full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2006/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 27	² 40	³ 33	⁴ 55	⁵ 12	⁶ 18
⁷ 24	⁸ 28	⁹ 26	¹⁰ 31	¹¹ 45	¹² 29	¹³ 14
¹⁴ 20	¹⁵ 84	¹⁶ 29	¹⁷ 20	¹⁸ 22	¹⁹ 10	²⁰ 9
²¹ 22	²² 15	²³ 20	²⁴ 19	²⁵ 34	²⁶ 16	²⁷ 16
²⁸ 27	²⁹ 35	³⁰ 47	³¹ 16

Messages by day:

August 1 (27 messages)

Re: Do world's famous companies take care of their security? (<uncleron@...hmail.com>)
Re: Do world's famous companies take care of their security? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
[ MDKSA-2006:135 ] - Updated freeciv packages fix DoS vulnerabilities (security@...driva.com)
[vuln.sg] Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability (TAN Chew Keong <vulnpost-remove@...n.sg>)
[USN-327-2] firefox regression (Martin Pitt <martin.pitt@...onical.com>)
OT (joke) Re: Hushmail addresses are being used to impersonate n3td3v (Charlie Harvey <charlie@...pleandplanet.org>)
Re: OT (joke) Re: Hushmail addresses are being used to impersonate n3td3v (mikeiscool <michaelslists@...il.com>)
[SECURITY] [DSA 1131-1] New apache package fix buffer overflow (Steve Kemp <skx@...ian.org>)
[ GLSA 200608-01 ] Apache: Off-by-one flaw in mod_rewrite (Matthias Geerdsen <vorlon@...too.org>)
Re: Lamest people you know (WAS: n3td3v please shutup, please shutup.) ("Michael Simpson" <mikie.simpson@...il.com>)
[SECURITY] [DSA 1132-1] New apache2 packages fix buffer overflow (Steve Kemp <skx@...ian.org>)
Re: OT (joke) Re: Hushmail addresses are being used to impersonate n3td3v (Valdis.Kletnieks@...edu)
VMSA-2006-0004 Cross site scripting vulnerability and other fixes (VMware Security Team <security@...are.com>)
[SECURITY] [DSA 1130-1] New sitebar packages fix cross-site scripting (joey@...odrom.org (Martin Schulze))
Re: Do world's famous companies take care of their security? ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
Re: 70 million computers are using Windows 98 right now ("Eliah Kagan" <degeneracypressure@...il.com>)
Re: 70 million computers are using Windows 98 right now ("Micheal Espinola Jr" <michealespinola@...il.com>)
Drone Armies C&C Report - 01 Aug 2006 (c2report@...tf.org)
[ MDKSA-2006:136 ] - Updated kdegraphics packages fix multiple libtiff vulnerabilities (security@...driva.com)
[ MDKSA-2006:137 ] - Updated libtiff packages fix multiple vulnerabilities (security@...driva.com)
AxMan ActiveX Fuzzer (H D Moore <fdlist@...italoffense.net>)
[SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code (Moritz Muehlenhoff <jmm@...ian.org>)
Unsubscribe ("Stephen Walker" <swalker@...kertek.com>)
Re: 70 million computers are using Windows 98 right now ("Eliah Kagan" <degeneracypressure@...il.com>)
DMA[2006-0801a] - 'Apple OSX fetchmail buffer overflow' ("K F (lists)" <kf_lists@...italmunition.com>)
rPSA-2006-0142-1 libtiff ("Justin M. Forbes" <jmforbes@...th.com>)
EEYE: research.eeye.com ("Marc Maiffret" <mmaiffret@...e.com>)

August 2 (40 messages)

Re: EEYE: research.eeye.com ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: EEYE: research.eeye.com ("Marc Maiffret" <mmaiffret@...e.com>)
EEYE Comments ("Josh L. Perrymon" <joshuaperrymon@...il.com>)
Distributed Fuzzing? ("CrYpTiC MauleR" <crypticmauler@...uxmail.org>)
[SECURITY] [DSA 1134-1] New Mozilla Thunderbird packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
Re: Distributed Fuzzing? (Nick FitzGerald <nick@...us-l.demon.co.uk>)
[SECURITY] [DSA 1135-1] New libtunepimp packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: 70 million computers are using Windows 98 right now (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
FYI: Pay for disclosure (Thierry Zoller <Thierry@...ler.lu>)
Re: JavaScript port scanning (TheGesus <thegesus@...il.com>)
Re: FYI: Pay for disclosure ("Alice Bryson <abryson@...efocus.com>" <abryson@...efocus.com>)
Re: JavaScript port scanning ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: JavaScript port scanning ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Content Management Framework "G3" - XSS Vulnerability in Search Function ("Stefan Friedli" <stefan.friedli.list@...il.com>)
Re: JavaScript port scanning ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Secunia Research: Jetbox Multiple Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
world governments and aid agencies at risk because of bbc (n3td3v <xploitable@...il.com>)
Re: world governments and aid agencies at risk because of bbc (Denis Jedig <seclists@...eticon.de>)
[SECURITY] [DSA 1136-1] New gpdf packages fix denial of service (joey@...odrom.org (Martin Schulze))
FD Charter (Matt Burnett <marukka@....com>)
Re: FD Charter ("Stack Smasher" <stacksmasher@...il.com>)
Re: world governments and aid agencies at risk because of bbc (Juergen Fiedler <juergen@...dlerfamily.net>)
Re: FD Charter (morla <morla@...cksucht.de>)
Re: FD Charter (Denis Jedig <seclists@...eticon.de>)
[SECURITY] [DSA 1137-1] New tiff packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
Re: FD Charter ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: FYI: Pay for disclosure (Denis Jedig <seclists@...eticon.de>)
Re: FD Charter (morla <morla@...cksucht.de>)
rPSA-2006-0143-1 gnupg ("Justin M. Forbes" <jmforbes@...th.com>)
[SECURITY] [DSA 1138-1] New cfs packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
[USN-330-1] tiff vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
XSS at Netcraft.com ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
Re[2]: FYI: Pay for disclosure (Thierry Zoller <Thierry@...ler.lu>)
Re: XSS at Netcraft.com (Denis Jedig <seclists@...eticon.de>)
Re: XSS at Netcraft.com ("Pigrelax" <Pigrelax@...dex.ru>)
Re: Re: XSS at Netcraft.com ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
Re: Re: XSS at Netcraft.com (Saeed Abu Nimeh <drellman@...mail.com>)
Re: Re[2]: FYI: Pay for disclosure ("John Dietz" <www.whitewolf@...il.com>)
Re: FYI: Pay for disclosure (Cory <snort@...tras.com>)
Re: FD Charter ("Peter Dawson" <slash.pd@...il.com>)

August 3 (33 messages)

Re: FD Charter (<ninjadaito@...hmail.com>)
NGOs and information security (Mark Carey-Smith <m.careysmith@...dent.qut.edu.au>)
XSS in Ohloh.net (codeslag <codeslag@...il.com>)
Re: Re: XSS at Netcraft.com (Denis Jedig <seclists@...eticon.de>)
HackingRFID group ("Josh L. Perrymon" <joshuaperrymon@...il.com>)
Re: HackingRFID group (mikeiscool <michaelslists@...il.com>)
Re: 70 million computers are using Windows 98 right now (wac <waldoalvarez00@...il.com>)
[USN-331-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-332-1] gnupg vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Invitation WH06 (Security Conferences) ("Francisco Caballero" <mitrein@...il.com>)
Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released ("William A. Rowe, Jr." <wrowe@...e-clan.net>)
Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released ("Philip M. Gollucci" <pgollucci@...7g8.com>)
Secunia Research: PC Tools AntiVirus Insecure Default Directory Permissions (Secunia Research <remove-vuln@...unia.com>)
hack this zine #4: zen and the art of non-disclosure ("Whooka de HackThisSite.org" <whooka@...il.com>)
Re: HackingRFID group ("Peter Dawson" <slash.pd@...il.com>)
Re: hack this zine #4: zen and the art of non-disclosure ("teh kids" <tehkids@...glemail.com>)
[DRUPAL-SA-2006-011] Drupal 4.7.3 / 4.6.9 fixes XSS issue (Uwe Hermann <uwe@...mann-uwe.de>)
Re: hack this zine #4: zen and the art of non-disclosure (Valdis.Kletnieks@...edu)
[SECURITY] [DSA 1139-1] New ruby1.6 packages fix privilege escalation (Moritz Muehlenhoff <jmm@...ian.org>)
[ GLSA 200608-02 ] Mozilla SeaMonkey: Multiple vulnerabilities (Stefan Cornelius <dercorny@...too.org>)
[SECURITY] [DSA 1140-1] New GnuPG packages fix denial of service (joey@...odrom.org (Martin Schulze))
XSS at Symantec.com ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
[ GLSA 200608-03 ] Mozilla Firefox: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
[ GLSA 200608-04 ] Mozilla Thunderbird: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
Re: HackingRFID group ("Josh L. Perrymon" <joshuaperrymon@...il.com>)
GaesteChaos <= 0.2 Multiple Vulnerabilities (Tamriel <tamriel@....net>)
CounterChaos <= 0.48c SQL Injection Vulnerability (Tamriel <tamriel@....net>)
GeheimChaos <= 0.5 Multiple SQL Injection Vulnerabilities (Tamriel <tamriel@....net>)
XSS funtime (codeslag <codeslag@...il.com>)
Al-Qaeda fund raisers identified ("Randall M" <randallm@...mail.com>)
Re: XSS funtime (Dan B <dan-fd@...ox.org>)
Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released (Steve VanDevender <stevev@...adecimal.uoregon.edu>)
Re: XSS funtime (SkyOut <sky_out@....net>)

August 4 (55 messages)

