full-disclosure mailing list - 2006/09

Messages by day:

September 1 (18 messages)

• AttackAPI (0.6) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• [ MDKSA-2006:159 ] - Updated sudo packages whitelist environments (security@...driva.com)
• [ MDKSA-2006:160 ] - Updated xorg-x11/XFree86 packages fix potential vulnerabilities (security@...driva.com)
• Re: Microsoft Vista's IPv6: Dangerous Information Leak? (Jim Hoagland <jim_hoagland@...antec.com>)
• [Informix] Is Telelogic's Synergy integrated Informix server also vulnerable? ("Sec Anon" <sec_anon@...mail.com>)
• Browzar Footprints ("mikx" <mikx@...x.de>)
• [SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution (joey@...odrom.org (Martin Schulze))
• "Security Engineering" from Ross Anderson freely available for download ("Marco Ermini" <markoer@...koer.org>)
• Re: Browzar Footprints (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: Browzar Footprints ("Brian Porter" <bkporter@...il.com>)
• Re: "Security Engineering" from Ross Anderson freelyavailable for download ("nikolay" <hijacker@...um.net>)
• RE: Browzar Footprints ("Steven Scheffler" <steven@...wardslash.com>)
• Re: Browzar Footprints (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• TippingPoint don't "Get it" (n3td3v <xploitable@...il.com>)
• n3td3v: viva end of n3td3v----and security group (n3td3v <xploitable@...il.com>)
• HP Contact (Adriel Desautels <simon@...soft.com>)
• Re: HP Contact (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• A fond farewell to ("Richard Simmons" <bunsofst33l@...il.com>)

• Autentificator v2.01 SQL Injection Vulnerabilty (SirDarckCat <sirdarckcat@...il.com>)
• Re: Browzar Footprints ("Colin Copley" <colin.75@...nternet.com>)
• ssLinks v1.22 Multiple SQL Injection Vulnerabilities (SirDarckCat <sirdarckcat@...il.com>)
• PHP-Revista Multiple Vulnerabilities (SirDarckCat <sirdarckcat@...il.com>)
• Re: HP Contact (Sowhat <smaillist@...il.com>)
• Re: Re: George Bush appoints a 9 year old to... blah blah blah ("Randal T. Rioux" <randy@...cyonlabs.com>)
• RE: Re: George Bush appoints a 9 year old to...blah blah blah ("William Lefkovics" <william@...kovics.net>)
• Whitepaper: Awakening the Sleeping Giant v1.0 ("David Kierznowski" <david.kierznowski@...il.com>)
• Re: Re: George Bush appoints a 9 year old to...blah blah blah (K F <kevin@...finite.org>)

• Re: TippingPoint don't "Get it" ("Jeb Osama" <mkmaxx@...il.com>)
• Re: Full-Disclosure Digest, Vol 19, Issue 2 ("Jeb Osama" <mkmaxx@...il.com>)
• [OT for crybaby list-nazis] blah blah now D.O.A.P. ("Randal T. Rioux" <randy@...cyonlabs.com>)
• Re: [OT for crybaby list-nazis] blah blah now D.O.A.P. (pauls@...allas.edu)
• Browzar Is BS? ("y0himba" <yohimba@...minternet.net>)
• ScatterChat Advisory 2006-02: Win32 Tor Client Routing and Denial of Service Vulnerabilities ("ScatterChat Advisories" <sc_advisories@...ktivismo.com>)
• Re: n3td3v: viva end of n3td3v----and security group (Aaron Gray <angray@...b.net>)
• [SECURITY] [DSA 1166-1] New cheesetraceker packages fix buffer overflow (Steve Kemp <skx@...ian.org>)
• UK passport RFID data released (Adam Laurie <adam.laurie@...bunker.net>)
• Re: Browzar Footprints ("lsi" <stuart@...erdelix.net>)

• Re: Browzar Footprints (Vidar Løkken <vidarlo@...tdata.no>)
• AnywhereUSB/5 1.80.00 Drivers Integer Overflow (SecuriTeam Assisted Disclosure <STAD@...uriteam.com>)
• XSSing the Government ("David Kierznowski" <david.kierznowski@...il.com>)
• [SECURITY] [DSA 1167-1] New apache packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
• Steve irwin Died! (Adriel Desautels <simon@...soft.com>)
• TTG0602 - Alt-N WebAdmin MDaemon Account Hijacking ("TTG" <releases@...low.com>)
• RE: Browzar Footprints ("Bill Stout" <bill.stout@...enborder.com>)
• [SECURITY] [DSA 1168-1] New imagemagick packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)

• Microsoft Word 0-day Vulnerability (September) FAQ document available (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: TTG0602 - Alt-N WebAdmin MDaemon Account Hijacking ("Robert Kim Wireless Internet Advisor" <evdo.hsdpa@...il.com>)
• Re: TTG0602 - Alt-N WebAdmin MDaemon Account Hijacking ("TTG" <releases@...low.com>)
• Re: Steve irwin Died! ("Garth Stone" <garth.stone@...il.com>)
• HITBSecConf2006 Final Call ! (Praburaajan <prabu@...kinthebox.org>)
• [SECURITY] [DSA 1169-1] New MySQL 4.1 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Re: XSSing the Government ("<...>" <massimo@...ndmedia.si>)
• [SECURITY] OpenSSL 0.9.8c and 0.9.7k released (Mark J Cox <mark@....com>)
• Buffer overflow vulnerability in dsocks (Michael Adams <parasite@....lonestar.org>)
• [USN-338-1] MySQL vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Re: Buffer overflow vulnerability in dsocks ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• Re: Browzar Footprints ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• [SECURITY] OpenSSL 0.9.8c and 0.9.7k released (Mark J Cox <mark@....com>)
• [USN-339-1] OpenSSL vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• Re: Re: Re: George Bush appoints a 9 year old to be the chairperson of the Information Security Deportment (bkfsec <bkfsec@....lonestar.org>)
• UPDATE: [ GLSA 200509-09 ] Py2Play: Remote execution of arbitrary Python code (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• rPSA-2006-0163-1 openssl openssl-scripts (rPath Update Announcements <announce-noreply@...th.com>)

• Re: Microsoft Word 0-day Vulnerability (September) FAQ document available (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Web Backdoors Trilogy ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Reminder: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA ("Dave Wichers" <dave.wichers@...ectsecurity.com>)
• [USN-340-1] imagemagick vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• [ GLSA 200609-01 ] Streamripper: Multiple remote buffer overflows (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Details for BID 19586 - DB2 UDB Vulnerability ("Amichai Shulman" <shulman@...erva.com>)
• Details for BID 18428 ("Amichai Shulman" <shulman@...erva.com>)
• [ GLSA 200609-02 ] GTetrinet: Remote code execution (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Cisco IOS GRE issue (FX <fx@...noelit.de>)
• Free - Static Web Application Auditing Tool - Source Code (SWAAT) ("Nish Bhalla" <nish@...uritycompass.com>)
• [ GLSA 200609-03 ] OpenTTD: Remote Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• IBM Lotus Notes DUNZIP32.dll Buffer Overflow Vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• [ GLSA 200609-04 ] LibXfont: Multiple integer overflows (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Microsoft confirmed Word 0-day vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

