full-disclosure mailing list - 2006/10

Messages by day:

October 1 (16 messages)

• Re: Stealing Search Engine Queries with JavaScript ("マグロ原子" <atoom.tonijn@...il.com>)
• Re: Stealing Search Engine Queries with JavaScript ("マグロ原子" <atoom.tonijn@...il.com>)
• Re: Security Rss Feeds ("Tyop?" <tyoptyop@...il.com>)
• Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053] ("Eiji James Yoshida" <ptrs-ejy@...iij4u.or.jp>)
• Re: Security Rss Feeds (William Knowles <wk@....org>)
• ZERT patch for setSlice() (Gadi Evron <ge@...uxbox.org>)
• Re: Security Rss Feeds (bugtraq@...security.net)
• "POC 2006" by Korean hackers ("securityproof" <securityproof@...il.com>)
• Truths in "Truth in Caller ID Act" ("J. Oquendo" <sil@...iltrated.net>)
• Re: Truths in "Truth in Caller ID Act" ("J. Oquendo" <sil@...iltrated.net>)
• Advisory 07/2006: phpMyAdmin Multiple CSRF Vulnerabilities (Stefan Esser <sesser@...dened-php.net>)
• Re: Truths in "Truth in Caller ID Act" (Valdis.Kletnieks@...edu)
• FON (fon.com) - Crappy security policy part II (Anonymous via the Cypherpunks Tonga Remailer <nobody@...herpunks.to>)
• 0day in Firefox from ToorCon '06 (Thor Larholm <thor@...ypath.com>)
• Re: Truths in "Truth in Caller ID Act" (Joe Barr <joe@...rimer.com>)
• Layered Defense Advisory: TrendMicro OfficesScan Corporate Edition Format String Vulnerability (Deral Heiland <dh@...ereddefense.com>)

• Re: Truths in "Truth in Caller ID Act" (Valdis.Kletnieks@...edu)
• IBM Informix Dynamic Server V10.0 File Clobbering during Install ("Larry Cashdollar" <lcashdol@...il.com>)
• [ANNOUNCE] Aimject 0.6 (Jon Oberheide <jon@...rheide.org>)
• Re: Security Rss Feeds ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• (no subject) ("Yoshiaki Nakanishi" <yoshiaki.nakanishi@...il.com>)
• IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]) (Paul Szabo <psz@...hs.usyd.edu.au>)
• McAfee EPO Buffer Overflow ("muts" <muts@...ote-exploit.org>)
• [USN-355-1] openssh vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• [USN-356-1] gdb vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• Re: IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]) ("Brian Eaton" <eaton.lists@...il.com>)
• [USN-354-1] Firefox vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Re: McAfee EPO Buffer Overflow (virus@...og.org)
• Re: Security Rss Feeds ("Richard Bejtlich" <taosecurity@...il.com>)
• Re: McAfee EPO Buffer Overflow ("Chris Brown" <chris@...-tuf.com>)
• Re: Security Rss Feeds ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• October Chicago 2600/DC312 Meeting Information ("Steven McGrath" <steven.mcgrath@...geek.com>)
• Re: IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]) (Paul Schmehl <pauls@...allas.edu>)
• Re: McAfee EPO Buffer Overflow ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• Re: IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]) ("Brian Eaton" <eaton.lists@...il.com>)
• [SECURITY] [DSA 1185-2] New openssl packages fix arbitrary code execution (Noah Meyerhans <noahm@...ian.org>)
• [ MDKSA-2006:172-1 ] - Updated openssl packages fix vulnerabilities (security@...driva.com)
• [ MDKSA-2006:177 ] - Updated MySQL packages rebuilt against updated openssl. (security@...driva.com)
• Re: Security Rss Feeds (Gareth Davies <gareth.davies@...etsec.com>)
• Re: IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]) (Paul Szabo <psz@...hs.usyd.edu.au>)
• [ MDKSA-2006:178 ] - Updated ntp packages rebuilt against updated openssl. (security@...driva.com)
• Removing the NIC cable = EoP? ("/dev/null" <exceed@...il.si>)

