full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2006/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 18	² 15
³ 13	⁴ 21	⁵ 43	⁶ 22	⁷ 19	⁸ 9	⁹ 12
¹⁰ 23	¹¹ 54	¹² 28	¹³ 30	¹⁴ 32	¹⁵ 13	¹⁶ 10
¹⁷ 27	¹⁸ 27	¹⁹ 31	²⁰ 19	²¹ 23	²² 19	²³ 21
²⁴ 47	²⁵ 45	²⁶ 25	²⁷ 26	²⁸ 48	²⁹ 11	³⁰ 14
³¹ 36

Messages by day:

Weird... www.eon8.com (angray at beeb.net (Aaron Gray))
**SPAM** Weird... www.eon8.com (angray at beeb.net (Aaron Gray))
**SPAM** Weird... www.eon8.com (cardosolistas at contraditorium.com (Cardoso))
**SPAM** Weird... www.eon8.com (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
**SPAM** Weird... www.eon8.com (angray at beeb.net (Aaron Gray))
**SPAM** Weird... www.eon8.com (cardosolistas at contraditorium.com (Cardoso))
**SPAM** Weird... www.eon8.com (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
United States Secret Service (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
New member asking question... (measl at mfn.org (J.A. Terranson))
**SPAM** Weird... www.eon8.com (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
More on EON8... (jay at aftinc.net (Jay Buhrt))
Hah, Interesting..... (jay at aftinc.net (Jay Buhrt))
Data Mining Myspace Bulletins (robert.waters.nospam at gmail.com (Robert Waters))
DMA[2006-0628a] - 'Apple OSX launchd unformatted syslog() vulnerability' (kf_lists at digitalmunition.com (K F (lists)))
Drone Armies C&C Report - 30 Jun 2006 (fwd) (ge at linuxbox.org (Gadi Evron))
test (h4rv4n at gmail.com (avan arvan))
Data Mining Myspace Bulletins (fd at g-0.org (GroundZero Security))
United States Secret Service (xploitable at gmail.com (n3td3v))

Data Mining Myspace Bulletins (morgan.s.reed at gmail.com (Morgan Reed))
blog.ncircle.com (reece.mills at charter.net (Reece Mills))
Re: Weird... www.eon8.com (daylasoul at hush.com (daylasoul@...h.com))
Re: Data Mining Myspace Bulletins (daylasoul at hush.com (daylasoul@...h.com))
Re: Data Mining Myspace Bulletins (300baud at gmail.com (Line Noise))
blog.ncircle.com (blsonne at rogers.com (Byron Sonne))
Data Mining Myspace Bulletins (stderr at pandora-security.com (John Hackenger))
Re: Weird... www.eon8.com (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: Weird... www.eon8.com (cardosolistas at contraditorium.com (Cardoso))
blog.ncircle.com (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Multiple vulnerabilities in TK8 Safe v.3.0.5 (clappymonkey at gmail.com (mike kemp))
United States Secret Service (flosofl at gmail.com (Phil Frederick))
United States Secret Service (shyaam at gmail.com (Shyaam))
United States Secret Service (nocfed at gmail.com (nocfed))
United States Secret Service (hdw at kallisti.se (Anders B Jansson))