• [ MDKSA-2006:161 ] - Updated openssl packages fix vulnerability (security@...driva.com)
• Re: Microsoft confirmed Word 0-day vulnerability ("Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@...bell.net>)
• Re: Microsoft confirmed Word 0-day vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• RE: Cisco IOS GRE issue ("Paul Oxman \(poxman\)" <poxman@...co.com>)
• Orkut URL Redirection Vulnerability (keyshor <keyshor@...il.com>)
• SECURITY.NNOV: Panda Platinum Internet Security privilege escalation / bayesian filter control security vulnerabilities (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Orkut URL Redirection Vulnerability (Adriel Desautels <simon@...soft.com>)
• [USN-342-1] PHP vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• release uhooker v1.2 (Hernan Ochoa <lists@...est.com>)
• Re: Orkut URL Redirection Vulnerability ("Julio Cesar Fort" <julio@...slabs.com.br>)
• Re: Orkut URL Redirection Vulnerability ("Olli Haukkovaara" <cruzan@...il.com>)
• r57shell "hidden" feature (full_disclosure full_disclosure <fulll_disclosure@...oo.com>)
• Re: Orkut URL Redirection Vulnerability (cardoso <cardosolistas@...traditorium.com>)
• RSA SecurID SID800 Token vulnerable by design (hadmut@...isch.de (Hadmut Danisch))
• Linux kernel source archive vulnerable (hadmut@...isch.de (Hadmut Danisch))
• Re: Linux kernel source archive vulnerable (Raj Mathur <raju@...ux-delhi.org>)
• Re: Linux kernel source archive vulnerable (hadmut@...isch.de (Hadmut Danisch))
• [ GLSA 200609-05 ] OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Hustle -- alwil Anti-Virus Kernel -- Remote & Local Vulnerability ("Ryan Smith" <whatstheaddress@...il.com>)
• [ MDKSA-2006:162 ] - Updated php packages fix vulnerabilities (security@...driva.com)
• Active Directory accounts (Steven Rakick <stevenrakick@...oo.com>)
• ZDI-06-028: Ipswitch Collaboration Suite SMTP Server Stack Overflow (zdi-disclosures@...m.com)
• [SECURITY] [DSA 1171-1] New ethereal packages fix execution of arbitrary code (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Linux kernel source archive vulnerable (Troy Cregger <tcregger@...nedyinfo.com>)
• Re: Orkut URL Redirection Vulnerability ("Peter Dawson" <slash.pd@...il.com>)
• [USN-343-1] bind9 vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)

• Black Hat Briefings Japan Speakers Selected! (Jeff Moss <jmoss@...ckhat.com>)
• Debian perl old, perlmagick uninstallable (Paul Szabo <psz@...hs.usyd.edu.au>)
• RE: Active Directory accounts (<deji@...molafe.com>)
• New Azwalaro project, is a French Open Source Nids project (rmkml <rmkml@...e.fr>)
• Re: Debian perl old, perlmagick uninstallable (Paul Szabo <psz@...hs.usyd.edu.au>)
• [SECURITY] [DSA 1159-2] New Mozilla Thunderbird packages fix several problems (joey@...odrom.org (Martin Schulze))
• Re: Linux kernel source archive vulnerable (hadmut@...isch.de (Hadmut Danisch))
• Re: Linux kernel source archive vulnerable (hadmut@...isch.de (Hadmut Danisch))
• RE: Active Directory accounts ("Angel Barrio" <abmartinez@...kaltel.es>)
• RE: Full-Disclosure Digest, Vol 19, Issue 9 ("Tyler, Grayling" <ggtyler@...dlion.com>)
• RE: Active Directory accounts (Steven Rakick <stevenrakick@...oo.com>)
• RE: Linux kernel source archive vulnerable ("Airey, John" <John.Airey@...b.org.uk>)
• RE: Active Directory accounts ("Angel Barrio" <abmartinez@...kaltel.es>)
• Re: Linux kernel source archive vulnerable (Georgi Guninski <guninski@...inski.com>)
• Re: Linux kernel source archive vulnerable (Lee Ball <lee@...ective-it.co.uk>)
• SECURITY.NNOV: Panda Platinum Internet Security ("Yolanda Ruiz Hervas" <yruiz@...dasoftware.com>)
• Re: Active Directory accounts (Philosophil <flosofl@...il.com>)
• has any ever tested a https portal? ("Richard Braganza" <iwtb0202@...glemail.com>)
• Re: Linux kernel source archive vulnerable (Roland Kuhn <rkuhn@....physik.tu-muenchen.de>)
• Re: Active Directory accounts (Philosophil <flosofl@...il.com>)
• Re: Linux kernel source archive vulnerable (hadmut@...isch.de (Hadmut Danisch))
• HP execs phone hack - SSNs *still* not secure for authentication ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• Re: Linux kernel source archive vulnerable (hadmut@...isch.de (Hadmut Danisch))
• Re: Linux kernel source archive vulnerable ("Gerald (Jerry) Carter" <jerry@...ba.org>)
• Re: Linux kernel source archive vulnerable ("Gerald (Jerry) Carter" <jerry@...ba.org>)
• Re: Linux kernel source archive vulnerable (hadmut@...isch.de (Hadmut Danisch))
• Re: Microsoft confirmed Word 0-day vulnerability ("Nick Boyce" <nick.boyce@...il.com>)
• [Privacy] Sexbaiting Social Experiment on Craigslist Affects Hundreds (fwd) (Jay Sulzberger <jays@...ix.com>)
• Re: Linux kernel source archive vulnerable ("Gerald (Jerry) Carter" <jerry@...ba.org>)
• Re: Re: Linux kernel source archive vulnerable (Jurjen Oskam <jurjen@...pendous.org>)
• tar alternative (Tim <tim-security@...tinelchicken.org>)
• Re: Linux kernel source archive vulnerable (FRLinux <frlinux@...il.com>)
• Cross Context Scripting with Sage ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• rPSA-2006-0166-1 bind bind-utils (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2006-0165-1 mailman (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Linux kernel source archive vulnerable (hadmut@...isch.de (Hadmut Danisch))
• [ MDKSA-2006:163 ] - Updated bind packages fix DoS vulnerabilities (security@...driva.com)
• Re: RSA SecurID SID800 Token vulnerable by design ("Matthew Leeds" <mleeds@...leeds.net>)
• Re: Re: Linux kernel source archive vulnerable (Michael Gale <michael.gale@...on.com>)

• Re: RSA SecurID SID800 Token vulnerable by design ("Bojan Zdrnja" <bojan.zdrnja@...il.com>)
• SFTPLogging patch log flooding vulnerability (Anthony Martinez <fd@...mrtheplague.net>)
• Windows PE Checksums ("Aaron Gray" <angray@...b.net>)
• Re: Windows PE Checksums (Piotr Bania <bania.piotr@...il.com>)
• Re: tar alternative ("Cristi Mitrana" <cristi.mitrana@...il.com>)
• [SECURITY] [DSA 1172-1] New bind9 packages fix denial of service (joey@...odrom.org (Martin Schulze))
• Re: Re: Linux kernel source archive vulnerable (Valdis.Kletnieks@...edu)
• Re: RSA SecurID SID800 Token vulnerable by design (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Re: tar alternative (Tim <tim-security@...tinelchicken.org>)
• Re: Re: RSA SecurID SID800 Token vulnerable by design ("Brian Eaton" <eaton.lists@...il.com>)
• Re: Re: tar alternative (darren kirby <bulliver@...computer.org>)
• Re: Re: tar alternative (Tim <tim-security@...tinelchicken.org>)
• PHP 5.1.6 / 4.4.4 Critical php_admin* bypass by ini_restore() (Maksymilian Arciemowicz <max@...tsuper.pl>)
• List Charter (John Cartwright <johnc@...k.org.uk>)