ARES 2007: Call for workshop proposals, deadline Sept 10, 2006 ("Manh Tho" <manhthovn@...il.com>)
Attacking the local LAN via XSS ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: Attacking the local LAN via XSS ("Peter Dawson" <slash.pd@...il.com>)
Limited Google access in China. ("Alice Bryson <abryson@...efocus.com>" <abryson@...efocus.com>)
Re: Limited Google access in China. (Carlos Cardoso <cardosolistas@...traditorium.com>)
Re: Limited Google access in China. ("Peter Dawson" <slash.pd@...il.com>)
[SECURITY] [DSA 1141-1] New GnuPG2 packages fix denial of service (joey@...odrom.org (Martin Schulze))
[ GLSA 200608-05 ] LibVNCServer: Authentication bypass (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200608-06 ] Courier MTA: Denial of Service vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[SECURITY] [DSA 1142-1] New freeciv packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: Attacking the local LAN via XSS (Georgi Guninski <guninski@...inski.com>)
Re: Attacking the local LAN via XSS (Schanulleke <schalulleke@...il.com>)
Yahoo messenger file extension spoof vulnerability (Ivan Ivan <ivancool2003@...oo.com.ar>)
Re: Attacking the local LAN via XSS ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: Attacking the local LAN via XSS (Siim Põder <windo@...rad-teel.net>)
RE: XSS funtime ("Edward Pearson" <Ed@...tyitservices.co.uk>)
[SECURITY] [DSA 1143-1] New dhcp packages fix denial of service (joey@...odrom.org (Martin Schulze))
Re: Attacking the local LAN via XSS ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: Attacking the local LAN via XSS ("Zed Qyves" <zqyves.spamtrap@...il.com>)
Re: Attacking the local LAN via XSS (Thierry Zoller <Thierry@...ler.lu>)
Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01] (Matthew Hall <lists@...c.co.uk>)
Re: Attacking the local LAN via XSS ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: Attacking the local LAN via XSS ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: Attacking the local LAN via XSS (Thor Larholm <thor@...ypath.com>)
Re[2]: Attacking the local LAN via XSS (Thierry Zoller <Thierry@...ler.lu>)
Re: Attacking the local LAN via XSS ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: Re[2]: Attacking the local LAN via XSS ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
ProtectFly/RegisterFly - Whois information - Non-Disclosure legal?? (Dan B <dan-fd@...ox.org>)
Gmail emails issue (6ackpace <6ackpace@...il.com>)
Re: ProtectFly/RegisterFly - Whois information - Non-Disclosure legal?? (Thierry Zoller <Thierry@...ler.lu>)
Nice Wordlist - Google (Thierry Zoller <Thierry@...ler.lu>)
Re[2]: ProtectFly/RegisterFly - Whois information - Non-Disclosure legal?? (Thierry Zoller <Thierry@...ler.lu>)
linksys WRT54g authentication bypass ("Ginsu Rabbit" <ginsurabbit@...mail.com>)
Re: Gmail emails issue ("Stan Bubrouski" <stan.bubrouski@...il.com>)
Re: Gmail emails issue ("Thomas Pollet" <thomas.pollet@...il.com>)
Re: Gmail emails issue ("Peter Dawson" <slash.pd@...il.com>)
CAID 34509 - CA eTrust Antivirus WebScan vulnerabilities ("Williams, James K" <James.Williams@...com>)
XSS vulnerability at Symantec.com #2 ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
Re: Gmail emails issue ("John Dietz" <www.whitewolf@...il.com>)
Re: XSS vulnerability at Symantec.com #2 (Frederic Charpentier <fcharpen@...opartners.com>)
Re: XSS vulnerability at Symantec.com #2 ("Pigrelax" <Pigrelax@...dex.ru>)
Re: Gmail emails issue (n3td3v <xploitable@...il.com>)
Re: Gmail emails issue (Denis Jedig <seclists@...eticon.de>)
Re: Re: Gmail emails issue ("L. Victor" <fullblaststorm@...il.com>)
Re: Re: Gmail emails issue ("John Dietz" <www.whitewolf@...il.com>)
Re: ProtectFly/RegisterFly - Whois information - Non-Disclosure legal?? (Nancy Kramer <nekramer@...dtheater.net>)
Re: Re: Gmail emails issue ("Peter Dawson" <slash.pd@...il.com>)
Re: ProtectFly/RegisterFly - Whois information - Non-Disclosure legal?? ("Peter Dawson" <slash.pd@...il.com>)
Re: linksys WRT54g authentication bypass ("Shawn Merdinger" <shawnmer@...il.com>)
Re: Gmail emails issue (n3td3v <xploitable@...il.com>)
Will Microsoft patch remarkable old Msjet40.dll issue? (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Gmail emails issue ("Peter Dawson" <slash.pd@...il.com>)
[ GLSA 200608-07 ] libTIFF: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Lesstif insecure file creation while executing setuid libXm linked binaries vuln (Karol Wiesek <karol@...sek.pl>)
AUTODAFE: an Act of Software Torture [FUZZER] (Martin Vuagnoux <fulldisclosure@...gnoux.com>)

August 5 (12 messages)

Re: AUTODAFE: an Act of Software Torture [FUZZER] (Dan B <dan-fd@...ox.org>)
PHPCodeCabinet Vulnerability (Minion <minionqb@...il.com>)
Re: n3td3v yahoo crap ("Mike M" <mkmaxx@...il.com>)
when will AV vendors fix this??? ("Bipin Gautam" <gautam.bipin@...il.com>)
Re: when will AV vendors fix this??? (Denis Jedig <seclists@...eticon.de>)
[ GLSA 200608-08 ] GnuPG: Integer overflow vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: ProtectFly/RegisterFly - Whoisinformation - Non-Disclosure legal?? (The Shadow <shadow@...k-guy.com>)
Re: Gmail emails issue ("L. Victor" <fullblaststorm@...il.com>)
Old, php fileupload overflow vuln - need help. (czubakabra <czubakabra@...pl>)
LONG LIVE HEZBOLLAH AND LEBANON; DOWN WITH AMERICA AND ISRAEL ("stop killing civilians" <stopkillingcivilians@...glemail.com>)
Re: LONG LIVE HEZBOLLAH AND LEBANON; DOWN WITH AMERICA AND ISRAEL ("J.A. Terranson" <measl@....org>)
Re: Gmail emails issue (wac <waldoalvarez00@...il.com>)

August 6 (18 messages)

0-day XP SP2 wmf exploit (cyanid-E <biz4rre@...il.com>)
Re: LONG LIVE HEZBOLLAH AND LEBANON; DOWN WITH AMERICA AND ISRAEL ("Alice Bryson <abryson@...efocus.com>" <abryson@...efocus.com>)
Re: LONG LIVE HEZBOLLAH AND LEBANON; DOWN WITH AMERICA AND ISRAEL ("ad@...poverflow.com" <ad@...poverflow.com>)
Re: LONG LIVE HEZBOLLAH AND LEBANON; DOWN WITH AMERICA AND ISRAEL ("Peter Dawson" <slash.pd@...il.com>)
Re: ProtectFly/RegisterFly - Whoisinformation - Non-Disclosure legal?? (Nancy Kramer <nekramer@...dtheater.net>)
Re: LONG LIVE HEZBOLLAH AND LEBANON; DOWN WITH AMERICA AND ISRAEL (A.L.M.Buxey@...ro.ac.uk)
bugs ("Thomas Pollet" <thomas.pollet@...il.com>)
Re: 0-day XP SP2 wmf exploit (FuLLBLaSTstorm <fullblaststorm@...il.com>)
Re: 0-day XP SP2 wmf exploit ("ad@...poverflow.com" <ad@...poverflow.com>)
PHP: Zend_Hash_Del_Key_Or_Index Vulnerability (Stefan Esser <sesser@...dened-php.net>)
[ GLSA 200608-09 ] MySQL: Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Multiple vulnerabilities in DConnect Daemon 0.7.0 (CVS 30 Jul 2006) (Luigi Auriemma <aluigi@...istici.org>)
[ GLSA 200608-10 ] pike: SQL injection vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200608-11 ] Webmin, Usermin: File Disclosure (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: Re: when will AV vendors fix this??? ("<...>" <massimo@...ndmedia.si>)
Re: Re: when will AV vendors fix this??? (<hatless@...h.ai>)
Re: Hushmail addresses are being used toimpersonate n3td3v ("<...>" <massimo@...ndmedia.si>)
0-day XP SP2 wmf exploit (some details) (cyanid-E <biz4rre@...il.com>)

August 7 (24 messages)

XSS at Securityfocus.com ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
security vendor xss ("Thomas Pollet" <thomas.pollet@...il.com>)
sample of junk/spam sms ("average coder" <averagecoder@...il.com>)
[vuln.sg] Lhaz LHA Long Filename Buffer Overflow Vulnerability (TAN Chew Keong <vulnpost-remove@...n.sg>)
Re: sample of junk/spam sms ("ol" <ol@...on.org>)
[SECURITY] [DSA 1144-1] New chmlib packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
AOL data being mirrored everywhere ("kaiser scapegoat" <kaiser_scapegoat@...mail.com>)
TSRT-06-05: Computer Associates eTrust AntiVirus WebScan Automatic Update Code Execution Vulnerability (TSRT@...m.com)
TSRT-06-06: Computer Associates eTrust AntiVirus WebScan Manifest Processing Buffer Overflow Vulnerability (TSRT@...m.com)
[ GLSA 200608-12 ] x11vnc: Authentication bypass in included LibVNCServer code (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: when will AV vendors fix this??? (Marius Huse Jacobsen <mahuja@....net>)
Re: when will AV vendors fix this??? (Bryan <bryan.madhatter@...il.com>)
RE: when will AV vendors fix this??? ("Thomas D." <whistl0r@...glemail.com>)
Re: RE: when will AV vendors fix this??? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
micosoft.com xss ("Thomas Pollet" <thomas.pollet@...il.com>)
real time endpoint remediation in enterprise networks ("Tony Felice" <afelice@...il.com>)
Re: when will AV vendors fix this??? (Paul Schmehl <pauls@...allas.edu>)
[EEYEB-20060719] McAfee Subscription Manager Stack Buffer Overflow ("eEye Advisories" <Advisories@...e.com>)
rPSA-2006-0147-1 mysql mysql-bench mysql-server ("Justin M. Forbes" <jmforbes@...th.com>)
RE: RE: when will AV vendors fix this??? ("Thomas D." <whistl0r@...glemail.com>)
Re: LONG LIVE HEZBOLLAH AND LEBANON; DOWN WITH AMERICA AND ISRAEL (morla <morla10111@...glemail.com>)
BlackBerry Vulnerabilities ("[phantom]" <lostzero@...il.com>)
[SECURITY] [DSA 1145-1] New freeradius packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Attacking the local LAN via XSS (Nikolay Kubarelov <admin@...mophon.com>)

