full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2006/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 33	² 28	³ 29	⁴ 10	⁵ 7
⁶ 31	⁷ 34	⁸ 20	⁹ 24	¹⁰ 22	¹¹ 12	¹² 684
¹³ 47	¹⁴ 45	¹⁵ 59	¹⁶ 287	¹⁷ 169	¹⁸ 24	¹⁹ 2
²⁰ 41	²¹ 59	²² 26	²³ 51	²⁴ 57	²⁵ 23	²⁶ 37
²⁷ 39	²⁸ 70	²⁹ 82	³⁰ 59	³¹ 60

Messages by day:

March 2 (28 messages)

March 3 (29 messages)

New MSN Servers (zeuz.netraptor at gmail.com (ZeuZ))
CFP hack.lu 2006 (noreply at hack.lu (noreply))
New MSN Servers (nocfed at gmail.com (nocfed))
blocking SkyPE? (hugo.garcia at totalnetworks.com.mx (Hugo Garcia))
Arin.net XSS (Security at peadro.net (Terminal Entry))
New MSN Servers (joffer at gmail.com (Alexander Hristov))
Mobile Devices- Security Resouces links and Tools (ezequiel.sallis at gmail.com (Ezequiel Sallis))
Re: Arin.net XSS (davek_throwaway at hotmail.com (Dave Korn))
Re: reduction of brute force login attempts viaSSHthrough iptables --hashlimit (davek_throwaway at hotmail.com (Dave Korn))
Re: Arin.net XSS (Security at peadro.net (Terminal Entry))
Re: Arin.net XSS (joffer at gmail.com (Alexander Hristov))
Re: reduction of brute force login attemptsviaSSHthrough iptables --hashlimit (fd at g-0.org (GroundZero Security))
Re: Arin.net XSS (perfectirijillo at gmail.com (J u a n))
DSplit - Tiny AV signatures Detector (ad at heapoverflow.com (ad@...poverflow.com))
Re: Arin.net XSS (stevenrakick at yahoo.com (Steven Rakick))
Free "Microsoft" USB FOB!!! (jlopez2k5 at gmail.com (Juan Antonio López Fernández))
Free "Microsoft" USB FOB!!! (Tyler.Delane at fusepoint.com (Tyler Delane))
Using domain whois information for fun and profit (bkfsec at sdf.lonestar.org (bkfsec))
Arin.net XSS (steven at lovebug.org (Steven))
Arin.net XSS (simon at snosoft.com (Simon Smith))
Arin.net XSS (steven at lovebug.org (Steven))
Arin.net XSS (very at unprivate.com (php0t))
Arin.net XSS (michael.holstein at csuohio.edu (Michael Holstein))
Arin.net XSS (stevenrakick at yahoo.com (Steven Rakick))
Using domain whois information for fun and profit (stevenrakick at yahoo.com (Steven Rakick))
Using domain whois information for fun and profit (bkfsec at sdf.lonestar.org (bkfsec))
personal apology (ge at linuxbox.org (Gadi Evron))
Using domain whois information for fun andprofit (stevenrakick at yahoo.com (Steven Rakick))
New MSN Servers (fd at ngolde.de (Nico Golde))

March 4 (10 messages)

March 5 (7 messages)

Please remove me from the list (joffer at gmail.com (Alexander Hristov))
(no subject) (stevenrakick at yahoo.com (Steven Rakick))
(no subject) (stevenrakick at yahoo.com (Steven Rakick))
(no subject) (perfect.material at gmail.com (PERFECT.MATERIAL))
HITBSecConf2006 - Malaysia: Call for Papers (prabu at hackinthebox.org (Praburaajan))
Re: Full-Disclosure Digest, Vol 13, Issue 8 (DMCCOY at bbl-inc.com (DONNY MCCOY))
New MSN Servers (measl at mfn.org (J.A. Terranson))

March 6 (31 messages)