• Re: RSA SecurID SID800 Token vulnerable by design ("Bojan Zdrnja" <bojan.zdrnja@...il.com>)
• Re: OT - Check this out - Full disclosure is apt for this (c0ntex <c0ntexb@...il.com>)
• OT - Check this out - Full disclosure is apt for this (c0ntex <c0ntexb@...il.com>)
• RE: Re: RSA SecurID SID800 Token vulnerable by design ("Lyal Collins" <lyal.collins@...2it.com.au>)
• Re: Re: RSA SecurID SID800 Token vulnerable by design ("Brian Eaton" <eaton.lists@...il.com>)
• (no subject) ("nicholas cann" <nicholas.cann1@...world.com>)
• [SECURITY] [DSA 1173-1] New openssl packages fix RSA signature forgery cryptographic weakness (Moritz Muehlenhoff <jmm@...ian.org>)
• Win32 device driver BSOD (PoC) ("/dev/null" <exceed@...il.si>)
• Re: RSA SecurID SID800 Token vulnerable by design (ArkanoiD <ark@...ex.net>)

• FYI: MS06-049 patch (920958) corrupts NTFS compression files (kjm@...s.ryukoku.ac.jp (KOJIMA Hajime))
• Weird Crash in IE and Opera ("Josh L. Perrymon" <joshuaperrymon@...il.com>)
• RE: RSA SecurID SID800 Token vulnerable by design ("Gaidosch, Tamas" <Tamas.Gaidosch@...g.hu>)
• KorviBlog - XSS permanent ! (... <cdg393@...il.com>)
• PHProg : Local File Inclusion + XSS + Full path disclosure (... <cdg393@...il.com>)
• Re: Weird Crash in IE and Opera ("Alex Strawman" <alexstrawman@...il.com>)
• RFID passports - call for participation - DC4420 - 27th September (Adam Laurie <adam.laurie@...bunker.net>)
• Re: [SECURITY] OpenSSL 0.9.8c and 0.9.7k released ("sivabalakrishnan" <g.sivabalakrishnan@...il.com>)
• Re[2]: RSA SecurID SID800 Token vulnerable by design (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re[3]: RSA SecurID SID800 Token vulnerable by design (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: OT - Check this out - Full disclosure is apt for this (Philosophil <flosofl@...il.com>)
• Re: OT - Check this out - Full disclosure is apt for this (Troy Cregger <tcregger@...nedyinfo.com>)
• Re: Re[3]: RSA SecurID SID800 Token vulnerable by design ("Brian Eaton" <eaton.lists@...il.com>)
• Re[5]: RSA SecurID SID800 Token vulnerable by design (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Re: Re[3]: RSA SecurID SID800 Token vulnerable by design (3APA3A <3APA3A@...URITY.NNOV.RU>)
• [MailServer Notification]Security Notification (<michael.devlin@...leaves.com>)
• [MailServer Notification]Security Notification (<michael.devlin@...leaves.com>)
• [SECURITY] [DSA 1174-1] New openssl096 packages fix RSA signature forgery cryptographic weakness (Moritz Muehlenhoff <jmm@...ian.org>)
• ASP Auditor v1.0 BETA released ("David Kierznowski" <david.kierznowski@...il.com>)
• Re: OT - Check this out - Full disclosure is apt for this (c0ntex <c0ntexb@...il.com>)
• Re: OT - Check this out - Full disclosure is apt for this (pauls@...allas.edu)
• Re: OT - Check this out - Full disclosure is apt for this (Troy Cregger <tcregger@...nedyinfo.com>)
• Re: OT - Check this out - Full disclosure is apt for this (c0ntex <c0ntexb@...il.com>)
• [NETRAGARD-20060624 SECURITY ADVISORY] [ ROXIO TOAST 7 TITANIUM LOCAL ROOT COMPROMISE - DEJA VU RACE CONDITION] (Netragard Security Advisories <advisories@...r…)
• Re: OT - Check this out - Full disclosure is apt for this (Anders B Jansson <hdw@...listi.se>)
• ShAnKaR: multiple PHP application poison NULL byte vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Linux kernel source archive vulnerable (coderpunk <coderpunk@...il.com>)
• vCAP calendar server Multiple vulnerabilities (<securma@...x.org>)

• Re: Linux kernel source archive vulnerable (Joe Feise <jfeise@...se.com>)
• Re: Re: RSA SecurID SID800 Token vulnerable by design ("Bojan Zdrnja" <bojan.zdrnja@...il.com>)
• RE: OT - Check this out - Full disclosure is apt for this ("Throwaway1@...umbus.rr.com" <Throwaway1@...umbus.rr.com>)
• Re: RE: OT - Check this out - Full disclosure is apt for this ("Gary E. Miller" <gem@...lim.com>)
• Re: PHP 5.1.6 / 4.4.4 Critical php_admin* bypass by ini_restore() (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• Re: RE: OT - Check this out - Full disclosure is apt for this (c0ntex <c0ntexb@...il.com>)
• Re: OT - Check this out - Full disclosure is apt for this (Denis Jedig <seclists@...eticon.de>)
• RE: Re: OT - Check this out - Full disclosure is aptfor this ("Goencz, Otto" <OGoencz@....com>)
• Re: OT - Check this out - Full disclosure is apt for this (b.hines@...cast.net)
• Re: ShAnKaR: multiple PHP application poison NULL byte vulnerability (Jerome Athias <jerome.athias@...e.fr>)
• Re: RE: OT - Check this out - Full disclosure is apt for this (bkfsec <bkfsec@....lonestar.org>)
• Session Token Remains Valid After Logout in IBM Lotus Domino Web Access ("Ferguson, David" <Dave.Ferguson@...hnetsecurity.com>)
• Re: RSA SecurID SID800 Token vulnerable ("Jeb Osama" <mkmaxx@...il.com>)
• Re: RE: OT - Check this out - Full disclosure is apt for this (c0ntex <c0ntexb@...il.com>)
• Re: RE: OT - Check this out - Full disclosure is apt for this (Paul Schmehl <pauls@...allas.edu>)
• rPSA-2006-0167-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (rPath Update Announcements <announce-noreply@...th.com>)
• Re: RE: OT - Check this out - Full disclosure is apt for this (c0ntex <c0ntexb@...il.com>)
• ERRATA: [ GLSA 200609-05 ] OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [ GLSA 200609-06 ] AdPlug: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• Apple QuickTime Player H.264 Codec Remote Integer Overflow (Piotr Bania <bania.piotr@...il.com>)
• Re: Session Token Remains Valid After Logout in IBM Lotus Domino Web Access ("Trey Keifer" <midnitrcr@...il.com>)
• [USN-344-1] X.org vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Apple QuickTime H.264 Integer Overflow Vulnerability (Sowhat <smaillist@...il.com>)
• iDefense Security Advisory 09.12.06: Multiple Vendor X Server CID-keyed Fonts 'scan_cidfont()' Integer Overflow Vulner… (iDefense Labs <labs-no-reply@...fense.c…)
• iDefense Security Advisory 09.12.06: Multiple Vendor X Server CID-keyed Fonts 'CIDAFM()' Integer Overflow (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 09.12.06: Apple QuickTime FLIC File Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Computer Terrorism (UK) :: Incident Response Centre - Microsoft Publisher Font Parsing Vulnerability ("CTUK :: Incident Response Centre" <advisories@...puterte…)
• Computer Terrorism (UK) :: Incident Response Centre - Adobe/Macromedia Flash Player Vulnerability ("CTUK :: Incident Response Centre" <advisories@...puterterro…)
• RE: Session Token Remains Valid After Logout in IBM Lotus Domino Web Access ("Ferguson, David" <Dave.Ferguson@...hnetsecurity.com>)
• Re: Linux kernel source archive vulnerable (coderpunk <coderpunk@...il.com>)
• Re: Re: Linux kernel source archive vulnerable ("Chris Umphress" <umphress@...il.com>)
• [EEYEB-20080824] Internet Explorer Compressed Content URL Heap Overflow Vulnerability #2 ("eEye Advisories" <Advisories@...e.com>)
• [EEYEB-20080824] Internet Explorer Compressed Content URL Heap Overflow Vulnerability #2 ("eEye Advisories" <Advisories@...e.com>)
• RE: OT - Check this out - Full disclosure is apt for this ("Throwaway1@...umbus.rr.com" <Throwaway1@...umbus.rr.com>)

