZoneAlarm phones home (ivanhec at gmail.com (Ivan .))
Re: [security] What A Click! [Internet Explorer] (stuartd at gmail.com (Stuart Dunkeld))
Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) (charles_cala at yahoo.com (Charles Cala))
Re: [security] What A Click! [Internet Explorer] (lancej at securescience.net (Lance James))
about uncovering skype (nicolas.bouthors at volubill.com (BOUTHORS Nicolas))

January 28 (12 messages)

Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) (dudevanwinkle at gmail.com (Dude VanWinkle))
Re: What A Click! [Internet Explorer] (evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor))
Re: Vulnerability/Penetration Testing Tools (evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor))
Multiple vulnerabilities in CommuniGate Pro Server (research at gleg.net (Evgeny Legerov))
Re: ZoneAlarm phones home (security at zonelabs.com (Zone Labs Security Team))
gnome evolution mail client inline text file DoS issue (phar at stonedcoder.org (Mike Davis))
Misunderstanding Javascript injection: A paper on web application abuse via Javascript injection (netsys at machine.org.uk (Tim Brown))
Can Someone Tell Me What This Is? (y0himba at technolounge.org (y0himba))
PmWiki Multiple Vulnerabilities (ascii at katamail.com (ascii))
Can Someone Tell Me What This Is? (very at unprivate.com (Very Unprivate))
-moz-binding CSS property: more XSS fun (lists at atrus.org (Nikolas Coukouma))
PHP5 Globals Vulnerability (ascii at katamail.com (ascii))

January 29 (11 messages)

XSS in rapidshare.de (mohajali2k4 at gmail.com (M.o.H.a.J.a.L.i))
XSS in rapidshare.de (mbytesecurity.org at gmail.com (Mbyte Security))
Re: XSS in rapidshare.de (mohajali2k4 at gmail.com (M.o.H.a.J.a.L.i))
Re: XSS in rapidshare.de (infohacking.research at gmail.com (Hugo Vazquez Carapez))
Cross Site Cooking (lcamtuf at ghettot.org (Michal Zalewski))
XSS in rapidshare.de (ad at heapoverflow.com (ad@...poverflow.com))
XSS in rapidshare.de (ad at heapoverflow.com (ad@...poverflow.com))
[ GLSA 200601-14 ] LibAST: Privilege escalation (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Re: BlackWorm naming confusing [CME entry now available] (jose at monkey.org (Jose Nazario))
Re: BlackWorm naming confusing [CME entry now available] (ge at linuxbox.org (Gadi Evron))
[ GLSA 200601-15 ] Paros: Default administrator password (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))

January 30 (19 messages)

[ GLSA 200601-15 ] Paros: Default administrator password (yboily at gmail.com (Yvan Boily))
Cisco Security Advisory: Cisco VPN3000Concentrator Vulnerable to Crafted HTTP Attack (dudevanwinkle at gmail.com (Dude VanWinkle))
AOL Instant Messenger 5.9.3861 Local Buffer Overrun Vulnerability (shell6 at gmail.com (Shell))
gnome evolution mail client inline text file DoS issue (list at guru.at (Christoph Gruber))
RE: Cross Site Cooking (lcamtuf at dione.ids.pl (Michal Zalewski))
RFID-It's all in the way you present it. (randallm at fidmail.com (Randall M))
[SECURITY] [DSA 951-2] New trac packages fix SQL injection and cross-site scripting (joey at infodrom.org (Martin Schulze))
Invi LogWripper (devyer at gmail.com (devy))
Invi LogWripper (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
ashnews Cross-Site Scripting Vulnerability (zeus.olimpusklan at gmail.com (zeus olimpusklan))
[SECURITY] [DSA 959-1] New unalz packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
CME-24 (BlackWorm) Users' FAQ (ge at linuxbox.org (Gadi Evron))
Re: CME-24 (BlackWorm) Users' FAQ (ge at linuxbox.org (Gadi Evron))
[ MDKSA-2006:026 ] - Updated bzip2 packages fix bzgrep vulnerabilities (security at mandriva.com (security@...driva.com))
I stole code (admin at segfault.ch (Simon))
[ GLSA 200601-16 ] MyDNS: Denial of Service (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200601-17 ] Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ MDKSA-2006:027 ] - Updated gzip packages fix zgrep vulnerabilities (security at mandriva.com (security@...driva.com))
RAID 2006 Announcement to Mailing Lists (rkc at ll.mit.edu (Robert K. Cunningham))

January 31 (27 messages)

I stole code (randallm at fidmail.com (Randall M))
Microsoft Volume Licensing infringement? (randallm at fidmail.com (Randall M))
Microsoft Volume Licensing infringement? (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
Microsoft Volume Licensing infringement? (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
ashnews Cross-Site Scripting Vulnerability (dan-fd at f-box.org (Dan B UK))
Microsoft Volume Licensing infringement? (steve at unixwiz.net (Steve Friedl))
Microsoft Volume Licensing infringement? (evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor))
ashnews Cross-Site Scripting Vulnerability (theall at tifaware.com (George A. Theall))
I stole code (lucianobellou at gmail.com (Luciano Faletti))
Proof of concept for CommuniGate Pro Server vulnerability (research at gleg.net (Evgeny Legerov))
[SECURITY] [DSA 957-2] New ImageMagick packages fix arbitrary command execution (joey at infodrom.org (Martin Schulze))
Invi LogWripper (besugo at naida.org (besugo@...da.org))
Re: BlackWorm naming confusing [CME entry now available] (houser at hush.com (houser@...h.com))
[SECURITY] [DSA 960-1] New libmail-audit-perl packages fix insecure temporary file use (joey at infodrom.org (Martin Schulze))
ashnews Cross-Site Scripting Vulnerability (dan-fd at f-box.org (DanB-FD))
ashnews Cross-Site Scripting Vulnerability (dan-fd at f-box.org (DanB-FD))
Filemaker Pro 7 - any known exploits/hacks available? (hackingiswrong at gmail.com (HiW HiW))
RE: Full-Disclosure Digest, Vol 11, Issue 71 (kermesz at o2.pl (Tom))
Filemaker Pro 7 - any known exploits/hacks available? (adf at code511.com (A-d-F))
Filemaker Pro 7 - any known exploits/hacks available? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
DISIT - OPEN SOURCE DISASSEMBLER ENGINE (bania.piotr at gmail.com (Piotr Bania))
Re: DISIT - OPEN SOURCE DISASSEMBLER ENGINE (evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor))
[SECURITY] [DSA 960-2] New libmail-audit-perl packages fix insecure temporary file use (joey at infodrom.org (Martin Schulze))
Windows Access Control Demystified. (sudhakar+fulldisclosure at CS.Princeton.EDU (sudhakar+fulldisclosure@...Princeton.EDU))
I stole code (chromazine at sbcglobal.net (Steve Kudlak))
ZRCSA-200601: SPIP - Multiple Vulnerabilities (siegfri3d at gmail.com (Siegfried))
CME-24/BlackWorm email notifications + top-7 unreachable AS's (ge at linuxbox.org (Gadi Evron))

991 messages