full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2006/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 41	² 12
³ 26	⁴ 30	⁵ 41	⁶ 12	⁷ 17	⁸ 13	⁹ 3
¹⁰ 5	¹¹ 33	¹² 34	¹³ 33	¹⁴ 66	¹⁵ 19	¹⁶ 17
¹⁷ 44	¹⁸ 43	¹⁹ 36	²⁰ 23	²¹ 32	²² 49	²³ 34
²⁴ 37	²⁵ 32	²⁶ 47	²⁷ 50	²⁸ 22	²⁹ 13	³⁰ 21

Messages by day:

April 1 (41 messages)

Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (n3td3v at gmail.com (n3td3v))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (n3td3v at gmail.com (n3td3v))
Fwd: [HV-PAPER] Anti-Phishing Tips You Should NotFollow (anonymous.squirrel at gmail.com (Anonymous Squirrel))
n3td3v group slams RSA for encouraging illegal anti-phishing tactics (n3td3v at gmail.com (n3td3v))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (duckhacks at gmail.com (John Doe))
The right of All are protected and upheld (randallm at fidmail.com (Randall M))
The right of All are protected and upheld (coderman at gmail.com (coderman))
n3td3v group calls on RSA to clarify their stance (n3td3v at gmail.com (n3td3v))
RSA recommend DDoS attacks on world wide phish logins (n3td3v at gmail.com (n3td3v))
Re: [Owasp-dotnet] RE: 4 Questions: Latest IEvulnerability, Firefox vs IE security, User vs Admin risk profile, and brows… (docbook.xml at gmail.com (Saqib Ali))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (very at unprivate.com (php0t))
n3td3v group calls on RSA to clarify their stance (se_cur_ity at hotmail.com (Morning Wood))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (n3td3v at gmail.com (n3td3v))
n3td3v group calls on RSA to clarify their stance (n3td3v at gmail.com (n3td3v))
n3td3v group calls on RSA to clarify their stance (n3td3v at gmail.com (n3td3v))
Group calls on n3td3v to clarify his stance (xploitabl at gmail.com (n3td3v n3td3v))
RSA HAVE CRACKED PHISHING, NO SERIOUSLY (nekramer at mindtheater.net (Nancy Kramer))
n3td3v group calls on RSA to clarify theirstance (htregz at aoaddicts.net (HTRegz))
[HV-PAPER] Anti-Phishing Tips You ShouldNotFollow (niceman at att.net (Mike Nice))
n3td3v group calls on RSA to clarify their stance (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Linus mass killing integer overflows (guninski at guninski.com (Georgi Guninski))
Mis-diagnosed XSS bugs hiding worse issues due to PHP feature (coley at mitre.org (Steven M. Christey))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
Linus mass killing integer overflows (yoo.fok at gmail.com (f y))
Doctoral Thesis (yoo.fok at gmail.com (f y))
Howto filter n3td3v from your mail client (joffer at gmail.com (Alexander Hristov))
n3td3v group calls on RSA to clarify theirstance (fd at g-0.org (GroundZero Security))
Re: A Move to Remove (steve_r125 at yahoo.co.uk (Steve Russell))
n3td3v group calls on RSA to clarify their stance (scameron at routehero.com (Scott T. Cameron))
Kazaa (ij3n0spam at gmail.com (James_gmail-ij))
Strange interactions between tunnelling and SMB under the proprietary Microsoft Windows environment (thegesus at gmail.com (TheGesus))
n3td3v group calls on RSA to clarify their stance (gautam.bipin at gmail.com (Bipin Gautam))
Linus mass killing integer overflows (eaton.lists at gmail.com (Brian Eaton))
Doctoral Thesis (nc at iknox.com (Native Code))
Re: RSA HAVE CRACKED PHISHING, NO SERIOUSLY (duckhacks at gmail.com (John Doe))
Linus mass killing integer overflows (guninski at guninski.com (Georgi Guninski))
Howto filter n3td3v from your mail client (nexisentertainment at gmail.com (Robert "Nexis" Nelson))
In da beginnin... (phrackstaff at gmail.com (Phrack Staff))
Re: A Move to Remove (prb at lava.net (Peter Besenbruch))
Mis-diagnosed XSS bugs hiding worse issues due to PHP feature (admin at zone-h.fr (Siegfried))
Re: Mis-diagnosed XSS bugs hiding worse issues due to PHP feature (admin at zone-h.fr (Siegfried))

April 2 (12 messages)

Re: [HV-PAPER] Anti-Phishing Tips You Should NotFollow (nick at virus-l.demon.co.uk (Nick FitzGerald))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (nick at virus-l.demon.co.uk (Nick FitzGerald))
[HV-PAPER] Anti-Phishing Tips You Should Not Follow (nick at virus-l.demon.co.uk (Nick FitzGerald))
[HV-PAPER] Anti-Phishing Tips You ShouldNotFollow (anonymous.squirrel at gmail.com (Anonymous Squirrel))
RSA HAVE CRACKED PHISHING, NO SERIOUSLY (nick at virus-l.demon.co.uk (Nick FitzGerald))
Re: Mis-diagnosed XSS bugs hiding worse issues due to PHP feature (ascii at katamail.com (ascii))
Re: Re: Re: Mis-diagnosed XSS bugs hiding worse issues due to PHP feature (admin at zone-h.fr (Siegfried))
[HV-PAPER] Anti-Phishing Tips You ShouldNotFollow (niceman at att.net (Mike Nice))
Re: Re: Re: Mis-diagnosed XSS bugs hiding worse issues due to PHP feature (jasper at album.co.nz (Jasper Bryant-Greene))
Re: Re: Re: Mis-diagnosed XSS bugs hiding worse issues due to PHP feature (admin at zone-h.fr (Siegfried))
Re: Mis-diagnosed XSS bugs hiding worse issues due to PHP feature (max at jestsuper.pl (Maksymilian Arciemowicz))
Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk prof… (crispin at novell.com (Crispin Cowan))

April 3 (26 messages)

Re: Re: [HV-PAPER] Anti-Phishing Tips You ShouldNotFollow (davek_throwaway at hotmail.com (Dave Korn))
Re: [HV-PAPER] Anti-Phishing Tips You Should NotFollow (davek_throwaway at hotmail.com (Dave Korn))
Kazaa (trains at doctorunix.com (trains@...torunix.com))
Welcome to XCon2006! (xcon at xfocus.org (XCon))
merging mail (security at yourdot-mail.com (Carlos Silva))
[SECURITY] [DSA 1000-2] New Apache2::Request packages fix denial of service (joey at infodrom.org (Martin Schulze))
Welcome to XCon2006! (0x80 at hush.ai (0x80@...h.ai))
Welcome to XCon2006! (william at lefkovics.net (William Lefkovics))
[USN-266-1] dia vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Secunia Research: AN HTTPD Script Source Disclosure Vulnerability (remove-vuln at secunia.com (Secunia Research))
Critical PHP bug - act ASAP if you are running web with sensitive data (moriyoshi at at.wakwak.com (Moriyoshi Koizumi))
Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk pro… (pmeunier at cerias.purdue.edu (Pascal M…)
Invisionzone.com board hacked...and Invision won't do a thing... (psmith at metafore.ca (psmith@...afore.ca))
[USN-267-1] mailman vulnerability (martin.pitt at canonical.com (Martin Pitt))
RE: Welcome to XCon2006! (fk0x80 at gmail.com (0x80 fk))
Invisionzone.com board hacked...and Invisionwon't do a thing... (fd at g-0.org (GroundZero Security))
attempts from 82.165.30.80 (listclient at gmail.com (Konstantine))
attempts from 82.165.30.80 (ad at heapoverflow.com (ad@...poverflow.com))
Critical PHP bug - act ASAP if you are runningweb with sen (email-fulldisclosure at hotmail.com (mailinglist mailinglist))
Format string in Doomsday 1.8.6 (aluigi at autistici.org (Luigi Auriemma))
[ MDKSA-2006:062 ] - Updated dia packages fix buffer overflow vulnerabilities (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:063 ] - Updated php packages fix information disclosure vulnerability (security at mandriva.com (security@...driva.com))
(no subject) (hanksnow1959 at yahoo.com (hank snow))
Critical PHP bug - act ASAP if you are running web with sensitive data (jasper at album.co.nz (Jasper Bryant-Greene))
Critical PHP bug - act ASAP if you are running web with sensitive data (jasper at album.co.nz (Jasper Bryant-Greene))
[ MDKSA-2006:064 ] - Updated MySQL packages fix logging bypass vulnerability (security at mandriva.com (security@...driva.com))

April 4 (30 messages)

PIRANA exploitation framework and SMTP content filter security (jean-sebastien at guay-leroux.com (Jean-Sébastien Guay-Leroux))
[SECURITY] [DSA 1022-1] New storebackup packages fix several vulnerabilities (jmm at debian.org (Moritz Muehlenhoff))
Barracuda ZOO archiver security bug leads to remote compromise (jean-sebastien at guay-leroux.com (Jean-Sébastien Guay-Leroux))
Barracuda LHA archiver security bug leads to remote compromise (jean-sebastien at guay-leroux.com (Jean-Sébastien Guay-Leroux))
Welcome to XCon2006! (xundi.z at gmail.com (xundi xfocus))
Welcome to XCon2006! (SDALAN04 at smumn.edu (Dave Alanis))
Welcome to XCon2006! (xundi.z at gmail.com (xundi xfocus))
Microsoft's Canberra security deal (ivanhec at gmail.com (Ivan .))
Even TheRegister Agrees (0x80 at hush.ai (0x80@...h.ai))
Even TheRegister Agrees (gem at rellim.com (Gary E. Miller))
Even TheRegister Agrees (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
Invisionzone.com board hacked...and Invision won't do a thing... (j.grosjean at proxiad.com (Julien GROSJEAN - Proxiad))
Kazaa (j.grosjean at proxiad.com (Julien GROSJEAN - Proxiad))
Re: A Move to Remove (j.grosjean at proxiad.com (Julien GROSJEAN - Proxiad))
RUXCON 2006 Call for Papers (cfp at ruxcon.org.au (cfp@...con.org.au))
A Move to Remove (xyberpix at xyberpix.com (xyberpix))
Kazaa (mikie.simpson at gmail.com (Michael Simpson))
obtai an IP of an MSN Messenger contact (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
[ GLSA 200604-01 ] MediaWiki: Cross-site scripting vulnerability (dercorny at gentoo.org (Stefan Cornelius))
Kazaa (stevenrakick at yahoo.com (Steven Rakick))
obtai an IP of an MSN Messenger contact (xyberpix at xyberpix.com (xyberpix))
Kazaa (ratnakumarch at visualsoft-tech.com (Ratna Kumar))
obtai an IP of an MSN Messenger contact (linux at digipix.org (Evert Daman))
Kazaa (jkalergis at gmail.com (john kalergis))
Critical PHP bug - act ASAP if you are running web with sensitive data (john.r.bond at gmail.com (John Bond))
[SEC-1 LTD] HP Colour LaserJet 2500 and 4600 Toolbox Directory Traversal Vulnerability (richardh at sec-1.com (Richard Horsman))
NOD32 local privilege escalation vulnerability (gautam.bipin at gmail.com (Bipin Gautam))
[ GLSA 200604-02 ] Horde Application Framework: Remote code execution (dercorny at gentoo.org (Stefan Cornelius))
[ GLSA 200604-03 ] FreeRADIUS: Authentication bypass in EAP-MSCHAPv2 module (vorlon at gentoo.org (Matthias Geerdsen))
Buffer-overflow in Ultr@VNC 1.0.1 viewer and server (aluigi at autistici.org (Luigi Auriemma))