Undisclosed breach at major US facility (harlequin at earthlink.net (Eric Ericson))
Undisclosed breach at major US facility (harlequin at earthlink.net (Eric Ericson))
Undisclosed breach at major US facility (pauls at utdallas.edu (pauls@...allas.edu))
Undisclosed breach at major US facility (stacksmasher at gmail.com (Stack Smasher))
Undisclosed breach at major US facility (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Cross Site Scripting in Google (rsnake at shocking.com (RSnake))
Undisclosed breach at major US facility (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Undisclosed breach at major US facility (qballus at gmail.com (Q-Ball))
Undisclosed breach at major US facility (michaelslists at gmail.com (mikeiscool))
Undisclosed breach at major US facility (stefan.keller at gmail.com (Stefan Keller))
Touch arbitrary file execute vulnerability (saintlinu at gmail.com (Alex Park))
Google and Yahoo search engine zero-day code (Ed at unityitservices.co.uk (Edward Pearson))
Google and Yahoo search engine zero-day code (seclists at syneticon.de (Denis Jedig))
phpSysInfo arbitrary file identification (wh1t3h4t3 at yahoo.co.uk (Micheal Turner))
phpSysInfo arbitrary file identification (wh1t3h4t3 at yahoo.co.uk (Micheal Turner))
Are consumers being misled by "phishing"? (ge at linuxbox.org (Gadi Evron))
Who should i contact? (screwedbytaxes at hushmail.com (screwedbytaxes@...hmail.com))
Who should i contact? (cardosolistas at contraditorium.com (Cardoso))
Who should i contact? (jstewart at lurhq.com (Joe Stewart))
Who should i contact? (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Who should i contact? (fdlist at digitaloffense.net (H D Moore))
Re: Google and Yahoo search engine zero-day code (davek_throwaway at hotmail.com (Dave "No, not that one" Korn))
Re: [WEB SECURITY] Cross Site Scripting in Google (michaelslists at gmail.com (mikeiscool))
Re: [WEB SECURITY] Cross Site Scripting in Google (bugtraq at cgisecurity.net (bugtraq@...security.net))
Re: Who should i contact? (screwedbytaxes at hushmail.com (screwedbytaxes@...hmail.com))
Juggling with packets (baartt at baartt.com (Bartlomiej Szymanski))
Re: [WEB SECURITY] Cross Site Scripting in Google (rsnake at shocking.com (RSnake))
[ MDKSA-2006:116 ] - Updated kernel packages fixes multiple vulnerabilities (security at mandriva.com (security@...driva.com))
Re: [WEB SECURITY] Cross Site Scripting in Google (xploitable at gmail.com (n3td3v))
Re: Undisclosed breach at major US facility (anothersecurityquestion at gmail.com (r r))
Re: Undisclosed breach at major US facility (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
A new way to hide from Google and Yahoo (xploitable at gmail.com (n3td3v))
A new way to hide from Google and Yahoo (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
A new way to hide from Google and Yahoo (harlequin at earthlink.net (Eric Ericson))
A new way to hide from Google and Yahoo (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
blog.ncircle.com (blsonne at rogers.com (Byron Sonne))
A new way to hide from Google and Yahoo (seclists at syneticon.de (Denis Jedig))
The truth about Rob Levin aka Lilo of irc.freenode.net (benjamin at seattlefenix.net (Benjamin Krueger))
Public Advisory: Horde 3.1.1, 3.0.10 Multiple Security Issues (security at moritz-naumann.com (security@...itz-naumann.com))
The truth about Rob Levin aka Lilo of irc.freenode.net (evilrabbi at gmail.com (evilrabbi))
[USN-308-1] shadow vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-309-1] libmms vulnerability (martin.pitt at canonical.com (Martin Pitt))
[USN-310-1] ppp vulnerability (martin.pitt at canonical.com (Martin Pitt))

July 8 (9 messages)

July 10 (23 messages)

July 11 (54 messages)

New CVE number states Excel Style handling as a separate issue (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
Postfix configuration (dudevanwinkle at gmail.com (Dude VanWinkle))
Vhoning (xploitable at gmail.com (n3td3v))
Phishing Loss Trends For June 2006 (compared against Mar, Apr, May) (phishing at securescience.net (Secure Science June Phishing Loss Trends))
Vhoning (michaelslists at gmail.com (mikeiscool))
Google PR Mechanism Possible Vulnerability (cumhuronat at gmail.com (cumhur onat))
Vhoning (ninjadaito at hushmail.com (ninjadaito@...hmail.com))
Newest Phishing Technique: (joel at helgeson.com (Joel R. Helgeson))
Yahoo IM spoofing (jlay at slave-tothe-box.net (James Lay))
Newest Phishing Technique: (michaelslists at gmail.com (mikeiscool))
Yahoo IM spoofing (p.nolan at comcast.net (Patrick Nolan))
[ MDKA-2006:119 ] - Updated ppp packages fix plugin vulnerability (security at mandriva.com (security@...driva.com))
[ MDKSA-2006:120 ] - Updated samba packages fix DoS vulnerability (security at mandriva.com (security@...driva.com))
Yahoo IM spoofing (se_cur_ity at hotmail.com (Morning Wood))
Newest Phishing Technique: (juha-matti.laurio at netti.fi (Juha-Matti Laurio))
RE: MIMESweeper For Web 5.X Cross Site Scripting (erezmetula at 2bsecure.co.il (Erez Metula))
Re: [WEB SECURITY] Cross Site Scripting in Google (inet_inaddr at yahoo.com (tcp fin))
ERNW Security Advisory 02/2006 - Buffer Overflow in sipXtapi (used in AOL Triton) (mozilla at ids-guide.de (Mailinglists))
Undisclosed breach at major US facility (gluttony at gmail.com (Andrew A))
[USN-311-1] Linux kernel vulnerabilities (martin.pitt at canonical.com (Martin Pitt))
[SECURITY] Plain text password in Finjan Appliance 5100/8100 NG backup file (finde_schwachstelle at gmx.net (finde_schwachstelle@....net))
Fuzzing Microsoft Office (naveedafzal at gmail.com (naveed))
Fuzzing Microsoft Office (ad at heapoverflow.com (ad@...poverflow.com))
Fuzzing Microsoft Office (discojonny at gmail.com (Disco Jonny))
Fuzzing Microsoft Office (naveedafzal at gmail.com (naveed))
Fuzzing Microsoft Office (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Yahoo IM spoofing (ecchien at gmail.com (Eric Chien))
Yahoo IM spoofing (xploitable at gmail.com (n3td3v))
Fuzzing Microsoft Office (discojonny at gmail.com (Disco Jonny))
Fuzzing Microsoft Office (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
Re: [WEB SECURITY] Cross Site Scripting in Google (PPowenski at oag.com (PPowenski@....com))
Google PR Mechanism Possible Vulnerability (bugtraq at cgisecurity.net (bugtraq@...security.net))
70 million computers are using Windows 98 right now (xploitable at gmail.com (n3td3v))
70 million computers are using Windows 98 right now (cardosolistas at contraditorium.com (Cardoso))
70 million computers are using Windows 98 right now (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
70 million computers are using Windows 98 rightnow (larry at larryseltzer.com (Larry Seltzer))
70 million computers are using Windows 98 right now (cardosolistas at contraditorium.com (Cardoso))
70 million computers are using Windows 98 right now (xploitable at gmail.com (n3td3v))
GraceNote CDDB ActiveX Control Vulnerability: Gracenote's Lack of Information is abominable (mnv at alumni.princeton.edu (MNV))
70 million computers are using Windows 98 rightnow (se_cur_ity at hotmail.com (Morning Wood))
70 million computers are using Windows 98 rightnow (larry at larryseltzer.com (Larry Seltzer))
70 million computers are using Windows 98 rightnow (cardosolistas at contraditorium.com (Cardoso))
CYBSEC - Security Pre-Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow (mnunez at cybsec.com (Mariano Nuñez Di Croce))
70 million computers are using Windows 98 right now (xploitable at gmail.com (n3td3v))
70 million computers are using Windows 98rightnow (ACastigliola at unumprovident.com (Castigliola, Angelo))
ZDI-06-022: Microsoft Office Excel File Rebuilding Code Execution Vulnerability (zdi-disclosures at 3com.com (zdi-disclosures@...m.com))
Vhoning (nocfed at gmail.com (nocfed))
70 million computers are using Windows 98rightnow (ron at pirates.armstrong.edu (clarkron))
70 million computers are using Windows 98rightnow (Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu))
(no subject) (bart.lansing at hushmail.com (bart.lansing@...hmail.com))
rPSA-2006-0128-1 samba samba-swat (jmforbes at rpath.com (Justin M. Forbes))
Microsoft SMB Information Disclosure Vulnerability CVE-2006-1315 (David_Marcus at McAfee.com (David_Marcus@...fee.com))
70 million computers are using Windows 98rightnow (clarkron at mail.armstrong.edu (clarkron))
TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability (tsrt at tippingpoint.com (Tippingpoint Security Research Team))