• Re: RE: OT - Check this out - Full disclosure is apt for this (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: FYI: MS06-049 patch (920958) corrupts NTFS compression files (kjm@...s.ryukoku.ac.jp (KOJIMA Hajime))
• THC Nokia Phone Unlock (rm@...fault.net)
• NetPerformer FRAD ACT Multiple Vulnerabilities (arif.jatmoko@....ccamatil.com)
• [SECURITY] [DSA 1161-2] New Mozilla Firefox packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• [USN-345-1] mailman vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Re: OT - Check this out - Full disclosure is aptfor this ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• Cisco IOS VTP issues (FX <fx@...noelit.de>)
• Re: RE: OT - Check this out - Full disclosure is apt for this (bkfsec <bkfsec@....lonestar.org>)
• [SECURITY] [DSA 1175-1] New isakmpd packages fix replay protection bypass (joey@...odrom.org (Martin Schulze))
• Backdooring PDF Files ("David Kierznowski" <david.kierznowski@...il.com>)
• Multiple Vulnerabilities in Apple QuickTime (<David_Marcus@...fee.com>)
• [ GLSA 200609-07 ] LibXfont, monolithic X.org: Multiple integer overflows (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [ GLSA 200609-08 ] xine-lib: Buffer overflows (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [ GLSA 200609-09 ] FFmpeg: Buffer overflows (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [SECURITY] [DSA 1176-1] New zope2.7 packages fix information disclosure (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Backdooring PDF Files (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: RE: OT - Check this out - Full disclosure is apt for this (<ninjadaito@...hmail.com>)
• Re: Backdooring PDF Files (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: Backdooring PDF Files (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• RE: OT - Check this out - Full disclosure is apt for this. ("Throwaway1@...umbus.rr.com" <Throwaway1@...umbus.rr.com>)
• [NETRAGARD-20060822 SECURITY ADVISORY] [ APPLE COMPUTER CORPORATION KEXTLOAD VULNERABILITY + ROXIO TOAST TITANUM 7 HEL… (Netragard Security Advisories <advisori…)

• Mailman 2.1.8 Multiple Security Issues (Moritz Naumann <security@...itz-naumann.com>)
• Re: RE: OT - Check this out - Full disclosure is apt for this. (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: RSA SecurID SID800 Token vulnerable by design (Vin McLellan <vin@...world.com>)
• Re: Backdooring PDF Files ("David Kierznowski" <david.kierznowski@...il.com>)
• Re: Backdooring PDF Files ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Hotmail/MSN Multiple cross site scripting ( XSS ) (<securma@...x.org>)
• Re: Backdooring PDF Files (Markus Jansson <seemyhomepage@...sokotisivuilta.ni>)
• Layered Defense Advisory: Symantec AV Corporate Edition Format String Vulnerability (Deral Heiland <dh@...ereddefense.com>)
• Secunia Research: Tagger LE PHP "eval()" Injection Vulnerabilities (Secunia Research <vuln-remove@...unia.com>)
• Re: Backdooring PDF Files ("Geo." <geoincidents@....net>)
• Google Search API Worms ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• the world of botnets article and wrong numbers ("Toby McKay" <mcktoby@...il.com>)
• Re: Backdooring PDF Files ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: the world of botnets article and wrong numbers (Gadi Evron <ge@...uxbox.org>)
• Re: the world of botnets article and wrong numbers (3APA3A <3APA3A@...URITY.NNOV.RU>)
• [ MDKSA-2006:164 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities (security@...driva.com)
• Re: the world of botnets article and wrong numbers ("Toby McKay" <mcktoby@...il.com>)
• Re: RSA SecurID SID800 Token vulnerable by design ("Brian Eaton" <eaton.lists@...il.com>)
• Re: the world of botnets article and wrong numbers ("Toby McKay" <mcktoby@...il.com>)
• [ GLSA 200609-10 ] DokuWiki: Arbitrary command execution (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Re: the world of botnets article and wrong numbers ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• [USN-346-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Re: Backdooring PDF Files (Hugo Francisco González Robledo <hugo.gonzalez@...lp.edu.mx>)
• Good ASP backdoor? ("Lachniet, Mark" <mlachniet@...uoianet.com>)
• [USN-346-2] Fixed linux-restricted-modules-2.6.15 for previous Linux kernel update (Martin Pitt <martin.pitt@...onical.com>)
• Re: Good ASP backdoor? ("Exibar" <exibar@...lair.com>)
• AFS - The Ultimate Sulution? (Paul Sebastian Ziegler <psz@...erved.de>)
• Re: Backdooring PDF Files ("Stan Bubrouski" <stan.bubrouski@...il.com>)
• Re: [botnets] the world of botnets article and wrong numbers (Gadi Evron <ge@...uxbox.org>)
• Re: [botnets] the world of botnets article and wrong numbers (Jose Nazario <jose@...key.org>)
• Re: Good ASP backdoor? ("Jason Miller" <jammer128@...il.com>)
• Re: Good ASP backdoor? (c0ntex <c0ntexb@...il.com>)

