full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2006/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 16	² 18	³ 22	⁴ 26	⁵ 57	⁶ 29	⁷ 38
⁸ 25	⁹ 17	¹⁰ 23	¹¹ 32	¹² 39	¹³ 13	¹⁴ 3
¹⁵ 19	¹⁶ 20	¹⁷ 41	¹⁸ 29	¹⁹ 36	²⁰ 13	²¹ 35
²² 48	²³ 16	²⁴ 12	²⁵ 21	²⁶ 37	²⁷ 12	²⁸ 18
²⁹ 38	³⁰ 17	³¹ 18

Messages by day:

May 1 (16 messages)

GMail, Google Groups XSS vulnerability addressed (dbounds at gmail.com (Darren Bounds))
What is wrong with schools these days? (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
[SECURITY] [DSA 1048-1] New Asterisk packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Hello gents (0x80 at hush.ai (0x80@...h.ai))
Secunia Research: WinHKI unacev2.dll Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
[ GLSA 200605-01 ] MPlayer: Heap-based buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
DOS device name handling (kulikk at monstrum.org (Klaudiusz Kulik))
Yahoo Messenger Source Code Released: I.M Window Code (n3td3v at gmail.com (n3td3v))
DOS device name handling (3APA3A at SECURITY.NNOV.RU (3APA3A))
MSIE (mshtml.dll) OBJECT tag vulnerability (bkfsec at sdf.lonestar.org (bkfsec))
MSIE (mshtml.dll) OBJECT tag vulnerability (trbilbro at verizon.net (Tim Bilbro))
MSIE (mshtml.dll) OBJECT tag vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: DOS device name handling (kulikk at monstrum.org (Klaudiusz Kulik))
Re: DOS device name handling (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
MSIE (mshtml.dll) OBJECT tag vulnerability (bkfsec at sdf.lonestar.org (bkfsec))
MSIE (mshtml.dll) OBJECT tag vulnerability (mattmurphy at kc.rr.com (Matthew Murphy))

May 2 (18 messages)

[ MDKSA-2006:080 ] - Updated clamav packages fix vulnerability (security at mandriva.com (security@...driva.com))
Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation (psirt at cisco.com (Cisco Systems Product Security Incident Response …)
MSIE (mshtml.dll) OBJECT tag vulnerability (0x80 at hush.ai (0x80@...h.ai))
[SECURITY] [DSA 1049-1] New Ethereal packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
MSIE (mshtml.dll) OBJECT tag vulnerability (sol at haveyoubeentested.org (Sol Invictus))
Oracle, where are the patches??? (davidl at ngssoftware.com (David Litchfield))
[ GLSA 200605-02 ] X.Org: Buffer overflow in XRender extension (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200605-03 ] ClamAV: Buffer overflow in Freshclam (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200605-04 ] phpWebSite: Local file inclusion (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Hola Distro Help me (edgardo.zavala at gmail.com (Edgardo Zavala))
Hola Distro Help me (edgardo.zavala at gmail.com (Edgardo Zavala))
RE: Oracle, where are the patches??? (ak at red-database-security.com (Kornbrust, Alexander))
Hola Distro Help me (yoo.fok at gmail.com (f y))
Hola Distro Help me (edgardo.zavala at gmail.com (Edgardo Zavala))
Hola Distro Help me (0x80 at hush.ai (0x80@...h.ai))
Heard of "Scab 5" or "Scab V" for Hard Drive evidence elimination? (redleg18 at gmail.com (Red Leg))
Hola Distro Help me (edgardo at u.washington.edu ('FoR ReaLz' E. Balansay))
Hola Distro Help me (edgardo.zavala at gmail.com (Edgardo Zavala))

May 3 (22 messages)

[ MDKSA-2006:081 ] - Updated xorg-x11 packages fix vulnerability (security at mandriva.com (security@...driva.com))
Quagga RIPD unauthenticated route table broadcast (mlists at arhont.com (Konstantin V. Gavrilenko))
Quagga RIPD unauthenticated route injection (mlists at arhont.com (Konstantin V. Gavrilenko))
MSIE (mshtml.dll) OBJECT tag vulnerability (ivanhec at gmail.com (Ivan .))
Dynamic Evaluation Vulnerabilities in PHP applications (coley at mitre.org (Steven M. Christey))
What is wrong with schools these days? (stevex11 at sbcglobal.net (Steve Kudlak))
What is wrong with schools these days? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Quagga RIPD unauthenticated route injection (paul at clubi.ie (Paul Jakma))
[USN-276-1] Thunderbird vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
BankTown's ActiveX Buffer Overflow Vulnerability (saintlinu at gmail.com (Alex Park))
[USN-277-1] TIFF library vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[SECURITY] [DSA 1050-1] New ClamAV packages fix denial of service or arbitrary code execution (joey at infodrom.org (Martin Schulze))
RE: Oracle, where are the patches??? (cesarc56 at yahoo.com (Cesar))
[USN-278-1] gdm vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-279-1] libnasl/nessus vulnerability (martin.pitt at canonical.com (Martin Pitt))
Analyzing SQL/LDAP Injections in JBOSS/Hibernate (andymolinetti at hotmail.com (Andres Molinetti))
(no subject) (goblin.azrael at gmail.com (azrael goblin))
(no subject) (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
BA website discloses passenger passport numbers and D.O.B. (adam.laurie at thebunker.net (Adam Laurie))
JAVA SQL/LDAP Injections (andymolinetti at hotmail.com (Andres Molinetti))
BankTown's ActiveX Buffer Overflow Vulnerability (saintlinu at gmail.com (Alex Park))
[ MDKSA-2006:082 ] - Updated libtiff packages fix vulnerabilities (security at mandriva.com (security@...driva.com))

May 4 (26 messages)

MSIE (mshtml.dll) OBJECT tag vulnerability revealed (mephistodreaming at hush.com (mephistodreaming@...h.com))
How many vendors knowingly ship GA product with security vulnerabilities? (bill.stout at greenborder.com (Bill Stout))
How many vendors knowingly ship GA product with security vulnerabilities? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[XPA] - Albinator Pro <= 2.0.8 - Remote Command Execution Vulnerability (wr0ck.lists at gmail.com (wr0ck))
[SECURITY] [DSA 1051-1] New Mozilla Thunderbird packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
[USN-281-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[USN-280-1] X.org server vulnerability (martin.pitt at canonical.com (Martin Pitt))
(no subject) (azrael.goblin at gmail.com (azrael goblin))
shellcode study (goblin.azrael at gmail.com (azrael goblin))
shellcode study (fd at g-0.org (GroundZero Security))
Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" (joxeankoret at yahoo.es (Joxean Koret))
RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" (joxeankoret at yahoo.es (Joxean Koret))
ISA Server 2004 Log Manipulation (beSIRT at beyondsecurity.com (beSIRT))
RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" (thiago.pojda at gmail.com (Thiago H. Pojda))
RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" (petervdh at orange.net (Peter van den Houten))
RE: Panda Antivirus Enterprise Secure, NortonAntivirus 2005 and the virus (stevenrakick at yahoo.com (Steven Rakick))
RE: Panda Antivirus Enterprise Secure, NortonAntivirus 2005 and the virus (thiago.pojda at gmail.com (Thiago H. Pojda))
bigwebmaster guestbook multiply XSS (drfrancky at securax.org (Javor Ninov))
RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" (joxeankoret at yahoo.es (Joxean Koret))
RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" (youwishyouknew at somewhere.com (...))
ISA Server 2004 Log Manipulation (feofil at gmail.com (Christian Swartzbaugh))
ISA Server 2004 Log Manipulation (ragdelaed at gmail.com (ragdelaed))
RE: Panda Antivirus Enterprise Secure, NortonAntivirus 2005 and the virus (stevenrakick at yahoo.com (Steven Rakick))
WebCalendar User Account Enumeration Weakness (david.maciejak at gmail.com (David Maciejak))
shellcode study (mrbabs at gmail.com (MR BABS))

May 5 (57 messages)

IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
IE7 Zero Day (frlinux at gmail.com (FRLinux))
IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
How many vendors knowingly ship GA product with security vulnerabilities? (bill.stout at greenborder.com (Bill Stout))
IE7 Information Disclosure - For sale (0x80 at hush.ai (0x80@...h.ai))
How many vendors knowingly ship GA product with security vulnerabilities? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
IE7 Zero Day (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
IE7 Zero Day (prb at lava.net (Peter Besenbruch))
IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
IE7 Zero Day (randy at procyonlabs.com (Randal T. Rioux))
IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
[ MDKSA-2006:081-1 ] - Updated xorg-x11 packages fix vulnerability (security at mandriva.com (security@...driva.com))
Re: WebCalendar User Account Enumeration Weakness (david.maciejak at gmail.com (David Maciejak))
IE7 Zero Day (ad at heapoverflow.com (ad@...poverflow.com))
ISA Server 2004 Log Manipulation (beSIRT at beyondsecurity.com (beSIRT))
IE7 Zero Day (sk at groundzero-security.com (sk))
CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability (James.Williams at ca.com (Williams, James K))
IE7 Zero Day (frlinux at gmail.com (FRLinux))
does somebody know of php cross site vulnerability (azrael.goblin at gmail.com (azrael goblin))
(no subject) (azrael.goblin at gmail.com (azrael goblin))
IE7 Zero Day (exibar at thelair.com (Exibar))
[Fwd: Re: Microsoft DNS resolver: deliberately sabotagedhosts-file lookup] (bkfsec at sdf.lonestar.org (bkfsec))
IE7 Zero Day (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Idle scan rediscovered!!! (joeljose420 at gmail.com (Joel Jose))
Patterns and Security Measurement (nguyen.petronius at gmail.com (Nguyen Pham))
Patterns and Security Measurement (foofus at foofus.net (foofus@...fus.net))
IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
does somebody know of php cross site vulnerability (0x80 at hush.ai (0x80@...h.ai))
IE7 Zero Day (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Idle scan rediscovered!!! (tim-security at sentinelchicken.org (Tim))
Idle scan rediscovered!!! (blancher at cartel-securite.fr (Cedric Blancher))
IE7 Zero Day (degeneracypressure at gmail.com (Eliah Kagan))
Idle scan rediscovered!!! (blancher at cartel-securite.fr (Cedric Blancher))
IE7 Zero Day (exibar at thelair.com (Exibar))
Patterns and Security Measurement (sol at haveyoubeentested.org (Sol Invictus))
Patterns and Security Measurement (nfobro at gmail.com (eric williams))
IE7 Zero Day (duckhacks at gmail.com (Ducki3))
CIRT.DK [Cryptomathic ActiveX Buffer Overflow (TDC Digital signature)] (advisory at cirt.dk (CIRT.DK Advisory))
Windows XP Home LSA secrets stores XP login passphrase in plain text (seemyhomepage at katsokotisivuilta.ni (Markus Jansson))
Re: Windows XP Home LSA secrets stores XP login passphrase in plain text (seemyhomepage at katsokotisivuilta.ni (Markus Jansson))
phpBB 2.0.20 Full Path Disclosure and SQL Errors (max at jestsuper.pl (Maksymilian Arciemowicz))
IE7 Zero Day (dufresne at winternet.com (Ron DuFresne))
MSIE (mshtml.dll) OBJECT tag vulnerability (0x80 at hush.ai (0x80@...h.ai))
Idle scan rediscovered!!! (tim-security at sentinelchicken.org (Tim))
IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
MSIE (mshtml.dll) OBJECT tag vulnerability (0x80 at hush.ai (0x80@...h.ai))
Windows XP Home LSA secrets stores XP loginpassphrase in plain text (goan.rootu at gmail.com (John Doe))
IE7 Zero Day (rcwhelan at gmail.com (Ryan Whelan))
IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
IE7 Zero Day (SDALAN04 at smumn.edu (Dave Alanis))
Idle scan rediscovered!!! (blancher at cartel-securite.fr (Cedric Blancher))
Idle scan rediscovered!!! (rembrandt at jpberlin.de (rembrandt@...erlin.de))
IE7 Information Disclosure - For sale (tgood at mindsecurity.net (Travis Good))
IE7 Zero Day (daniel_clemens at autism.birmingham-infragard.org (daniel uriah clemens))
Windows XP Home LSA secrets stores XP loginpassphrase in plain text (seemyhomepage at katsokotisivuilta.ni (Markus Jansson))

May 6 (29 messages)

Idle scan rediscovered!!! (tim-security at sentinelchicken.org (Tim))
Idle scan rediscovered!!! (tim-security at sentinelchicken.org (Tim))
IE7 Information Disclosure - For sale (0x80 at hush.ai (0x80@...h.ai))
The 'good worm' from HP (stevex11 at sbcglobal.net (Steve Kudlak))
IE7 Information Disclosure - For sale (degeneracypressure at gmail.com (Eliah Kagan))
WRONG MARKET BUDDY Re: IE7 Information Disclosure - For sale (donnydark at gmail.com (donnydark))
[ GLSA 200605-05 ] rsync: Potential integer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" (maxxess at gmail.com (Niklas))
IE7 Information Disclosure - For sale (0x80 at hush.ai (0x80@...h.ai))
IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
WRONG MARKET BUDDY Re: IE7 Information Disclosure - For sale (0x80 at hush.ai (0x80@...h.ai))
Re: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" (joxeankoret at yahoo.es (Joxean Koret))
WRONG MARKET BUDDY Re: IE7 Information Disclosure - For sale (ad at heapoverflow.com (ad@...poverflow.com))
IE7 Zero Day (frlinux at gmail.com (FRLinux))
New site dedicated to security conferences : www.security-briefings.com (newslist at security-briefings.com (newslist@...urity-briefings.com))
Let's Not Forget Whose In Charge (redsand at redsand.net (redsand))
Let's Not Forget Whose In Charge (c0ntexb at gmail.com (c0ntex))
New site dedicated to security conferences : www.security-briefings.com (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
hey,0day for sale (superlone at gmail.com (无敌最寂寞))
hey,0day for sale (jkalergis at gmail.com (john kalergis))
SinFP 1.01, new version of the OS fingerprinting next generation tool (fd at gomor.org (GomoR))
(no subject) (azrael.goblin at gmail.com (azrael goblin))
Windows XP Home LSA secrets storesXP loginpassphrase in plain text (goan.rootu at gmail.com (John Doe))
[ GLSA 200605-06 ] Mozilla Firefox: Potential remote code execution (koon at gentoo.org (Thierry Carrez))
Fw: IT Security Alternatives (marjan.lipovsek at siol.net (Marjan Lipovsek))
Let's Not Forget Whose In Charge (mrbabs at gmail.com (MR BABS))
IE7 Information Disclosure - For sale (degeneracypressure at gmail.com (Eliah Kagan))
Windows XP Home LSA secrets storesXPloginpassphrase in plain text (niceman at att.net (Mike N))
Let's Not Forget Whose In Charge (n3td3v at gmail.com (n3td3v))

May 7 (38 messages)

Full Disclosure "Code of conduct" (angray at beeb.net (Aaron Gray))
Full Disclosure "Code of conduct" (0x80 at hush.ai (0x80@...h.ai))
Full Disclosure "Code of conduct" (angray at beeb.net (Aaron Gray))
Full Disclosure "Code of conduct" (rcwhelan at gmail.com (Ryan Whelan))
Full Disclosure "Code of conduct" (randy at procyonlabs.com (Randal T. Rioux))
Full Disclosure "Code of conduct" (n3td3v at gmail.com (n3td3v))
[inbox] Re: Full Disclosure "Code of conduct" (exibar at thelair.com (Exibar))
[inbox] Re: Full Disclosure "Code of conduct" (exibar at thelair.com (Exibar))
Re: Full Disclosure "Code of conduct" (bruno at wolff.to (Bruno Wolff III))
[XPA] - ISPConfig <= 2.2.2 - Remote Command Execution Vulnerability (wr0ck.lists at gmail.com (wr0ck))
Full Disclosure "Code of conduct" (drfrancky at securax.org (Javor Ninov))
Heap based overflow Problem--Help (ahmadtauqeer at yahoo.com (Tauqeer Ahmad))
Full Disclosure "Code of conduct" (fd at g-0.org (GroundZero Security))
Heap overflow problem----Help (ahmadtauqeer at yahoo.com (Tauqeer Ahmad))
Heap overflow problem----Help (ad at heapoverflow.com (ad@...poverflow.com))
Full Disclosure "Code of conduct" (yoo.fok at gmail.com (f y))
Full Disclosure "Code of conduct" (hdw at kallisti.se (Anders B Jansson))
Full Disclosure "Code of conduct" (fd at g-0.org (GroundZero Security))
Re: IE7 Zero Day (naveedafzal at gmail.com (naveed))
Full Disclosure "Code of conduct" (n3td3v at gmail.com (n3td3v))
Full Disclosure "Code of conduct" (n3td3v at gmail.com (n3td3v))
Re: IE7 Zero Day (ad at heapoverflow.com (ad@...poverflow.com))
IE7 Zero Day (n3td3v at gmail.com (n3td3v))
IE7 Zero Day (xyberpix at xyberpix.com (xyberpix))
IE7 Zero Day (c0redump at ackers.org.uk (c0redump@...ers.org.uk))
Apache Security Problem - need help (php-sec at f-s.at (Fabio Saber))
Apache Security Problem - need help (ml3 at portsonline.net (ml3@...tsonline.net))
IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" (debasis.mohanty.listmails at gmail.com (Debasis Mohanty))
[ GLSA 200605-07 ] Nagios: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Full Disclosure "Code of conduct" (frlinux at gmail.com (FRLinux))
Full Disclosure "Code of conduct" (angray at beeb.net (Aaron Gray))
Re: Windows XP Home LSA secrets storesXP loginpassphrase in plain text (John Doe) (seemyhomepage at katsokotisivuilta.ni (Markus Jansson))
IE7 Zero Day (n3td3v at gmail.com (n3td3v))
Full Disclosure "Code of conduct" (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
Full Disclosure "Code of conduct" (lee.e.rian at census.gov (lee.e.rian@...sus.gov))
Full Disclosure "Code of conduct" (n3td3v at gmail.com (n3td3v))

May 8 (25 messages)