August 8 (28 messages)

Re: when will AV vendors fix this??? ("Bipin Gautam" <gautam.bipin@...il.com>)
Re: Re: micosoft.com xss ("Mad World" <penetrator@...e.in.th>)
Re: AOL data being mirrored everywhere ("Mike M" <mkmaxx@...il.com>)
Re: Re: micosoft.com xss ("Thomas Pollet" <thomas.pollet@...il.com>)
microsoft.com xss #2 ("Thomas Pollet" <thomas.pollet@...il.com>)
mysearch.myway.com XSS (codeslag <codeslag@...il.com>)
Re: Re: micosoft.com xss ("Mad World" <penetrator@...e.in.th>)
Re: Attacking the local LAN via XSS ("Dude VanWinkle" <dudevanwinkle@...il.com>)
paypal.com xss (was Re: micosoft.com xss) ("Thomas Pollet" <thomas.pollet@...il.com>)
[ GLSA 200608-13 ] ClamAV: Heap buffer overflow (Matthias Geerdsen <vorlon@...too.org>)
XSSing the Lan 3 (web trojans.. not a new idea) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
FCE Ultra buffer overflow, yet another local exploit without any fancy stuff. ("KaiJern, Lau" <xwings@...ngs.net>)
Re: Re: micosoft.com xss ("Mad World" <penetrator@...e.in.th>)
TSRT-06-07: eIQnetworks Enterprise Security Analyzer Monitoring Agent Buffer Overflow Vulnerabilities (TSRT@...m.com)
ZDI-06-026: Microsoft Internet Explorer Multiple CSS Imports Memory Corruption Vulnerability (zdi-disclosures@...m.com)
ZDI-06-027: Microsoft Internet Explorer CSS Class Ordering Memory Corruption Vulnerability (zdi-disclosures@...m.com)
ERRATA: [ GLSA 200608-08 ] GnuPG: Integer overflow vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
TSRT-06-08: Microsoft Internet Help COM Object Memory Corruption Vulnerability (TSRT@...m.com)
TSRT-06-09: Microsoft DirectAnimation COM Object Memory Corruption Vulnerability (TSRT@...m.com)
TSRT-06-10: Microsoft HLINK.DLL Hyperlink Object Library Buffer Overflow Vulnerability (TSRT@...m.com)
Much Ado Over Whether Lieberman Campaign Site Was Hacked ("kaiser scapegoat" <kaiser_scapegoat@...mail.com>)
[ISR] - Novell Groupwise Webaccess (Cross-Site Scripting) ("Francisco Amato" <famato@...obyte.com.ar>)
Microsoft PowerPoint Malformed Record Memory Corruption (Sowhat <smaillist@...il.com>)
[ GLSA 200608-14 ] DUMB: Heap buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: Much Ado Over Whether Lieberman Campaign Site Was Hacked (Rowland <rowland-wind@...cast.net>)
Re: Much Ado Over Whether Lieberman CampaignSite Was Hacked ("kaiser scapegoat" <kaiser_scapegoat@...mail.com>)
Re: Much Ado Over Whether Lieberman Campaign Site Was Hacked (Philosophil <flosofl@...il.com>)
Re: Will Microsoft patch remarkable old Msjet40.dll issue? (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

August 9 (26 messages)

Re: Re: micosoft.com xss ("Thomas Pollet" <thomas.pollet@...il.com>)
[ MDKSA-2006:138 ] - Updated clamav packages fix vulnerability (security@...driva.com)
SmartSiteCMS v1.0 authentication bypass (Paulino Calderon <nah@...kea.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
[SECURITY] [DSA 1146-1] New krb5 packages fix privilege escalation (joey@...odrom.org (Martin Schulze))
Latinchat Denial Of Service (Vicente Perez <vp.vicenteperez@...il.com>)
Netscape browser contact (Florian Weimer <fw@...eb.enyo.de>)
[USN-333-1] libwmf vulnerability (Martin Pitt <martin.pitt@...onical.com>)
more on browser trust ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: TSRT-06-05: Computer Associates eTrust AntiVirus WebScan Automatic Update Code Execution Vulnerability (Denis Jedig <seclists@...eticon.de>)
[Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow (pucik@...rflow.pl)
Use Google to discover web attacks ("3uBi3u" <security@...htmail.ru>)
rPSA-2006-0150-1 krb5 krb5-server krb5-services krb5-test krb5-workstation ("Justin M. Forbes" <jmforbes@...th.com>)
Exploit for MS06-040 Out? ("Matt Davis" <stackinjection@...il.com>)
PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service ("Collin R. Mulliner" <collin@...aversion.net>)
RE: Exploit for MS06-040 Out? ("Joris Evers" <Joris.Evers@...t.com>)
Re: Exploit for MS06-040 Out? (H D Moore <fdlist@...italoffense.net>)
Re: Exploit for MS06-040 Out? (Dave Aitel <dave@...unityinc.com>)
Re: Exploit for MS06-040 Out? ("Matt Davis" <stackinjection@...il.com>)
[ MDKSA-2006:139 ] - Updated krb5 packages fix local privilege escalation vulnerability (security@...driva.com)
[SECURITY] [DSA 1148-1] New gallery packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Stack and heap overflows in MODPlug Tracker/OpenMPT 1.17.02.43 and libmodplug 0.8 (Luigi Auriemma <aluigi@...istici.org>)
[ MDKSA-2006:140 ] - Updated ncompress packages fix vulnerability (security@...driva.com)
Multiple buffer-overflows in AlsaPlayer 0.99.76 (Luigi Auriemma <aluigi@...istici.org>)
Latinchat Denial Of Service (Vicente Perez <vp.vicenteperez@...il.com>)
[SECURITY] [DSA 1147-1] New drupal packages fix cross-site scripting (Moritz Muehlenhoff <jmm@...ian.org>)

August 10 (31 messages)

Server Redundancy ("Sec Bas" <secbas@...il.com>)
Re: Server Redundancy ("Gary E. Miller" <gem@...lim.com>)
If we can read 19, 832 n3td3v posts, we can do 1 open hate mail to Lieberman! ("J.A. Terranson" <measl@....org>)
Re: Exploit for MS06-040 Out? (Ivan Arce <ivan.arce@...esecurity.com>)
Re: Exploit for MS06-040 Out? (Valdis.Kletnieks@...edu)
Full packet inspection (Michael Gale <michael.gale@...on.com>)
[SECURITY] [DSA 1149-1] New ncompress packages fix potential code execution (joey@...odrom.org (Martin Schulze))
NNTP and Yahoo IM conflict (NTR <ntr@...oto.com>)
Tabloid phone-tapping net widens ("lsi" <stuart@...erdelix.net>)
Re: NNTP and Yahoo IM conflict (mikeiscool <michaelslists@...il.com>)
EEYE: Free scanning tool for critical MS06-040 flaw ("Marc Maiffret" <mmaiffret@...e.com>)
Re: Exploit for MS06-040 Out? (H D Moore <fdlist@...italoffense.net>)
RE: Use Google to discover web attacks ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
Exploit for MS06-040 Out? (Matt Davis) (Joxean Koret <joxeankoret@...oo.es>)
Re: Server Redundancy (wac <waldoalvarez00@...il.com>)
Re: Exploit for MS06-040 Out? (David Taylor <ltr@....upenn.edu>)
Re: Server Redundancy (h3rcul3s@...tmail.in)
Re: Exploit for MS06-040 Out? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Exploit for MS06-040 Out? (H D Moore <fdlist@...italoffense.net>)
Hotmail/MSN Cross Site Scripting Vulnerability (simo@...x.org)
Re: Attacking the local LAN via XSS (Florian Weimer <fw@...eb.enyo.de>)
[ GLSA 200608-15 ] MIT Kerberos 5: Multiple local privilege escalation (Raphael Marichez <falco@...too.org>)
Re: Tabloid phone-tapping net widens (Markus Jansson <seemyhomepage@...sokotisivuilta.ni>)
RE: Use Google to discover web attacks ("Valery Marchuk" <tecklord@...uritylab.ru>)
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Denial of Service (Mariano Nuñez Di Croce <mnunez@...sec.com>)
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Buffer Overflow (Mariano Nuñez Di Croce <mnunez@...sec.com>)
[ GLSA 200608-16 ] Warzone 2100 Resurrection: Multiple buffer overflows (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200608-17 ] libwmf: Buffer overflow vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200608-18 ] Net::Server: Format string vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200608-19 ] WordPress: Privilege escalation (Raphael Marichez <falco@...too.org>)
h0 n0 (anonymous.0ca614f0b2@...nymousSpeech.com)

August 11 (45 messages)