• Re: [botnets] the world of botnets article and wrong numbers ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: [botnets] the world of botnets article and wrong numbers ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: [botnets] the world of botnets article and wrong numbers (Gadi Evron <ge@...uxbox.org>)
• Re: Backdooring PDF Files ("fit happy" <happyfit@...il.com>)
• Re: [botnets] the world of botnets article and wrong numbers ("Peter Dawson" <slash.pd@...il.com>)
• [SECURITY] [DSA 1160-2] New Mozilla packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Re: [botnets] the world of botnets article and wrong numbers ("Richard Golodner" <rgolodner@...ratection.com>)
• Re: [botnets] the world of botnets article and wrong numbers ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: [botnets] the world of botnets article and wrong numbers (Georgi Guninski <guninski@...inski.com>)
• [ GLSA 200609-11 ] BIND: Denial of Service (Raphael Marichez <falco@...too.org>)
• 0day IE6? ActiveX COM ("Tyop Tyip" <tyoptyop@...il.com>)
• Re: 0day IE6? ActiveX COM (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: AFS - The Ultimate Sulution? -- What is the point? ("マグロ原子" <atoom.tonijn@...il.com>)
• It would be great if you could reply to messages without starting a new thread... (Was: 0day IE6? ActiveX COM) ("マグロ原子" <atoom.tonijn@...il.com>)
• Gmail phishing attacks ("Peter Dawson" <slash.pd@...il.com>)
• rPSA-2006-0169-1 firefox thunderbird (rPath Update Announcements <announce-noreply@...th.com>)
• What is Google Binary Search and Should We Fear it? ("Michael Sutton" <msutton@...dynamics.com>)
• ASP Auditor Beta 2 Released ("David Kierznowski" <david.kierznowski@...il.com>)
• Re: Linux kernel source archive vulnerable (Schanulleke <schalulleke@...il.com>)
• [SECURITY] [DSA 1177-1] New usermin packages fix denial of service (joey@...odrom.org (Martin Schulze))
• Re: AFS - The Ultimate Sulution? -- What is the point? (Dean Pierce <piercede@....edu>)
• AttackAPI (0.7) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)

• Re: tar alternative (Aaron Gray <angray@...b.net>)
• Info about HTA file [spam or malware ?] ("Dev Anand" <deva.security@...il.com>)
• Re: Backdooring PDF Files ("Greg Bur" <greg.bur@...il.com>)
• [FON (fon.com)] serious security problem: sniff anyone's login ("F. Kriewitz" <Full-Disclosure@...ddy.eu.org>)
• [SECURITY] [DSA 1178-1] New freetype packages fix execution of arbitrary code (Moritz Muehlenhoff <jmm@...ian.org>)
• Honeypots (jammer128@...il.com)
• Re: Honeypots ("Joshua D. Abraham" <jabra@....neu.edu>)
• Re: Backdooring PDF Files ("Bipin Gautam" <gautam.bipin@...il.com>)

• Re: Honeypots (Renaud Leroy <renaudleroy@...e.fr>)
• Re: AFS - The Ultimate Sulution? -- What is the point? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: 0day IE6? ActiveX COM ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Honeypots (jammer128@...il.com)
• Re: Honeypots ("Jason Miller" <jammer128@...il.com>)
• Re: Honeypots ("Toby McKay" <mcktoby@...il.com>)
• Re: Honeypots (Blue Boar <BlueBoar@...evco.com>)
• Re: AFS - The Ultimate Sulution? -- What is the point? (Paul Sebastian Ziegler <psz@...erved.de>)
• Re: AFS - The Ultimate Sulution? (Denis Jedig <seclists@...eticon.de>)
• Re: AFS - The Ultimate Sulution? -- What is the point? (Valdis.Kletnieks@...edu)
• Re: AFS - The Ultimate Sulution? -- What is the point? ("Brian Eaton" <eaton.lists@...il.com>)
• Re: AFS - The Ultimate Sulution? -- What is the point? ("Brandon S. Allbery KF8NH" <allbery@....cmu.edu>)
• Re: AFS - The Ultimate Sulution? -- What is the point? ("Brandon S. Allbery KF8NH" <allbery@....cmu.edu>)
• McAfee VirusScan Enterprise - disabling the client side "On-Access Scan" (Eitan Caspi <eitanc@...oo.com>)
• dnsmap: subdomain bruteforcer for stealth enumeration (pagvac <unknown.pentester@...il.com>)

• Re: Info about HTA file [spam or malware ?] (Vishweshwar S Singh Deo <vssinghdeo@...il.com>)
• USB Attacks Going Commercial? (Gadi Evron <ge@...uxbox.org>)
• [USN-348-1] GnuTLS vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• [USN-347-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Re: McAfee VirusScan Enterprise - disabling the client side "On-Access Scan" (<David_Coffey@...fee.com>)
• USB Attacks Going Commercial? ("Wolf" <wolf.schiedler@...il.com>)
• [RLSA_02-2006] OSU httpd for OpenVMS path and directory disclosure - is this a bug or a feature? ("staff @ rfdslabs" <rfdslabs@...slabs.com.br>)

• [ MDKSA-2006:165 ] - Updated mailman packages fix multiple vulnerabilities (security@...driva.com)
• [SECURITY] [DSA 1179-1] New alsaplayer packages fix denial of service (joey@...odrom.org (Martin Schulze))
• [SECURITY] Sunbelt Software: New Microsoft Internet Explorer Expolit - 9-18-2006 ("Eric Sites" <erics@...belt-software.com>)
• Yet another 0day for IE (Gadi Evron <ge@...uxbox.org>)
• New PowerPoint 0-day Trojan in the wild (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• [ GLSA 200609-12 ] Mailman: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [USN-349-1] gzip vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• [SECURITY] [DSA 1180-1] New bomberclone packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Microsoft PowerPoint 0-day Vulnerability FAQ - September written (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• [SECURITY] [DSA 1181-1] New gzip packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• New information states PowerPoint issue as fixed in MS06-012 (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: USB Attacks Going Commercial? ("Dyke, Tim" <Tim.Dyke@...ksafebc.com>)
• rPSA-2006-0170-1 gzip (rPath Update Announcements <announce-noreply@...th.com>)
• A.I-Pifou (Cookie) Local File Inclusion (cdg393 <cdg393@...il.com>)
• Re: Yet another 0day for IE (Gadi Evron <ge@...uxbox.org>)
• Camino release 1.0.3 fixes several vulnerabilities (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

• Dr.Web 4.33 antivirus LHA long directory name heap overflow (Jean-Sébastien Guay-Leroux <jean-sebastien@...y-leroux.com>)
• DotNetNuke HTML Code Injection (contact@...ureshapes.com)
• Drone Armies C&C Report - 19 Sep 2006 (c2report@...tf.org)
• Cross Site Scripting at Several Greek Banks. ("Sentinel" <info@...tinel.gr>)
• Re: SimpleBoard Mambo Component 1.1.0 Remote File Include (Häussler, Christian <Christian.Haeussler@...-coburg.de>)
• Re: AFS - The Ultimate Sulution? ("マグロ原子" <atoom.tonijn@...il.com>)
• Cross Site Scripting Vulnerabilities in multiple Greek Web Banking sites ("Emmanouil Gavriil" <egavriil@...tinel.gr>)
• Re: AFS - The Ultimate Sulution? (Paul Sebastian Ziegler <psz@...erved.de>)
• PowerPoint issue fixed in MS06-012/CVE2006-009 (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• [vuln.sg] Neon WebMail for Java Multiple Vulnerabilities (TAN Chew Keong <vulnpost-remove@...n.sg>)
• Live is live ("Fred Jupiter" <bluepill@...usanswers.com>)
• Live is Live (bluepill <bluepill@...usanswers.com>)
• working contact for 3ware.com? ("Niall Smith" <nsmith@...c.com>)
• Re: Live is Live (c0ntex <c0ntexb@...il.com>)
• Re: AFS - The Ultimate Sulution? (Siim Põder <windo@...rad-teel.net>)
• [Oracle] Rainbow crack table Oracle patch. ("Fabien Kraemer" <fabien.kraemer@...il.com>)
• Re: Live is live (Jason Duke <jason@...angelogic.com>)
• Fwd: [Oracle] Rainbow crack table Oracle patch. ("Fabien Kraemer" <fabien.kraemer@...il.com>)
• Cisco Security Advisory: Cisco Intrusion Prevention System Management Interface Denial of Service and Fragmented Packe… (Cisco Systems Product Security Incident…)
• Cisco Security Advisory: Cisco Guard enables Cross Site Scripting (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Re: AFS - The Ultimate Sulution? (Valdis.Kletnieks@...edu)
• Re: Live is live (Valdis.Kletnieks@...edu)
• Cisco Security Advisory: DOCSIS Read-Write Community String Enabled in Non-DOCSIS Platforms (Cisco Systems Product Security Incident Response Team <psirt@...co…)
• Re: AFS - The Ultimate Sulution? ("Brian Eaton" <eaton.lists@...il.com>)
• Re: AFS - The Ultimate Sulution? (Valdis.Kletnieks@...edu)
• Internet Explorer VML Zero-Day Mitigation (Matthew Murphy <mattmurphy@...rr.com>)
• Re: tar alternative (Tim <tim-security@...tinelchicken.org>)
• New virus - possible rootkit ("Joel R. Helgeson" <joel@...geson.com>)
• Re: tar alternative (Jon Hart <jhart@...ofed.org>)
• Backdooring MP3 files (plus QuickTime issues and Cross-context Scripting) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• [ MDKSA-2006:166 ] - Updated gnutls packages fixes PKCS signature verification issue. (security@...driva.com)