Full Disclosure "Code of conduct" (frlinux at gmail.com (FRLinux))
IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
[SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Multiple Vulnerabilities In IdealBB ASP Bulletin Board (advisories at codescan.com (CodeScan Labs))
Full Disclosure "Code of conduct" AND AALL THAT JAZZ (chromazine at sbcglobal.net (Steve Kudlak))
[USN-282-1] Nagios vulnerability (martin.pitt at canonical.com (Martin Pitt))
**LosseChange::Debunk it??** (simon at snosoft.com (Simon Smith))
[USN-283-1] MySQL vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Secunia Research: TZipBuilder ZIP File Handling Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
Secunia Research: Anti-Trojan unacev2.dll Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
[XPA] ActualAnalyzer Pro v6.88 - Remote Command Execution Vulnerability (wr0ck.lists at gmail.com (wr0ck))
Claroline file inclusion vulnerabilities (admin at zone-h.fr (Siegfried))
**LosseChange::Debunk it??** (gem at rellim.com (Gary E. Miller))
ZDI-06-012: Sophos Anti-Virus CAB Unpacking Code Execution Vulnerability (zdi-disclosures at 3Com.com (zdi-disclosures@...m.com))
**LosseChange::Debunk it??** (simon at snosoft.com (Simon Smith))
VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices (advisories at vsecurity.com (VSR Advisories))
[ GLSA 200605-08 ] PHP: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
[ GLSA 200605-09 ] Mozilla Thunderbird: Multiple vulnerabilities (koon at gentoo.org (Thierry Carrez))
Googling or Google Hacking Security Conference slides (newslist at security-briefings.com (newslist@...urity-briefings.com))
Full Disclosure "Code of conduct" AND AALL THAT JAZZ (bkfsec at sdf.lonestar.org (bkfsec))
VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices (mcerha at cisco.com (Matthew Cerha))
Googling or Google Hacking Security Conferenceslides (dustbin at techie.com (dust bin))
Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games (arny at ats.s.bawue.de (Thilo Schulz))
hack.lu 2006 (info at hack.lu (info))
[MU-200605-01] Multiple vulnerabilities in Linux SCTP 2.6.16 (noreply at musecurity.com (noreply@...ecurity.com))

May 9 (17 messages)

excessive xss vulnerabilities (feofil at gmail.com (Christian Swartzbaugh))
excessive xss vulnerabilities (n3td3v at gmail.com (n3td3v))
IE7 Zero Day (n3td3v at gmail.com (n3td3v))
Security Events Google Calendar (rvarada at gmail.com (Rajesh V))
excessive xss vulnerabilities (Ed at unityitservices.co.uk (Edward Pearson))
[SECURITY] [DSA 1053-1] New Mozilla packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
List Charter (johnc at grok.org.uk (John Cartwright))
ICQ Client Cross-Application Scripting (XAS) (3APA3A at SECURITY.NNOV.RU (3APA3A))
[SECURITY] [DSA 1054-1] New TIFF packages fix denial of service and arbitrary code execution (joey at infodrom.org (Martin Schulze))
Secunia Research: Where Is It unacev2.dll Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
IE7 Zero Day (duckhacks at gmail.com (Ducki3))
[EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service (Advisories at eeye.com (eEye Advisories))
[EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow (Advisories at eeye.com (eEye Advisories))
ZDI-06-013: 3Com TippingPoint SMS Server Information Disclosure Vulnerability (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
[TZO-042006] Insecure Auto-Update and File execution (Thierry at Zoller.lu (Thierry Zoller))
excessive xss vulnerabilities (bugtraq at cgisecurity.net (bugtraq@...security.net))
Should I Be Worried? (david at hayes-family.org (David))

May 10 (23 messages)

IE7 Zero Day (0x80 at hush.ai (0x80@...h.ai))
[ MDKSA-2006:083 ] - Updated gdm package fixes symlink attack vulnerability (security at mandriva.com (security@...driva.com))
Oracle - the last word (davidl at ngssoftware.com (David Litchfield))
[ GLSA 200605-10 ] pdnsd: Denial of Service and potential arbitrary code execution (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200605-11 ] Ruby: Denial of Service (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
[ GLSA 200605-12 ] Quake 3 engine based games: Buffer Overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
PGP Corporation Security Contact? (mattmurphy at kc.rr.com (Matthew Murphy))
VISA PCI DSS standard : Good or bad? (newslist at security-briefings.com (newslist@...urity-briefings.com))
MS06-019 - How long before this develops into a self propagating email worm (schanulleke.29172787 at bloglines.com (schanulleke.29172787@...glines.com))
MS06-019 - How long before this develops into a self propagating email worm (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
MS06-019 - How long before this develops into a self propagating email worm (ltr at isc.upenn.edu (David Taylor))
IE7 Zero Day (bkfsec at sdf.lonestar.org (bkfsec))
PGP Corporation Security Contact? (cat at reptiles.org (Cat Okita))
MS06-019 - How long before this develops into a self propagating email worm (schanulleke.29172787 at bloglines.com (schanulleke.29172787@...glines.com))
Cisco Security Advisory: AVS TCP Relay Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Response Team))
VISA PCI DSS standard : Good or bad? (ngiles at hushmail.com ( ))
[ MDKSA-2006:084 ] - Updated MySQL packages fix several vulnerabilities (security at mandriva.com (security@...driva.com))
ZDI-06-014: Verisign I-Nav ActiveX Control Code Execution Vulnerability (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
**LosseChange::Debunk it??** (bills at momineen.org (bills@...ineen.org))
**LosseChange::Debunk it??** (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[ MDKSA-2006:085 ] - Updated xine-ui packages fix format string vulnerabilities (security at mandriva.com (security@...driva.com))
Security contact at America Online for an AOL Instant Messenger issue? (kkadow at gmail.com (Kevin))
**LosseChange::Debunk it??** (gem at rellim.com (Gary E. Miller))

May 11 (32 messages)

Security contact at America Online for an AOL Instant Messenger issue? (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Security contact at America Online for an AOL Instant Messenger issue? (feofil at gmail.com (Christian Swartzbaugh))
Security contact at America Online for an AOL Instant Messenger issue? (kkadow at gmail.com (Kevin))
Microsoft MSDTC NdrAllocate Validation Vulnerability (avert at avertlabs.com (Avert))
**LosseChange::Debunk it??** (se_cur_ity at hotmail.com (Morning Wood))
[SECURITY] [DSA 1055-1] New Mozilla Firefox packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
MS06-019 - How long before this develops into a self propagating email worm (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Free antivirus software (softm at yandex.ru (ArsenKirillov))
Free antivirus software (ivanhec at gmail.com (Ivan .))
Free antivirus software (degeneracypressure at gmail.com (Eliah Kagan))
Microsoft MSDTC NdrAllocate Validation Vulnerability (0x80 at hush.ai (0x80@...h.ai))
Free antivirus software (valdis at antivirus.lv (Valdis Shkesters))
RE: Oracle - the last word (jfinley at securium.net (Joseph Finley))
Free antivirus software (geoincidents at nls.net (Geo.))
Free antivirus software (randallm at fidmail.com (Randall M))
[TZO-042006] Insecure Auto-Update and File execution (2) (Thierry at Zoller.lu (Thierry Zoller))
Secunia Research: UltimateZip unacev2.dll Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
[ GLSA 200605-13 ] MySQL: Information leakage (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
MS06-019 - How long before this develops into a self propagating email worm (n3td3v at gmail.com (n3td3v))
MS06-019 - How long before this develops into a self propagating email worm (bkfsec at sdf.lonestar.org (bkfsec))
Free antivirus software (mlande at bellsouth.net (Mary Landesman))
MS06-019 - How long before this develops into a self propagating email worm (n3td3v at gmail.com (n3td3v))
MS06-019 - How long before this develops into a self propagating email worm (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
**LosseChange::Debunk it??** (eisi at security-news.at (eisi@...urity-news.at))
MS06-019 - How long before this develops into a self propagating email worm (n3td3v at gmail.com (n3td3v))
MS06-019 - How long before this develops into aself propagating email worm (davidl at ngssoftware.com (David Litchfield))
**LosseChange::Debunk it??** (gem at rellim.com (Gary E. Miller))
**LosseChange::Debunk it??** (w3bst3r at gmail.com (emmanuel lewis))
Ipswitch WhatsUp Professional multiple flaws (david.maciejak at gmail.com (David Maciejak))
**LosseChange::Debunk it??** (gem at rellim.com (Gary E. Miller))
[EEYEB-20060307] Apple QuickTime FPX Integer Overflow (Advisories at eeye.com (eEye Advisories))
Several flaws in e-business designer (eBD) (pandujar at selfdefense.es (Pedro Andújar))

May 12 (39 messages)