[SECURITY] [DSA 985-1] New libtasn1-2 packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 986-1] New gnutls11 packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
any good alternative pen-testing stratergy than isecom? (joeljose420 at gmail.com (Joel Jose))
MiTM with https there are any tools ? (cocainna at gmail.com (Alehandro Dias))
MiTM with https there are any tools ? (varcher at denyall.com (Vincent Archer))
SyScan'06 Call For Papers (organiser at syscan.org (organiser@...can.org))
Re: Re: Arin.net XSS (davek_throwaway at hotmail.com (Dave Korn))
Re: Arin.net XSS (davek_throwaway at hotmail.com (Dave Korn))
MiTM with https there are any tools ? (Rik.Bobbaers at cc.kuleuven.be (Rik Bobbaers))
Re: Arin.net XSS (pfarrow at flamenetworks.co.uk (Paul Farrow))
Re: Arin.net XSS (davek_throwaway at hotmail.com (Dave Korn))
Oracle's Secure Search (tim-security at sentinelchicken.org (Tim))
MiTM with https there are any tools ? (dave at immunityinc.com (Dave Aitel))
MiTM with https there are any tools ? (markc at uniontown.com (Mark Coleman))
MiTM with https there are any tools ? (securitylists at uniontown.com (Security Lists))
Igloo-FTP Pro Problems (joffer at gmail.com (Alexander Hristov))
MiTM with https there are any tools ? (mooyix at gmail.com (Brendan Dolan-Gavitt))
MiTM with https there are any tools ? (famato at infobyte.com.ar (Francisco Amato))
MiTM with https there are any tools ? (wavefront1 at shaw.ca (Rui Pereira (WCG)))
Skype emoticons problems / bugs (joffer at gmail.com (Alexander Hristov))
Out of memory crash in Freeciv 2.0.7 (aluigi at autistici.org (Luigi Auriemma))
Multiple vulnerabilities in Sauerbraten engine 2006_02_28 (aluigi at autistici.org (Luigi Auriemma))
Multiple vulnerabilities in Liero Xtreme 0.62b (aluigi at autistici.org (Luigi Auriemma))
Multiple vulnerabilities in Cube engine 2005_08_29 (aluigi at autistici.org (Luigi Auriemma))
[ GLSA 200603-04 ] IMAP Proxy: Format string vulnerabilities (koon at gentoo.org (Thierry Carrez))
[ GLSA 200603-05 ] zoo: Stack-based buffer overflow (koon at gentoo.org (Thierry Carrez))
dikline.com suspected to be behind repository hacking. (jsavora at ipspace.com (Jason Savora))
dikline suspected to be behind repository hacking. (jsavora at ipspace.com (Jason Savora))
dikline suspected to be behind repositoryhacking. (tkrpata at bjs.com (Krpata, Tyler))
dikline suspected to be behind repositoryhacking. (jsavora at ipspace.com (Jason Savora))
dikline suspected to be behind repositoryhacking. (rudolph at usyd.edu.au (Rudolph Pereira))

March 7 (34 messages)

March 8 (20 messages)

March 9 (24 messages)

March 10 (22 messages)

March 11 (12 messages)

Mambo Admin access. (su.sudo at gmail.com (sudo su))
Re: Dropbear SSH server Denial of Service (djm at mindrot.org (Damien Miller))
PHP (varf at gulbcs.org (Fernando Valderrábano Reyes))
strange domain name in phishing email (jqxin2006 at gmail.com (Jianqiang Xin))
strange domain name in phishing email (ad at heapoverflow.com (ad@...poverflow.com))
strange domain name in phishing email (brian at dessent.net (Brian Dessent))
strange domain name in phishing email (nekramer at mindtheater.net (Nancy Kramer))
INFIGO-2006-03-01 exploit (wh1t3h4t3 at yahoo.co.uk (Micheal Turner))
AntiVir PersonalEdition Classic: Local Privilige Escalation (ml2 at portsonline.net (Ramon 'ports' Kukla))
reduction of brute force log (m at rtij.nl (Martijn Lievaart))
Yahoo + Ebay fun scam (ad at heapoverflow.com (ad@...poverflow.com))
Skype emoticons problems and vulnerabilities (joffer at gmail.com (Alexander Hristov))

March 13 (47 messages)