Top sites for Application security news ("KT" <ktriv3di@....com>)
Re: Top sites for Application security news (mikeiscool <michaelslists@...il.com>)
Re: Top sites for Application security news ("Ivan ." <ivanhec@...il.com>)
RE: RE: when will AV vendors fix this??? ("Dmitry Yu. Bolkhovityanov" <D.Yu.Bolkhovityanov@....nsk.su>)
UPDATE: [ GLSA 200511-12 ] Scorched 3D: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Re: Server Redundancy (Siim Põder <windo@...rad-teel.net>)
live.com xss ("Thomas Pollet" <thomas.pollet@...il.com>)
msn.com xss ("Thomas Pollet" <thomas.pollet@...il.com>)
(Fwd) CWD--Save the Nation; Eat a hacker ("lsi" <stuart@...erdelix.net>)
apple.com xss ("Thomas Pollet" <thomas.pollet@...il.com>)
Re: apple.com xss ("Thomas Pollet" <thomas.pollet@...il.com>)
Re: BlackBerry Vulnerabilities (Nicolas RUFF <nicolas.ruff@...il.com>)
Re: [WEB SECURITY] Re: Top sites for Application security news (bugtraq@...security.net)
Re: Exploit for MS06-040 Out? ("Brendan Dolan-Gavitt" <mooyix@...il.com>)
Re: Top sites for Application security news ("Alice Bryson <abryson@...efocus.com>" <abryson@...efocus.com>)
Re: BlackBerry Vulnerabilities ("Peter Dawson" <slash.pd@...il.com>)
Re: Exploit for MS06-040 Out? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Exploit for MS06-040 Out? (H D Moore <fdlist@...italoffense.net>)
Re: If we can read 19, 832 n3td3v posts, we can do 1 open hate mail to Lieberman! (Philosophil <flosofl@...il.com>)
New Laptop Polices ("Cullen, Michael" <michael.cullen@...sic.com>)
RE: [WEB SECURITY] Top sites for Application security news ("Ory Segal" <osegal@...chfire.com>)
Re: New Laptop Polices (Bob Radvanovsky <rsradvan@...xworks.net>)
Re: New Laptop Polices (Simon Richter <Simon.Richter@...yros.de>)
Re: New Laptop Polices ("J. Oquendo" <sil@...iltrated.net>)
Re: New Laptop Polices (Bob Radvanovsky <rsradvan@...xworks.net>)
RE: New Laptop Polices ("North, Quinn" <QNorth@....com>)
RE: New Laptop Polices (<Glenn.Everhart@...se.com>)
Re: New Laptop Polices (Valdis.Kletnieks@...edu)
Re: New Laptop Polices (Michael Holstein <michael.holstein@...ohio.edu>)
Re: New Laptop Polices ("Peter Dawson" <slash.pd@...il.com>)
Re: New Laptop Polices (Michael Holstein <michael.holstein@...ohio.edu>)
Re: New Laptop Polices (Jeremy Bishop <requiem@...etor.org>)
Re: [WEB SECURITY] Top sites for Application security news (Anurag Agarwal <a_agrawwal@...oo.com>)
ScatterChat Advisory 2006-01: Cryptanalytic Attack Vulnerability ("ScatterChat Advisories" <sc_advisories@...ktivismo.com>)
Re: If we can read 19, 832 n3td3v posts, we can do 1 open hate mail to Lieberman! (bkfsec <bkfsec@....lonestar.org>)
rPSA-2006-0152-1 squirrelmail ("Justin M. Forbes" <jmforbes@...th.com>)
Re: If we can read 19, 832 n3td3v posts, we can do 1 open hate mail to Lieberman! (evilrabbi <evilrabbi@...il.com>)
Re: New Laptop Polices ("Peter Dawson" <slash.pd@...il.com>)
Re: [WEB SECURITY] Top sites for Application security news (root <root@...d3.ro>)
RSA tokens. (Mike Hoye <mhoye@...n.polkaroo.net>)
Re: If we can read 19, 832 n3td3v posts, we can do 1 open hate mail to Lieberman! (b.hines@...cast.net)
Re: If we can read 19, 832 n3td3v posts, we can do 1 open hate mail to Lieberman! ("Peter Dawson" <slash.pd@...il.com>)
Re: If we can read 19, 832 n3td3v posts, we can do 1 open hate mail to Lieberman! ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Re: [WEB SECURITY] Top sites for Application security news ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Re: [WEB SECURITY] Top sites for Application security news ("sick b0y" <sickb0y1979@...il.com>)

August 12 (29 messages)

XSS at msn.com и cisco.com ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
Re: XSS at msn.com и cisco.com ("nikolay" <hijacker@...um.net>)
JavaScript get Internal Address (thanks to DanBUK) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: XSS at msn.com и cisco.com ("ad@...poverflow.com" <ad@...poverflow.com>)
If we can read 19, 832 I Hate Lieberman posts... (Rowland <rowland-wind@...cast.net>)
Re: JavaScript get Internal Address (thanks to DanBUK) (Martin Dipo Zimmermann <mdz@...hest.com>)
XSS at nsa.gov ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
Re: XSS at msn.com и cisco.com ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
Re: If we can read 19, 832 n3td3v posts, we can do 1 open ("Throwaway1@...umbus.rr.com" <Throwaway1@...umbus.rr.com>)
Concurrency-related vulnerabilities in browsers - expect problems (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: JavaScript get Internal Address (thanks to DanBUK) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
FYI : Satori - Passive OS fingerprinting, revisited (Thierry Zoller <Thierry@...ler.lu>)
[SECURITY] [DSA 1150-1] New shadow packages fix privilege escalation (joey@...odrom.org (Martin Schulze))
Re: JavaScript get Internal Address (thanks to DanBUK) (H D Moore <fdlist@...italoffense.net>)
Re[2]: JavaScript get Internal Address (thanks to DanBUK) (Thierry Zoller <Thierry@...ler.lu>)
Re: JavaScript get Internal Address (thanks toDanBUK) ("nikolay" <hijacker@...um.net>)
Re: Re[2]: JavaScript get Internal Address (thanks to DanBUK) (H D Moore <fdlist@...italoffense.net>)
Re: XSS at msn.com и cisco.com ("Dr HenDre" <drhendre@...il.com>)
Re: FYI : Satori - Passive OS fingerprinting, revisited (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re[4]: JavaScript get Internal Address (thanks to DanBUK) (Thierry Zoller <Thierry@...ler.lu>)
Re: XSS at msn.com и cisco.com (Barrie Dempster <barrie@...oot-robot.net>)
Re: XSS at nsa.gov (Barrie Dempster <barrie@...oot-robot.net>)
[WEB SECURITY] Top sites for Application security news ("KT" <ktriv3di@....com>)
follow up to SPI Dynamics js portscanner (Tõnu Samuel <tonu@....ee>)
Re: XSS at msn.com Й cisco.com ("relaxsen" <relaxsen@...dex.ru>)
Re: follow up to SPI Dynamics js portscanner (evilrabbi <evilrabbi@...il.com>)
Getting rid of Gadi Evron and Dude VanWinkle (vodka hooch <vodkahooch@...oo.com>)
Re: Getting rid of Gadi Evron and Dude VanWinkle (Peter Besenbruch <prb@...a.net>)
Re: follow up to SPI Dynamics js portscanner (evilrabbi <evilrabbi@...il.com>)

August 13 (14 messages)

Re: Getting rid of Gadi Evron and Dude VanWinkle ("John Dietz" <www.whitewolf@...il.com>)
Re: Getting rid of Gadi Evron and Dude VanWinkle (Aaron Gray <angray@...b.net>)
Re: Server Redundancy (wac <waldoalvarez00@...il.com>)
what can be done with botnet C&C's? (fwd) (Gadi Evron <ge@...uxbox.org>)
RE: Concurrency-related vulnerabilities in browsers -expect problems (Larry Seltzer <Larry@...ryseltzer.com>)
Re: what can be done with botnet C&C's? (fwd) ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: what can be done with botnet C&C's? ("J. Oquendo" <sil@...iltrated.net>)
Re: Getting rid of Gadi Evron and Dude VanWinkle (vodka hooch <vodkahooch@...oo.com>)
Multiple buffer-overflows in libmusicbrainz 2.1.2 (Luigi Auriemma <aluigi@...istici.org>)
Re: Getting rid of Gadi Evron and Dude VanWinkle ("Eliah Kagan" <degeneracypressure@...il.com>)
Re: Getting rid of Gadi Evron and Dude VanWinkle (vodka hooch <vodkahooch@...oo.com>)
Re: Re[2]: JavaScript get Internal Address (thanks to DanBUK) (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: Getting rid of Gadi Evron and Dude VanWinkle (vodka hooch <vodkahooch@...oo.com>)
Re: Getting rid of Gadi Evron and Dude VanWinkle ("Peter Dawson" <slash.pd@...il.com>)

August 14 (20 messages)

RE: ANNOUNCING: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA ("Dave Wichers" <dave.wichers@...ectsecurity.com>)
XSS at snort.org ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
unsubscribe ("mailing lists" <bofn@....org>)
WEP key in a sec ;) ("Antoine SANTO" <Antoine.SANTO@...f.fr>)
Re: JavaScript get Internal Address (thanks to DanBUK) (Alexander Sotirov <asotirov@...ermina.com>)
[ GLSA 200608-20 ] Ruby on Rails: Several vulnerabilities (Raphael Marichez <falco@...too.org>)
Re: Getting rid of Gadi Evron and Dude VanWinkle (Valdis.Kletnieks@...edu)
Re: what can be done with botnet C&C's? (fwd) (Valdis.Kletnieks@...edu)
Re: what can be done with botnet C&C's? (fwd) (Peter Besenbruch <prb@...a.net>)
Re: what can be done with botnet C&C's? (fwd) ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: what can be done with botnet C&C's? (fwd) ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: when will AV vendors fix this??? (Andreas Marx <gega-it@....de>)
[Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow (Damian Put <pucik@...rflow.pl>)
Re: what can be done with botnet C&C's? (fwd) ("Jonathan Glass (gm)" <jonathan.glass@...il.com>)
XSS Vulnerabilities at Sun, IBM, Verisign, AOL, F-Secure, eEye ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
Re: what can be done with botnet C&C's? (fwd) ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: RE: when will AV vendors fix this??? (Paul Schmehl <pauls@...allas.edu>)
Re: XSS Vulnerabilities at Sun, IBM, Verisign, AOL, (bugtraq@...security.net)
[ MDKSA-2006:141 ] - Updated gnupg packages fix vulnerability (security@...driva.com)
[ MDKSA-2006:142 ] - Updated heartbeat packages fix vulnerability (security@...driva.com)