April 5 (41 messages)

Security contact info for Google (GMail) (dbounds at gmail.com (Darren Bounds))
Security contact info for Google (GMail) (ccarpenter at dswa.net (Christopher Carpenter))
obtai an IP of an MSN Messenger contact (dj.technocrat.listmail at gmail.com (Technocrat))
ring of script kiddie fire (n3td3v at gmail.com (n3td3v))
[FLSA-2006:152873] Updated xine package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:152896] Updated mod_python package fixes a security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:156139] Updated tcpdump packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:170411] Updated imap packages fix security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:156290] Updated cyrus-imapd packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:183571-1] Updated tar package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:183571-2] Updated tar package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:180159] Updated unzip package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:184074] Updated pine package fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:184098] Updated libc-client packages fixes security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[Updated] [FLSA-2006:186277] Updated sendmail packages fix security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
WebEOC Vuln - more info (silentw at gmail.com (silentw))
[SECURITY] [DSA 1018-2] New Linux kernel 2.4.27 packages fix several vulnerabilities (jmm at debian.org (Moritz Muehlenhoff))
Re: Re: ExplorerXP : Directory Traversal and CrossSiteScripting (j.grosjean at proxiad.com (Julien GROSJEAN - Proxiad))
[SECURITY] [DSA 1023-1] New kaffeine packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Re: Buffer-overflow in Ultr@VNC 1.0.1 viewer and server (jalvare7 at cajastur.es (jalvare7@...astur.es))
RE: obtain an IP of an MSN Messenger contact (nikon at xillioncomputers.com (Nick Eoannidis))
[SPAM] - RE: obtain an IP of an MSN Messenger contact - Email found in subject (richard at tccnet.co.uk (Richard Stevens))
[SPAM] - RE: obtain an IP of an MSN Messengercontact - Email found in subject (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
RE: obtain an IP of an MSN Messenger contact (dbounds at gmail.com (Darren Bounds))
Cisco Security Advisory: Cisco 11500 Content Services Switch HTTP Request Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Response T…)
Re: Buffer-overflow in Ultr@VNC 1.0.1 viewer and server (aluigi at autistici.org (Luigi Auriemma))
Cisco Security Advisory: Cisco Optical Networking System 15000 series and Cisco Transport Controller Vulnerabilities (psirt at cisco.com (Cisco Systems Product…)
[ MDKSA-2006:065 ] - Updated kaffeine packages fix remote buffer overflow vulnerability (security at mandriva.com (security@...driva.com))
obtai an IP of an MSN Messenger contact (n3td3v at gmail.com (n3td3v))
obtai an IP of an MSN Messenger contact (andrew.rse at gmail.com (Andrew Smith))
obtai an IP of an MSN Messenger contact (vidarlo at vestdata.no (Vidar Løkken))
obtai an IP of an MSN Messenger contact (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
obtai an IP of an MSN Messenger contact (n3td3v at gmail.com (n3td3v))
obtai an IP of an MSN Messenger contact (n3td3v at gmail.com (n3td3v))
obtai an IP of an MSN Messenger contact (octetstream at gmail.com (Octal))
obtai an IP of an MSN Messenger contact (n3td3v at gmail.com (n3td3v))
[SECURITY] [DSA 1024-1] New clamav packages fix several vulnerabilities (jmm at debian.org (Moritz Muehlenhoff))
obtai an IP of an MSN Messenger contact (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
obtai an IP of an MSN Messenger contact (n3td3v at gmail.com (n3td3v))
[ GLSA 200604-04 ] Kaffeine: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk prof… (crispin at novell.com (Crispin Cowan))

April 6 (12 messages)

[ MDKSA-2006:066 ] - Updated FreeRADIUS packages fix off-by-one overflow vulnerabilty (security at mandriva.com (security@...driva.com))
[ GLSA 200604-05 ] Doomsday: Format string vulnerability (dercorny at gentoo.org (Stefan Cornelius))
Critical PHP bug - act ASAP if you are running web with sensitive data (moriyoshi at at.wakwak.com (Moriyoshi Koizumi))
[SECURITY] [DSA 1025-1] New dia packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 1026-1] New sash packages fix potential arbitrary code execution (jmm at debian.org (Moritz Muehlenhoff))
[SECURITY] [DSA 1027-1] New mailman packages fix denial of service (joey at infodrom.org (Martin Schulze))
Help! (danny at pset.suntec.net (Danny NG))
chat room? (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
Help! (cary at campbell.com (Cary Barker))
Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk prof… (eaton.lists at gmail.com (Brian Eaton))
Packet Genrator in VC (i.m.crazy.frog at gmail.com (crazy frog crazy frog))
[USN-268-1] Kaffeine vulnerability (martin.pitt at canonical.com (Martin Pitt))

April 7 (17 messages)

Packet Genrator in VC (kjohnson at secureideas.net (Kevin Johnson))
Packet Genrator in VC (gareth.davies at mynetsec.com (Gareth Davies))
infosec and human rights (m.careysmith at student.qut.edu.au (Mark Carey-Smith))
Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk pro… (matt.lidestri at gmail.com (Matt Lidest…)
I give up, no more posts to Full-Disclosure and DailyDave about Full Trust and .Net /Java Sandboxes (dinis at ddplus.net (Dinis Cruz))
Packet Genrator in VC (dbounds at gmail.com (Darren Bounds))
Re: Format string in Doomsday 1.8.6 (adobriyan at gmail.com (Alexey Dobriyan))
I give up, no more posts to Full-Disclosure and DailyDave about Full Trust and .Net /Java Sandboxes (nocfed at gmail.com (nocfed))
Packet Genrator in VC (i.m.crazy.frog at gmail.com (crazy frog crazy frog))
[SECURITY] [DSA 1028-1] New libimager-perl packages fix denial of service (joey at infodrom.org (Martin Schulze))
[ GLSA 200604-06 ] ClamAV: Multiple vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[Apparmor-dev] Re: Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions:Latest IE vulnerability, Firefox vs IE security, User vs… (seth.arnold at suse.de (Seth Arnold))
[Apparmor-dev] Re: Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions:Latest IE vulnerability, Firefox vs IE security, User v… (Ed.Reed at aesec.com (Ed Reed (Aesec)))
Re: [SECURITY] [DSA 1024-1] New clamav packages fix several vulnerabilities (metaur at operamail.com (Ulf Harnhammar))
[Apparmor-dev] Re: Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions:Latest IE vulnerability, Firefox vs IE security, User vs Admin … (tonyj at suse.de (Tony Jones))
[ MDKSA-2006:067 ] - Updated clamav packages fix vulnerabilities (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:068 ] - Updated mplayer packages fix integer overflow vulnerabilities (security at mandriva.com (security@...driva.com))

April 8 (13 messages)

I give up, no more posts to Full-Disclosure and DailyDave about Full Trust and .Net /Java Sandboxes (michaelslists at gmail.com (michaelslists@...il.com))
I give up, no more posts to Full-Disclosure and DailyDave about Full Trust and .Net /Java Sandboxes (nocfed at gmail.com (nocfed))
I give up, no more posts to Full-Disclosure and DailyDave about Full Trust and .Net /Java Sandboxes (michaelslists at gmail.com (Michael Silk))
[SECURITY] [DSA 1029-1] New libphp-adodb packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 1030-1] New moodle packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 1031-1] New cacti packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Removing certificates on MS Windows. (mm.disclosure at nisu.org (Manuel Mollar Villanueva))
[SECURITY] [DSA 946-2] New sudo packages fix privilege escalation (joey at infodrom.org (Martin Schulze))
Removing certificates on MS Windows. (mayhem at recursiva.org (Alessio L.R. Pennasilico))
phpinfo() Cross Site Scripting PHP 5.1.2 and 4.4.2 (max at jestsuper.pl (Maksymilian Arciemowicz))
function *() php/apache Crash PHP 4.4.2 and 5.1.2 (max at jestsuper.pl (Maksymilian Arciemowicz))
tempnam() open_basedir bypass PHP 4.4.2 and 5.1.2 (max at jestsuper.pl (Maksymilian Arciemowicz))
copy() Safe Mode Bypass PHP 4.4.2 and 5.1.2 (max at jestsuper.pl (Maksymilian Arciemowicz))

April 9 (3 messages)

function *() php/apache Crash PHP 4.4.2 and 5.1.2 (nocfed at gmail.com (nocfed))
function *() php/apache Crash PHP 4.4.2 and 5.1.2 (tastytastybeef at googlemail.com (Gary Leons))
List Charter (johnc at grok.org.uk (John Cartwright))

April 10 (5 messages)

remote modem string identification (silentw at gmail.com (silentw))
remote modem string identification (silentw at gmail.com (silentw))
Oracle read-only user can insert/update/delete data via specially crafted views (ak at red-database-security.com (Kornbrust, Alexander))
Microsoft Internet Explorer Content-Disposition HTML File Handling Flaw (dbounds at gmail.com (Darren Bounds))
[MU-200604-01] Cyrus SASL DIGEST-MD5 Pre-Authentication Denial of Service (noreply at musecurity.com (noreply@...ecurity.com))