Yahoo security give blogger the thumbs up (system_outage at yahoo.com (SO SECURITY RESEARCH INSTITUTE))
[ GLSA 200603-10 ] Cube: Multiple vulnerabilities (dercorny at gentoo.org (Stefan Cornelius))
[USN-262-1] Ubuntu 5.10 installer password disclosure (martin.pitt at canonical.com (Martin Pitt))
Yahoo security give blogger the thumbs up (measl at mfn.org (J.A. Terranson))
Gadievron flood (su.sudo at gmail.com (sudo su))
Fuzzying (abryson at bytefocus.com (Alice Bryson))
Re: Mambo Admin access. (su.sudo at gmail.com (sudo su))
Advisory 2006-03-12 Gay Slut Overflow CRITICAL dismallest in Immunitysec Dave Aitel (m.mohr at laposte.net (Michael Mohr))
[SECURITY] [DSA 994-1] New freeciv packages fix denial of service (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 995-1] New metamail packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Yahoo security give blogger the thumbs up (nocfed at gmail.com (nocfed))
Kerio MailServer bugfun (research at gleg.net (Evgeny Legerov))
[USN-263-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[SECURITY] [DSA 996-1] New Crypt::CBC packages fix cryptographic weakness (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 993-2] New GnuPG packages fix broken signature check (joey at infodrom.org (Martin Schulze))
[USN-264-1] gnupg vulnerability (martin.pitt at canonical.com (Martin Pitt))
Advisory 2006-03-12 Gay Slut Overflow CRITICAL dismallest in Immunitysec Dave Aitel (simon at snosoft.com (Simon Smith))
Secunia Research: unalz Filename Handling Directory Traversal Vulnerability (remove-vuln at secunia.com (Secunia Research))
Secunia Research: Dwarf HTTP Server Source Disclosure and Cross-Site Scripting (remove-vuln at secunia.com (Secunia Research))
Co-location Spaces (simon at snosoft.com (Simon Smith))
DC4420 monthly meet reminder - this Thursday, West London (majormal at pirate-radio.org (Major Malfunction))
Co-location Spaces (simon at snosoft.com (Simon Smith))
ZDI-06-003: Ipswitch Collaboration Suite Code Execution Vulnerability (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
Co-location Spaces (existx at gmail.com (existx))
[SECURITY] [DSA 997-1] New bomberclone packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
HTTP AUTH BASIC monowall. (thotter at gmail.com (Matthijs van Otterdijk))
HTTP AUTH BASIC monowall. (tim-security at sentinelchicken.org (Tim))
HTTP AUTH BASIC monowall. (tim-security at sentinelchicken.org (Tim))
HTTP AUTH BASIC monowall. (thotter at gmail.com (Matthijs van Otterdijk))
HTTP AUTH BASIC monowall. (requiem at praetor.org (Jeremy Bishop))
HTTP AUTH BASIC monowall. (tim-security at sentinelchicken.org (Tim))
HTTP AUTH BASIC monowall. (michael.holstein at csuohio.edu (Michael Holstein))
HTTP AUTH BASIC monowall. (jimpop at yahoo.com (Jim Popovitch))
HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
HTTP AUTH BASIC monowall. (requiem at praetor.org (Jeremy Bishop))
HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
HTTP AUTH BASIC monowall. (lyal.collins at key2it.com.au (Lyal Collins))
HTTP AUTH BASIC monowall. (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
[ MDKSA-2006:055 ] - Updated gnupg packages fix signature file verification vulnerability (security at mandriva.com (security@...driva.com))
HTTP AUTH BASIC monowall. (tim-security at sentinelchicken.org (Tim))
HTTP AUTH BASIC monowall. (tim-security at sentinelchicken.org (Tim))
HTTP AUTH BASIC monowall. (lyal.collins at key2it.com.au (Lyal Collins))
HTTP AUTH BASIC monowall. (requiem at praetor.org (Jeremy Bishop))
HTTP AUTH BASIC monowall. (lyal.collins at key2it.com.au (Lyal Collins))
Re: recursive DNS servers DDoS as a growing DDoSproblem (keith.morgan at terradon.com (Keith T. Morgan))
Re: recursive DNS servers DDoS as a growing DDoSproblem (mansaxel at sunet.se (Måns Nilsson))

March 14 (45 messages)

HTTP AUTH BASIC monowall. (tim-security at sentinelchicken.org (Tim))
HTTP AUTH BASIC monowall. (keseymour at rochester.rr.com (Keith))
strange domain name in phishing email (abryson at bytefocus.com (Alice Bryson))
strange domain name in phishing email (abryson at bytefocus.com (Alice Bryson))
[DRUPAL-SA-2006-001] Drupal 4.6.6 / 4.5.8 fixes access control issue (uwe at hermann-uwe.de (Uwe Hermann))
[DRUPAL-SA-2006-002] Drupal 4.6.6 / 4.5.8 fixes XSS issue (uwe at hermann-uwe.de (Uwe Hermann))
[DRUPAL-SA-2006-003] Drupal 4.6.6 / 4.5.8 fixes session fixation issue (uwe at hermann-uwe.de (Uwe Hermann))
[DRUPAL-SA-2006-004] Drupal 4.6.6 / 4.5.8 fixes mail header injection issue (uwe at hermann-uwe.de (Uwe Hermann))
HTTP AUTH BASIC monowall. (kluge at fujitsu.com.au (Steffen Kluge))
DMA[2006-0313a] - 'Apple OSX Mail.app RFC1740 Real Name Buffer Overflow' (kf_lists at digitalmunition.com (KF (lists)))
Advisory 2006-03-12 Gay Slut Overflow CRITICALdismallest in Immunitysec Dave Aitel (bigdaddyzeroday at hush.ai (bigdaddyzeroday@...h.ai))
[SECURITY] [DSA 998-1] New libextractor packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 999-1] New lurker packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 1000-1] New Apache2::Request packages fix denial of service (joey at infodrom.org (Martin Schulze))
strange domain name in phishing email (j.grosjean at proxiad.com (Julien GROSJEAN - Proxiad))
strange domain name in phishing email (Ed at unityitservices.co.uk (Edward Pearson))
strange domain name in phishing email (michael.holstein at csuohio.edu (Michael Holstein))
US Government Studies Open Source Quality (jericho at attrition.org (security curmudgeon))
US Government Studies Open Source Quality (jericho at attrition.org (security curmudgeon))
strange domain name in phishing email (auto62996 at hushmail.com (auto62996@...hmail.com))
Re: recursive DNS servers DDoS as a growingDDoSproblem (keith.morgan at terradon.com (Keith Morgan))
[SECURITY] [DSA 1001-1] New crossfire packages fix arbitrary code execution (jmm at inutil.org (Moritz Muehlenhoff))
Internet Explorer 0day (just0days at gmail.com (just 0days))
strange domain name in phishing email (michael.holstein at csuohio.edu (Michael Holstein))
Coverity (mwilliamson at falcon.tamucc.edu (Michael Williamson))
Internet Explorer 0day (michael.holstein at csuohio.edu (Michael Holstein))
Coverity (jeff-kell at utc.edu (Jeff Kell))
Internet Explorer 0day (fd at g-0.org (GroundZero Security))
Internet Explorer 0day (gluttony at gmail.com (Andrew A))
blocking SkyPE? (gbegin at omniglobenet.com (Guy Bégin))
Internet Explorer 0day (bigdaddyzeroday at hush.ai (bigdaddyzeroday@...h.ai))
Advisory 2006-03-12 Gay Slut Overflow CRITICAL dismallest in Immunitysec Dave Aitel (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
HTTP AUTH BASIC monowall. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Internet Explorer 0day (craig.soderland at sap.com (Soderland, Craig))
Agony in Whitehat, a story by Dave Aitel (immunitydave at yahoo.com (Dave Aitel))
Internet Explorer 0day (kf_lists at digitalmunition.com (KF (lists)))
Internet Explorer 0day (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Internet Explorer 0day (don.bailey at gmail.com (Don Bailey))
ZDI-06-004: Microsoft Excel File Format Parsing Vulnerability (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
Fortinet Security Advisory: FSA-2006-08 (vulnmoniter at fortinet.com (Fortinet Research))
Fortinet Security Advisory: FSA-2006-09 (vulnmoniter at fortinet.com (Fortinet Research))
Internet Explorer 0day (xyberpix at xyberpix.com (xyberpix))
Massive Attacks from mistral.cz (merchantmatrix at gmail.com (MerchantMatrix.Net))
E-Mail Change (liljoker771 at gmail.com (Brandon Kovacs))
my first question (w4nt3d at hotmail.it (CTN]-BongSnoTbOmBs[CTN))