ZDI-06-015: Apple QuickTime H.264 Parsing Heap Overflow Vulnerability (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
Kenshoto Report: IIS 6.0 Remote Exploit PoC (ctf at kenshoto.com (Kenshoto CTF))
Apple QuickTimeStreamingServer RTSP Server Vulnerability [MU-200605-02] (noreply at musecurity.com (noreply@...ecurity.com))
How secure is software X? (davidl at ngssoftware.com (David Litchfield))
How secure is software X? (michaelslists at gmail.com (Michael Silk))
How secure is software X? (davidl at ngssoftware.com (David Litchfield))
Apple QuickTime udta ATOM Heap Overflow (smaillist at gmail.com (Sowhat))
Microsoft MSDTC NdrAllocate Validation Vulnerability (soloaway at gmail.com (. Solo))
How secure is software X? (BlueBoar at thievco.com (Blue Boar))
SEC Consult SA-20060512-0 :: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure (research at sec-consult.com (Bernhard Mueller))
MS06-019 - How long before this develops into a self propagating email worm (schanulleke.29172787 at bloglines.com (schanulleke.29172787@...glines.com))
Should I Be Worried? (rvarada at gmail.com (Rajesh V))
How secure is software X? (eaton.lists at gmail.com (Brian Eaton))
escalating privileges with named pipes (exceed at email.si (/dev/null))
MS Jet Vuln... (evilrabbi at gmail.com (evilrabbi))
How secure is software X? (BlueBoar at thievco.com (Blue Boar))
Apple QuickDraw/QuickTime Multiple Vulnerabilities (avert at avertlabs.com (Avert))
How secure is software X? (eaton.lists at gmail.com (Brian Eaton))
escalating privileges with named pipes (3APA3A at SECURITY.NNOV.RU (3APA3A))
escalating privileges with named pipes (arr at watson.org (Andrew R. Reiter))
escalating privileges with named pipes (3APA3A at SECURITY.NNOV.RU (3APA3A@...URITY.NNOV.RU))
Re: How secure is software X? (adam at homeport.org (Adam Shostack))
How secure is software X? (lucien.fransman at irc2.com (Lucien Fransman))
How secure is software X? (lucien.fransman at irc2.com (Lucien Fransman))
How secure is software X? (sebastian.rother at jpberlin.de (sebastian.rother@...erlin.de))
Black Box Voting's Latest Diebold Report (seth.johnson at RealMeasures.dyndns.org (Seth Johnson))
Re: How secure is software X? (newsham at lava.net (Tim Newsham))
Scientists Call Diebold Security Flaw 'Worst Ever' (stuart at cyberdelix.net (lsi))
**LosseChange::Debunk it??** (bills at momineen.org (bills@...ineen.org))
**LosseChange::Debunk it??** (michealespinola at gmail.com (Micheal Espinola Jr))
Scientists Call Diebold Security Flaw 'Worst Ever' (bkfsec at sdf.lonestar.org (bkfsec))
Scientists Call Diebold Security Flaw 'Worst Ever' (thorpflyer at yahoo.com (Simon Roberts))
RE: How secure is software X? (FergusonJ at nv.doe.gov (Ferguson, Justin (IARC)))
Multiple vulnerabilities in Raydium rev 309 (aluigi at autistici.org (Luigi Auriemma))
Buffer-overflow and NULL pointer crash in Genecys 0.2 (aluigi at autistici.org (Luigi Auriemma))
Server crash in Empire 4.3.2 (aluigi at autistici.org (Luigi Auriemma))
Multiple vulnerabilities in Outgun 1.0.3 bot 2 (aluigi at autistici.org (Luigi Auriemma))
Socket unreachable in GNUnet rev 2780 (aluigi at autistici.org (Luigi Auriemma))
Re: How secure is software X? (pbs-sf at dymaxion.org (Paul B. Saitta))

May 13 (13 messages)

[FLSA-2006:152868] Updated tetex packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:152898] Updated emacs packages fix a security issue (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:152904] Updated ncpfs package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:152923] Updated xloadimage package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:164512] Updated fetchmail packages fix security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
[FLSA-2006:185355] Updated gnupg package fixes security issues (marcdeslauriers at videotron.ca (Marc Deslauriers))
Re: How secure is software X? (davidl at ngssoftware.com (David Litchfield))
How secure is software X? (roman at rs-labs.com (Roman Medina-Heigl Hernandez))
MS06-019 - How long before this develops into a self propagating email worm (thegesus at gmail.com (TheGesus))
How secure is software X? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[ADVISORY] Remote Integer Underflow PHP 4.3.4 Vulnerability -BanSec Industries (mrbabs at gmail.com (MR BABS))
For Bantown, A Poem by Bob. (mrbabs at gmail.com (MR BABS))
Re: How secure is software X? (mhoskins at e2open.com (Mike Hoskins))

May 14 (3 messages)

[ADVISORY] Remote Integer Underflow PHP 4.3.4 Vulnerability -BanSec Industries (mattmurphy at kc.rr.com (Matthew Murphy))
POC exploit for freeSSHd version 1.0.9 (ahmadtauqeer at yahoo.com (Tauqeer Ahmad))
Wargames network. (dusty at smashthestack.org (Dusty))

May 15 (19 messages)

DMA[2006-0514a] - 'ClamAV freshclam incorrect privilege drop' (kf_lists at digitalmunition.com (KF (lists)))
[SECURITY] [DSA 1056-1] New webcalendar packages fix information leak (joey at infodrom.org (Martin Schulze))
DMA[2006-0514a] - 'ClamAV freshclam incorrect privilege drop' (aaacab at gmail.com (aCaB))
RealVNC 4.1.1 Remote Compromise (iamjamesevans at gmail.com (James Evans))
CYBSEC - Security Advisory: Phishing Vector in SAP BC (Business Connector) (lmeiners at cybsec.com (Leandro Meiners))
CYBSEC - Security Advisory: Arbitrary File Read/Delete in SAP BC (Business Connector) (lmeiners at cybsec.com (Leandro Meiners))
RealVNC 4.1.1 Remote Compromise (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
RealVNC 4.1.1 Remote Compromise (wcdixo at aurora.lib.il.us (Dixon, Wayne))
Re: Shell accounts (stevex11 at sbcglobal.net (Steve Kudlak))
Secunia Research: FilZip unacev2.dll Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
[SECURITY] [DSA 1057-1] New phpLDAPadmin packages fix cross-site scripting (joey at infodrom.org (Martin Schulze))
[USN-274-2] MySQL vulnerability (martin.pitt at canonical.com (Martin Pitt))
Novell NDPS Remote Vulnerability (Server & Client) (whatstheaddress at gmail.com (Ryan Smith))
Secunia Research: Abakt ZIP File Handling Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
[USN-284-1] Quagga vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
RealVNC 4.1.1 Remote Compromise (j.schipper at math.uu.nl (Joachim Schipper))
RealVNC 4.1.1 Remote Compromise (michael.holstein at csuohio.edu (Michael Holstein))
Microsoft MSDTC NdrAllocate Validation Vulnerability (0x80 at hush.ai (0x80@...h.ai))
POC exploit for freeSSHd version 1.0.9 (david.maciejak at gmail.com (David Maciejak))

May 16 (20 messages)

Microsoft MSDTC NdrAllocate Validation Vulnerability (soloaway at gmail.com (. Solo))
Breaking LoJack for Laptops (jay.nevins at earthlink.net (Jay Nevins))
re: RealVNC 4.1.1 Remote Compromise (plato at dodgeit.com (plato@...geit.com))
Re: RealVNC 4.1.1 Remote Compromise (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
Microsoft MSDTC NdrAllocate Validation Vulnerability (bart.lansing at hushmail.com (bart.lansing@...hmail.com))
Xfree86 video buffering? (indraveni at yahoo.co.in (Indraveni))
Breaking LoJack for Laptops (michael.holstein at csuohio.edu (Michael Holstein))
vncviewer patched... (evilrabbi at gmail.com (evilrabbi))
vncviewer patched... (sekure at gmail.com (sekure))
vncviewer patched... (fdlist at digitaloffense.net (H D Moore))
vncviewer patched... (evilrabbi at gmail.com (evilrabbi))
vncviewer patched... (evilrabbi at gmail.com (evilrabbi))
ScanAlert Security Advisory (joep at scanalert.com (Joseph Pierini))
Caucho Resin Windows Directory Traversal Vulnerability (advisory at rapid7.com (advisory@...id7.com))
UPDATE: [ GLSA 200605-13 ] MySQL: Information leakage (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
Wireless access points (wilder_jeff at msn.com (wilder_jeff Wilder))
Wireless access points (sbernard at gmu.edu (sbernard@....edu))
ERRATA: [ GLSA 200605-07 ] Nagios: Buffer overflow (jaervosz at gentoo.org (Sune Kloppenborg Jeppesen))
**LosseChange::Debunk it??** (Pete.Simpson at clearswift.com (Pete Simpson))
Breaking LoJack for Laptops (jay.nevins at earthlink.net (Jay Nevins))

May 17 (41 messages)