August 15 (84 messages)

Yahoo/Geocities possible exploit/vulnerability ("Jain, Siddhartha" <Siddhartha.Jain@...-tencor.com>)
FUZZY PORN ("Time 4" <somedirtyposter@...il.com>)
FURRY PORNE ("Time 4" <somedirtyposter@...il.com>)
FURRY PORN ("Time 4" <somedirtyposter@...il.com>)
LOL FURRY HI ("Time 4" <somedirtyposter@...il.com>)
LOL FURRY ("Time 4" <somedirtyposter@...il.com>)
LOL HY ("Time 4" <somedirtyposter@...il.com>)
LOL HY ME ("Time 4" <somedirtyposter@...il.com>)
LOL HELLO ("Time 4" <somedirtyposter@...il.com>)
LOL HELLO FURRY PORN ("Time 4" <somedirtyposter@...il.com>)
LOL HELLO FURRY PORN ("Time 4" <somedirtyposter@...il.com>)
LOL HELLO ("Time 4" <somedirtyposter@...il.com>)
LOL PORNE ("Time 4" <somedirtyposter@...il.com>)
LOL HY ("Time 4" <somedirtyposter@...il.com>)
LOL HELLO FD ("Time 4" <somedirtyposter@...il.com>)
LOL HY ("Time 4" <somedirtyposter@...il.com>)
LOL HELLO DUDE ("Time 4" <somedirtyposter@...il.com>)
HELLO WHITEHATS ("Time 4" <somedirtyposter@...il.com>)
HEEELO ("Time 4" <somedirtyposter@...il.com>)
LOL HELLO ("Time 4" <somedirtyposter@...il.com>)
LOL HELLO ("Time 4" <somedirtyposter@...il.com>)
LOL HELLO FURRY ("Time 4" <somedirtyposter@...il.com>)
LOL FURRY ("Time 4" <somedirtyposter@...il.com>)
LOL FURRY ("Time 4" <somedirtyposter@...il.com>)
LOL HY ("Time 4" <somedirtyposter@...il.com>)
HY ("Time 4" <somedirtyposter@...il.com>)
LOL FURRY ("Time 4" <somedirtyposter@...il.com>)
LOL PUBLIC DOMAINE ("Time 4" <somedirtyposter@...il.com>)
LOL FURRY ("Time 4" <somedirtyposter@...il.com>)
LOL FURRY ("Time 4" <somedirtyposter@...il.com>)
LOL HELLO FD ("Time 4" <somedirtyposter@...il.com>)
LOL FURRY ("Time 4" <somedirtyposter@...il.com>)
LOL HELLO ("Time 4" <somedirtyposter@...il.com>)
LOL HELLO ("Time 4" <somedirtyposter@...il.com>)
Re: LOL HY ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Anti - LOL HY ME ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Reverse LOL HELLO FURRY PORN ("Dude VanWinkle" <dudevanwinkle@...il.com>)
<if this is funny, you need a check up> LOL HELLO FURRY PORN ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Yahoo/Geocities possible exploit/vulnerability (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: Anti - LOL HY ME (Eric Ericson <harlequin@...thlink.net>)
Re: Anti - LOL HY ME ("Dude VanWinkle" <dudevanwinkle@...il.com>)
RE: Yahoo/Geocities possible exploit/vulnerability ("Jain, Siddhartha" <Siddhartha.Jain@...-tencor.com>)
Re: LOL HY (Matt Burnett <marukka@....com>)
RE: LOL HY ("y0himba" <y0himba@...hnolounge.org>)
Re: LOL HY (Matt Burnett <marukka@....com>)
Re: Yahoo/Geocities possible exploit/vulnerability (Schanulleke <schalulleke@...il.com>)
Re: Reverse LOL HELLO FURRY PORN (Peter Besenbruch <prb@...a.net>)
Re: LOL HY (mikeiscool <michaelslists@...il.com>)
RE: Yahoo/Geocities possible exploit/vulnerability (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: LOL HY (mikeiscool <michaelslists@...il.com>)
Re: LOL HY (Matt Burnett <marukka@....com>)
[SECURITY] [DSA 1151-1] New heartbeat packages fix denial of service (joey@...odrom.org (Martin Schulze))
Re: LOL HY (Charles Majola <chmj@...tcore.co.za>)
Re: Yahoo/Geocities possible exploit/vulnerability ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
Re: LOL HELLO ("Vlad Hackula" <vladhackula@...il.com>)
Re: Reverse LOL HELLO FURRY PORN ("Dude VanWinkle" <dudevanwinkle@...il.com>)
RE: LOL HY ("Edward Pearson" <Ed@...tyitservices.co.uk>)
Re: Reverse LOL HELLO FURRY PORN ("<...>" <massimo@...ndmedia.si>)
Re: Reverse LOL HELLO FURRY PORN (cardoso <cardosolistas@...traditorium.com>)
full dis explicit content no good full dis important reason (vodka hooch <vodkahooch@...oo.com>)
Re: Reverse LOL HELLO FURRY PORN ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Reverse LOL HELLO FURRY PORN ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: full dis explicit content no good full dis important reason (Aaron Gray <angray@...b.net>)
Re: Reverse LOL HELLO FURRY PORN ("Jonathan Glass (gm)" <jonathan.glass@...il.com>)
Gaim crashing on getting MSN cookie ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
Re: full dis explicit content no good full dis important reason (vodka hooch <vodkahooch@...oo.com>)
Re: RE: when will AV vendors fix this??? ("Bipin Gautam" <gautam.bipin@...il.com>)
ICMP Destination Unreachable Port Unreachable ("Adriel T. Desautels" <simon@...soft.com>)
Re: ICMP Destination Unreachable Port Unreachable ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: WEP key in a sec ;) (Tonu Samuel <tonu@....ee>)
Re: ICMP Destination Unreachable Port Unreachable ("Richard Bejtlich" <taosecurity@...il.com>)
Re: ICMP Destination Unreachable Port Unreachable ("Peter Dawson" <slash.pd@...il.com>)
Re: Concurrency-related vulnerabilities in browsers - expect problems (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: ICMP Destination Unreachable Port Unreachable ("Julio Cesar Fort" <julio@...slabs.com.br>)
Re: Re: ICMP Destination Unreachable Port Unreachable ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable ("Adriel T. Desautels" <simon@...soft.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable ("Darren Bounds" <dbounds@...il.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable ("Adriel T. Desautels" <simon@...soft.com>)
Gaim crash issue with apparent changes in msn protocol (naveed <naveedafzal@...il.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable ("Darren Bounds" <dbounds@...il.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable ("Darren Bounds" <dbounds@...il.com>)
JavaScript Lazy Authorization Forcer and Visited Link Scaner ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable (Scott Renna <srenna@...securitygroup.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable ("Adriel T. Desautels" <simon@...soft.com>)

August 16 (29 messages)

Re: Re: ICMP Destination Unreachable Port Unreachable ("Adriel T. Desautels" <simon@...soft.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable ("Adriel T. Desautels" <simon@...soft.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable (Valdis.Kletnieks@...edu)
Re: Re: ICMP Destination Unreachable Port Unreachable (Valdis.Kletnieks@...edu)
ASSP “get?file” Traversal Vulnerability ("Micheal Espinola Jr" <michealespinola@...il.com>)
Gaim crash issue with apparent changes in msn protocol ("Garth Stone" <garth.stone@...il.com>)
Re: LOL HY (Matt Burnett <marukka@....com>)
Re: LOL HY (darren kirby <bulliver@...computer.org>)
Re: LOL HY (Jason <security@...enik.com>)
Re: JavaScript Lazy Authorization Forcer and Visited Link Scaner (mikeiscool <michaelslists@...il.com>)
[USN-334-1] krb5 vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable (Barrie Dempster <barrie@...oot-robot.net>)
[USN-335-1] heartbeat vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable (Valdis.Kletnieks@...edu)
(no subject) (<hatless@...h.ai>)
[scip_Advisory 2457] Horde Framework and Horde IMP /horde/imp/search.php cross site scripting (Marc Ruef <maru@...p.ch>)
[scip_Advisory 2456] Horde Framework and Horde IMP /index.php cross site referencing (Marc Ruef <maru@...p.ch>)
Re: Re: ICMP Destination Unreachable Port Unreachable ("Adriel T. Desautels" <simon@...soft.com>)
Re: Re: ICMP Destination Unreachable Port Unreachable ("Adriel T. Desautels" <simon@...soft.com>)
SUSE Security Announcement: MozillaFirefox, MozillaThunderbird, Seamonkey (SUSE-SA:2006:048) (Marcus Meissner <meissner@...e.de>)
Re: Re: ICMP Destination Unreachable Port Unreachable ("Robert Kim Wireless Internet Advisor" <evdo.hsdpa@...il.com>)
Re: Much Ado Over Whether Lieberman Campaign Site Was Hacked (bkfsec <bkfsec@....lonestar.org>)
Registration Now Open!: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA ("Dave Wichers" <dave.wichers@...ectsecurity.com>)
[ MDKSA-2006:143 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
RE: Re: ICMP DestinationUnreachable Port Unreachable ("Fetch, Brandon" <BFetch@...pac.com>)
Re: [SC-L] Registration Now Open!: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA (Pascal Meunier <pmeunier@...ias.purdue.edu>)
PBNJ 2.02 - a suite of tools to monitor changes on a network over time. ("Joshua D. Abraham" <jabra@....neu.edu>)
[EEYEB-20060703] IBM eGatherer ActiveX Code Execution Vulnerability ("eEye Advisories" <Advisories@...e.com>)