April 11 (33 messages)

[ MDKSA-2006:069 ] - Updated openvpn packages fix vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:070 ] - Updated openvpn packages fix vulnerability (security at mandriva.com (security@...driva.com))
Dokeos 1.6.4 SQL Injection Vulnerability (aolavarria at secure.cl (Alvaro Olavarria))
[Apparmor-dev] Re: Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions:Latest IE vulnerability, Firefox vs IE security, User vs… (crispin at novell.com (Crispin Cowan))
JetPhoto Multiple Cross-Site Scripting Vulnerabilitie (zeus.olimpusklan at gmail.com (0o_zeus_o0 elitemexico.org))
Realplayer .SWF Multiple Remote Memory Corruption Vulnerabilities (smaillist at gmail.com (Sowhat))
Microsoft Internet Explorer Content-Disposition HTML File Handling Flaw (stevenrakick at yahoo.com (Steven Rakick))
[USN-269-1] xscreensaver vulnerability (martin.pitt at canonical.com (Martin Pitt))
Microsoft Internet Explorer Content-Disposition HTML File Handling Flaw (dbounds at gmail.com (Darren Bounds))
IMF 2006 - Submission Deadline Extension (Goebel at CERT.Uni-Stuttgart.DE (Oliver Goebel))
ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
GMail, Google Groups XSS Vulnerability (dbounds at gmail.com (Darren Bounds))
[ MDKSA-2006:071 ] - Updated xscreensaver packages fix clear-text password vulnerability (security at mandriva.com (security@...driva.com))
Re: Microsoft Internet Explorer Content-Disposition HTML File Handling Flaw (dbounds at gmail.com (Darren Bounds))
info on ip spoofing please (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
info on ip spoofing please (michael.holstein at csuohio.edu (Michael Holstein))
info on ip spoofing please (eaton.lists at gmail.com (Brian Eaton))
info on ip spoofing please (bmenrigh at ucsd.edu (Brandon Enright))
info on ip spoofing please (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
info on ip spoofing please (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
info on ip spoofing please (eaton.lists at gmail.com (Brian Eaton))
info on ip spoofing please (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
info on ip spoofing please (bmenrigh at ucsd.edu (Brandon Enright))
info on ip spoofing please (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
info on ip spoofing please (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
Shell accounts (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
Shell accounts (aettinger at sdsualumni.org (Anthony Ettinger))
Shell accounts (very at unprivate.com (Bacso Ferenc))
Shell accounts (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Shell accounts (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
Shell accounts (very at unprivate.com (php0t))
[Apparmor-dev] Re: Re: [SC-L] Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User v… (jjohansen at suse.de (John Johansen))
Shell accounts (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))

April 12 (34 messages)

Shell accounts (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
Shell accounts (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Shell accounts (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
Shell accounts (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Shell accounts (j.schipper at math.uu.nl (Joachim Schipper))
Autogallery Multiple Cross-Site Scripting Vulnerabilitie (zeus.olimpusklan at gmail.com (0o_zeus_o0 elitemexico.org))
Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability (smaillist at gmail.com (Sowhat))
adding a CA into internet explorer from command line (cocainna at gmail.com (Alehandro Dias))
RE: Oracle read-only user can insert/update/delete data (Andre.VanWinssen at shell.com (Van Winssen, Andre A SITI-ITIBHW5))
RE: Oracle read-only user can insert/update/delete data (fdlist at digitaloffense.net (H D Moore))
Recall: Oracle read-only user can insert/update/delete data (Andre.VanWinssen at shell.com (Van Winssen, Andre A SITI-ITIBHW5))
RE: Oracle read-only user can insert/update/delete data (Andre.VanWinssen at shell.com (Van Winssen, Andre A SITI-ITIBHW5))
Recall: Oracle read-only user can insert/update/delete data (houdini+full-disclosure at clanspum.net (Bill Weiss))
RE: Oracle read-only user can insert/update/delete data (kf_lists at digitalmunition.com (KF (lists)))
[SECURITY] [DSA 1032-1] New zope-cmfplone packages fix unprivileged data manipulation (jmm at debian.org (Moritz Muehlenhoff))
[SRC-Telindus advisory] - HP System Management Homepage Remote Unauthorized Access (research at src.telindus.com (SRC Telindus))
ebay javascript injection (toppsoft at yahoo.com (toppsoft))
ebay javascript injection (toppsoft at yahoo.com (toppsoft))
Shell accounts (skodliv at gmail.com (poo))
Shell accounts (piercede at pdx.edu (Dean Pierce))
RE: info on ip spoofing please (rg.viza at gmail.com (Neil Davis))
Re: Shell accounts (bruno at wolff.to (Bruno Wolff III))
RE: info on ip spoofing please (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
RE: info on ip spoofing please (arley.leal at sonae.com (Arley Barros Leal))
[SECURITY] [DSA 1033-1] New horde3 packages fix several vulnerabilities (jmm at debian.org (Moritz Muehlenhoff))
rainbowtables.schmoo.com dead? (iago at valhallalegends.com (Ron))
rainbowtables.schmoo.com dead? (gridmark at gmail.com (Gridmark))
rainbowtables.schmoo.com dead? (ad at heapoverflow.com (ad@...poverflow.com))
Shell accounts (dufresne at winternet.com (Ron DuFresne))
Recall: Oracle read-only user caninsert/update/delete data (tkrpata at bjs.com (Krpata, Tyler))
rainbowtables.schmoo.com dead? (gdead at shmoo.com (B Potter))
Re: Shell accounts (wh1t3h4t3 at yahoo.co.uk (Micheal Turner))
RE: info on ip spoofing please (ian.t7 at hotmail.co.uk (Ian stuart Turnbull))
Shell accounts (skodliv at gmail.com (poo))

April 13 (33 messages)

rainbowtables.schmoo.com dead? (iago at valhallalegends.com (Ron))
Recall: Oracle read-only user can insert/update/delete data (kyphros at gmail.com (Mike Owen))
Recon 2006: speaker lineup announcement (hfortier at recon.cx (Recon))
[USN-270-1] xpdf vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow (research at sec-consult.com (Bernhard Mueller))
Recall: Oracle read-only user can insert/update/delete data (michael.holstein at csuohio.edu (Michael Holstein))
Re: Shell accounts (skodliv at gmail.com (poo))
Secunia Research: Adobe Document Server for Reader Extensions Multiple Vulnerabilities (vuln-remove at secunia.com (Secunia Research))
BO in http://rad.msn.com/ADSAdClient31.dll (mhasp at home.nl (hasperhoven))
Re: GMail, Google Groups XSS Vulnerability (dbounds at gmail.com (Darren Bounds))
Vulnerability in Microsoft FrontPage Server Extensions Could Allow Cross-Site Scripting (secemf at yahoo.com.ar (Esteban Martinez Fayo))
Recall: Oracle read-only user can insert/up date/delete data (jim.richards at dot.state.wi.us (Richards, Jim))
Gary McKinnon (n3td3v at gmail.com (n3td3v))
Re: Shell accounts (rg.viza at gmail.com (Neil Davis))
Re: Gary McKinnon (n3td3v at gmail.com (n3td3v))
ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
Gary McKinnon (Ed at unityitservices.co.uk (Edward Pearson))
SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow (Thierry at Zoller.lu (Thierry Zoller))
Gary McKinnon (n3td3v at gmail.com (n3td3v))
Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (davek_throwaway at hotmail.com (Dave Korn))
Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (allbery at ece.cmu.edu (Brandon S. Allbery KF8NH))
PAJAX Remote Code Injection and File Inclusion Vulnerability (release at redteam-pentesting.de (RedTeam Pentesting))
Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (jcreegan at questarweb.com (John Creegan))
Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (stan.bubrouski at gmail.com (Stan Bubrouski))
Re: Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (davek_throwaway at hotmail.com (Dave Korn))
Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (A.L.M.Buxey at lboro.ac.uk (A.L.M.Buxey@...ro.ac.uk))
Gary McKinnon (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Shell accounts (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (duckhacks at gmail.com (John Doe))
Gary McKinnon (SDALAN04 at smumn.edu (Dave Alanis))
Re: Shell accounts (rg.viza at gmail.com (Neil Davis))
(no subject) (gera_miya at hotmail.com (serhat geramiya))
Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (user05 at kyberwelt.de (dumdidumdideldey))

April 14 (66 messages)

Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (j.schipper at math.uu.nl (Joachim Schipper))
Recall: Oracle read-only usercan insert/update/delete data (william at lefkovics.net (William Lefkovics))
Recall: Oracle read-only user can insert/update/delete data (eaton.lists at gmail.com (Brian Eaton))
Recall: Oracle read-only user caninsert/update/delete data (william at lefkovics.net (William Lefkovics))
Recall: Oracle read-only user can insert/update/delete data (michealespinola at gmail.com (Micheal Espinola Jr))
Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (measl at mfn.org (J.A. Terranson))
Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (nick at virus-l.demon.co.uk (Nick FitzGerald))
Camino Browser HTML Parsing Null Pointer Dereference Denial of Service Vulnerability (easy.mask at gmail.com (izi))
[SECURITY] [DSA 1034-1] New horde2 packages fix several vulnerabilities (jmm at debian.org (Moritz Muehlenhoff))
Antw: [SECURITY] [DSA 1034-1] New horde2 packages fixseveral vulnerabilities (Rocco.Maiullari at phonehouse.de (Rocco Maiullari))
[SECURITY] [DSA 1034-1] New horde2 packages fixseveral vulnerabilities (massimo at grandmedia.si (...))
[SECURITY] [DSA 1034-1] New horde2 packages fixseveral vulnerabilities (nodialtone at comcast.net (Byron Copeland))
Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (imipak at gmail.com (imipak))
Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (vidarlo at vestdata.no (Vidar Løkken))
info about recent Ms issue (snowmo at online.ie (snowmo@...ine.ie))
info about recent Ms issue (ad at heapoverflow.com (ad@...poverflow.com))
info about recent Ms issue (kf_lists at digitalmunition.com (KF (lists)))
Gary McKinnon (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Gary McKinnon (kbcboy at gmail.com (joe haldon))
Gary McKinnon (bkfsec at sdf.lonestar.org (bkfsec))
Gary McKinnon (SDALAN04 at smumn.edu (Dave Alanis))
Gary McKinnon (pauls at utdallas.edu (Paul Schmehl))
Gary McKinnon (wcdixo at aurora.lib.il.us (Dixon, Wayne))
Gary McKinnon (exibar at thelair.com (Exibar))
Gary McKinnon (wcdixo at aurora.lib.il.us (Dixon, Wayne))
Gary McKinnon (n3td3v at gmail.com (n3td3v))
Gary McKinnon (very at unprivate.com (php0t))
Gary McKinnon (wcdixo at aurora.lib.il.us (Dixon, Wayne))
Gary McKinnon (pauls at utdallas.edu (Paul Schmehl))
Gary McKinnon (public.mailcatcher at gmail.com (Nobody Particular))
Gary McKinnon (exibar at thelair.com (Exibar))
Gary McKinnon (n3td3v at gmail.com (n3td3v))
Gary McKinnon (wcdixo at aurora.lib.il.us (Dixon, Wayne))
Gary McKinnon (n3td3v at gmail.com (n3td3v))
Gary McKinnon (pauls at utdallas.edu (Paul Schmehl))
Gary McKinnon (pauls at utdallas.edu (Paul Schmehl))
Gary McKinnon (public.mailcatcher at gmail.com (Nobody Particular))
Gary McKinnon (n3td3v at gmail.com (n3td3v))
Gary McKinnon (n3td3v at gmail.com (n3td3v))
Gary McKinnon (gem at rellim.com (Gary E. Miller))
Gary McKinnon (red at criticalintegration.com (Redvers Davies))
Gary McKinnon (bkfsec at sdf.lonestar.org (bkfsec))
Gary McKinnon (pauls at utdallas.edu (Paul Schmehl))
MySpace or Montspace? (mrhitler at gmail.com (Bling Dude))
Gary McKinnon (bkfsec at sdf.lonestar.org (bkfsec))
Gary McKinnon (mrbabs at gmail.com (MR BABS))
Gary McKinnon (kurt.buff at gmail.com (Kurt Buff))
Gary McKinnon (Chris at thebillguy.com (Chris Locke))
Gary McKinnon (pauls at utdallas.edu (Paul Schmehl))
[ GLSA 200604-07 ] Cacti: Multiple vulnerabilities in included ADOdb (koon at gentoo.org (Thierry Carrez))
Gary McKinnon (measl at mfn.org (J.A. Terranson))
Gary McKinnon (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Gary McKinnon (measl at mfn.org (J.A. Terranson))
Gary McKinnon (pauls at utdallas.edu (Paul Schmehl))
Gary McKinnon (red at criticalintegration.com (Redvers Davies))
Gary McKinnon (red at criticalintegration.com (Redvers Davies))
Gary McKinnon (red at criticalintegration.com (Redvers Davies))
Gary McKinnon (red at criticalintegration.com (Redvers Davies))
MySpace or Montspace? (michael.holstein at csuohio.edu (Michael Holstein))
Gary McKinnon (nick at virus-l.demon.co.uk (Nick FitzGerald))
MySpace or Montspace? (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
MySpace or Montspace? (mailinglists at vanscherpenseel.nl (Vincent van Scherpenseel))
MySpace or Montspace? (fixer at gci.net (Fixer))
OSVDB Launches Vulnerability Comment Feature (jkouns at opensecurityfoundation.org (jkouns))
Re: Gary McKinnon (imipak at gmail.com (imipak))
Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (jurjen at stupendous.org (Jurjen Oskam))

April 15 (19 messages)

MySpace or Montspace? (api at worldonline.de (Axel Pettinger))
MySpace or Montspace? (kevin at tux.appstate.edu (kevin@....appstate.edu))
ZDI-06-010: Mozilla Firefox CSS Letter-Spacing Heap Overflow Vulnerability (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
Hopefully (y0himba at technolounge.org (y0himba))
MySpace or Montspace? (fixer at gci.net (Fixer))
LOOKING VPN TRAFIIC MONITRING SOFTWARE (lifesaver68 at hotmail.com (adnan habib))
LOOKING VPN TRAFIIC MONITRING SOFTWARE (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
FW: Closed Support Request Ticket No:109175 (y0himba at technolounge.org (y0himba))
LOOKING VPN TRAFIIC MONITRING SOFTWARE (lifesaver68 at hotmail.com (adnan habib))
MySpace or Montspace? (api at worldonline.de (Axel Pettinger))
info about recent Ms issue (c0ntexb at gmail.com (c0ntex))
Manila.userland.com XSS'able (aaron at lo-res.org (aaron))
[SECURITY] [DSA 1035-1] New fcheck packages fix insecure temporary file creation (jmm at debian.org (Moritz Muehlenhoff))
[funsec] fuzzing mailing list (ge at linuxbox.org (Gadi Evron))
[funsec] fuzzing mailing list (nocfed at gmail.com (nocfed))
info about recent Ms issue (redsand at redsand.net (redsand))
Re: Shell accounts (bruno at wolff.to (Bruno Wolff III))
re: Dude! Amigo! [Was: Re: [funsec] University of South Carolina e-Mail Co (SDALAN04 at smumn.edu (Dave Alanis))
[inbox] Re: [funsec] fuzzing mailing list (exibar at thelair.com (Exibar))

April 16 (17 messages)

[funsec] fuzzing mailing list (n3td3v at gmail.com (n3td3v))
[inbox] Re: [funsec] fuzzing mailing list (nocfed at gmail.com (nocfed))
[inbox] Re: [funsec] fuzzing mailing list (n3td3v at gmail.com (n3td3v))
[inbox] Re: [funsec] fuzzing mailing list (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
re: Dude! Amigo! [Was: Re: [funsec] University of South Carolina e-Mail Co (dudevanwinkle at gmail.com (Dude VanWinkle))
[inbox] Re: [funsec] fuzzing mailing list (ad at heapoverflow.com (ad@...poverflow.com))
[inbox] Re: [funsec] fuzzing mailing list (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[inbox] Re: [funsec] fuzzing mailing list (tastytastybeef at googlemail.com (Gary Leons))
Achtung weisseshute! (mrhitler at gmail.com (Bling Dude))
Gary McKinnon (devdas at dvb.homelinux.org (Devdas Bhagat))
[inbox] Re: [funsec] fuzzing mailing list (n3td3v at gmail.com (n3td3v))
LOOKING VPN TRAFIIC MONITRING SOFTWARE (devdas at dvb.homelinux.org (Devdas Bhagat))
[inbox] Re: [funsec] fuzzing mailing list (dudevanwinkle at gmail.com (Dude VanWinkle))
[inbox] Re: [funsec] fuzzing mailing list (n3td3v at gmail.com (n3td3v))
Achtung weisseshute! (n3td3v at gmail.com (n3td3v))
[inbox] Re: [funsec] fuzzing mailing list (exibar at thelair.com (Exibar))
BetaBoard Cross Site Scripting vulnerability (easy.mask at gmail.com (izi))

April 17 (44 messages)

[funsec] fuzzing mailing list (devdas at dvb.homelinux.org (Devdas Bhagat))
[inbox] Re: [funsec] fuzzing mailing list (measl at mfn.org (J.A. Terranson))
Attn Xfocus (0x80 at hush.ai (0x80@...h.ai))
Attn Xfocus (n3td3v at gmail.com (n3td3v))
Hopefully (skodliv at gmail.com (poo))
Achtung weisseshute! (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Reminder: HITBSecConf2006 CFP is closing in 2 weeks (prabu at hackinthebox.org (Praburaajan))
MySpace or Montspace? (fixer at gci.net (Fixer))
[inbox] Re: [funsec] fuzzing mailing list (dudevanwinkle at gmail.com (Dude VanWinkle))
[inbox] Re: [funsec] fuzzing mailing list (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Attn Xfocus (0x80 at hush.ai (0x80@...h.ai))
Attn Xfocus (alert7 at xfocus.org (alert7@...cus.org))
Attn Xfocus (baoz at szzfcg.cn (baoz))
Attn Xfocus (abryson at bytefocus.com (Alice Bryson))
[SECURITY] [DSA 1036-1] New bsdgames packages fix local privilege escalation (jmm at debian.org (Moritz Muehlenhoff))
[inbox] Re: [funsec] fuzzing mailing list (yoo.fok at gmail.com (f y))
Montspace...Google is way ahead of you all.... (bart.lansing at hushmail.com (bart.lansing@...hmail.com))
MySpace or Montspace? (michael.holstein at csuohio.edu (Michael Holstein))
MySpace or Montspace? (y0himba at technolounge.org (y0himba))
MySpace or Montspace? (michael.holstein at csuohio.edu (Michael Holstein))
[inbox] Re: [funsec] fuzzing mailing list (n3td3v at gmail.com (n3td3v))
[Fwd: Re: montspace -- child porn (site still up)] (michael.holstein at csuohio.edu (Michael Holstein))
MySpace or Montspace? (tkrpata at bjs.com (Krpata, Tyler))
Achtung weisseshute! (yoo.fok at gmail.com (f y))
Gary McKinnon (bkfsec at sdf.lonestar.org (bkfsec))
[funsec] fuzzing mailing list (n3td3v at gmail.com (n3td3v))
re: Dude! Amigo! [Was: Re: [funsec] University of South Carolina e-Mail Co (rg.viza at gmail.com (Neil Davis))
Attn Xfocus (rg.viza at gmail.com (Neil Davis))
re: Dude! Amigo! [Was: Re: [funsec] Universityof South Carolina e-Mail Co (stevenrakick at yahoo.com (Steven Rakick))
ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
[Fwd: Re: montspace -- child porn (site still up)] (gem at rellim.com (Gary E. Miller))
[ GLSA 200604-08 ] libapreq2: Denial of Service vulnerability (koon at gentoo.org (Thierry Carrez))
[Fwd: Re: montspace -- child porn (site still up)] (n3td3v at gmail.com (n3td3v))
[Fwd: Re: montspace -- child porn (site still up)] (michael.holstein at csuohio.edu (Michael Holstein))
Help me with Yahoo cookie exploit (iustin3lu at yahoo.com (iustin Darloman))
[Fwd: Re: montspace -- child porn (site still up)] (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[Fwd: Re: montspace -- child porn (site still up)] (michael.holstein at csuohio.edu (Michael Holstein))
re: Dude! Amigo! [Was: Re: [funsec] Universityof South Carolina e-Mail Co (rg.viza at gmail.com (Neil Davis))
[Argeniss] Alert - Yahoo! Webmail XSS (cesarc56 at yahoo.com (Cesar))
Help me with Yahoo cookie exploit (angray at beeb.net (Aaron Gray))
Alas poor Dunfey, I knew it well (daniels at Ponderosatel.com (Daniel Sichel))
[Argeniss] Alert - Yahoo! Webmail XSS (se_cur_ity at hotmail.com (Morning Wood))
[Argeniss] Alert - Yahoo! Webmail XSS (lolirt at gmail.com (Response Team))
[ MDKSA-2006:072 ] - Updated kernel packages fix multiple vulnerabilities (security at mandriva.com (security@...driva.com))