RealVNC 4.1.1 Remote Compromise (ad at heapoverflow.com (ad@...poverflow.com))
**LosseChange::Debunk it??** (se_cur_ity at hotmail.com (Morning Wood))
**LosseChange::Debunk it??** (pauls at utdallas.edu (pauls@...allas.edu))
iDefense Q2 2006 Vulnerability Challenge (labs-no-reply at idefense.com (labs-no-reply@...fense.com))
Advisory: Quezza BB <= 1.0 File Inclusion Vulnerability. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
**LosseChange::Debunk it??** (duckie37 at gmail.com (ducki3))
**LosseChange::Debunk it??** (duckie37 at gmail.com (ducki3))
**LosseChange::Debunk it??** (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Microsoft MSDTC NdrAllocate Validation Vulnerability (0x80 at hush.ai (0x80@...h.ai))
security open source tools require (lifesaver68 at hotmail.com (adnan habib))
security open source tools require (analyzerx at gmail.com (analyzerx))
blue security folds (ge at linuxbox.org (Gadi Evron))
security open source tools require (subhag.ghosh at gmail.com (subhag ghosh))
Microsoft MSDTC NdrAllocate Validation Vulnerability (rvarada at gmail.com (Rajesh V))
**LosseChange::Debunk it??** (bruen at coldrain.net (bruen@...drain.net))
**LosseChange::Debunk it??** (Pete.Simpson at clearswift.com (Pete Simpson))
Secunia Research: Eazel unacev2.dll Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
Secunia Research: IZArc unacev2.dll Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
**LosseChange::Debunk it??** (c0ntexb at gmail.com (c0ntex))
HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection (h4cky0u.org at gmail.com (h4cky0u))
What's Up Professional Spoofing Authentication Bypass (ken at ftusecurity.com (Kenneth F. Belva))
**LosseChange::Debunk it??** (pauls at utdallas.edu (Paul Schmehl))
**LosseChange::Debunk it??** (pauls at utdallas.edu (Paul Schmehl))
**LosseChange::Debunk it??** (bkfsec at sdf.lonestar.org (bkfsec))
Re: **LosseChange::Debunk it??** (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
**LosseChange::Debunk it??** (Pete.Simpson at clearswift.com (Pete Simpson))
**LosseChange::Debunk it??** (Pete.Simpson at clearswift.com (Pete Simpson))
VNC_bypauth: vnc scanner multithreaded linux & windows (ad at heapoverflow.com (ad@...poverflow.com))
**LosseChange::Debunk it??** (pauls at utdallas.edu (Paul Schmehl))
blue security folds (madams at pacwest.com (Mike Adams))
**LosseChange::Debunk it??** (Pete.Simpson at clearswift.com (Pete Simpson))
**LosseChange::Debunk it??** (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Firefox (with IETab Plugin) Null Pointer Dereferences Bug (debasis.mohanty.listmails at gmail.com (Debasis Mohanty))
blue security folds (prb at lava.net (Peter Besenbruch))
**LosseChange::Debunk it??** (pauls at utdallas.edu (Paul Schmehl))
**LosseChange::Debunk it??** (Pete.Simpson at clearswift.com (Pete Simpson))
Firefox (with IETab Plugin) Null Pointer Dereferences Bug (debasis.mohanty.listmails at gmail.com (Debasis Mohanty))
RE: LOOSE change. LOOSE! (ericscher at mac.com (ericscher@....com))
Two heap overflow in libextractor 0.5.13 (rev 2832) (aluigi at autistici.org (Luigi Auriemma))
What's Up Professional Spoofing Authentication Bypass (david.maciejak at gmail.com (David Maciejak))
CodeScan Advisory: Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload (advisories at codescan.com (CodeScan Labs))

May 18 (29 messages)

ThreatCon at Normal level now - Was: MS06-019 - How long before this develops into a self propagating email worm (juha-matti.laurio at netti.fi (Juha-Matti Lau…)
RE: LOOSE change. LOOSE! (pauls at utdallas.edu (pauls@...allas.edu))
RE: LOOSE change. LOOSE! (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Firefox (with IETab Plugin) Null Pointer Dereferences Bug (debasis.mohanty.listmails at gmail.com (Debasis Mohanty))
RE: LOOSE change. LOOSE! (bscabl at nycap.rr.com (BsCaBl))
blue security folds (nocfed at gmail.com (nocfed))
blue security folds (jeremy at linuxwiz.net (Gaddis, Jeremy L.))
Firefox (with IETab Plugin) Null Pointer Dereferences Bug (perfect.material at gmail.com (PERFECT.MATERIAL))
Xfree86 video buffering? -- HELP PLEASE (indraveni at yahoo.co.in (Indraveni))
blue security folds (michaelslists at gmail.com (Michael Silk))
Multiple Vulns in Bitrix CMS (gogi__ at mail.ru (Gogi The Georgian))
[Info Disclosure] Diesel PHP Job Site Latest Version (diwelf at gmail.com (Matt Gibson))
blue security folds (evilrabbi at gmail.com (evilrabbi))
Firefox (with IETab Plugin) Null Pointer Dereferences Bug (amit_juniperind at yahoo.co.in (Amit Sharma))
CYBSEC - Security Pre-Advisory: Local Privilege Escalation in SAP sapdba Command (lmeiners at cybsec.com (Leandro Meiners))
blue security folds (kyle at randomvoids.com (Kyle Lutze))
RE: LOOSE change. LOOSE! (simon at snosoft.com (Simon Smith))
[SECURITY] [DSA 1058-1] New awstats packages fix arbitrary command execution (joey at infodrom.org (Martin Schulze))
**LosseChange::Debunk it??** (duckhacks at gmail.com (Ducki3))
**LosseChange::Debunk it??** (c0ntexb at gmail.com (c0ntex))
Firefox (with IETab Plugin) Null Pointer Dereferences Bug (joshua.russel at gmail.com (Joshua Russel))
**LosseChange::Debunk it??** (pauls at utdallas.edu (Paul Schmehl))
**LosseChange::Debunk it??** (jptrash at optonline.net (jptrash@...online.net))
RE: LOOSE change. LOOSE! (evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor))
HOTORNOT api engine - any ideas? (evdo.hsdpa at gmail.com (Robert Kim Wireless Internet Advisor))
HOTORNOT api engine - any ideas? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
blue security folds (stevex11 at sbcglobal.net (Steve Kudlak))
[ MDKSA-2006:086 ] - Updated kernel packages fix multiple vulnerabilities (security at mandriva.com (security@...driva.com))
**LosseChange::Debunk it??** (pauls at utdallas.edu (Paul Schmehl))

May 19 (36 messages)

**LosseChange::Debunk it??** (duckhacks at gmail.com (Ducki3))
bluesecurity IS the spammers you fools. Re: blue security folds (donnydark at gmail.com (donnydark))
bluesecurity IS the spammers you fools. Re: blue security folds (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
blue security folds (abuse007 at gmail.com (Abuse 007))
blue security folds (nocfed at gmail.com (nocfed))
Apple Safari 2.0.3 (417.9.3) JavaScript - Denial of Service (yannick.vonarx at yanux.ch (Yannick von Arx))
RealVNC 4.1.1 Remote Compromise (tkrpata at bjs.com (Krpata, Tyler))
Secunia Research: CAM UnZip ZIP File Handling Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
RealVNC 4.1.1 Remote Compromise (ad at heapoverflow.com (ad@...poverflow.com))
RealVNC 4.1.1 Remote Compromise (ad at heapoverflow.com (ad@...poverflow.com))
[SECURITY] [DSA 1059-1] New quagga packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Call for moderation (angray at beeb.net (Aaron Gray))
[SECURITY] [DSA 1060-1] New kernel-patch-vserver packages fix privilege escalation (jmm at debian.org (Moritz Muehlenhoff))
blue security folds (angray at beeb.net (Aaron Gray))
Call for moderation (evilrabbi at gmail.com (evilrabbi))
Call for moderation (michealespinola at gmail.com (Micheal Espinola Jr))
[SECURITY] [DSA 1061-1] New popfile packages fix denial of service (jmm at debian.org (Moritz Muehlenhoff))
Call for moderation (stacksmasher at gmail.com (Stack Smasher))
Call for moderation (measl at mfn.org (J.A. Terranson))
Call for moderation (degeneracypressure at gmail.com (Eliah Kagan))
Call for moderation (degeneracypressure at gmail.com (Eliah Kagan))
Call for moderation (duckhacks at gmail.com (Ducki3))
Call for moderation (ltr at isc.upenn.edu (David Taylor))
Call for moderation (maillists at thelonecoder.com (Stephen Johnson))
[SECURITY] [DSA 1062-1] New kphone packages fix information disclosure (jmm at debian.org (Moritz Muehlenhoff))
Call for moderation (michealespinola at gmail.com (Micheal Espinola Jr))
Call for moderation (SDALAN04 at smumn.edu (Dave Alanis))
Call for moderation (degeneracypressure at gmail.com (Eliah Kagan))
Call for moderation (stevenrakick at yahoo.com (Steven Rakick))
Call for moderation (pauls at utdallas.edu (Paul Schmehl))
Call for moderation (pauls at utdallas.edu (Paul Schmehl))
Call for moderation (steven at lovebug.org (Steven))
Call for moderation (dveditz at cruzio.com (Daniel Veditz))
[SECURITY] [DSA 1063-1] New phpgroupware packages fix execution of arbitrary web script code (jmm at debian.org (Moritz Muehlenhoff))
Call for moderation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
[SECURITY] [DSA 1064-1] New cscope packages fix arbitrary code execution (jmm at debian.org (Moritz Muehlenhoff))

May 20 (13 messages)

Call for moderation (andrew.rse at gmail.com (Andrew Smith))
RealVNC 4.1.1 Remote Compromise (mvenzke at gmail.com (Matt Venzke))
Call for moderation (nocfed at gmail.com (nocfed))
[SECURITY] [DSA 1065-1] New hostapd packages fix denial of service (jmm at debian.org (Moritz Muehlenhoff))
[SECURITY] [DSA 1066-1] New phpbb2 packages fix execution of arbitrary web script code (jmm at debian.org (Moritz Muehlenhoff))
[SECURITY] [DSA 1067-1] New Linux kernel 2.4.16 packages fix several vulnerabilities (jmm at debian.org (Moritz Muehlenhoff))
Call for moderation (don.bailey at gmail.com (Don Bailey))
Call for moderation (security at brvenik.com (Jason))
Re: iDefense Q2 2006 Vulnerability Challenge (peak at argo.troja.mff.cuni.cz (Pavel Kankovsky))
**SPAM** Re: Call for moderation (angray at beeb.net (Aaron Gray))
**SPAM** Re: Call for moderation (angray at beeb.net (Aaron Gray))
[SECURITY] [DSA 1068-1] New fbi packages fix denial of service (jmm at debian.org (Moritz Muehlenhoff))
Black clouds over Sunnyvale go unchecked (n3td3v at gmail.com (n3td3v))