March 15 (59 messages)

Internet Explorer 0day (expanders at x0n3-h4ck.org (Expanders))
WLSI - Windows Local Shellcode Injection - Paper (cesarc56 at yahoo.com (Cesar))
HTTP AUTH BASIC monowall. (tim-security at sentinelchicken.org (Tim))
[HV-HIGH] Microsoft Excel Named Range Arbitrary Code Execution (vuln at hexview.com (vuln@...view.com))
strange domain name in phishing email (sheeponhigh at gmail.com (sheeponhigh))
strange domain name in phishing email (abryson at bytefocus.com (Alice Bryson))
Internet Explorer 0day (j.schipper at math.uu.nl (Joachim Schipper))
strange domain name in phishing email (gboyce at badbelly.com (gboyce))
CodeScan Advisory: Multiple Vulnerabilities In ASPPortal.net (advisories at codescan.com (CodeScan Labs))
CodeScan Advisory: Unauthenticated Arbitrary File Read in Horde v3.09 and prior (advisories at codescan.com (CodeScan Labs))
my first question (bigdaddyzeroday at hush.ai (bigdaddyzeroday@...h.ai))
strange domain name in phishing email (umphress at gmail.com (Chris Umphress))
[xfocus-SD-060314]Microsoft Office Excel Buffer Overflow Vulnerability (security at xfocus.org (XFOCUS Security Team))
[SECURITY] [DSA 1002-1] New webcalendar packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
strange domain name in phishing email (full-disclosure at list.za.net (Q Beukes))
Internet Explorer 0day (nocfed at gmail.com (nocfed))
Internet Explorer 0day (rembrandt at jpberlin.de (rembrandt@...erlin.de))
Secunia Research: Adobe Document/Graphics Server File URI Resource Access (remove-vuln at secunia.com (Secunia Research))
Re: strange domain name in phishing email (davek_throwaway at hotmail.com (Dave Korn))
Re: strange domain name in phishing email (michael.holstein at csuohio.edu (Michael Holstein))
HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
HTTP AUTH BASIC monowall. (michael.holstein at csuohio.edu (Michael Holstein))
strange domain name in phishing email (gboyce at badbelly.com (gboyce))
strange domain name in phishing email (jlongs2 at uic.edu (James Longstreet))
my first question (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
HTTP AUTH BASIC monowall. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
my first question (michael.holstein at csuohio.edu (Michael Holstein))
my first question (edgardo.zavala at gmail.com (edgardo zavala))
HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
my first question (kf_lists at digitalmunition.com (KF (lists)))
HTTP AUTH BASIC monowall. (michael.holstein at csuohio.edu (Michael Holstein))
HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
HTTP AUTH BASIC monowall. (gboyce at badbelly.com (gboyce))
HTTP AUTH BASIC monowall. (michael.holstein at csuohio.edu (Michael Holstein))
my first question (Ed at unityitservices.co.uk (Edward Pearson))
Yahoo recommends you write down account information (system_outage at yahoo.com (n3td3v group))
HTTP AUTH BASIC monowall. (tim-security at sentinelchicken.org (Tim))
HTTP AUTH BASIC monowall. (bkfsec at sdf.lonestar.org (bkfsec))
Yahoo recommends you write down account information (system_outage at yahoo.com (n3td3v group))
Yahoo recommends you write down account information (system_outage at yahoo.com (n3td3v group))
HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
HTTP AUTH BASIC monowall. (tim-security at sentinelchicken.org (Tim))
HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
HTTP AUTH BASIC monowall. (tim-security at sentinelchicken.org (Tim))
HTTP AUTH BASIC monowall. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
HTTP AUTH BASIC monowall. (michael.holstein at csuohio.edu (Michael Holstein))
HTTP AUTH BASIC monowall. (michael.holstein at csuohio.edu (Michael Holstein))
HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
HTTP AUTH BASIC monowall. (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: HTTP AUTH BASIC monowall. (davek_throwaway at hotmail.com (Dave Korn))
Re: HTTP AUTH BASIC monowall. (davek_throwaway at hotmail.com (Dave Korn))
HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
Re: HTTP AUTH BASIC monowall. (simon at snosoft.com (Simon Smith))
Internet Explorer 0day (j.schipper at math.uu.nl (Joachim Schipper))
Vulnerability fixed in E-gold (3APA3A at security.nnov.ru (3APA3A))
Re: [VulnWatch] [xfocus-SD-060314]Microsoft Office Excel Buffer Overflow Vulnerability (Thierry at Zoller.lu (Thierry Zoller))
HTTP AUTH BASIC monowall (eaton.lists at gmail.com (Brian Eaton))