April 18 (43 messages)

Question: Need Suggestions (y0himba at technolounge.org (y0himba))
Question: Need Suggestions (eaton.lists at gmail.com (Brian Eaton))
Question: Need Suggestions (SDALAN04 at smumn.edu (Dave Alanis))
Question: Need Suggestions (sorry) (SDALAN04 at smumn.edu (Dave Alanis))
Question: Need Suggestions (sorry) (y0himba at technolounge.org (y0himba))
Question: Need Suggestions (stevenrakick at yahoo.com (Steven Rakick))
Question: Need Suggestions (nick at virus-l.demon.co.uk (Nick FitzGerald))
kiddie porn warning [was: Fwd: Re: montspace -- child porn (site still up)] (ge at linuxbox.org (Gadi Evron))
[Argeniss] Alert - Yahoo! Webmail XSS (se_cur_ity at hotmail.com (Morning Wood))
Attn Xfocus (0x80 at hush.ai (0x80@...h.ai))
Attn Xfocus (0x80 at hush.ai (0x80@...h.ai))
kiddie porn warning [was: Fwd: Re: montspace -- child porn (site still up)] (0x80 at hush.ai (0x80@...h.ai))
kiddie porn warning [was: Fwd: Re: montspace -- child porn (site still up)] (gluttony at gmail.com (Andrew A))
Attn Xfocus (alert7 at xfocus.org (alert7@...cus.org))
Remote Xine Format String Vulnerability (c0ntexb at gmail.com (c0ntex))
Neon Responder (Dos,Exploit) (steve01 at chello.at (Stefan Lochbihler))
Re: [Argeniss] Alert - Yahoo! Webmail XSS (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
Re: kiddie porn warning [was: Fwd: Re: montspace -- child porn (site still up)] (michael.holstein at csuohio.edu (Michael Holstein))
Re: kiddie porn warning [was: Fwd: Re: montspace -- child porn (site still up)] (lists at blocked.org (Eddie))
Fortinet28 box does not resist has small synflood! (testx444 at hushmail.com (testx444@...hmail.com))
Re: kiddie porn warning [was: Fwd: Re: montspace -- child porn (site still up)] (lists at blocked.org (Eddie))
Fortinet28 box does not resist has small synflood! (Thierry at Zoller.lu (Thierry Zoller))
[Argeniss] Alert - Yahoo! Webmail XSS (cesarc56 at yahoo.com (Cesar))
[Argeniss] Alert - Yahoo! Webmail XSS (Thierry at Zoller.lu (Thierry Zoller))
Re: kiddie porn warning [was: Fwd: Re: montspace -- child porn (site still up)] (michael.holstein at csuohio.edu (Michael Holstein))
Re: kiddie porn warning [was: Fwd: Re: montspace -- child porn (site still up)] (ge at linuxbox.org (Gadi Evron))
[Argeniss] Alert - Yahoo! Webmail XSS (cesarc56 at yahoo.com (Cesar))
[Argeniss] Alert - Yahoo! Webmail XSS (se_cur_ity at hotmail.com (Morning Wood))
RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities (fd at g-0.org (GroundZero Security))
Can everyone stop posting fake Yahoo XSS vulns? (n3td3v at gmail.com (n3td3v))
Attn Xfocus (0x80 at hush.ai (0x80@...h.ai))
kiddie porn warning [was: Fwd: Re: montspace -- child porn (site still up)] (0x80 at hush.ai (0x80@...h.ai))
Achtung weisseshute! (n3td3v at gmail.com (n3td3v))
Multiple critical and high risk issues in Oracle's database server (davidl at ngssoftware.com (David Litchfield))
Achtung weisseshute! (0x80 at hush.ai (0x80@...h.ai))
Google Groups e-mail disclosure in plain text (n3td3v at gmail.com (n3td3v))
Google Groups e-mail disclosure in plain text (vidarlo at vestdata.no (Vidar Løkken))
Google Groups e-mail disclosure in plain text (n3td3v at gmail.com (n3td3v))
Google Groups e-mail disclosure in plain text (neutarii at gmail.com (Neutari))
Confixx Index.PHP SQL Injection Vulnerability (Exploit - not new vuln) (defa at systemli.org (defa))
Confixx Index.PHP SQL ... UPDATE (defa at systemli.org (defa))
SQL Injection in package SYS.DBMS_LOGMNR_SESSION (ak at red-database-security.com (Kornbrust, Alexander))
[Argeniss] Alert - Yahoo! Webmail XSS (rg.viza at gmail.com (Neil Davis))

April 19 (36 messages)

Google Groups e-mail disclosure in plain text (angray at beeb.net (Aaron Gray))
Fortinet28 box does not resist has small synflood! (abryson at bytefocus.com (Alice Bryson))
Google Groups e-mail disclosure in plain text (angray at beeb.net (Aaron Gray))
[Fwd: Re: montspace -- child porn (site still up)] (chromazine at sbcglobal.net (Steve Kudlak))
GMail, Google Groups XSS Vulnerability (stevenrakick at yahoo.com (Steven Rakick))
Google Groups e-mail disclosure in plain text (0x80 at hush.ai (0x80@...h.ai))
re: Dude! Amigo! [Was: Re: [funsec]Universityof South Carolina e-Mail Co (pwicks at oxygen.com (J. Patterson Wicks))
Google Groups e-mail disclosure in plain text (angray at beeb.net (Aaron Gray))
Google Groups e-mail disclosure in plain text (pvnick at gmail.com (Paul Nickerson))
re: Dude! Amigo! [Was: Re: [funsec] (SDALAN04 at smumn.edu (Dave Alanis))
Google Groups e-mail disclosure in plain text (n3td3v at gmail.com (n3td3v))
Google Groups e-mail disclosure in plain text (randy at procyonlabs.com (Randal T. Rioux))
Google Groups e-mail disclosure in plain text (0x80 at hush.ai (0x80@...h.ai))
Google Groups e-mail disclosure in plain text (n3td3v at gmail.com (n3td3v))
Google Groups e-mail disclosure in plain text (0x80 at hush.ai (0x80@...h.ai))
Google Groups e-mail disclosure in plain text (rodrigob at suespammers.org (Rodrigo Barbosa))
Felix billing client (raoul at elforsoft.com (Raoul Nakhmanson-Kulish (en)))
Google Groups e-mail disclosure in plain text (fd at g-0.org (GroundZero Security))
Google Groups e-mail disclosure in plain text (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
ocrshopxtr_freebie.pl (venom at gen-x.co.nz (VeNoMouS))
Google Groups e-mail disclosure in plain text (mattmurphy at kc.rr.com (Matthew Murphy))
Google Groups e-mail disclosure in plain text (randy at procyonlabs.com (Randal T. Rioux))
Google Groups e-mail disclosure in plain text (admin at zone-h.fr (Siegfried))
Google Groups e-mail disclosure in plain text (ron.whitney at doitbest.com (Ron Whitney))
RE: re: Dude! Amigo! [Was: Re: [funsec] (pwicks at oxygen.com (J. Patterson Wicks))
Cisco Security Advisory: Cisco IOS XR MPLS Vulnerabilities (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
Cisco Security Advisory: Multiple Vulnerabilities in the WLSE Appliance (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
[USN-271-1] Firefox vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Confixx Index.PHP SQL Injection Vulnerability (Exploit - not new vuln) (defa at systemli.org (defa))
Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (marioc at computer.org (Mario Contestabile))
ASPSitem <= 1.83 Remote SQL Injection Vulnerability (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Question: Need Suggestions (sektek at gmail.com (Sektek Sektek))
Google Groups e-mail disclosure in plain text (n3td3v at gmail.com (n3td3v))
selling ms office bug (ad at heapoverflow.com (ad@...poverflow.com))
selling ms office bug (ad at heapoverflow.com (ad@...poverflow.com))
selling ms office bug (n3td3v at gmail.com (n3td3v))

April 20 (23 messages)

[Argeniss] Oracle Database 10gR1 Buffer overflow in VERIFY_LOG procedure (cesarc56 at yahoo.com (Cesar))
[123Privacy] Findnot.com IP Address Privacy Breach and Unencrypted Data Vulnerability (123privacy_advisory at mailvault.com (123 Privacy Advisories))
[123Privacy] Findnot.com DNS Privacy Breach, DNS Spoofing Exposure, and ISP Monitoring Vulnerability (123privacy_advisory at mailvault.com (123 Privacy Advisor…)
Re: kiddie porn warning [was: Fwd: Re: montspace -- child porn (site still up)] (chromazine at sbcglobal.net (Steve Kudlak))
RE: Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (nick at virus-l.demon.co.uk (Nick FitzGerald))
SUSE Security Announcement: Mozilla Firefox, Mozilla Suite various problems (SUSE-SA:2006:021) (meissner at suse.de (Marcus Meissner))
selling ms office bug (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Gary McKinnon (dankney at sunsetfilms.com (Don Ankney))
selling ms office bug (robert.waters.nospam at gmail.com (Robert Waters))
selling ms office bug (very at unprivate.com (php0t))
Sql Injection in BookMark4u (mohajali2k4 at gmail.com (M.o.H.a.J.a.L.i))
Secunia illegal spam and advisory republication (n3td3v at gmail.com (n3td3v))
Secunia illegal spam and advisory republication (fractalg at highspeedweb.net (fractalg@...hspeedweb.net))
Secunia illegal spam and advisory republication (se_cur_ity at hotmail.com (Morning Wood))
Secunia illegal spam and advisory republication (n3td3v at gmail.com (n3td3v))
Secunia illegal spam and advisory republication (se_cur_ity at hotmail.com (Morning Wood))
kiddie porn warning [was: Fwd: Re: montspace -- child porn (site still up)] (stevex11 at sbcglobal.net (Steve Kudlak))
Secunia illegal spam and advisory republication (gboyce at badbelly.com (gboyce))
Cisco PIX TCP COnnection (jsl at cryptic.com (Julie S. Lin))
Secunia illegal spam and advisory republication (A.L.M.Buxey at lboro.ac.uk (A.L.M.Buxey@...ro.ac.uk))
Secunia illegal spam and advisory republication (kyphros at gmail.com (Mike Owen))
Secunia illegal spam and advisory republication (n3td3v at gmail.com (n3td3v))
Secunia illegal spam and advisory republication (eaton.lists at gmail.com (Brian Eaton))