May 21 (35 messages)

Microsoft MSDTC NdrAllocate Validation Vulnerability (0x80 at hush.ai (0x80@...h.ai))
blue security folds (0x80 at hush.ai (0x80@...h.ai))
Microsoft MSDTC NdrAllocate Validation Vulnerability (ad at heapoverflow.com (ad@...poverflow.com))
**LosseChange::Debunk it??** (0x80 at hush.ai (0x80@...h.ai))
ThreatCon at Normal level now - Was: MS06-019 - How long before this develops into a self propagating email worm (0x80 at hush.ai (0x80@...h.ai))
Microsoft MSDTC NdrAllocate Validation Vulnerability (0x80 at hush.ai (0x80@...h.ai))
Mitigating Newly-Reported Microsoft Word Vulnerability (mattmurphy at kc.rr.com (Matthew Murphy))
Call for moderation (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Microsoft MSDTC NdrAllocate Validation Vulnerability (ad at heapoverflow.com (ad@...poverflow.com))
Microsoft MSDTC NdrAllocate Validation Vulnerability (0x80 at hush.ai (0x80@...h.ai))
[SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities (jmm at debian.org (Moritz Muehlenhoff))
**LosseChange::Debunk it??** (stevex11 at sbcglobal.net (Steve Kudlak))
FALSE FLAG Re[2]: **LooseChange::Debunk it??** (donnydark at gmail.com (donnydark))
[SECURITY] [DSA 1070-1] New Linux kernel 2.4.19 packages fix several vulnerabilities (jmm at debian.org (Moritz Muehlenhoff))
Microsoft MSDTC NdrAllocate Validation Vulnerability (barrie at reboot-robot.net (Barrie Dempster))
Cyrus IMAPD pop3d remote compromise aka cyrusFUCK3d (kingcope at gmx.net (kcope))
FALSE FLAG Re[2]: **LooseChange::Debunk it??** (measl at mfn.org (J.A. Terranson))
Insecure call to CreateProcess()/CreateProcessAsUser() (cmorris at cs.odu.edu (Charles Morris))
Five Ways to Screw Up SSL (ginsurabbit at hotmail.com (Ginsu Rabbit))
Insecure call to CreateProcess()/CreateProcessAsUser() (atarasco at gmail.com (Andres Tarasco))
Five Ways to Screw Up SSL (lcamtuf at dione.ids.pl (Michal Zalewski))
FALSE FLAG Re[2]: **LooseChange::Debunk it??** (pauls at utdallas.edu (Paul Schmehl))
Insecure call to CreateProcess()/CreateProcessAsUser() (cmorris at cs.odu.edu (Charles Morris))
[TZO-072006]-Xampp - Multiple Priviledge Escalation (SYSTEM) and Rogue Autostart (Thierry at Zoller.lu (Thierry Zoller))
Insecure call to CreateProcess()/CreateProcessAsUser() (atarasco at gmail.com (Andres Tarasco))
[ GLSA 200605-14 ] libextractor: Two heap-based buffer overflows (dercorny at gentoo.org (Stefan Cornelius))
Insecure call to CreateProcess()/CreateProcessAsUser() (Thierry at Zoller.lu (Thierry Zoller))
[ GLSA 200605-15 ] Quagga Routing Suite: Multiple vulnerabilities (dercorny at gentoo.org (Stefan Cornelius))
[SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities (jmm at debian.org (Moritz Muehlenhoff))
PBNJ 1.14 released (jabra at ccs.neu.edu (Joshua D. Abraham))
FALSE FLAG Re[2]: **LooseChange::Debunk it??** (stevex11 at sbcglobal.net (Steve Kudlak))
Insecure call to CreateProcess()/CreateProcessAsUser() (psz at maths.usyd.edu.au (Paul Szabo))
Five Ways to Screw Up SSL (ginsurabbit at hotmail.com (Ginsu Rabbit))
Responsibility (full-disclosure3 at pchandyman.com.au (Greg))
Flirtlife.de compromised here are the passwords (xxgsgg235 at yahoo.com (asas asasa))

May 22 (48 messages)

FALSE FLAG Re[2]: **LooseChange::Debunk it??** (nexisentertainment at gmail.com (Rob "Nexis" Nelson))
Urgent: For the attention of the intelligence services (n3td3v at gmail.com (n3td3v))
For the attention of Mi5, Mi6 or Symantec (n3td3v at gmail.com (n3td3v))
Skype - URI Handler Command Switch Parsing (brett.moore at security-assessment.com (Brett Moore))
Responsibility (300baud at gmail.com (Line Noise))
Responsibility (pauls at utdallas.edu (Paul Schmehl))
Five Ways to Screw Up SSL (dudevanwinkle at gmail.com (Dude VanWinkle))
I'm ready to tell the police (n3td3v at gmail.com (n3td3v))
I'm ready to tell the police (michaelslists at gmail.com (Michael Silk))
I'm ready to tell the police (n3td3v at gmail.com (n3td3v))
Five Ways to Screw Up SSL (Thierry at Zoller.lu (Thierry Zoller))
The Akamai attacks on Yahoo (n3td3v at gmail.com (n3td3v))
The Akamai attacks on Yahoo (larry at larryseltzer.com (Larry Seltzer))
I'm ready to tell the police (research at sec-consult.com (Bernhard Mueller))
Five Ways to Screw Up SSL (fw at deneb.enyo.de (Florian Weimer))
I'm ready to tell the police (mikie.simpson at gmail.com (Michael Simpson))
For the attention of Mi5, Mi6 or Symantec (massimo at grandmedia.si (...))
[SECURITY] [DSA 1071-1] New MySQL 3.23 packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
For the attention of Mi5, Mi6 or Symantec (nocfed at gmail.com (nocfed))
For the attention of Mi5, Mi6 or Symantec (cmacfarlane at Drummond-Miller.co.uk (Cassidy Macfarlane))
For the attention of Mi5, Mi6 or Symantec (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Prodder Remote Arbitrary Command Execution (release at redteam-pentesting.de (RedTeam Pentesting))
Black clouds over Sunnyvale go unchecked (Ed at unityitservices.co.uk (Edward Pearson))
Black clouds over Sunnyvale go unchecked (c0ntexb at gmail.com (c0ntex))
Perlpodder Remote Arbitrary Command Execution (release at redteam-pentesting.de (RedTeam Pentesting))
REMINDER: DC4420 London meet this Thursday - 25th May (majormal at pirate-radio.org (Major Malfunction))
For the attention of Mi5, Mi6 or Symantec (sean01 at accnet.com.au (Sean Crawford))
I'm ready to tell the police (fd at g-0.org (GroundZero Security))
So tell the police already (Re: I'm ready to tell the police (rowland-wind at comcast.net (Rowland))
Five Ways to Screw Up SSL (tom at electric-sheep.org (Thomas))
Five Ways to Screw Up SSL (michael.holstein at csuohio.edu (Michael Holstein))
Finding Function in IAT tables (andymolinetti at hotmail.com (Andres Molinetti))
The Stakkato Intrusions (wh1t3h4t3 at yahoo.co.uk (Micheal Turner))
Five Ways to Screw Up SSL (dudevanwinkle at gmail.com (Dude VanWinkle))
Five Ways to Screw Up SSL (michael.holstein at csuohio.edu (Michael Holstein))
Re: I'm ready to tell the police (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
Responsibility (sol at haveyoubeentested.org (Sol Invictus))
**SPAM** Re: Call for moderation (bkfsec at sdf.lonestar.org (bkfsec))
[SECURITY] [DSA 1072-1] New Nagios packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Finding Function in Import Address Tables (IATs) (andymolinetti at hotmail.com (Andres Molinetti))
Finding Function in Import Address Tables (IATs) (cseagle at redshift.com (Chris Eagle))
Five Ways to Screw Up SSL (dudevanwinkle at gmail.com (Dude VanWinkle))
[SECURITY] [DSA 1073-1] New MySQL 4.1 packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
Finding Function in Import Address Tables (IATs) (fdlist at digitaloffense.net (H D Moore))
Five Ways to Screw Up SSL (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
ZDI-06-016: Novell eDirectory 8.8 NDS Server Buffer Overflow Vulnerability (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
taking bets (not really) - janus wireless dc14 challenge (coderman at gmail.com (coderman))
Non eXecutable Stack Lovin on OSX86 (kf_lists at digitalmunition.com (KF (lists)))

May 23 (16 messages)