• Cheap International Money Transfer Free money Offshore Merchant Account. ("Over Stock" <overstock@...il.com>)
• Re: Truths in "Truth in Caller ID Act" (Nancy Kramer <nekramer@...dtheater.net>)
• Re: Truths in "Truth in Caller ID Act" ("Gary E. Miller" <gem@...lim.com>)
• Re: Truths in "Truth in Caller ID Act" (Nancy Kramer <nekramer@...dtheater.net>)
• Re: IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]) (Paul Szabo <psz@...hs.usyd.edu.au>)
• Re: Removing the NIC cable = EoP? (Krainium <krainium@...il.com>)
• Re: [SECURITY] [DSA 1185-2] New openssl packages fix arbitrary code execution ("Luciano Faletti" <lucianobellou@...il.com>)
• Re: Removing the NIC cable = EoP? ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: [Full-dislcosure] ZERT patch for setSlice() ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• PacSec 2006 announcement, EUSecWest 2007 Call For Papers (Mar 1-2, deadline Oct 20th) (Dragos Ruiu <dr@....net>)
• Re: IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]) (Lise Moorveld <lise_moorveld@...oo.com>)
• Re: Removing the NIC cable = EoP? ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: Removing the NIC cable = EoP? (Vincent Archer <varcher@...yall.com>)
• Re: Removing the NIC cable = EoP? (Tim <tim-security@...tinelchicken.org>)
• Re: Removing the NIC cable = EoP? (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• Re: Removing the NIC cable = EoP? (Tim <tim-security@...tinelchicken.org>)
• Re: Removing the NIC cable = EoP? (<c0redump@...ers.org.uk>)
• Re: Removing the NIC cable = EoP? (Valdis.Kletnieks@...edu)
• iDefense Security Advisory 10.02.06: Novell GroupWise Messenger nmma.exe DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Security Rss Feeds ("Tyler Reguly" <htregz@...ddicts.net>)
• Re: Removing the NIC cable = EoP? ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: Removing the NIC cable = EoP? ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Registration Weakness in Linux Kernel's Binary formats (SHELLCODE Security Research <GoodFellas@...llcode.com.ar>)
• [CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability ("Williams, James K" <James.Williams@...com>)
• Firefox Vulnerabilities FAKED ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: Firefox Vulnerabilities FAKED (<c0redump@...ers.org.uk>)
• Advisory 08/2006: PHP open_basedir Race Condition Vulnerability (Stefan Esser <sesser@...dened-php.net>)
• Re: [Full-dislcosure] ZERT patch for setSlice() ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• [ MDKSA-2006:179 ] - Updated openssh packages fix DoS vulnerabilities (security@...driva.com)
• Re: Firefox Vulnerabilities FAKED ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Firefox Vulnerabilities FAKED (<c0redump@...ers.org.uk>)
• Re: Firefox Vulnerabilities FAKED ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: Firefox Vulnerabilities FAKED ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: Firefox Vulnerabilities FAKED ("Pink Hat" <pinkhat.h4x0r@...il.com>)

• Re: Firefox Vulnerabilities FAKED ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Truths in "Truth in Caller ID Act" (Jay Sulzberger <jays@...ix.com>)
• [SECURITY] [DSA 1188-1] New mailman packages fix several problems (joey@...odrom.org (Martin Schulze))
• Re: Fallacies on Truths in Caller ID scam ("J. Oquendo" <sil@...iltrated.net>)
• Tele2 - Versatel and Vivendi - exploit ("Urs E. Gattiker" <WebUrs@...Urb.dk>)
• Technical Paper on the ZERT Patch and VML [was: Re: ZERT patch for setSlice()] (Gadi Evron <ge@...uxbox.org>)
• [USN-358-1] ffmpeg, xine-lib vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• [USN-353-2] OpenSSL vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• [USN-357-1] Mono vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• Re: [funsec] Technical Paper on the ZERT Patch and VML [was: Re: ZERT patch for setSlice()] (Alexander Sotirov <asotirov@...ermina.com>)
• [ GLSA 200610-01 ] Mozilla Thunderbird: Multiple vulnerabilities (Matthias Geerdsen <vorlon@...too.org>)
• [SECURITY] [DSA 1189-1] New openssh-krb5 packages fix denial of service and potential execution of arbitrary code (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1190-1] New maxdb-7.5.00 packages fix execution of arbitrary code (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Removing the NIC cable = EoP? ("Lee Turner" <lvturner@...il.com>)
• [ GLSA 200610-02 ] Adobe Flash Player: Arbitrary code execution (Matthias Geerdsen <vorlon@...too.org>)
• Re: Removing the NIC cable = EoP? ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Vulnerability Type Distributions in CVE ("Steven M. Christey" <coley@...us.mitre.org>)