March 18 (24 messages)

March 19 (2 messages)

Mercur IMAPD 5.0 SP3 Remote Exploit (ellison.tang at gmail.com (Tang Ellison))
KArp update (don.bailey at gmail.com (Don Bailey))

March 20 (41 messages)

Fwd: SURROUNDED (n3td3v at gmail.com (n3td3v))
Perverting Unix Processes (pluf at 7a69ezine.org (Pluf))
Fwd: SURROUNDED (eirikur.eiriks at simnet.is (Eirikur Eiriksson))
Fwd: SURROUNDED (very at unprivate.com (php0t))
[SECURITY] [DSA 960-3] New libmail-audit-perl packages fix insecure temporary file use (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 1009-1] New crossfire packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 1010-1] New ilohamail packages fix cross-site scripting vulnerabilities (joey at infodrom.org (Martin Schulze))
[SSAG#001] :: cURL tftp:// URL Buffer Overflow (metaur at operamail.com (Ulf Harnhammar))
Fwd: SURROUNDED (fd at g-0.org (GroundZero Security))
Fwd: SURROUNDED (drfrancky at securax.org (Javor Ninov))
Fwd: SURROUNDED (n3td3v at gmail.com (n3td3v))
Fwd: SURROUNDED (colweb at gmail.com (Col))
Fwd: SURROUNDED (n3td3v at gmail.com (n3td3v))
Fwd: SURROUNDED (drfrancky at securax.org (Javor Ninov))
Fwd: SURROUNDED (greybrimstone at aim.com (greybrimstone@....com))
Fwd: SURROUNDED (fd at g-0.org (GroundZero Security))
phpBB mass-hack being prepared (FuntKlakow-bot)?- (gautam.bipin at gmail.com (Bipin Gautam))
Fwd: SURROUNDED (n3td3v at gmail.com (n3td3v))
Fwd: SURROUNDED (scameron at routehero.com (Scott T. Cameron))
Fwd: SURROUNDED (security at weretiger.ca (Grant Rietze))
Fwd: SURROUNDED (very at unprivate.com (php0t))
Fwd: SURROUNDED (n3td3v at gmail.com (n3td3v))
Fwd: SURROUNDED (gat0r at toughguy.net (gat0r))
Fwd: SURROUNDED (n3td3v at gmail.com (n3td3v))
Fwd: SURROUNDED (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Fwd: SURROUNDED (drfrancky at securax.org (Javor Ninov))
Fwd: SURROUNDED (n3td3v at gmail.com (n3td3v))
Links to Google's cache of 626 FrSIRT exploits (layne at elsenot.com (layne@...enot.com))
Fwd: SURROUNDED (n3td3v at gmail.com (n3td3v))
New XSS attack to Microsoft service(ASP) (saiedhackeriran at yahoo.com (saied hackeriran))
Links to Google's cache of 626 FrSIRT exploits (str0ke at milw0rm.com (str0ke))
Fwd: SURROUNDED (steve_r125 at yahoo.co.uk (Steve Russell))
Fwd: SURROUNDED (greybrimstone at aim.com (greybrimstone@....com))
Links to Google's cache of 626 FrSIRT exploits (pigrelax at yandex.ru (alex))
Fwd: SURROUNDED (drfrancky at securax.org (Javor Ninov))
[ MDKSA-2006:056 ] - Updated xorg-x11 packages to address local root vuln (security at mandriva.com (security@...driva.com))
Links to Google's cache of 626 FrSIRT exploits (full-disclosure at securitydot.net (Alexander Hristov))
[ MDKSA-2006:057 ] - Updated cairo packages to address Evolution DoS vulnerability (security at mandriva.com (security@...driva.com))
Re: SURROUNDED (yoo.fok at gmail.com (fok yo))
indexes of exploits online [was: Links to Google's cache of 626 FrSIRT exploits] (ge at linuxbox.org (Gadi Evron))
[MU-200603-01] MailEnable POP3 Pre-Authentication Buffer Overflow (noreply at musecurity.com (noreply@...ecurity.com))