For the attention of Mi5, Mi6 or Symantec (measl at mfn.org (J.A. Terranson))
Five Ways to Screw Up SSL (brian at dessent.net (Brian Dessent))
For the attention of Mi5, Mi6 or Symantec (womber at gmail.com (womber))
[USN-285-1] awstats vulnerability (martin.pitt at canonical.com (Martin Pitt))
Responsibility (massimo at grandmedia.si (...))
Five Ways to Screw Up SSL (dudevanwinkle at gmail.com (Dude VanWinkle))
For the attention of Mi5, Mi6 or Symantec (john.r.bond at gmail.com (John Bond))
Five Ways to Screw Up SSL (eaton.lists at gmail.com (Brian Eaton))
[2006-23-05] Critical Vulnerability - Biometric Devices (joxeanpity at gmail.com (Joxean Koret))
I'm ready to tell the police (exibar at thelair.com (Exibar))
Wireless access points (cwaters at networkchemistry.com (Waters, Chris))
Server termination in netPanzer 0.8 (rev 952) (aluigi at autistici.org (Luigi Auriemma))
Buffer-overflow in the WebTool service of PunkBuster for servers (minor than v1.229) (aluigi at autistici.org (Luigi Auriemma))
Non eXecutable Stack Lovin on OSX86 (hexose.augury at gmail.com (Hexose Augury))
Five Ways to Screw Up SSL (dudevanwinkle at gmail.com (Dude VanWinkle))
VSR Advisory: PDF Tools AG - PDF Form Filling and Flattening Tool Overflow (advisories at vsecurity.com (advisories@...curity.com))

May 24 (12 messages)

Responsibility (scomeau at cansecwest.com (Sean Comeau))
[USN-286-1] Dia vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
(no subject) (itestpens at gmail.com (I Test Pens))
[SECURITY] [DSA 1074-1] New mpg123 packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
Cisco Security Advisory: Windows VPN Client Local Privilege Escalation Vulnerability (psirt at cisco.com (Cisco Systems Product Security Incident Response Team…)
I'm ready to tell the police (reload at gmail.com (Michael))
[ MDKSA-2006:087 ] - Updated kernel packages fixes netfilter SNMP NAT memory corruption (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:088 ] - Updated hostapd package to address DoS vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:089 ] - Updated kphone packages fixes permissions issue with .qt/kphonerc (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:090 ] - Updated shadow-utils packages fix mailbox creation vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:091 ] - Updated php packages fix vulnerabilities (security at mandriva.com (security@...driva.com))
rPSA-2006-0080-1 postgresql postgresql-server (jmforbes at rpath.com (Justin M. Forbes))

May 25 (21 messages)

So tell the police already (Re: I'm ready to tell the police (stevex11 at sbcglobal.net (Steve Kudlak))
I'm ready to tell the police (Note I was goiong to retire from this one but I thought it deserves at least a sensible … (stevex11 at sbcglobal.net (Steve Kudlak…)
For the attention of Mi5, Mi6 or Symantec (stevex11 at sbcglobal.net (Steve Kudlak))
Security speakers are often very good book writers (newslist at security-briefings.com (newslist@...urity-briefings.com))
Security speakers are often very good book writers (lcamtuf at dione.ids.pl (Michal Zalewski))
Security speakers are often very good book writers (maguero at s21sec.com (Marcos Agüero))
Security speakers are often very good book writers (ad at heapoverflow.com (ad@...poverflow.com))
Responsibility (sforrest at hsdwdc.com (Scott Forrest))
Security speakers are often very good book writers (sol at haveyoubeentested.org (Sol Invictus))
Responsibility (michael.holstein at csuohio.edu (Michael Holstein))
New problem in Upload section in ASP service (saiedhackeriran at yahoo.com (saied hackeriran))
Responsibility (sforrest at hsdwdc.com (Scott Forrest))
Responsibility (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
New problem in Upload section in ASP service (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
bypassing Windows Domain Group Policy Objects (alan.cl.wong at nokia.com (alan.cl.wong@...ia.com))
Responsibility (gboyce at badbelly.com (gboyce))
New problem in Upload section in ASP service (c0redump at ackers.org.uk (c0redump@...ers.org.uk))
rPSA-2006-0082-1 vixie-cron (jmforbes at rpath.com (Justin M. Forbes))
rPSA-2006-0082-2 vixie-cron (jmforbes at rpath.com (Justin M. Forbes))
Re: Finding Function in IAT tables (tnagareshwar at gmail.com (Nagareshwar Talekar))
Re: Finding Function in IAT tables (vayalambrones at yahoo.com (Randhir Vayalambrone))

May 26 (37 messages)

VulnSale: Windows Vista Exploit (0x80 at hush.ai (0x80@...h.ai))
XSS Vector at www.titus.de (batchwork at arcor.de (batchwork@...or.de))
XSS Vector at www.emopunk.de (batchwork at arcor.de (batchwork@...or.de))
Using HTML errors to steal MySpace accounts (batchwork at arcor.de (batchwork@...or.de))
ASLR now built into Vista (davidl at ngssoftware.com (David Litchfield))
Finding Function in IAT tables (naveedafzal at gmail.com (naveed))
ASLR now built into Vista (c0ntexb at gmail.com (c0ntex))
Graph analysis of stolen credit cards (phishing at securescience.net (Lance James))
Re: [General-discussion] Graph analysis of stolen credit cards (phishing at securescience.net (Lance James))
Re: [General-discussion] Graph analysis of stolen credit cards (phishing at securescience.net (Lance James))
[SECURITY] [DSA 1075-1] New awstats packages fix arbitrary command execution (joey at infodrom.org (Martin Schulze))
I'm ready to tell the police (stevex11 at sbcglobal.net (Steve Kudlak))
Re: [General-discussion] Graph analysis of stolen credit cards (jm at jmason.org (Justin Mason))
EXIF thumbnails - now with sourcecode (tonu at jes.ee (Tonu Samuel))
Re: [General-discussion] Graph analysis of stolen credit cards (james.mailing at gmail.com (James Eaton-Lee))
Re: [General-discussion] Graph analysis of stolen credit cards (james.mailing at gmail.com (James Eaton-Lee))
ASLR now built into Vista (0x80 at hush.ai (0x80@...h.ai))
Internet Explorer Ver 6.0.2800.1106 vulnerability (kgp.143 at gmail.com (r k))
XSS Vector at www.borussia.de (batchwork at arcor.de (batchwork@...or.de))
EXIF thumbnails - now with sourcecode (kf_lists at digitalmunition.com (KF (lists)))
[SECURITY] [DSA 1076-1] New lynx packages fix denial of service (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 1077-1] New lynx-ssl packages fix denial of service (joey at infodrom.org (Martin Schulze))
VulnSale: Windows Vista Exploit (evilrabbi at gmail.com (evilrabbi))
Re: [apwg] Graph analysis of stolen credit cards (glennhall at discoverfinancial.com (glennhall@...coverfinancial.com))
EXIF thumbnails - now with sourcecode (tonu at jes.ee (Tonu Samuel))
Internet Explorer Ver 6.0.2800.1106 vulnerability (tonu at jes.ee (Tonu Samuel))
Internet Explorer Ver 6.0.2800.1106 vulnerability (ad at heapoverflow.com (ad@...poverflow.com))
Re: [apwg] Graph analysis of stolen credit cards (phishing at securescience.net (Lance James))
Re: [General-discussion] Graph analysis of stolen credit cards (phishing at securescience.net (Lance James))
new symantec vuln (traqbug at gmail.com (Bug Traq))
Internet Explorer Ver 6.0.2800.1106 vulnerability (baiyuanfan at gmail.com (yuanfan bai))
Internet Explorer Ver 6.0.2800.1106 vulnerability (str0ke at milw0rm.com (str0ke))
[ MDKSA-2006:092 ] - Updated mpg123 packages fix DoS vulnerability. (security at mandriva.com (security@...driva.com))
ASLR now built into Vista (3APA3A at SECURITY.NNOV.RU (3APA3A))
rPSA-2006-0083-1 enscript (jmforbes at rpath.com (Justin M. Forbes))
Internet Explorer Ver 6.0.2800.1106 vulnerability (asotirov at determina.com (Alexander Sotirov))
Application Security Hacking Videos (joel at helgeson.com (Joel R. Helgeson))

May 27 (12 messages)

RE: [security] A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. (fractalg at highspeedweb.net (fractalg@...hspeedweb…)
rPSA-2006-0084-1 fetchmail (jmforbes at rpath.com (Justin M. Forbes))
ZH2006-20 SA: CosmicShoppingCart Multiple Vulnerabilities (vympel.br at gmail.com (Vympel))
RE: [security] A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu…)
[SECURITY] [DSA 1078-1] New tiff packages fix denial of service (joey at infodrom.org (Martin Schulze))
Application Security Hacking Videos (davefd at davewking.com (Dave King))
Application Security Hacking Videos (joel at helgeson.com (Joel R. Helgeson))
Application Security Hacking Videos (unknown.pentester at gmail.com (pagvac))
Multiple XSS Vulnerabilities in Tikiwiki 1.9.x (blwood at skynet.be (Raoul))
cURL Safe Mode Bypass PHP 4.4.2 and 5.1.4 (max at jestsuper.pl (Maksymilian Arciemowicz))
RE: [security] A Nasty Security Bug that affectPGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. (phugo at highspeedweb.net (Pedro Hugo))
Re: PGP & Truecrypt "A Nasty Security Bug" (seemyhomepage at katsokotisivuilta.ni (Markus Jansson))

May 28 (18 messages)