April 21 (32 messages)

Secunia illegal spam and advisory republication (se_cur_ity at hotmail.com (Morning Wood))
Secunia illegal spam and advisory republication (gluttony at gmail.com (Andrew A))
Secunia illegal spam and advisory republication (cegenec at gmail.com (c.e. gene c.))
Secunia illegal spam and advisory republication (se_cur_ity at hotmail.com (Morning Wood))
Secunia illegal spam and advisory republication (y0himba at technolounge.org (y0himba))
Secunia illegal spam and advisory republication (cegenec at gmail.com (c.e. gene c.))
[SecuriWeb 2006.1] directory traversal in Asterisk@...e and ARI (fharvey at securiweb.net (François Harvey))
[ GLSA 200604-09 ] Cyrus-SASL: DIGEST-MD5 Pre-Authentication Denial of Service (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200604-10 ] zgv, xzgv: Heap overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Google Groups e-mail disclosure in plain text (0x80 at hush.ai (0x80@...h.ai))
selling ms office bug (0x80 at hush.ai (0x80@...h.ai))
selling ms office bug (0x80 at hush.ai (0x80@...h.ai))
Secunia illegal spam and advisory republication (0x80 at hush.ai (0x80@...h.ai))
selling ms office bug (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
selling ms office bug (0x80 at hush.ai (0x80@...h.ai))
Google Groups e-mail disclosure in plain text (admin at zone-h.fr (Siegfried))
selling ms office bug (ad at heapoverflow.com (ad@...poverflow.com))
kiddie porn warning [was: Fwd: Re: montspace -- child porn (site still up)] (ge at linuxbox.org (Gadi Evron))
Secunia illegal spam and advisory republication (johnc at grok.org.uk (John Cartwright))
Secunia illegal spam and advisory republication (sean01 at accnet.com.au (Sean Crawford))
Secunia illegal spam and advisory republication (bart.lansing at hushmail.com (bart.lansing@...hmail.com))
[SECURITY] [DSA 1037-1] New zgv packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
vote nay to mod n3td3v [was: Re: Secunia illegal spam and advisory republication] (ge at linuxbox.org (Gadi Evron))
Google Groups e-mail disclosure in plain text (0x80 at hush.ai (0x80@...h.ai))
selling ms office bug (0x80 at hush.ai (0x80@...h.ai))
Secunia illegal spam and advisory republication (n3td3v at gmail.com (n3td3v))
Google Groups e-mail disclosure in plain text (n3td3v at gmail.com (n3td3v))
Secunia illegal spam and advisory republication (hdw at kallisti.se (Anders B Jansson))
dForum <= 1.5 Multiple Remote File Inclusion Vulnerabilities. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
vBulletin <= 3.5.4 with MKPortal 1.1 Remote SQL Injection Vulnerability. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Advisory: Simplog <= 0.93 Multiple Remote Vulnerabilities. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Advisory: CoreNews <= 2.0.1 Multiple Remote Vulnerabilities. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))

April 22 (49 messages)

Secunia illegal spam and advisory republication (n3td3v at gmail.com (n3td3v))
hiya (robert.lemos at yahoo.com (Robert Lemos))
hiya (0x80 at hush.ai (0x80@...h.ai))
[SECURITY] [DSA 1038-1] New xzgv packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Secunia illegal spam and advisory republication (A.L.M.Buxey at lboro.ac.uk (A.L.M.Buxey@...ro.ac.uk))
Secunia illegal spam and advisory republication (A.L.M.Buxey at lboro.ac.uk (A.L.M.Buxey@...ro.ac.uk))
Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Who Do I Contact? (abryson at bytefocus.com (Alice Bryson))
Who Do I Contact? (michaelslists at gmail.com (Michael Silk))
Who Do I Contact? (sol at haveyoubeentested.org (Sol Invictus))
Who Do I Contact? (don.bailey at gmail.com (Don Bailey))
Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Re: Google Groups e-mail disclosure in plain text (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
Re: Secunia illegal spam and advisory republication (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
Who Do I Contact? (eaton.lists at gmail.com (Brian Eaton))
Who Do I Contact? (dodpears at indiana.edu (Doug Pearson))
Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
[EDU-ops] Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
[inbox] Re: Secunia illegal spam and advisory republication (exibar at thelair.com (Exibar))
Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
[inbox] Re: [EDU-ops] Who Do I Contact? (exibar at thelair.com (Exibar))
[EDU-ops] Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
[inbox] Re: [EDU-ops] Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Notifying an institution about a vulnerability (bamford at oz.net (Cliff Bamford))
Who Do I Contact? (eaton.lists at gmail.com (Brian Eaton))
[EDU-ops] Who Do I Contact? (ge at linuxbox.org (Gadi Evron))
Who Do I Contact? (ge at linuxbox.org (Gadi Evron))
Who Do I Contact? (ge at linuxbox.org (Gadi Evron))
Who Do I Contact? (ge at linuxbox.org (Gadi Evron))
Notifying an institution about a vulnerability (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
[ GLSA 200604-11 ] Crossfire server: Denial of Service and potential arbitrary code execution (koon at gentoo.org (Thierry Carrez))
Proxy Detection (jdterry84 at gmail.com (Justin Terry))
Who Do I Contact? (drfrancky at securax.org (Javor Ninov))
Who Do I Contact? (sol at haveyoubeentested.org (Sol Invictus))
Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Re: Who Do I Contact? (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
Who Do I Contact? (don.bailey at gmail.com (Don Bailey))
Who Do I Contact? (don.bailey at gmail.com (Don Bailey))
Who Do I Contact? (sol at haveyoubeentested.org (Sol Invictus))
Re: Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Proxy Detection (drfrancky at securax.org (Javor Ninov))
Who Do I Contact? (don.bailey at gmail.com (Don Bailey))
Who Do I Contact? (don.bailey at gmail.com (Don Bailey))
Advisory: My Gaming Ladder Combo System <= 7.0 Remote File Inclusion Vulnerability. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))

April 23 (34 messages)

security at .edus (eaton.lists at gmail.com (Brian Eaton))
MSIE (mshtml.dll) OBJECT tag vulnerability (lcamtuf at dione.ids.pl (Michal Zalewski))
MSIE (mshtml.dll) OBJECT tag vulnerability (mattmurphy at kc.rr.com (Matthew Murphy))
Who Do I Contact? (sangvdb at gmail.com (sangvdb))
Re: Who Do I Contact? (jkalergis at gmail.com (john kalergis))
security at .edus (randy at procyonlabs.com (Randal T. Rioux))
Who Do I Contact? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Who Do I Contact? (dudevanwinkle at gmail.com (Dude VanWinkle))
Who Do I Contact? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Proxy Detection (j.schipper at math.uu.nl (Joachim Schipper))
Proxy Detection (gluttony at gmail.com (Andrew A))
Who Do I Contact? (A.L.M.Buxey at lboro.ac.uk (A.L.M.Buxey@...ro.ac.uk))
security at .edus (fixer at gci.net (Fixer))
security at .edus (ge at linuxbox.org (Gadi Evron))
Re: Re: Who Do I Contact? (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
Re: Who Do I Contact? (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
Re: Who Do I Contact? (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
Re: security at .edus (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
Proxy Detection (str0ke at milw0rm.com (str0ke))
security at .edus (eaton.lists at gmail.com (Brian Eaton))
Re: Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Re: Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Buffer-overflow and crash in Fenice OMS 1.10 (aluigi at autistici.org (Luigi Auriemma))
Denial of service bugs in OpenTTD 0.4.7 (aluigi at autistici.org (Luigi Auriemma))
Format string bug in Skulltag 0.96f (aluigi at autistici.org (Luigi Auriemma))
[ GLSA 200604-12 ] Mozilla Firefox: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
[ GLSA 200604-13 ] fbida: Insecure temporary file creation (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200604-14 ] Dia: Arbitrary code execution through XFig import (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Proxy Detection (jdterry84 at gmail.com (Justin Terry))
Making money in an anonymous manner using TOR and E-Gold (mrbabs at gmail.com (MR BABS))
MSIE (mshtml.dll) OBJECT tag vulnerability (ben.lambrey at pandora.be (Ben Lambrey))
RE: Advisory: Simplog <= 0.93 Multiple Remote Vulnerabilities. (jashcraft at edgate.com (Ashcraft, Jeremy))
Advisory: Clansys <= 1.1 PHP Code Insertion Vulnerability. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))

April 24 (37 messages)