• (0-day) Linksys SPA-921 VoIP Desktop Phone HTTP Server DoS (shawnmer@...com)
• (0-Day) PolyCom IP-301 VoIP Desktop Phone HTTP server DoS and undocumented TCP port 42 (shawnmer@...com)
• (0-Day) GrandStream GXP-2000 VoIP Desktop Phone multiple undocumented UDP ports and DoS (shawnmer@...com)
• [SECURITY] [DSA 1191-1] New Mozilla Thunderbird packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Invision Power Board Multiple Vulnerabilities (Rapigator <rapigator@...oo.com>)
• JavaScript Web Ping Tool ("David Kierznowski" <david.kierznowski@...il.com>)
• iDefense Security Advisory 10.05.06: Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Truths in "Truth in Caller ID Act" ("Fetch, Brandon" <BFetch@...pac.com>)
• ZDI-06-030: CA Multiple Product Discovery Service Remote Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• ZDI-06-031: CA Multiple Product Message Engine RPC Server Code Execution Vulnerability (zdi-disclosures@...m.com)
• [ MDKSA-2006:180 ] - Updated php packages fix integer overflow vulnerability (security@...driva.com)
• TSRT-06-12: CA BrightStor Discovery Service Mailslot Buffer Overflow Vulnerability (TSRT@...m.com)
• TSRT-06-11: CA Multiple Product DBASVR RPC Server Multiple Buffer Overflow Vulnerabilities (TSRT@...m.com)
• rPSA-2006-0183-1 nss_ldap (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2006-0185-1 gnome-ssh-askpass openssh openssh-client openssh-server (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2006-0182-1 php php-mysql php-pgsql (rPath Update Announcements <announce-noreply@...th.com>)

• Vulnerable function in newest PowerPoint case (MS Advisory #925984) (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: Removing the NIC cable = EoP? ("Greg" <full-disclosure3@...andyman.com.au>)
• [CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities ("Williams, James K" <James.Williams@...com>)
• [SECURITY] [DSA 1192-1] New Mozilla packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Re: Removing the NIC cable = EoP? ("joshua@...e.ws" <joshua@...e.ws>)
• Re: Removing the NIC cable = EoP? ("Jessica Hope" <jessicasaulhope@...glemail.com>)
• JavaScript Spider (code that can traverse the web) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• [USN-359-1] Python vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• [ GLSA 200610-03 ] ncompress: Buffer Underflow (Raphael Marichez <falco@...too.org>)
• Details of Lotus Notes Java Applet vulnerabilities ("Jouko Pynnonen" <jouko@....fi>)
• Re: Removing the NIC cable = EoP? ("James (njan) Eaton-Lee" <james.mailing@...il.com>)

• Kmail <= 1.9.1 (latest) DOS (nnp <version5@...il.com>)
• Re: Removing the NIC cable = EoP? ("Greg" <full-disclosure3@...andyman.com.au>)
• moooooooore fun with Google search (Gadi Evron <ge@...uxbox.org>)
• Re: moooooooore fun with Google search ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• List ("Luciano Faletti" <lucianobellou@...il.com>)
• Re: List ("Pink Hat" <pinkhat.h4x0r@...il.com>)

• Re: List (Paul Schmehl <pauls@...allas.edu>)
• Re: moooooooore fun with Google search ("Chris Kuethe" <chris.kuethe@...il.com>)
• Re: Kmail <= 1.9.1 (latest) DOS ("the.soylent" <the.soylent@...il.com>)
• Using HTML errors to steal MySpace accounts (Darius Navran <navran@...global.net>)
• Insecurity Stats via Google Code Search (Gadi Evron <ge@...uxbox.org>)
• Re: [funsec] Technical Paper on the ZERT Patch and VML [was: Re: ZERT patch for setSlice()] (Gadi Evron <ge@...uxbox.org>)
• Re: Using HTML errors to steal MySpace accounts (Valdis.Kletnieks@...edu)
• SQL injection - 4images (disfigure <disfigure@...il.com>)
• SQL injection - moodle (disfigure <disfigure@...il.com>)
• Re: Fallacies on Truths in Caller ID scam (Ajay Pal Singh Atwal <ajaypal@...bec.org>)
• Blogger bug? ("Mike McMan" <mikemcman2033@...mail.com>)

• HITBSecConf2006 CTF Source code and daemons (Praburaajan <prabu@...kinthebox.org>)
• Re: Blogger bug? ("Peter Dawson" <slash.pd@...il.com>)
• Advisory 09/2006: PHP unserialize() Array Creation Integer Overflow (Stefan Esser <sesser@...dened-php.net>)
• ARES 2007: Paper submission system is ready - Submission Deadline 19-11-2006 ("Manh Tho" <manhthovn@...il.com>)
• MS Windows DRM software Memory Corruption (Joxean Koret <joxeankoret@...oo.es>)
• Re: SQL injection - moodle ("scsantos@...granrio com br" <scsantos@...granrio.com.br>)
• Re: Kmail <= 1.9.1 (latest) DOS (SecuriTeam Expert <expert@...uriteam.com>)
• Re: Kmail <= 1.9.1 (latest) DOS (nnp <version5@...il.com>)
• Re: Blogger bug? ("Peter Dawson" <slash.pd@...il.com>)
• Re: Fallacies on Truths in Caller ID scam ("J. Oquendo" <sil@...iltrated.net>)
• trojan horse to intercept voip calls ("karsten beldner" <karsten_beldner@...mail.com>)
• Re: trojan horse to intercept voip calls (Juergen Schmidt <ju@...sec.de>)
• Cisco Security Advisory: Limitations in Cisco Secure Desktop (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• [SECURITY] [DSA 1193-1] New XFree86 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Blogger bug? ("Eric Chien" <ecchien@...il.com>)
• [SECURITY] [DSA 1194-1] New libwmf packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• eXpBlog <= 0.3.5 Cross Site Scripting Vulnerabilities (Tamriel <tamriel@....net>)
• Re: Kmail <= 1.9.1 (latest) DOS ("the.soylent" <the.soylent@...il.com>)