• [ MDKSA-2006:167 ] - Updated gzip packages fix multiple vulnerabilities (security@...driva.com)
• [ MDKSA-2006:168 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
• Re: tar alternative (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• Redirection Attack Possible in Orkut (Aditya Sood <zeroknock@...aeye.org>)
• SQL Injection In MSN (Aditya Sood <zeroknock@...aeye.org>)
• Google MetaJacking Search Bug (Aditya Sood <zeroknock@...aeye.org>)
• Orkut Phishing Attack (Pranay Kanwar <warl0ck@...aeye.org>)
• Re: Orkut Phishing Attack (Ajay Pal Singh Atwal <ajaypal@...bec.org>)
• [scip_Advisory 2555] Sun Secure Global Desktop prior 4.3 multiple remote vulnerabilities (Marc Ruef <maru@...p.ch>)
• RSA Keyon Log verification bypass vulnerability (Andrei Mikhailovsky <mlists@...ont.com>)
• Re: SQL Injection In MSN (SkyOut <sky_out@....net>)
• [USN-350-1] Thunderbird vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• [CAID 34616, 34617, 34618]: CA eSCC and eTrust Audit vulnerabilities ("Williams, James K" <James.Williams@...com>)
• Re: New virus - possible rootkit ("Bipin Gautam" <gautam.bipin@...il.com>)
• New PGP Key for SCO Security (SCO Security <security@....com>)

• Call for Papers and Tutorials for the 19th Annual FIRST Conference, June 17– 22, 2007 (Ian Cook <ian.cook@...il.com>)
• tech support being flooded due to IE 0day (Gadi Evron <ge@...uxbox.org>)
• FiWin SS28S WiFi VoIP SIP/Skype Phone Hardcoded Telnet user/pass and debug access ("Shawn Merdinger" <shawnmer@...il.com>)
• Self-contained XSS Attacks (the new generation of XSS) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• [Call for Papers] DIMVA 2007 (Robin Sommer <info@...va.org>)
• Re: Linux kernel source archive vulnerable (Troy Cregger <tcregger@...nedyinfo.com>)
• Re: Self-contained XSS Attacks (the new generation of XSS) (Tim <tim-security@...tinelchicken.org>)
• Re: Live is Live ("Thomas Pollet" <thomas.pollet@...il.com>)
• Re: FiWin SS28S WiFi VoIP SIP/Skype Phone Hardcoded Telnet user/pass and debug access (Paul Schmehl <pauls@...allas.edu>)
• [SECURITY] [DSA 1182-1] New gnutls11 packages fix RSA signature forgery cryptographic weakness (Moritz Muehlenhoff <jmm@...ian.org>)
• [USN-351-1] firefox vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• SUSE Security Announcement: openssl, mozilla-nss RSA signature evasion (SUSE-SA:2006:055) (Marcus Meissner <meissner@...e.de>)
• Re: Self-contained XSS Attacks (the new generation of XSS) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Windows Automatic Updates WTF? ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• [ MDKSA-2006:169 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
• Re: New virus - possible rootkit ("Joel R. Helgeson" <joel@...geson.com>)
• [ MDKSA-2006:170 ] - Updated webmin packages fix XSS vulnerability (security@...driva.com)
• Re: Windows Automatic Updates WTF? (Troy Cregger <tcregger@...nedyinfo.com>)
• WikiSecu.com - What you think about that? (join@...isecu.com)
• Re: The truth about Rob Levin aka Liloofirc.freenode.net (Diman Todorov <diman.todorov@...llo.at>)

• Re: FiWin SS28S WiFi VoIP SIP/Skype Phone Hardcoded Telnet user/pass and debug access (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: FiWin SS28S WiFi VoIP SIP/Skype Phone Hardcoded Telnet user/pass and debug access (pagvac <unknown.pentester@...il.com>)
• [ GLSA 200609-13 ] gzip: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Re: Yet another 0day for IE ("Bill Stout" <bill.stout@...enborder.com>)
• Re: FiWin SS28S WiFi VoIP SIP/Skype Phone Hardcoded Telnet user/pass and debug access (pagvac <unknown.pentester@...il.com>)
• IM Sniffer release ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Echo Mirage: A Generic Win32 Network Communications Proxy (Dave <dave@...dshell.net>)
• Re: FiWin SS28S WiFi VoIP SIP/Skype Phone Hardcoded Telnet user/pass and debug access ("Shawn Merdinger" <shawnmer@...il.com>)
• Re: [VulnWatch] Sun passwd(1) Command Vulnerability (<myidgaurd-findme@...oo.co.in>)
• Re: Re: [VulnWatch] Sun passwd(1)Command Vulnerability (<c0redump@...ers.org.uk>)
• Re: Re: [VulnWatch] Sun passwd(1) Command Vulnerability (Valdis.Kletnieks@...edu)
• MSN (or should that be "msn") goofs again (Nick FitzGerald <nick@...us-l.demon.co.uk>)

• (no subject) ("MoHaJaLi" <mohajali2k4@...il.com>)
• Local File Inclusion : Kietu (cdg393 <cdg393@...il.com>)
• Cisco 7905 VoIP phone crashing from dsniff arpspoof? ("Shawn Merdinger" <shawnmer@...il.com>)
• Re: WikiSecu.com - What you think about that? ("マグロ原子" <atoom.tonijn@...il.com>)
• Re: Windows Automatic Gringo ZaW! ("マグロ原子" <atoom.tonijn@...il.com>)
• Re: Self-contained XSS Attacks (the new generation of XSS) ("Ron Jennings" <ronj@...sersecurity.com>)
• Re: Windows Automatic Gringo ZaW! (Valdis.Kletnieks@...edu)
• Re: Linux kernel source archive vulnerable (Ron <iago@...hallalegends.com>)
• Re: Yet another 0day for IE (Disabling Javascript no longer a fix) ("Bill Stout" <bill.stout@...enborder.com>)
• ZERT patch [was: 0day for IE (Disabling Javascript no longer a fix)] (Gadi Evron <ge@...uxbox.org>)
• Windows VML Vulnerability FAQ (CVE-2006-4868) written (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Remote File Include in syntaxCMS ("MoHaJaLi" <mohajali2k4@...il.com>)