August 17 (20 messages)

PBNJ 2.02 - a suite of tools to monitor changes on a network over time. ("Joshua D. Abraham" <jabra@....neu.edu>)
Re: Re: ICMP DestinationUnreachable Port Unreachable (Netragard Security Advisories <advisories@...ragard.com>)
Symantec Anti-Virus Corporate Edition: Download Product Updates Using LiveUpdate Feature in Central Console Does Not Wo… ("Faigle, Chris" <cfaigle@...hmond.edu>)
Telmex Advisory ("Luis Alberto Cortes Zavala" <napasn@...uritynation.com>)
Wireless hacks (Joe Barr <joe@...rimer.com>)
[USN-336-1] binutils vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-337-1] imagemagick vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: Wireless hacks (Denis Jedig <seclists@...eticon.de>)
Re: Wireless hacks (David Taylor <ltr@....upenn.edu>)
RE: Wireless hacks ("Fetch, Brandon" <BFetch@...pac.com>)
Re: Wireless hacks ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Registration Now Open!: Security OPUS Infosec Conference - Oct 2-5 2006 - San Francisco, CA ("Richard Lindberg" <Richard@...alRealms.com>)
Re: Wireless hacks (Peter Besenbruch <prb@...a.net>)
RE: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems ("Michael Wojcik" <Michael.Wojcik@...rofocus.com>)
NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] (Netragard Security Advisories <advisories@...ragard.com>)
Symantec Anti-Virus Corporate Edition: Download Product Updates Using LiveUpdate Feature in Central Console Does Not Wo… ("Faigle, Chris" <cfaigle@...hmond.edu>)
[ MDKSA-2006:143-1 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
Re: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems ("Steven M. Christey" <coley@...us.mitre.org>)
RE: World Summit on Intrusion Prevention ("Anthony J Biacco" <admin@...eroid-b612.org>)

August 18 (22 messages)

me worry "payback time" bug finders (vodka hooch <vodkahooch@...oo.com>)
Re: Wireless hacks (Bruce Monroe <dontcareabouthisaccount@...oo.com>)
Yahoo! Research Multiple vulnerabilites (simo@...x.org)
[SECURITY] [DSA 1152-1] New trac packages fix information disclosure (joey@...odrom.org (Martin Schulze))
Call for Papers: Security OPUS conference - San Francisco, Ca October 4-5 ("Richard Lindberg" <Richard@...alRealms.com>)
Secunia Research: AOL Insecure Default Directory Permissions (Jakob Balle <jb@...unia.com>)
Risks from using default WebSphere keys (Schanulleke <schalulleke@...il.com>)
Re: Dates Correction - World Summit on Intrusion Prevention, May 8-9, 2007 (wsip@...tek.com)
Re: LOL HY ("Eliah Kagan" <degeneracypressure@...il.com>)
Re: LOL HY (Jason <security@...enik.com>)
Tempest today (Paul Sebastian Ziegler <psz@...erved.de>)
Re: Tempest today (Joe Barr <joe@...rimer.com>)
Re: Tempest today (Paul Sebastian Ziegler <psz@...erved.de>)
RE: Tempest today (<Bryan_McAninch@...fee.com>)
[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: Tempest today ("J. Oquendo" <sil@...iltrated.net>)
Re: LOL HY (Ajay Pal Singh Atwal <ajaypal@...bec.org>)
Re: Tempest today (Paul Sebastian Ziegler <psz@...erved.de>)
Re: full dis explicit content no good full disimportant reason ("<...>" <massimo@...ndmedia.si>)
Re: Reverse LOL HELLO FURRY PORN ("<...>" <massimo@...ndmedia.si>)
Re: Tempest today ("Trey Keifer" <midnitrcr@...il.com>)
Re: LOL HY (darren kirby <bulliver@...computer.org>)

August 19 (10 messages)

n3td3v is watching you!!! (vodka hooch <vodkahooch@...oo.com>)
Just another *nix server botnet (Dmitri Gribenko <gribozavr@...il.com>)
Re: Reverse LOL HELLO FURRY PORN ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: n3td3v is watching you!!! (yearsilent <yearsilent@...oo.com>)
RealVNC 4.1.2 minor heap corruption/DoS vulnerability (authentication required) (Niall FitzGibbon <fitzgibbon@...eyonder.co.uk>)
DCE RPC transaction (Nicholas <nick58@...il.com>)
Re: Tempest today (K F <kevin@...finite.org>)
about md5 brute forcing ("Slythers Bro" <slythers@...il.com>)
Re: Tempest today ("Bipin Gautam" <gautam.bipin@...il.com>)
RE: Symantec Anti-Virus Corporate Edition: DownloadProduct Upd ("Ray P" <sixsigma98@...mail.com>)

August 20 (9 messages)

Re: Tempest today (<daylasoul@...h.com>)
RE: Tempest today ("Lyal Collins" <lyalc@...ftdsl.com.au>)
Re: Tempest today (Marcin Owsiany <marcin@...iany.pl>)
Re: Re: Tempest today ("Bipin Gautam" <gautam.bipin@...il.com>)
Re: Tempest today ("Randal T. Rioux" <randy@...cyonlabs.com>)
Re: LOL HY (Flavio Visentin <THe_ZiPMaN@...man.it>)
[SECURITY] [DSA 1154-1] New squirrelmail packages fix information disclosure (Moritz Muehlenhoff <jmm@...ian.org>)
Re: <CENSORED> is watching you!!! ("Exibar" <exibar@...lair.com>)
New PowerPoint 0-day and Trojan - FAQ document ready (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

August 21 (22 messages)

Re: RealVNC 4.1.2 minor heap corruption/DoS vulnerability (authentication required) (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
RE: Tempest today ("Bill Stout" <bill.stout@...enborder.com>)
XSS at eEye.com #2 (evidence of existence) ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
Hack.lu 2006 (info <info@...k.lu>)
Re: Tempest today ("J. Oquendo" <sil@...iltrated.net>)
security metrics and evaluation methodologies ("Nguyen Pham" <nguyen.petronius@...il.com>)
Re: Tempest today (Tonu Samuel <tonu@....ee>)
RE: Tempest today (<Bryan_McAninch@...fee.com>)
Re: Tempest today ("J. Oquendo" <sil@...iltrated.net>)
RE: Tempest today (<Bryan_McAninch@...fee.com>)
security metrics and evaluation methodologies ("Nguyen Pham" <nguyen.petronius@...il.com>)
Re: Tempest today (Michael Holstein <michael.holstein@...ohio.edu>)
further to the XSS flaw in eEye by Valerie Marchuk ("Alan Shimel" <ashimmy@...mail.com>)
Re: Tempest today ("J. Oquendo" <sil@...iltrated.net>)
Re: Tempest today ("J. Oquendo" <sil@...iltrated.net>)
RE: Tempest today (<Bryan_McAninch@...fee.com>)
Re: further to the XSS flaw in eEye by Valery Marchuk ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
Re: Tempest today ("John Dietz" <www.whitewolf@...il.com>)
Re: Tempest today (Valdis.Kletnieks@...edu)
[ MDKSA-2006:144 ] - Updated php packages fix vulnerability (security@...driva.com)
MS PowerPoint 0-day FAQ updated, CVE added (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
TTG0601 - Alt-N WebAdmin Multiple Vulnerabilities ("TTG" <releases@...low.com>)

August 22 (15 messages)

[ MDKSA-2006:146 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
[ MDKSA-2006:145 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
Re: further to the XSS flaw in eEye by Valerie Marchuk ("Thomas Pollet" <thomas.pollet@...il.com>)
NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] (Propaganda Support <support@...pagandaprod.com>)
Re: NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] ("K F (lists)" <kf_lists@...italmunition.com>)
Re: NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] (Propaganda Support <support@...pagandaprod.com>)
Oracle Database IDS Evasion Techniques for SQL*Net (Joxean Koret <joxeankoret@...oo.es>)
Re: NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] (Alexander Sotirov <asotirov@...ermina.com>)
EEYE:ALERT: MS06-042 Related Internet Explorer 'Crash' is Exploitable ("Marc Maiffret" <mmaiffret@...e.com>)
[ MDKSA-2006:147 ] - Updated squirrelmail packages fix vulnerabilities (security@...driva.com)
Major updates in PowerPoint FAQ document - not a 0-day issue (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] ("K F (lists)" <kf_lists@...italmunition.com>)
Symantec Enterprise Security Manager Denial-of-Service Vulnerability (<David_Marcus@...fee.com>)
Linux Kernel SCTP Privilege Elevation Vulnerability (<David_Marcus@...fee.com>)
RE: Patching networks redux (fwd) ("jack mcwilliams" <jaxxxson2@...plepc.com>)

August 23 (20 messages)