I need some backdoor code source (goblin.azrael at gmail.com (azrael goblin))
I need some backdoor code source (jmoreno at salleurl.edu (Joaquim Moreno))
*zeroday warez* MDAEMON LATEST VERSION PREAUTH REMOTE ROOT HOLE *zeroday warez* (kingcope at gmx.net (kcope))
*zeroday warez* MDAEMON LATEST VERSION PREAUTH REMOTE ROOT HOLE *zeroday warez* (ad at heapoverflow.com (ad@...poverflow.com))
Books from security conference speakers ... reloaded ! (newslist at security-briefings.com (newslist@...urity-briefings.com))
A Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8 & 9 (abdulaziz.hariri at balamand.edu.lb (Adbulaziz Hariri))
XSS vuln- swapitshop.com (vulnkiller at fusionnx.com (vulnkiller@...ionnx.com))
Advisory: MiniNuke v2.x Multiple Remote Vulnerabilities (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Advisory: ASPBB <= 0.52 (perform_search.asp) XSS vulnerability (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Advisory: tinyBB <= 0.3 Multiple Remote Vulnerabilities. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Advisory: Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Advisory: F@...e Interactive Web <= 0.8x Multiple Remote Vulnerabilities. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Advisory: phpBB 2.x (admin/admin_hacks_list.php) Local Inclusion Vulnerability. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Advisory: phpBB 2.x (Activity MOD Plus) File Inclusion Vulnerability. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Advisory: ASPSitem <= 2.0 Multiple Vulnerabilities. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Advisory: UBBThreads 5.x, 6.x Multiple File Inclusion Vulnerabilities. (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))
Advisory: Blend Portal <= 1.2.0 for phpBB 2.x (blend_data/blend_common.php) File Inclusion Vulnerability (nukedx at nukedx.com (Mustafa Can Bjorn IPEKCI))

May 29 (38 messages)

I need some backdoor code source (nexisentertainment at gmail.com (Rob "Nexis" Nelson))
Internet Explorer Ver 6.0.2800.1106 vulnerability (0x80 at hush.ai (0x80@...h.ai))
VulnSale: Windows Vista Exploit (0x80 at hush.ai (0x80@...h.ai))
VulnSale: Windows Vista Exploit (angray at beeb.net (Aaron Gray))
VulnSale: Windows Vista Exploit (0x80 at hush.ai (0x80@...h.ai))
Jiwa Financials - Reporting allows execution of arbitrary reports as SQL user with full permissions. (robert at misait.com (Robert Passlow))
[SECURITY] [DSA 1079-1] New MySQL 4.0 packages fix several vulnerabilities (joey at infodrom.org (Martin Schulze))
[SECURITY] [DSA 1080-1] New dovecot packages fix directory traversal (joey at infodrom.org (Steve Kemp))
[SECURITY] [DSA 1081-1] New libextractor packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
[USN-287-1] Nagios vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-288-1] PostgreSQL server/client vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
Latest cron bug, Is opensolaris affected? (sheshka.a at extmedia.com (Sheshka, Alexey))
phpbb blend portal and activity mods at risk (ad at heapoverflow.com (ad@...poverflow.com))
VulnSale: IE 6.0.2900.2180.yeahlatestversion (0x80 at hush.ai (0x80@...h.ai))
VulnSale: IE 6.0.2900.2180.yeahlatestversion (ad at heapoverflow.com (ad@...poverflow.com))
VulnSale: IE 6.0.2900.2180.yeahlatestversion (0x80 at hush.ai (0x80@...h.ai))
VulnSale: Windows Vista Exploit (0x80 at hush.ai (0x80@...h.ai))
Re: Proof of concept that PGP AUTHENTICATION CAN BE BYPASSED WITHOUTPATCHING (h4x0r at ercist.iscas.ac.cn (madsys))
VulnSale: IE 6.0.2900.2180.yeahlatestversion (0xbadedd1e at hush.com (0xbadedd1e@...h.com))
VulnSale: IE 6.0.2900.2180.yeahlatestversion (0x80 at hush.ai (0x80@...h.ai))
*zeroday warez* MDAEMON LATEST VERSION PREAUTH REMOTE ROOT HOLE *zeroday warez* (soloaway at gmail.com (. Solo))
*zeroday warez* MDAEMON LATEST VERSION PREAUTH REMOTE ROOT HOLE *zeroday warez* (soloaway at gmail.com (. Solo))
*zeroday warez* MDAEMON LATEST VERSION PREAUTH REMOTE ROOT HOLE *zeroday warez* (kingcope at gmx.net (kcope))
RE: Advisory: Blend Portal <= 1.2.0 for phpBB 2.x(blend_data/blend_common.php) File Inclusion Vulnerability (austin_inc at hotmail.com (austin best))
VulnSale: IE 6.0.2900.2180.yeahlatestversion (angray at beeb.net (Aaron Gray))
VulnSale: IE 6.0.2900.2180.yeahlatestversion (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
VulnSale: Windows Vista Exploit (drfrancky at securax.org (Javor Ninov))
VulnSale: Windows Vista Exploit (evilrabbi at gmail.com (evilrabbi))
VulnSale: Windows Vista Exploit (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
VulnSale: IE 6.0.2900.2180.yeahlatestversion (angray at beeb.net (Aaron Gray))
Internet Explorer Ver 6.0.2800.1106 vulnerability (drfrancky at securax.org (Javor Ninov))
VulnSale: Windows Vista Exploit (drfrancky at securax.org (Javor Ninov))
RE: Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities (egg at epicdesigns.co.uk (Egg))
[SECURITY] [DSA 1082-1] New Linux kernel 2.4.17 packages fix several vulnerabilities (jmm at debian.org (Moritz Muehlenhoff))
VulnSale: IE 6.0.2900.2180.yeahlatestversion (ad at heapoverflow.com (ad@...poverflow.com))
Internet Explorer Ver6.0.2800.1106 vulnerability (angray at beeb.net (Aaron Gray))
Internet Explorer Ver6.0.2800.1106 vulnerability (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Internet Explorer Ver6.0.2800.1106 vulnerability (c0redump at ackers.org.uk (c0redump@...ers.org.uk))

May 30 (17 messages)

Fwd: Re: FullDisclosure: Security aspects of time synchronization infrastructure (stevex11 at sbcglobal.net (Steve Kudlak))
Internet Explorer Ver6.0.2800.1106 vulnerability (angray at beeb.net (Aaron Gray))
Backdoor in RelevantKnowledge adware (What are we fighting for?) (3APA3A at SECURITY.NNOV.RU (3APA3A))
Backdoor in RelevantKnowledge adware (What are we fighting for?) (sysadmin at agent.co.il (Ag. System Administrator))
[ GLSA 200605-16 ] CherryPy: Directory traversal vulnerability (dercorny at gentoo.org (Stefan Cornelius))
abnormal behavior Gmail logon (chratna at intoto.com (Ratna Kumar Ch))
[ MDKSA-2006:093 ] - Updated dia packages fix string format vulnerabilities. (security at mandriva.com (security@...driva.com))
Re: Backdoor in RelevantKnowledge adware (What are wefighting for?) (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
[ GLSA 200605-17 ] libTIFF: Multiple vulnerabilities (dercorny at gentoo.org (Stefan Cornelius))
abnormal behavior Gmail logon (oscar.fajardo at atosorigin.com (Oscar Fajardo))
abnormal behavior Gmail logon (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
abnormal behavior Gmail logon (oscar.fajardo at atosorigin.com (Oscar Fajardo Sanchez))
abnormal behavior Gmail logon (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
abnormal behavior Gmail logon (oscar.fajardo at atosorigin.com (Oscar Fajardo Sanchez))
abnormal behavior Gmail logon (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
abnormal behavior Gmail logon (eaton.lists at gmail.com (Brian Eaton))
abnormal behavior Gmail logon (oscar.fajardo at ya.com (Oscar Fajardo))

May 31 (18 messages)

Internet Explorer Ver6.0.2800.1106 vulnerability (angray at beeb.net (Aaron Gray))
[SECURITY] [DSA 1083-1] New motor packages fix arbitrary code execution (joey at infodrom.org (Martin Schulze))
abnormal behavior Gmail logon (Ed at unityitservices.co.uk (Edward Pearson))
abnormal behavior Gmail logon (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Internet Explorer Ver6.0.2800.1106 vulnerability (c0redump at ackers.org.uk (c0redump@...ers.org.uk))
GnuPG fun (research at gleg.net (Evgeny Legerov))
abnormal behavior Gmail logon (eaton.lists at gmail.com (Brian Eaton))
SUSE Security Announcement: cron local privilege escalation (SUSE-SA:2006:027) (meissner at suse.de (Marcus Meissner))
abnormal behavior Gmail logon (davidfa at gfi.com (David Farinic))
Secunia Research: Eserv/3 IMAP and HTTP Server Multiple Vulnerabilities (remove-vuln at secunia.com (Secunia Research))
Secunia Research: Rising Antivirus unacev2.dll Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
Secunia Research: ZipCentral ZIP File Handling Buffer Overflow Vulnerability (remove-vuln at secunia.com (Secunia Research))
working contact for 3ware.com? (tonu at jes.ee (Tonu Samuel))
RE: GnuPG fun (info at sigint-consulting.com (Sigint Consulting))
[SECURITY] [DSA 1084-1] New typespeed packages fix arbitrary code execution (skx at debian.org (Steve Kemp))
SUSE Security Announcement: kernel (SUSE-SA:2006:028) (meissner at suse.de (Marcus Meissner))
abnormal behavior Gmail logon (ajaypal at bbsbec.org (Ajay Pal Singh Atwal))
rPSA-2006-0087-1 kernel (jmforbes at rpath.com (Justin M. Forbes))

788 messages