• Re: Windows Automatic Gringo ZaW! ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• Re: WikiSecu.com - What you think about that? (Adriel Desautels <simon@...soft.com>)
• Re: Yet another 0day for IE (Disabling Javascript no longer a fix) (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: WikiSecu.com - What you think about that? ("fun frok" <funfrok@...il.com>)
• Re: The truth about Rob Levin aka Liloofirc.freenode.net (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• [SECURITY] [DSA 1183-1] New Linux 2.4.27 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• [USN-352-1] Thunderbird vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Typo3 v4.x: XSS in extension "Indexed Search" v2.9.0 (Moritz Naumann <security@...itz-naumann.com>)
• [SECURITY] [DSA 1184-1] New Linux 2.6.8 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Could InfoSec be Worse than Death? ("Kenneth F. Belva" <ken@...security.com>)
• Re: Could InfoSec be Worse than Death? (Paul Schmehl <pauls@...allas.edu>)
• Re: ZERT patch [was: 0day for IE (Disabling Javascript no longer a fix)] ("Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@...bell.net>)
• Re: ZERT patch [was: 0day for IE (Disabling Javascript no longer a fix)] ("Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@...bell.net>)
• Re: ZERT patch [was: 0day for IE (Disabling Javascript no longer a fix)] (Gadi Evron <ge@...uxbox.org>)
• Re: Could InfoSec be Worse than Death? (Benjamin Robson <ben.robson@...ssicblue.com.au>)
• Could InfoSec be Worse than Death? ("Kenneth F. Belva" <ken@...security.com>)
• Re: Could InfoSec be Worse than Death? (Paul Schmehl <pauls@...allas.edu>)
• Re: Could InfoSec be Worse than Death? ("Brian Eaton" <eaton.lists@...il.com>)
• iDefense Security Advisory 09.23.06: FreeBSD i386_set_ldt Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 09.23.06: FreeBSD i386_set_ldt Integer Signedness Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Could InfoSec be Worse than Death? (Benjamin Robson <ben.robson@...ssicblue.com.au>)

• Several updates in Windows VML Vulnerability FAQ (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Exploitation Frameworks (jammer128@...il.com)
• USB Penetration (jammer128@...il.com)
• Re: ZERT patch [was: 0day for IE (Disabling Javascript no longer a fix)] ("Bojan Zdrnja" <bojan.zdrnja@...il.com>)
• Re: Could InfoSec be Worse than Death? ("Kenneth F. Belva" <ken@...security.com>)
• ARES 2007 Workshop Call for papers Submission Deadline : November 19, 2006 ("Manh Tho" <manhthovn@...il.com>)
• Re: Yet another 0day for IE ("Ronald MacDonald" <ronald@...cd.com>)
• Uninformed Journal Release Announcement: Volume 5 (Uninformed Staff <fdlist@...italoffense.net>)
• Re: USB Penetration ("h0W@rD Sh33n" <flee74@...il.com>)
• Re: Could InfoSec be Worse than Death? (Paul Schmehl <pauls@...allas.edu>)
• Ruxcon 2006 (cfp@...con.org.au)
• [SECURITY] [DSA 1184-2] New Linux 2.6.8 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• the anti botnet market for ISPs and corporate networks (Gadi Evron <ge@...uxbox.org>)
• Re: the anti botnet market for ISPs and corporatenetworks (jammer128@...il.com)
• [Whitepaper] - Access over Ethernet: Insecurities in AoE ("Morgan Marquis-Boire" <morgan@...urity-assessment.com>)
• VML Exploit vs. AV/IPS/IDS signatures (avivra <avivra@...il.com>)
• Re: VML Exploit vs. AV/IPS/IDS signatures (H D Moore <fdlist@...italoffense.net>)
• [ GLSA 200609-14 ] ImageMagick: Multiple Vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [ GLSA 200609-15 ] GnuTLS: RSA Signature Forgery (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [ GLSA 200609-16 ] Tikiwiki: Arbitrary command execution (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Cisco PSIRT ("J. Oquendo" <sil@...iltrated.net>)
• Rothman: Belva's a Joker (was Could InfoSec be Worse than Death?) ("Kenneth F. Belva" <ken@...security.com>)
• rPSA-2006-0173-1 openoffice.org (rPath Update Announcements <announce-noreply@...th.com>)
• Windows VML security update MS06-055 released (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: VML Exploit vs. AV/IPS/IDS signatures ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• ZDI-06-029: Ipswitch WS_FTP Server Checksum Command Parsing Buffer Overflow Vulnerabilities (zdi-disclosures@...m.com)
• Re: VML Exploit vs. AV/IPS/IDS signatures ("Aviv Raff" <avivra@...il.com>)
• Re: VML Exploit vs. AV/IPS/IDS signatures (nirvana <karmic_nirvana@...oo.com>)

• Re: VML Exploit vs. AV/IPS/IDS signatures (Alexander Sotirov <asotirov@...ermina.com>)
• Re: VML Exploit vs. AV/IPS/IDS signatures ("Pukhraj Singh" <pukhraj.singh@...il.com>)
• Gita Ptacek ("Andrew A" <gluttony@...il.com>)
• MSN Redirection And Phishing Attack ("Aditya Sood" <ZeroKnock@...aEye.Org>)
• (no subject) ("Andrew A" <gluttony@...il.com>)
• rPSA-2006-0174-1 gnome-ssh-askpass openssh openssh-client openssh-server (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Rothman: Belva's a Joker (was Could InfoSec beWorse than Death?) ("Tom Harrison" <Tom.Harrison@...is.com>)
• Re: Windows VML security update MS06-055 released (Jerome Athias <jerome.athias@...e.fr>)
• Re: Rothman: Belva's a Joker (was Could InfoSec beWorse than Death?) ("Kenneth F. Belva" <ken@...security.com>)
• Re: VML Exploit vs. AV/IPS/IDS signatures (avivra <avivra@...il.com>)
• Major UK Bank Web Sites With Serious Security Flaws (Juergen Schmidt <ju@...sec.de>)
• [ GLSA 200609-17 ] OpenSSH: Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Re: IM Sniffer release ("joe haldon" <kbcboy@...il.com>)
• ERRATA: [ GLSA 200609-17 ] OpenSSH: Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)