Re: RE: Patching networks redux (fwd) (Valdis.Kletnieks@...edu)
Re: RE: Patching networks redux (fwd) (mikeiscool <michaelslists@...il.com>)
Re: RE: Patching networks redux (fwd) (Valdis.Kletnieks@...edu)
[vuln.sg] Cool Messenger Server SQL Injection Vulnerability (TAN Chew Keong <vulnpost-remove@...n.sg>)
[vuln.sg] PowerZip Long Filename Handling Buffer Overflow Vulnerability (TAN Chew Keong <vulnpost-remove@...n.sg>)
md5 attack: brute force 1/3 time faster than traditional hash brute forcing ("Slythers Bro" <slythers@...il.com>)
NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] (Propaganda Support <support@...pagandaprod.com>)
NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] (Propaganda Support <support@...pagandaprod.com>)
Re: RE: Patching networks redux (fwd) ("Brian Eaton" <eaton.lists@...il.com>)
Re: NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] (K F <kevin@...finite.org>)
Re: RE: Patching networks redux (fwd) ("teh kids" <tehkids@...glemail.com>)
Re: NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] (<daylasoul@...h.com>)
Cisco Security Advisory: Unintentional Password Modification in Cisco Firewall Products (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Cisco VPN 3000 Concentrator FTP Management Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
IBM to buy ISS ("Mike Owen" <kyphros@...il.com>)
[MU-200608-01] Multiple Vulnerabilities in Asterisk 1.2.10 (noreply@...ecurity.com)
New malware names and updates to PowerPoint FAQ document (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[ GLSA 200608-21 ] Heimdal: Multiple local privilege escalation vulnerabilities (Raphael Marichez <falco@...too.org>)
[ GLSA 200608-22 ] fbida: Arbitrary command execution (Raphael Marichez <falco@...too.org>)
Re: full dis explicit content no good full disimportant reason ("Rob Thompson" <my.security.lists@...il.com>)

August 24 (19 messages)

[SECURITY] [DSA 1155-1] New sendmail packages fix denial of service (joey@...odrom.org (Martin Schulze))
Advisory: Integramod Portal <= 2.x File Inclusion Vulnerability ("Mustafa Can Bjorn IPEKCI" <nukedx@...edx.com>)
Advisory: VistaBB <= 2.x Multiple File Inclusion Vulnerabilities ("Mustafa Can Bjorn IPEKCI" <nukedx@...edx.com>)
[SECURITY] [DSA 1155-2] New sendmail packages fix denial of service (joey@...odrom.org (Martin Schulze))
RE: md5 attack: brute force 1/3 time faster thantraditional hash brute forcing ("Edward Pearson" <Ed@...tyitservices.co.uk>)
PENNSYLVANIA BUSINESS EXECUTIVE WHO UNLAWFULLY ACCESSED AVON COMPANY'S WEB SITE IS SENTENCED (<concernedcissp@...h.com>)
MS06-040 worm? (3APA3A <3APA3A@...URITY.NNOV.RU>)
Advisory 05/2006: Zend Platform Multiple Remote Vulnerabilities (Stefan Esser <sesser@...dened-php.net>)
Re: Tempest today (John Hawkes-Reed <jhawkes-reed@...com>)
Re: md5 attack: brute force 1/3 time faster thantraditional hash brute forcing (Denis Jedig <seclists@...eticon.de>)
Re: NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] (Valdis.Kletnieks@...edu)
Re: NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] (bkfsec <bkfsec@....lonestar.org>)
[ GLSA 200608-23 ] Heartbeat: Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
EEYE: Internet Explorer Compressed Content URL Heap Overflow Vulnerability ("Marc Maiffret" <mmaiffret@...e.com>)
[ MDKSA-2006:148 ] - Updated xorg-x11 packages fix vulnerabilities (security@...driva.com)
[ MDKSA-2006:149 ] - Updated MySQL packages fix user privilege vulnerabilities (security@...driva.com)
Microsoft product vs Microsoft patch (n3td3v <xploitable@...il.com>)
Re: PENNSYLVANIA BUSINESS EXECUTIVE WHO UNLAWFULLY ACCESSED AVON COMPANY'S WEB SITE IS SENTENCED (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Microsoft product vs Microsoft patch (Valdis.Kletnieks@...edu)

August 25 (34 messages)

ftpd chdir() while root (Paul Szabo <psz@...hs.usyd.edu.au>)
Re: IBM to buy ISS ("Randal T. Rioux" <randy@...cyonlabs.com>)
Re: Microsoft product vs Microsoft patch (Ajay Pal Singh Atwal <ajaypal@...bec.org>)
Re: IBM to buy ISS (b.hines@...cast.net)
rPSA-2006-0157-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs ("Justin M. Forbes" <jmforbes@...th.com>)
rPSA-2006-0158-1 tshark wireshark ("Justin M. Forbes" <jmforbes@...th.com>)
Re: Microsoft product vs Microsoft patch (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
Secure OWA ("Lohan Spies" <lohan.spies@...il.com>)
Re: Microsoft product vs Microsoft patch (Valdis.Kletnieks@...edu)
non-tech: defcon and FD. :) (Gadi Evron <ge@...uxbox.org>)
Re: non-tech: defcon and FD. :) (Adriel Desautels <simon@...soft.com>)
Re: non-tech: defcon and FD. :) (Thierry Zoller <Thierry@...ler.lu>)
Security researcher ("asdfasf" <zerodayinit@...mail.com>)
Re: Secure OWA ("Brendan Dolan-Gavitt" <mooyix@...il.com>)
Re: non-tech: defcon and FD. :) (Valdis.Kletnieks@...edu)
Re: non-tech: defcon and FD. :) (n3td3v <xploitable@...il.com>)
Re: Microsoft product vs Microsoft patch (n3td3v <xploitable@...il.com>)
Re: Secure OWA (Danny <nocmonkey@...il.com>)
Re: Secure OWA (Dimitri Limanovski <Dimitri.Limanovski@...gardhe.com>)
Re: non-tech: defcon and FD. :) (str0ke <str0ke@...w0rm.com>)
Re: Microsoft product vs Microsoft patch ("John Dietz" <www.whitewolf@...il.com>)
Re: Microsoft product vs Microsoft patch ("Mike M" <mkmaxx@...il.com>)
[ MDKSA-2006:150 ] - Updated kernel packages fix multiple vulnerabilities (security@...driva.com)
[ MDKSA-2006:151 ] - Updated kernel packages fix multiple vulnerabilities (security@...driva.com)
Indiana University Security Advisory: Fuji Xerox Printing Systems (FXPS) print engine vulnerabilities ("Krulewitch, Sean V" <krulewit@...edu>)
Pincone Research Clipboard Access ("y0himba" <y0himba@...hnolounge.org>)
Re: Security researcher (Denis Jedig <seclists@...eticon.de>)
Re: Re: Security researcher (evilrabbi <evilrabbi@...il.com>)
Re: Re: Security researcher (Thierry Zoller <Thierry@...ler.lu>)
[ MDKSA-2006:152 ] - Updated wireshark packages fix multiple vulnerabilities (security@...driva.com)
Re: Re: Security researcher ("GroundZero Security" <fd@....org>)
Re: Re: Security researcher (pagvacito <unknown.pentester@...il.com>)
Re: Re: Security researcher (Denis Jedig <seclists@...eticon.de>)
New honeypots (Joxean Koret <joxeankoret@...oo.es>)

August 26 (16 messages)

Cisco NAC Appliance Agent Installation Bypass Vulnerability (Andreas Gal <gal@....edu>)
Re: Re: Security researcher (Denis Jedig <seclists@...eticon.de>)
CC evaluation ("Nguyen Pham" <nguyen.petronius@...il.com>)
RE: CC evaluation ("Clement Dupuis" <cdupuis@...ure.org>)
Re: CC evaluation ("Nguyen Pham" <nguyen.petronius@...il.com>)
[ GLSA 200608-24 ] AlsaPlayer: Multiple buffer overflows (Raphael Marichez <falco@...too.org>)
[ GLSA 200608-24 ] AlsaPlayer: Multiple buffer overflows (Raphael Marichez <falco@...too.org>)
RE: CC evaluation ("Clement Dupuis" <cdupuis@...ure.org>)
Re: Secure OWA ("<...>" <massimo@...ndmedia.si>)
Re: Secure OWA ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: non-tech: defcon and FD. :) ("<...>" <massimo@...ndmedia.si>)
Re: Secure OWA (Adriel Desautels <simon@...soft.com>)
Re: non-tech: defcon and FD. :) ("Morning Wood" <se_cur_ity@...mail.com>)
Re: Secure OWA ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Secure OWA (Valdis.Kletnieks@...edu)
Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability (Eloy Paris <elparis@...co.com>)

August 27 (16 messages)

AttackAPI 0.5 (JavaScript tools) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: non-tech: defcon and FD. :) (n3td3v <xploitable@...il.com>)
Alias update alert ("Jeb Bush" <xploitable@...il.com>)
Fwd: multi billion dollar corporation hasnt fixed its privacy flaw yet ("Jeb Bush" <xploitable@...il.com>)
Microsoft Vista's IPv6: Dangerous Information Leak? (hadmut@...isch.de (Hadmut Danisch))
[SECURITY] [DSA 1156-1] New kdebase packages fix information disclosure (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1157-1] New ruby1.8 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
[SECURITY] [DSA 1158-1] New streamripper packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Alias update alert (Denis Jedig <seclists@...eticon.de>)
Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("Brendan Dolan-Gavitt" <mooyix@...il.com>)
Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (K F <kevin@...finite.org>)
Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Thierry Zoller <Thierry@...ler.lu>)
Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Denis Jedig <seclists@...eticon.de>)
RE: George Bush appoints a 9 year old to be thechairperson of the Information Security Deportment ("php0t" <very@...rivate.com>)
NFS root_squash broken in Debian (Paul Szabo <psz@...hs.usyd.edu.au>)

August 28 (27 messages)