March 21 (59 messages)

Phun! Search (n3td3v at gmail.com (n3td3v))
Recon 2006: Guest speakers announcement. Call for papers and early registration ending in less than 2 weeks. (hfortier at recon.cx (Hugo Fortier))
[SECURITY] [DSA 1011-1] New kernel-patch-vserver packages fix root exploit (joey at infodrom.org (Martin Schulze))
put the fun back into FD (fd at g-0.org (GroundZero Security))
put the fun back into FD (vanilsky at googlemail.com (vanilla sky))
[SECURITY] [DSA 1012-1] New unzip packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
put the fun back into FD (sean01 at accnet.com.au (Sean Crawford))
Phun! Search (tehkids at googlemail.com (teh kids))
SUSE Security Announcement: xorg-x11-server local privilege escalation (SUSE-SA:2006:016) (meissner at suse.de (Marcus Meissner))
SUSE Security Announcement: flash-player buffer overflow (SUSE-SA:2006:015) (meissner at suse.de (Marcus Meissner))
SmartConsole Client for NG with Application Intelligence R54 (winsoc at googlemail.com (winsoc))
[ GLSA 200603-17 ] PeerCast: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200603-18 ] Pngcrush: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Phun! Search (n3td3v at gmail.com (n3td3v))
Fwd: SURROUNDED / SF & Symantec (randy at procyonlabs.com (Randal T. Rioux))
Fwd: SURROUNDED / SF & Symantec (drfrancky at securax.org (Javor Ninov))
Phun! Search (drfrancky at securax.org (Javor Ninov))
Phun! Search (matt.sargent at uk.easynet.net (Matthew Sargent))
[OFFTOPIC] Phun! Search (very at unprivate.com (php0t))
Links to Google's cache of 626 FrSIRT exploits (fatb at security.zz.ha.cn (fatb))
Noise on the list (masterfrd at tiscali.be (Frederic Pasteleurs))
Noise on the list (FistFuXXer at gmx.de (FistFucker))
Noise on the list (hdw at kallisti.se (Anders B Jansson))
FW: Noise on the list (Ed at unityitservices.co.uk (Edward Pearson))
FW: Noise on the list (Ed at unityitservices.co.uk (Edward Pearson))
FW: Noise on the list (kf_lists at digitalmunition.com (KF (lists)))
Links to Google's cache of 626 FrSIRT exploits (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
FW: Noise on the list (n3td3v at gmail.com (n3td3v))
Phun! Search (n3td3v at gmail.com (n3td3v))
FW: Noise on the list (tewner at jct.ac.il (Michael Tewner))
FW: Noise on the list (n3td3v at gmail.com (n3td3v))
Noise on the list (security at brvenik.com (Jason))
FW: Noise on the list (security at weretiger.ca (Grant Rietze))
FW: Noise on the list (full-disclosure at securitydot.net (Alexander Hristov))
Noise on the list (n3td3v at gmail.com (n3td3v))
FW: Noise on the list (bob.hacker at gmail.com (Bob Hacker))
FW: Noise on the list (full-disclosure at securitydot.net (Alexander Hristov))
Noise on the list (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Red Hat security engineer lists sources of vulnerabilities (coley at mitre.org (Steven M. Christey))
Re: Noise on the list (davek_throwaway at hotmail.com (Dave Korn))
Re: Links to Google's cache of 626 FrSIRT exploits (davek_throwaway at hotmail.com (Dave Korn))
[ GLSA 200603-19 ] cURL/libcurl: Buffer overflow in the handling of TFTP URLs (vorlon at gentoo.org (Matthias Geerdsen))
ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities (nukedx at nukedx.com (nukedx@...edx.com))
USB risks - working autorun example (fwd from pen-test) (victor.pego at hp.com (Pego, Victor))
[ GLSA 200603-20 ] Macromedia Flash Player: Arbitrary code execution (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
DC267 Meeting Announcement (sol at haveyoubeentested.org (Sol Invictus))
Re: Noise on the list (fd at g-0.org (GroundZero Security))
USB risks - working autorun example (fwd frompen-test) (fd at g-0.org (GroundZero Security))
Re: Noise on the list (michealespinola at gmail.com (Micheal Espinola Jr))
USB risks - working autorun example (fwd from pen-test) (fdlist at digitaloffense.net (H D Moore))
Re: Noise on the list (sol at haveyoubeentested.org (Sol Invictus))
USB risks - working autorun example (fwd from pen-test) (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Noise on the list (michealespinola at gmail.com (Micheal Espinola Jr))
Re: Noise on the list (n3td3v at gmail.com (n3td3v))
Noise on the list (security at brvenik.com (Jason))
Noise on the list (n3td3v at gmail.com (n3td3v))
IE .hta vulnerability reported (exceed at email.si (/dev/null))
DMA[2006-0321a] - 'Motorola P2K Platform setpath() overflow and Blueline attack' (kf_lists at digitalmunition.com (KF (lists)))
Re: Noise on the list (xploitabel at gmail.com (n3td3v v3dt3n))