• [ MDKSA-2006:170-1 ] - Updated webmin packages fix XSS vulnerability (security@...driva.com)
• Re: IM Sniffer release ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: Windows VML security update MS06-055 released (Alex Eckelberry <AlexE@...belt-software.com>)
• Security as an Enabler - Virtual Trust: An Open Challenge to All InfoSec Professionals ("Kenneth F. Belva" <ken@...security.com>)
• Re: VML Exploit vs. AV/IPS/IDS signatures ("Pukhraj Singh" <pukhraj.singh@...il.com>)
• any tools for testing RPC (6ackpace <6ackpace@...il.com>)
• Re: any tools for testing RPC ("Edward Pearson" <Ed@...tyitservices.co.uk>)
• GOOGLE BUG ("Huri Huri" <evilhuri@...mail.com>)
• GOOGLE BUG ("Huri Huri" <evilhuri@...mail.com>)
• GOOGLE BUG ("Huri Huri" <evilhuri@...mail.com>)
• Re: GOOGLE BUG ("Peter Dawson" <slash.pd@...il.com>)
• [SECURITY] OpenSSL 0.9.8d and 0.9.7l released (Mark J Cox <mark@....com>)
• Re: Security as an Enabler - Virtual Trust: An Open Challenge to All InfoSec Professionals ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• Re: any tools for testing RPC (Valdis.Kletnieks@...edu)
• Re: IM Sniffer release (Ferdinand Klinzer <Klinzer@....de>)
• Re: Security as an Enabler - Virtual Trust: AnOpen Challenge to All InfoSec Professionals (<Glenn.Everhart@...se.com>)
• Security as an Enabler - Virtual Trust: An Open Challenge to All InfoSec Professionals ("Kenneth F. Belva" <ken@...security.com>)
• [ GLSA 200609-18 ] Opera: RSA signature forgery (Matthias Geerdsen <vorlon@...too.org>)
• An analysis of Microsoft Windows Vista’s ASLR (Renaud Lifchitz <r.lifchitz@...dream.com>)
• [USN-353-1] openssl vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Re: VML Exploit vs. AV/IPS/IDS signatures ("avivra" <avivra@...il.com>)
• SUSE Security Announcement: openssl security problems (SUSE-SA:2006:058) (Marcus Meissner <meissner@...e.de>)
• [SECURITY] [DSA 1185-1] New openssl packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Security as an Enabler - Virtual Trust: An Open Challenge to All InfoSec Professionals ("Kenneth F. Belva" <ken@...security.com>)
• SQL Injection in IPB <=2.1.3 ("Sam Thomas" <Sam.Thomas@...aterra.org>)
• Re: [USN-353-1] openssl vulnerabilities ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• Re: SUSE Security Announcement: openssl security problems (SUSE-SA:2006:058) (Georgi Guninski <guninski@...inski.com>)
• New Vub.... ("hitham hitham" <sp1der_net@...mail.com>)
• [ MDKSA-2006:157-1 ] - Updated musicbrainz packages fix buffer overflow vulnerabilities (security@...driva.com)
• [ GLSA 200609-20 ] DokuWiki: Shell command injection and Denial of Service (Matthias Geerdsen <vorlon@...too.org>)
• [ GLSA 200609-19 ] Mozilla Firefox: Multiple vulnerabilities (Matthias Geerdsen <vorlon@...too.org>)
• Re: IM Sniffer release ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• rPSA-2006-0175-1 openssl openssl-scripts (rPath Update Announcements <announce-noreply@...th.com>)
• [ MDKSA-2006:171 ] - Updated openldap packages fixes ACL vulnerability (security@...driva.com)
• [ MDKSA-2006:172 ] - Updated openssl packages fix vulnerabilities (security@...driva.com)

• [ MDKSA-2006:173 ] - Updated ffmpeg packages fix buffer overflow vulnerabilities (security@...driva.com)
• [ MDKSA-2006:174 ] - Update gstreamer-ffmpeg packages fix buffer overflow vulnerabilities (security@...driva.com)
• [ MDKSA-2006:175 ] - Updated mplayer packages fix buffer overflow vulnerabilities (security@...driva.com)
• [ MDKSA-2006:176 ] - Updated xine-lib packages fix buffer overflow vulnerabilities (security@...driva.com)
• Re: Full-Disclosure Digest, Vol 19, Issue 47 (Glenn and Mary Everhart <everhart@....com>)
• Re: VML Exploit vs. AV/IPS/IDS signatures (nirvana <karmic_nirvana@...oo.com>)
• JSEScanner ("David Kierznowski" <david.kierznowski@...il.com>)
• Re: Security as an Enabler - Virtual Trust: An Open Challenge to All InfoSec Professionals (imipak <imipak@...il.com>)
• Re: VML Exploit vs. AV/IPS/IDS signatures (SanjayR <sanjayr@...oto.com>)
• Advisory 06/2006: PHProjekt (Remote) Include Vulnerabilities (Stefan Esser <sesser@...dened-php.net>)
• Portable shell-exploit for buffer-overflow bugs (Roman Medina-Heigl Hernandez <roman@...labs.com>)
• Re: IM Sniffer release (Ferdinand Klinzer <Klinzer@....de>)
• cpanel exploit (Todd Burroughs <todd@...sec.net>)
• Announce: RFDIOt v0.1e released (Adam Laurie <adam.laurie@...bunker.net>)
• Secunia Research: Joomla BSQ Sitestats Component Multiple Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
• Stealing Search Engine Queries with JavaScript ("Billy Hoffman" <Billy.Hoffman@...dynamics.com>)
• Re: cpanel exploit (Rob Lemos <mail@...ertlemos.com>)
• Re: Stealing Search Engine Queries with JavaScript ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• Re: [WEB SECURITY] Stealing Search Engine Queries with JavaScript ("Brian Eaton" <eaton.lists@...il.com>)
• Determina zero-day fix for CVE-2006-3730 (WebViewFolderIcon setSlice Integer Overflow) (Alexander Sotirov <asotirov@...ermina.com>)
• end of the interent ? ("Peter Dawson" <slash.pd@...il.com>)
• Stealing Search Engine Queries with JavaScript (PERFECT.MATERIAL <perfect.material@...il.com>)

• Re: end of the interent ? ("Alice Bryson <abryson@...efocus.com>" <abryson@...efocus.com>)
• Re: IM Sniffer release ("Jeb Osama" <mkmaxx@...il.com>)
• Re: Could InfoSec be Worse than Death? (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• [SECURITY] [DSA 1186-1] New cscope packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: [WEB SECURITY] Stealing Search Engine Queries with JavaScript (Chris Hofmann <chofmann@...illa.org>)
• rPSA-2006-0176-1 openldap openldap-clients openldap-servers (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2006-0175-2 openssl openssl-scripts (rPath Update Announcements <announce-noreply@...th.com>)
• [MU-200609-01] Multiple Pre-Authentication Vulnerabilities in MailEnable SMTP (noreply@...ecurity.com)
• setSlice exploited in the wild - massively (Gadi Evron <ge@...uxbox.org>)
• Re: working contact for 3ware.com? (Tonu Samuel <tonu@....ee>)
• Re: [WEB SECURITY] Stealing Search Engine Queries with JavaScript ("Ian" <vern@...eup.net>)
• [SECURITY] [DSA 1187-1] New migrationtools packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: [WEB SECURITY] Stealing Search Engine Queries with JavaScript ("Collin Jackson" <collinj@...stanford.edu>)
• YouTube Persistent Messaging XSS Vulnerability ("Darren Bounds" <dbounds@...il.com>)
• YouTube Persistent Messaging XSS Vulnerability *UPDATED* ("Darren Bounds" <dbounds@...il.com>)
• Security Rss Feeds ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: Security Rss Feeds (Paul Schmehl <pauls@...allas.edu>)
• cpanel exploit ("cp haquer" <cphaquer@...il.com>)
• Re: Security Rss Feeds ("Peter Dawson" <slash.pd@...il.com>)
• Re: end of the interent ? (Joe Feise <jfeise@...se.com>)

578 messages

Powered by blists - more mailing lists