Re: Who Do I Contact? (pauls at utdallas.edu (Paul Schmehl))
Re: Who Do I Contact? (pauls at utdallas.edu (Paul Schmehl))
MSIE (mshtml.dll) OBJECT tag vulnerability (pvnick at gmail.com (Paul Nickerson))
MSIE (mshtml.dll) OBJECT tag vulnerability (kf_lists at digitalmunition.com (KF (lists)))
MSIE (mshtml.dll) OBJECT tag vulnerability (0x80 at hush.ai (0x80@...h.ai))
[SECURITY] [DSA 1039-1] New blender packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 1040-1] New gdm packages fix local root exploit (joey at infodrom.org (Martin Schulze))
Proxy Detection (guninski at guninski.com (Georgi Guninski))
MSIE (mshtml.dll) OBJECT tag vulnerability (lcamtuf at dione.ids.pl (Michal Zalewski))
Detecting anomaly in client software behaviour (Re[2]: Proxy Detection) (3APA3A at SECURITY.NNOV.RU (3APA3A))
[USN-272-1] cyrus-sasl2 vulnerability (martin.pitt at canonical.com (Martin Pitt))
Who Do I Contact? (michael.holstein at csuohio.edu (Michael Holstein))
Who Do I Contact? (ltr at isc.upenn.edu (David Taylor))
Lotus Domino Server 7.0 fun (research at gleg.net (Evgeny Legerov))
Re: Who Do I Contact? (barrie at reboot-robot.net (Barrie Dempster))
[USN-273-1] Ruby vulnerability (martin.pitt at canonical.com (Martin Pitt))
Apple Mac OS X Safari 2.0.3 Vulnerability (yannick.vonarx at yanux.ch (Yannick von Arx))
What is wrong with schools these days? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
What is wrong with schools these days? (SDALAN04 at smumn.edu (Dave Alanis))
What is wrong with schools these days? (sol at haveyoubeentested.org (Sol Invictus))
What is wrong with schools these days? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
What is wrong with schools these days? (michael.holstein at csuohio.edu (Michael Holstein))
What is wrong with schools these days? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
What is wrong with schools these days? (iglesias at uci.edu (Mike Iglesias))
What is wrong with schools these days? (SDALAN04 at smumn.edu (Dave Alanis))
What is wrong with schools these days? (ipatches at hushmail.com (ipatches@...hmail.com))
MSIE (mshtml.dll) OBJECT tag vulnerability (ipatches at hushmail.com (ipatches@...hmail.com))
What is wrong with schools these days? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
[ MDKSA-2006:074 ] - Updated php packages address multiple vulnerabilities. (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:073 ] - Updated cyrus-sasl packages addresses vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:073 ] - Updated cyrus-sasl packages addresses vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:073 ] - Updated cyrus-sasl packages addresses vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:073 ] - Updated cyrus-sasl packages addresses vulnerability (security at mandriva.com (security@...driva.com))
Who Do I Contact? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Rapid7 Advisory R7-0021: Symantec Scan Engine Authentication Fundamental Design Error (advisory at rapid7.com (advisory@...id7.com))
Rapid7 Advisory R7-0022: Symantec Scan Engine Known Immutable DSA Private Key (advisory at rapid7.com (advisory@...id7.com))
Rapid7 Advisory R7-0023: Symantec Scan Engine File Disclosure Vulnerability (advisory at rapid7.com (advisory@...id7.com))

April 25 (32 messages)

MSIE (mshtml.dll) OBJECT tag vulnerability (sol at haveyoubeentested.org (Sol Invictus))
Disappearing Google Adwords Contextual Adverts (n3td3v at gmail.com (n3td3v))
Who Do I Contact? (ge at linuxbox.org (Gadi Evron))
Who Do I Contact? (n3td3v at gmail.com (n3td3v))
[ MDKSA-2006:075 ] - Updated mozilla-firefox packages fix numerous vulnerabilities (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:075 ] - Updated mozilla-firefox packages fix numerous vulnerabilities (security at mandriva.com (security@...driva.com))
What is wrong with schools these days? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Get Yahoo Mail Beta today (n3td3v at gmail.com (n3td3v))
[SECURITY] [DSA 1041-1] New abc2ps packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
nasa goddard space flight center stolen files (berio164 at aol.com (berio164@....com))
Re: Who Do I Contact? (pauls at utdallas.edu (Paul Schmehl))
What is wrong with schools these days? (pauls at utdallas.edu (Paul Schmehl))
[SECURITY] [DSA 1042-1] New Cyrus SASL packages fix denial of service (joey at infodrom.org (Martin Schulze))
What is wrong with schools these days? (zoidenator at gmail.com (zap zoid))
Who Do I Contact? (bkfsec at sdf.lonestar.org (bkfsec))
Re: Who Do I Contact? (barrie at reboot-robot.net (Barrie Dempster))
What is wrong with schools these days? (bart.lansing at hushmail.com (bart.lansing@...hmail.com))
What is wrong with schools these days? (bill.stout at greenborder.com (Bill Stout))
What is wrong with schools these days? (gautam.bipin at gmail.com (Bipin Gautam))
What is wrong with schools these days? (michael.holstein at csuohio.edu (Michael Holstein))
What is wrong with schools these days? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
What is wrong with schools these days? (bkfsec at sdf.lonestar.org (bkfsec))
security contacts for Verio/NTT (tin at le.org (Tin Le))
What is wrong with schools these days? (bill.stout at greenborder.com (Bill Stout))
What is wrong with schools these days? (prb at lava.net (Peter Besenbruch))
What is wrong with schools these days? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
What is wrong with schools these days? (SDALAN04 at smumn.edu (Dave Alanis))
What is wrong with schools these days? (pauls at utdallas.edu (Paul Schmehl))
[ MDKSA-2006:076 ] - Updated mozilla packages fix numerous vulnerabilities (security at mandriva.com (security@...driva.com))
What is wrong with schools these days? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
What is wrong with schools these days? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
[ MDKSA-2006:077 ] - Updated ethereal packages fix numerous vulnerabilities (security at mandriva.com (security@...driva.com))

April 26 (47 messages)

[ MDKSA-2006:078 ] - Updated mozilla-thunderbird packages fix numerous vulnerabilities (security at mandriva.com (security@...driva.com))
Re: MSIE (mshtml.dll) OBJECT tag vulnerability (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
[ MDKSA-2006:079 ] - Updated ruby packages fix vulnerability (security at mandriva.com (security@...driva.com))
Re: MSIE (mshtml.dll) OBJECT tag vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
What is wrong with schools these days? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
nasa goddard space flight center stolen files (mrbabs at gmail.com (MR BABS))
ZDI-06-011: Mozilla Firefox Table Rebuilding Code Execution Vulnerability (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
Re: MSIE (mshtml.dll) OBJECT tag vulnerability (raoul at elforsoft.com (Raoul Nakhmanson-Kulish))
Re: MSIE (mshtml.dll) OBJECT tag vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
microsoft update (bla at darton.edu (Brian Anderson))
Re: MSIE (mshtml.dll) OBJECT tag vulnerability (raoul at elforsoft.com (Raoul Nakhmanson-Kulish (en)))
[SECURITY] [DSA 1043-1] New abcmidi packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Re: MSIE (mshtml.dll) OBJECT tag vulnerability (0x80 at hush.ai (0x80@...h.ai))
Re: MSIE (mshtml.dll) OBJECT tag vulnerability (drfrancky at securax.org (Javor Ninov))
nasa goddard space flight center stolen files (rpm.security at gmail.com (RPM Security Lists))
Recent Oracle exploit is _actually_ an 0day with no patch (davidl at ngssoftware.com (David Litchfield))
[SECURITY] [DSA 1044-1] New Mozilla Firefox packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack (psirt at cisco.com (Cisco Systems Product Security Incident Response Te…)
[ GLSA 200604-15 ] xine-ui: Format string vulnerabilities (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200604-16 ] xine-lib: Buffer overflow vulnerability (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[SECURITY] [DSA 1044-1] New Mozilla Firefox packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Should I Be Worried? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
Should I Be Worried? (bkfsec at sdf.lonestar.org (bkfsec))
Should I Be Worried? (gluttony at gmail.com (Andrew A))
Should I Be Worried? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
[EEYEB-20060227] Juniper Networks SSL-VPN Client Buffer Overflow (Advisories at eeye.com (eEye Advisories))
Should I Be Worried? (gem at rellim.com (Gary E. Miller))
Should I Be Worried? (0x80 at hush.ai (0x80@...h.ai))
Secunia Research: SpeedProject Products ACE Archive Handling Buffer Overflow (remove-vuln at secunia.com (Secunia Research))
MSIE (mshtml.dll) OBJECT tag vulnerability (trbilbro at verizon.net (Tim Bilbro))
Should I Be Worried? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Should I Be Worried? (sol at haveyoubeentested.org (Sol Invictus))
Seeking Anyone Harmed by Jason Coombs (jasonc at science.org (Jason Coombs))
MSIE (mshtml.dll) OBJECT tag vulnerability (bruen at coldrain.net (bruen@...drain.net))
MSIE (mshtml.dll) OBJECT tag vulnerability (lcamtuf at dione.ids.pl (Michal Zalewski))
MSIE (mshtml.dll) OBJECT tag vulnerability (lcamtuf at dione.ids.pl (Michal Zalewski))
MSIE (mshtml.dll) OBJECT tag vulnerability (Thierry at Zoller.lu (Thierry Zoller))
n3td3v outsmarts Google (n3td3v at gmail.com (n3td3v))
n3td3v outsmarts Google (tkrpata at bjs.com (Krpata, Tyler))
Should I Be Worried? (crypticmauler at linuxmail.org (CrYpTiC MauleR))
MSIE (mshtml.dll) OBJECT tag vulnerability (bruen at coldrain.net (bruen@...drain.net))
Internet Explorer User Interface Races, Redeux (mattmurphy at kc.rr.com (Matthew Murphy))
MSIE (mshtml.dll) OBJECT tag vulnerability (randy at procyonlabs.com (Randal T. Rioux))
MSIE (mshtml.dll) OBJECT tag vulnerability (lcamtuf at dione.ids.pl (Michal Zalewski))
What is wrong with schools these days? (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
What is wrong with schools these days? (pauls at utdallas.edu (Paul Schmehl))
What is wrong with schools these days? (jlightfoot at gmail.com (John Lightfoot))

April 27 (50 messages)