March 22 (26 messages)

March 23 (51 messages)

March 24 (57 messages)

March 25 (23 messages)

March 26 (37 messages)

March 27 (39 messages)

March 28 (70 messages)

March 29 (82 messages)

March 30 (59 messages)

Third party patches, a matter of trust by n3td3v (n3td3v at gmail.com (n3td3v))
Phish Registry (maillists at thelonecoder.com (Stephen Johnson))
Phish Registry (n3td3v at gmail.com (n3td3v))
Java integer overflows (was: a really long topic) (kf_lists at digitalmunition.com (KF (lists)))
strip_tags() but not only vulnerability (ascii at katamail.com (ascii))
Phish Registry (n3td3v at gmail.com (n3td3v))
Noise (very at unprivate.com (php0t))
Noise (scameron at routehero.com (Scott T. Cameron))
Noise (n3td3v at gmail.com (n3td3v))
Noise (joffer at gmail.com (Alexander Hristov))
Noise (n3td3v at gmail.com (n3td3v))
Noise (randy at procyonlabs.com (Randal T. Rioux))
Noise (n3td3v at gmail.com (n3td3v))
Noise (n3td3v at gmail.com (n3td3v))
Noise (stan.bubrouski at gmail.com (Stan Bubrouski))
Noise (n3td3v at gmail.com (n3td3v))
Noise (evader.aether at gmail.com (evader))
[ MDKSA-2006:061 ] - Updated mailman packages fix DoS from badly formed mime multipart messages. (security at mandriva.com (security@...driva.com))
Noise (n3td3v at gmail.com (n3td3v))
linux routing table ip-lookup algorithm ?? (da_vanilla_sky at yahoo.com (vanilla sky))
Re: [MPlayer-users] [xfocus-SD-060329]MPlayer: Multiple integer overflows (security at xfocus.org (XFOCUS Security Team))
Critical PHP bug - act ASAP if you are running web with sensitive data (nocfed at gmail.com (nocfed))
Strange interactions between tunnelling and SMB under the proprietary Microsoft Windows environment (schaefer at alphanet.ch (Marc SCHAEFER))
Fwd: how to get johnny to encrypt (his hard drive) (coderman at gmail.com (coderman))
Strange interactions between tunnelling and SMB under the proprietary Microsoft Windows environment (B3r3n at argosnet.com (B3r3n))
Strange interactions between tunnelling and SMB under the proprietary Microsoft Windows environment (llevier at argosnet.com (Laurent LEVIER))
What is the crap before SEH? (ahmadtauqeer at yahoo.com (Tauqeer Ahmad))
Phish Registry (ross.thomson at capgemini.com (Thomson, Ross))
What is the crap before SEH? (fd at ben.iagu.net (fd@....iagu.net))
Strange interactions between tunnelling and SMB under the proprietary Microsoft Windows environment (3APA3A at SECURITY.NNOV.RU (3APA3A))
Hello everyone (coderman at gmail.com (coderman))
Fwd: On sandboxes, and why I ... don't care. (michaelslists at gmail.com (michaelslists@...il.com))
Fwd: On sandboxes, and why I ... don't care. (coderman at gmail.com (coderman))
Third party patches, a matter of trust by n3td3v (ch0pstik at gmail.com (nick johnson))
Third party patches, a matter of trust by n3td3v (coderman at gmail.com (coderman))
linux routing table ip-lookup algorithm ?? (drfrancky at securax.org (Javor Ninov))
McAfee VirusScan DUNZIP32.dll Buffer Overflow Vulnerability (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Re: ExplorerXP : Directory Traversal and Cross SiteScripting (davek_throwaway at hotmail.com (Dave Korn))
Re: ExplorerXP : Directory Traversal and Cross SiteScripting (j.grosjean at proxiad.com (Julien GROSJEAN - Proxiad))
Re: Strange interactions between tunnelling and SMB under the proprietary Microsoft Windows environment (libove-fulldisc at felines.org (Jay Libove))
Re: Strange interactions between tunnelling and SMB under the proprietary Microsoft Windows environment (michael.holstein at csuohio.edu (Michael Holstein))
Noise (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Noise (a059d8e0a9s8d0 at hotmail.com (s89df987 s9f87s987f))
Root password change (Tom.Mockbee at mail.house.gov (Mockbee, Tom))
Root password change (michael.holstein at csuohio.edu (Michael Holstein))
Re: Re: ExplorerXP : Directory Traversal and CrossSiteScripting (davek_throwaway at hotmail.com (Dave Korn))
Re: Root password change (cmadams at hiwaay.net (Chris Adams))
Strange interactions between tunnelling and SMBunder the proprietary Microsoft Windows environment (otter_e at yahoo.com (Otter E))
Court Order May Violate First Amendment (bkfsec at sdf.lonestar.org (bkfsec))
Root password change (michael.holstein at csuohio.edu (Michael Holstein))
Noise (n3td3v at gmail.com (n3td3v))
(no subject) (a059d8e0a9s8d0 at hotmail.com (s89df987 s9f87s987f))
(no subject) (n3td3v at gmail.com (n3td3v))
(no subject) (octetstream at gmail.com (Octal))
(no subject) (stan.bubrouski at gmail.com (Stan Bubrouski))
Root password change (hdw at kallisti.se (Anders B Jansson))
(no subject) (very at unprivate.com (php0t))
(no subject) (hdw at kallisti.se (Anders B Jansson))
Root password change (spam at thegeekzone.com (spam))