July 12 (28 messages)

July 13 (30 messages)

July 14 (32 messages)

July 15 (13 messages)

July 16 (10 messages)

July 17 (27 messages)

July 18 (27 messages)

July 19 (31 messages)

July 20 (19 messages)

Webspeed remote testing tips? ("Mark Sec" <mark.sec@...il.com>)
Re: Bindiffing Patches (Alexandru Maximciuc <amaximciuc@...defender.com>)
Advisory: Remote command execution in planetGallery (RedTeam Pentesting <release@...team-pentesting.de>)
CodeCrypter mutation engine ("/dev/null" <exceed@...il.si>)
The google source code Bug finder ("E. Kellinis" <manos@...her.org.uk>)
Re: CodeCrypter mutation engine (Valdis.Kletnieks@...edu)
Re: CodeCrypter mutation engine (Thierry Zoller <Thierry@...ler.lu>)
Re: CodeCrypter mutation engine (Valdis.Kletnieks@...edu)
Re[2]: CodeCrypter mutation engine (Thierry Zoller <Thierry@...ler.lu>)
Re: Re[2]: CodeCrypter mutation engine (Valdis.Kletnieks@...edu)
[ MDKSA-2006:129 ] - Updated freetype2 packages fixes overflow vulnerability. (security@...driva.com)
Online code and decode webpage ("Alice Bryson" <abryson@...efocus.com>)
Re: CodeCrypter mutation engine ("/dev/null" <exceed@...il.si>)
Re: Online code and decode webpage (Roman Medina-Heigl Hernandez <roman@...labs.com>)
Re: Bindiffing Patches ("Brendan Dolan-Gavitt" <mooyix@...il.com>)
[ GLSA 200607-07 ] xine-lib: Buffer overflow (Thierry Carrez <koon@...too.org>)
Re: New PowerPoint Trojan installs itself as LSP (Mike Healan <mike@...wareinfo.com>)
Samba Internal Data Structures DOS Vulnerability Exploit ("Alexander Hristov" <joffer@...il.com>)
Michael Lynn ("Andrew A" <gluttony@...il.com>)

July 21 (23 messages)

July 22 (19 messages)

July 23 (21 messages)

July 24 (47 messages)

July 25 (45 messages)

July 26 (25 messages)

July 27 (26 messages)

July 28 (48 messages)

July 29 (11 messages)

July 30 (14 messages)

July 31 (36 messages)

781 messages