What is wrong with schools these days? (nick at nickwithers.com (Nick Withers))
MSIE (mshtml.dll) OBJECT tag vulnerability (se_cur_ity at hotmail.com (Morning Wood))
Interesting but vulnerable scheme for tokenless auth (everhart at gce.com (Glenn Everhart))
Internet Explorer User Interface Races, Redeux (robert.lemos at yahoo.com (Robert Lemos))
n3td3v outsmarts Google (n3td3v at gmail.com (n3td3v))
n3td3v outsmarts Google (very at unprivate.com (php0t))
Internet Explorer User Interface Races, Redeux (mattmurphy at kc.rr.com (Matthew Murphy))
n3td3v outsmarts Google (don.bailey at gmail.com (Don Bailey))
Internet Explorer User Interface Races, Redeux (se_cur_ity at hotmail.com (Morning Wood))
[ GLSA 200604-17 ] Ethereal: Multiple vulnerabilities in protocol dissectors (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[SECURITY] [DSA 1045-1] New OpenVPN packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Internet Explorer User Interface Races, Redeux (jkl2007 at gmail.com (Zh Linlin))
MSIE (mshtml.dll) OBJECT tag vulnerability (lcamtuf at dione.ids.pl (Michal Zalewski))
[Re:] Interesting but vulnerable scheme for tokenless auth (info at delsec.net (Chris))
[SECURITY] [DSA 1046-1] New Mozilla packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
MSIE (mshtml.dll) OBJECT tag vulnerability (drfrancky at securax.org (Javor Ninov))
n3td3v outsmarts Google.............Troll Foder (sean01 at accnet.com.au (Sean Crawford))
PoC for Internet Explorer Modal Dialog Issue (mattmurphy at kc.rr.com (Matthew Murphy))
MSIE (mshtml.dll) OBJECT tag vulnerability (lcamtuf at dione.ids.pl (Michal Zalewski))
MSIE (mshtml.dll) OBJECT tag vulnerability (fractalg at highspeedweb.net (Pedro Hugo))
What is wrong with schools these days? (michael.holstein at csuohio.edu (Michael Holstein))
What is wrong with schools these days? (michael.holstein at csuohio.edu (Michael Holstein))
Should I Be Worried? (sol at haveyoubeentested.org (Sol Invictus))
CrYpTiC MauleR = n3td3v (stevenrakick at yahoo.com (Steven Rakick))
MSIE (mshtml.dll) OBJECT tag vulnerability (str0ke at milw0rm.com (str0ke))
Internet Explorer User Interface Races, Redeux (Ed.Antczak at fnf.com (Antczak, Ed))
Should I Be Worried? (bkfsec at sdf.lonestar.org (bkfsec))
bypassing Windows Domain Group Policy Objects (exibar at thelair.com (Exibar))
bypassing Windows Domain Group Policy Objects (michael.holstein at csuohio.edu (Michael Holstein))
What is wrong with schools these days? (renaudleroy at free.fr (Renaud Leroy))
bypassing Windows Domain Group Policy Objects (michael.holstein at csuohio.edu (Michael Holstein))
bypassing Windows Domain Group Policy Objects (exibar at thelair.com (Exibar))
[USN-274-1] MySQL vulnerability (martin.pitt at canonical.com (Martin Pitt))
PoC for Internet Explorer Modal Dialog Issue (n3td3v at gmail.com (n3td3v))
CrYpTiC MauleR = n3td3v (n3td3v at gmail.com (n3td3v))
MSIE (mshtml.dll) OBJECT tag vulnerability (skodliv at gmail.com (poo))
MSIE (mshtml.dll) OBJECT tag vulnerability (Thierry at Zoller.lu (Thierry Zoller))
Internet Explorer User Interface Races, Redeux (n3td3v at gmail.com (n3td3v))
Fwd: Internet Explorer User Interface Races, Redeux (c0ntexb at gmail.com (c0ntex))
Internet Explorer User Interface Races, Redeux (c0ntexb at gmail.com (c0ntex))
CrYpTiC MauleR = n3td3v (sol at haveyoubeentested.org (Sol Invictus))
Internet Explorer User Interface Races, Redeux (guninski at guninski.com (Georgi Guninski))
Internet Explorer User Interface Races, Redeux (mattmurphy at kc.rr.com (Matthew Murphy))
MSIE (mshtml.dll) OBJECT tag vulnerability (trbilbro at verizon.net (Tim Bilbro))
Internet Explorer User Interface Races, Redeux (n3td3v at gmail.com (n3td3v))
MSIE (mshtml.dll) OBJECT tag vulnerability (lcamtuf at dione.ids.pl (Michal Zalewski))
MSIE (mshtml.dll) OBJECT tag vulnerability (metasec at gmail.com (meta security))
[USN-275-1] Mozilla vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
MSIE (mshtml.dll) OBJECT tag vulnerability (tim-security at sentinelchicken.org (Tim))
MSIE (mshtml.dll) OBJECT tag vulnerability (trbilbro at verizon.net (Tim Bilbro))

April 28 (22 messages)

MSIE (mshtml.dll) OBJECT tag vulnerability (eaton.lists at gmail.com (Brian Eaton))
bypassing Windows Domain Group Policy Objects (Neil.Hunt at bdigital.com.au (Neil Hunt))
bypassing Windows Domain Group Policy Objects (kf_lists at digitalmunition.com (KF (lists)))
WinISO/UltraISO/MagicISO/PowerISO Directory Traversal Vulnerability (smaillist at gmail.com (Sowhat))
MSIE (mshtml.dll) OBJECT tag vulnerability (lcamtuf at dione.ids.pl (Michal Zalewski))
MSIE Nested Object Vulnerability Is Exploitable (vuln-remove at secunia.com (Secunia Research))
MSIE (mshtml.dll) OBJECT tag vulnerability (0x80 at hush.ai (0x80@...h.ai))
Seeking Anyone Harmed by Jason Coombs (0x80 at hush.ai (0x80@...h.ai))
MSIE (mshtml.dll) OBJECT tag vulnerability (sol at haveyoubeentested.org (Sol Invictus))
MSIE (mshtml.dll) OBJECT tag vulnerability (prb at lava.net (Peter Besenbruch))
[Argeniss] Alert - Yahoo! Mail XSS vulnerability (cesarc56 at yahoo.com (Cesar))
MSIE (mshtml.dll) OBJECT tag vulnerability (cseagle at redshift.com (Chris Eagle))
MSIE (mshtml.dll) OBJECT tag vulnerability (sol at haveyoubeentested.org (Sol Invictus))
[ GLSA 200604-18 ] Mozilla Suite: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
Secunia Research: Servant Salamander unacev2.dll Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
RFIDIOt python RFID toolkit released (adam.laurie at thebunker.net (Adam Laurie))
Exploit/POC Database (tomd2004 at gmail.com (Tom Doherty))
Exploit/POC Database (kf_lists at digitalmunition.com (KF (lists)))
MSIE (mshtml.dll) OBJECT tag vulnerability (angray at beeb.net (Aaron Gray))
MSIE (mshtml.dll) OBJECT tag vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Exploit/POC Database (bill.stout at greenborder.com (Bill Stout))
NISCC DNS Protocol Vulnerability (seemyhomepage at katsokotisivuilta.ni (Markus Jansson))

April 29 (13 messages)

MSIE (mshtml.dll) OBJECT tag vulnerability (angray at beeb.net (Aaron Gray))
MSIE (mshtml.dll) OBJECT tag vulnerability (angray at beeb.net (Aaron Gray))
bypassing Windows Domain Group Policy Objects (james.mailing at gmail.com (James Eaton-Lee))
bypassing Windows Domain Group Policy Objects (me at nospam.dk (Richard Bjerregaard))
MSIE Nested Object Vulnerability Is Exploitable (vuln-remove at secunia.com (Secunia Research))
MSIE (mshtml.dll) OBJECT tag vulnerability (0x80 at hush.ai (0x80@...h.ai))
MSIE Nested Object Vulnerability Is Exploitable (n3td3v at gmail.com (n3td3v))
MSIE Nested Object Vulnerability Is Exploitable (n3td3v at gmail.com (n3td3v))
MSIE Nested Object Vulnerability Is Exploitable (str at hackerzlair.org (Strykar))
Should I Be Worried? (chromazine at sbcglobal.net (Steve Kudlak))
MSIE Nested Object Vulnerability Is Exploitable (n3td3v at gmail.com (n3td3v))
MSIE Nested Object Vulnerability Is Exploitable (fd at g-0.org (GroundZero Security))
MSIE Nested Object Vulnerability Is Exploitable (fd at g-0.org (GroundZero Security))

April 30 (21 messages)

MSIE Nested Object Vulnerability Is Exploitable (str at hackerzlair.org (Strykar))
MSIE Nested Object Vulnerability Is Exploitable (n3td3v at gmail.com (n3td3v))
Yahoo Messenger Source Code Released: I.M Window Code (n3td3v at gmail.com (n3td3v))
Yahoo Messenger Source Code Released: Chat Window Code (n3td3v at gmail.com (n3td3v))
[SECURITY] [DSA 1047-1] New resmgr packages fix unauthorised access (joey at infodrom.org (Martin Schulze))
Yahoo Messenger Source Code Released: Chat WindowCode (angray at beeb.net (Aaron Gray))
Yahoo Messenger Source Code Released: Chat WindowCode (mrbabs at gmail.com (MR BABS))
Yahoo Messenger Source Code Released: Chat WindowCode (n3td3v at gmail.com (n3td3v))
Hello gents (mrbabs at gmail.com (MR BABS))
Yahoo Messenger Source Code Released: ChatWindowCode (sean01 at accnet.com.au (Sean Crawford))
Yahoo Messenger Source Code Released: ChatWindowCode (n3td3v at gmail.com (n3td3v))
Yahoo Messenger Source Code Released: ChatWindowCode (angray at beeb.net (Aaron Gray))
Yahoo Messenger Source Code Released: ChatWindowCode (n3td3v at gmail.com (n3td3v))
Yahoo Messenger Source Code Released:ChatWindowCode (angray at beeb.net (Aaron Gray))
Yahoo Messenger Source Code Released:ChatWindowCode (angray at beeb.net (Aaron Gray))
NISCC DNS Protocol Vulnerability (barrie at reboot-robot.net (Barrie Dempster))
Yahoo Messenger Source Code Released:ChatWindowCode (n3td3v at gmail.com (n3td3v))
Yahoo Messenger Source CodeReleased:ChatWindowCode (angray at beeb.net (Aaron Gray))
Yahoo Messenger Source Code Released:ChatWindowCode (n3td3v at gmail.com (n3td3v))
Yahoo Messenger Source CodeReleased:ChatWindowCode (angray at beeb.net (Aaron Gray))
Yahoo Messenger Source Code Released: I.M Window Code (nocfed at gmail.com (nocfed))

885 messages