Re: Legal problems with google.com.ar? (Santiago del Castillo <delcas@...il.com>)
Legal problems with google.com.ar ? (Santiago del Castillo <delcas@...il.com>)
Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: George Bush appoints a 9 year old to be thechairperson of the Information Security Deportment ("Alexander Hristov" <joffer@...il.com>)
RE: Microsoft Vista's IPv6: Dangerous Information Leak? (TJ <trejrco@...il.com>)
Re: Microsoft Vista's IPv6: Dangerous Information Leak? ("Peter Dawson" <slash.pd@...il.com>)
Re: George Bush appoints a 9 year old to be thechairperson of the Information Security Deportment (Adriel Desautels <simon@...soft.com>)
Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("Brian Eaton" <eaton.lists@...il.com>)
[SECURITY] [DSA 1159-1] New Mozilla Thunderbird packages fix several problems (joey@...odrom.org (Martin Schulze))
Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Denis Jedig <seclists@...eticon.de>)
No cON Name 2006 - ACCEPTED CONFERENCES (deese@...zialk.net)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Valdis.Kletnieks@...edu)
Re: [Advisory] % +Thu Mar 16 21:07:15 EST 2006+ % Local Privilege Escalation Vulnerability in Microsoft Windows XP (Christoph Gruber <list@...u.at>)
Re: Full-Disclosure Digest, Vol 18, Issue 65 ("Mike M" <mkmaxx@...il.com>)
Re:multi billion dollar corporation hasnt blah blah ("Jeb Osama" <mkmaxx@...il.com>)
[vuln.sg] Cybozu Products Arbitrary File Retrieval Vulnerability (TAN Chew Keong <vulnpost-remove@...n.sg>)
[vuln.sg] Cybozu Garoon 2 SQL Injection Vulnerabilities (TAN Chew Keong <vulnpost-remove@...n.sg>)
Re: [Advisory] % +Thu Mar 16 21:07:15 EST 2006+ % Local Privilege Escalation Vulnerability in Microsoft Windows XP (Christoph Gruber <grisu@...u.at>)
InfoSec Paper: Creating Business Through Virtual Trust ("Kenneth F. Belva" <ken@...security.com>)
[ GLSA 200608-25 ] X.org and some X.org libraries: Local privilege escalations (Raphael Marichez <falco@...too.org>)
Re: Re:multi billion dollar corporation hasnt blah blah ("Jeb Bush" <xploitable@...il.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Paul Schmehl <pauls@...allas.edu>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Benjamin Franz <snowhare@...ongo.org>)
Re: Re:multi billion dollar corporation hasnt blah blah (Anders B Jansson <hdw@...listi.se>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Paul Schmehl <pauls@...allas.edu>)
Re: Re:multi billion dollar corporation hasnt blah blah ("Jeb Bush" <xploitable@...il.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Peter Besenbruch <prb@...a.net>)

August 29 (35 messages)

Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Denis Jedig <seclists@...eticon.de>)
Re: Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("Jessica Hope" <jessicasaulhope@...glemail.com>)
Re: Lesstif insecure file creation while executing setuid libXm linked binaries vuln (Vincent Danen <vdanen@...sec.ca>)
[ MDKSA-2006:153 ] - Updated binutils packages fix multiple vulnerabilities (security@...driva.com)
[ MDKSA-2006:154 ] - Updated lesstif packages fix potential local root vulnerability (security@...driva.com)
[SECURITY] [DSA 1160-1] New Mozilla packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
XSS at top news agencies ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
XSS in HLStats 1.34 (kefka <kefka@...inbeardsucks.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Valdis.Kletnieks@...edu)
[ISR] - IBM eGatherer ActiveX Code Execution PoC ("Francisco Amato" <famato@...obyte.com.ar>)
joe job mitigation ("lsi" <stuart@...erdelix.net>)
[ GLSA 200608-27 ] Motor: Execution of arbitrary code (Raphael Marichez <falco@...too.org>)
[ GLSA 200608-26 ] Wireshark: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
[ GLSA 200608-28 ] PHP: Arbitary code execution (Raphael Marichez <falco@...too.org>)
[ MDKSA-2006:155 ] - Updated ImageMagick packages fix vulnerabilities (security@...driva.com)
rPSA-2006-0159-1 ImageMagick ("Justin M. Forbes" <jmforbes@...th.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Paul Schmehl <pauls@...allas.edu>)
[SECURITY] [DSA 1161-1] New Mozilla Firefox packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
CYBSEC - Security Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow (Mariano Nuñez Di Croce <mnunez@...sec.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("teh kids" <tehkids@...glemail.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Paul Schmehl <pauls@...allas.edu>)
Re: [Advisory] % +Thu Mar 16 21:07:15 EST 2006+ %Local Privilege Escalation Vulnerability in Microsoft Windows XP ("Dave \"No, not that one\" Korn" <davek_thro…)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("teh kids" <tehkids@...glemail.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Paul Schmehl <pauls@...allas.edu>)
Re: Pincone Research Clipboard Access (Tõnu Samuel <tonu@....ee>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Denis Jedig <seclists@...eticon.de>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("teh kids" <tehkids@...glemail.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Valdis.Kletnieks@...edu)
Re: [OT] Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("Bardus Populus" <disclosure@...kyd.secur…)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Paul Schmehl <pauls@...allas.edu>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Paul Schmehl <pauls@...allas.edu>)
Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability (Joe Feise <jfeise@...se.com>)
[OT] Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Valdis.Kletnieks@...edu)
Re: Pincone Research Clipboard Access ("<...>" <massimo@...ndmedia.si>)

August 30 (47 messages)

Re: [OT] Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (pauls@...allas.edu)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (pauls@...allas.edu)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: [OT] Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Martin Dipo Zimmermann <mdz@...hest.com>)
Re: Re:multi billion dollar corporation ("Jeb Osama" <mkmaxx@...il.com>)
FoxNews: Paralysis of the Fifth Power ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
[SECURITY] [DSA 1162-1] New libmusicbrainz packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: FoxNews: Paralysis of the Fifth Power (cardoso <cardosolistas@...traditorium.com>)
[Article] Linux Per-Process Syscall Hooking: Gungnir (Pluf <pluf@...9ezine.org>)
Re: [OT] Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("teh kids" <tehkids@...glemail.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("Thomas Pollet" <thomas.pollet@...il.com>)
Re: FoxNews: Paralysis of the Fifth Power (evilrabbi <evilrabbi@...il.com>)
RE: Secure OWA ("Renshaw, Rick \(C.\)" <rrenshaw@...d.com>)
NT4 worm ("Geo." <geoincidents@....net>)
Re: Secure OWA ("Brendan Dolan-Gavitt" <mooyix@...il.com>)
[SECURITY] [DSA 1163-1] New gtetrinet packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: FoxNews: Paralysis of the Fifth Power (Paul Schmehl <pauls@...allas.edu>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Paul Schmehl <pauls@...allas.edu>)
Re: FoxNews: Paralysis of the Fifth Power (cardoso <cardosolistas@...traditorium.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (cardoso <cardosolistas@...traditorium.com>)
RE: Secure OWA ("Renshaw, Rick \(C.\)" <rrenshaw@...d.com>)
Re: Secure OWA ("Bardus Populus" <disclosure@...kyd.securecoffee.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("teh kids" <tehkids@...glemail.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (rek2 GNU/Linux LO LO LO <rek2@...aryfreedom.info>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Paul Schmehl <pauls@...allas.edu>)
Re: NT4 worm (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Paul Schmehl <pauls@...allas.edu>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("Marco Ermini" <markoer@...koer.org>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (cardoso <cardosolistas@...traditorium.com>)
RE: NT4 worm ("Geo." <geoincidents@....net>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment ("Disco Jonny" <discojonny@...il.com>)
michaeldaw.org, Operation n - The adventures of Michael Daw ("David Kay" <david.kierznowski@...il.com>)
Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (Paul Schmehl <pauls@...allas.edu>)
(Fwd) <nettime> more on USG simulation attack by nettime ("lsi" <stuart@...erdelix.net>)
The current state of play ("Jeb Bush" <xploitable@...il.com>)
Re: The current state of play (b.hines@...cast.net)
Re: NT4 worm (H D Moore <fdlist@...italoffense.net>)
php poc exploit for osCommerce <= 2.2 Milestone 2 060817 vuln found by gulftech (s1024 aa <s10242006@...oo.com>)
Re: Secure OWA ("Mark Senior" <senatorfrog@...il.com>)
Re: NT4 worm (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Secure OWA ("Brian Eaton" <eaton.lists@...il.com>)
Re: NT4 worm (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
RE: Secure OWA ("Fetch, Brandon" <BFetch@...pac.com>)
[ MDKSA-2006:156 ] - Updated sendmail packages fix DoS vulnerabilities (security@...driva.com)
[ MDKSA-2006:157 ] - Updated musicbrainz packages fix buffer overflow vulnerabilities (security@...driva.com)
RE: Microsoft Vista's IPv6: Dangerous Information Leak? ("TJ" <trejrco@...il.com>)

August 31 (16 messages)

rPSA-2006-0161-1 libmusicbrainz (rPath Update Announcements <announce-noreply@...th.com>)
Lyris ListManager 8.95: Add arbitrary administrator to arbitrary list (Design Properly <designsoftwareproperly@...oo.com>)
[SECURITY] [DSA 1164-1] New sendmail packages fix denial of service (joey@...odrom.org (Martin Schulze))
Re: Secure OWA ("Lohan Spies" <lohan.spies@...il.com>)
Re: NT4 worm (David Taylor <ltr@....upenn.edu>)
Re: NT4 worm (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: The current state of play ("Michael Simpson" <mikie.simpson@...il.com>)
Doorman@...PERZ.NET Released (Kanatoko <anvil@...perz.net>)
Re: The current state of play (Joe Barr <joe@...rimer.com>)
Re: Doorman@...PERZ.NET Released (Adriel Desautels <simon@...soft.com>)
Re: Doorman@...PERZ.NET Released (Kanatoko <anvil@...perz.net>)
Re: The current state of play ("Jeb Osama" <mkmaxx@...il.com>)
[ MDKSA-2006:158 ] - Updated MySQL packages fix DoS vuln, initscript bug (security@...driva.com)
Compression Plus and Tumblweed EMF Stack Overflow (Michael Hale Ligh <michael.ligh@...n.org>)
rPSA-2006-0162-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
OWASP Autumn Of Code 2006 ("Dinis Cruz" <dinis@...lus.net>)

843 messages