March 31 (60 messages)

(no subject) (n3td3v at gmail.com (n3td3v))
(no subject) (wcdixo at aurora.lib.il.us (Dixon, Wayne))
(no subject) (michaelslists at gmail.com (michaelslists@...il.com))
Root password change (kez-fulld at crypt.gen.nz (Kerry Thompson))
Root password change (gem at rellim.com (Gary E. Miller))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (vuln at hexview.com (vuln@...view.com))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (michaelslists at gmail.com (michaelslists@...il.com))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (lcamtuf at dione.ids.pl (Michal Zalewski))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (maguero at s21sec.com (Marcos Agüero))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (jasper at album.co.nz (Jasper Bryant-Greene))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (lcamtuf at dione.ids.pl (Michal Zalewski))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (lcamtuf at dione.ids.pl (Michal Zalewski))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (maguero at s21sec.com (Marcos Agüero))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (jasper at album.co.nz (Jasper Bryant-Greene))
[HV-PAPER] Anti-Phishing Tips You Should NotFollow (massimo at grandmedia.si (...))
Windows Help Heap Overflow (c0ntexb at gmail.com (c0ntex))
(no subject) (Ed at unityitservices.co.uk (Edward Pearson))
Re: [HV-PAPER] Anti-Phishing Tips You Should NotFollow (davek_throwaway at hotmail.com (Dave Korn))
A Move to Remove (Ed at unityitservices.co.uk (Edward Pearson))
A Move to Remove (ragdelaed at gmail.com (ragdelaed))
Re: [HV-PAPER] Anti-Phishing Tips You Should NotFollow (ad at heapoverflow.com (ad@...poverflow.com))
A Move to Remove (netsys at machine.org.uk (Tim Brown))
Root password change (michael.holstein at csuohio.edu (Michael Holstein))
Claroline <= 1.7.4 (scormExport.inc.php) Remote Code Execution Exploit by rgod (admin at zone-h.fr (Siegfried))
Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and b… (joe at innismaggiore.com (Joe Ciechanow…)
[HV-PAPER] Anti-Phishing Tips You Should NotFollow (ross.thomson at capgemini.com (Thomson, Ross))
A Move to Remove (trains at doctorunix.com (trains@...torunix.com))
A Move to Remove (steve_r125 at yahoo.co.uk (Steve Russell))
Re: A Move to Remove (rsw at jfet.org (Riad S. Wahby))
Re: A Move to Remove (bkfsec at sdf.lonestar.org (bkfsec))
Re: A Move to Remove (steve_r125 at yahoo.co.uk (Steve Russell))
Doctoral Thesis (pwnd.security.pwnd at gmail.com (pwnd.security.pwnd))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (vuln at hexview.com (vuln@...view.com))
Root password change (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Root password change (gboyce at badbelly.com (gboyce))
Root password change (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Root password change (gboyce at badbelly.com (gboyce))
RSA HAVE CRACKED PHISHING, NO SERIOUSLY (n3td3v at gmail.com (n3td3v))
RSA HAVE CRACKED PHISHING, NO SERIOUSLY (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Claroline <= 1.7.4 (scormExport.inc.php) Remote Code Execution Exploit by rgod (admin at zone-h.fr (Siegfried))
RSA HAVE CRACKED PHISHING, NO SERIOUSLY (n3td3v at gmail.com (n3td3v))
Buffer-overflow and in-game crash in Zdaemon 1.08.01 (aluigi at autistici.org (Luigi Auriemma))
RSA HAVE CRACKED PHISHING, NO SERIOUSLY (n3td3v at gmail.com (n3td3v))
[HV-PAPER] Anti-Phishing Tips You Should NotFollow (niceman at att.net (Mike Nice))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (n3td3v at gmail.com (n3td3v))
Re: A Move to Remove (stuartd at gmail.com (Stuart Dunkeld))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (n3td3v at gmail.com (n3td3v))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (very at unprivate.com (php0t))
A Move to Remove (n3td3v at gmail.com (n3td3v))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (n3td3v at gmail.com (n3td3v))
Yahoo want to lock up n3td3v (n3td3v at gmail.com (n3td3v))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (duckie37 at gmail.com (ducki3))
A Move to Remove (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
A Move to Remove (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
A Move to Remove (n3td3v at gmail.com (n3td3v))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (steven at lovebug.org (Steven))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (duckie37 at gmail.com (ducki3))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (n3td3v at gmail.com (n3td3v))
Kazaa (rolando_ruiz at jetaviation.com (Ruiz, Rolando))

2171 messages