• Re: Kmail <= 1.9.1 (latest) DOS (nnp <version5@...il.com>)
• [USN-360-1] awstats vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Re: Kmail <= 1.9.1 (latest) DOS (Valdis.Kletnieks@...edu)
• Re: Insecurity Stats via Google Code Search (Niall FitzGibbon <fitzgibbon@...eyonder.co.uk>)
• MHL-2006-001 Public Advisory: "Eazy Cart" Multiple Security Issues (Mayhemic Labs Security <security@...hemiclabs.com>)
• Traversing the Web (the javascript way) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Kmail <= 1.9.1 (latest) DOS ("the.soylent" <the.soylent@...il.com>)
• [USN-361-1] Mozilla vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• Is Firefox JavaScript flawed ? ("Aaron Gray" <angray@...b.net>)
• Re: Is Firefox JavaScript flawed ? (darkcube <darkcube@...avibe.net>)
• Re: Is Firefox JavaScript flawed ? (darkcube <darkcube@...avibe.net>)
• Re: Is Firefox JavaScript flawed ? ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: Is Firefox JavaScript flawed ? (darkcube <darkcube@...avibe.net>)
• [USN-362-1] PHP vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Re: Is Firefox JavaScript flawed ? ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: Is Firefox JavaScript flawed ? (darkcube <darkcube@...avibe.net>)
• Re: Is Firefox JavaScript flawed ? (darkcube <darkcube@...avibe.net>)
• ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability (zdi-disclosures@...m.com)
• ZDI-06-032: Microsoft Office PowerPoint Malformed Slide Notes Rebuilding Vulnerability (zdi-disclosures@...m.com)
• ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability (zdi-disclosures@...m.com)
• Re: Is Firefox JavaScript flawed ? (darkcube <darkcube@...avibe.net>)
• [SECURITY] [DSA 1195-1] new openssl096 packages fix denial of service (Noah Meyerhans <noahm@...cker.debian.org>)
• Re: Is Firefox JavaScript flawed ? ("Brad Causey" <bradcausey@...il.com>)
• iDefense Security Advisory 10.10.06: FreeBSD ptrace PT_LWPINFO Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [ MDKSA-2006:181 ] - Updated python packages fix vulnerability (security@...driva.com)
• pacsec hype security advisory: seven words of warning about Flash player nine. (Dragos Ruiu <dr@....net>)
• PacSec Hype Security Team: CGI.pm param injection (Dragos Ruiu <dr@....net>)

• Re: Is Firefox JavaScript flawed ? ("Brad Causey" <bradcausey@...il.com>)
• Re: Kmail <= 1.9.1 (latest) DOS (nnp <version5@...il.com>)
• ShmooCon 2007 CFP Announcement (B Potter <gdead@...oo.com>)
• Googling:Google Meta Bugs (Aditya Sood <zeroknock@...aeye.org>)
• Re: Is Firefox JavaScript flawed ? (Aditya Sood <zeroknock@...aeye.org>)
• Re: Is Firefox JavaScript flawed ? (Philosophil <flosofl@...il.com>)
• Re: Is Firefox JavaScript flawed ? ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: Googling:Google Meta Bugs (Aditya Sood <zeroknock@...aeye.org>)
• Re: Is Firefox JavaScript flawed ? (darkcube <darkcube@...avibe.net>)
• Re: Googling:Google Meta Bugs (Andrew Farmer <andfarm@...il.com>)
• Re: Is Firefox JavaScript flawed ? ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: Is Firefox JavaScript flawed ? (darkcube <darkcube@...avibe.net>)
• Re: Is Firefox JavaScript flawed ? ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: Is Firefox JavaScript flawed ? ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: Googling:Google Meta Bugs (Andrew Farmer <andfarm@...il.com>)
• Google Code Search and Security ("c.e. gene connor" <cegenec@...il.com>)
• Re: Google Code Search and Security (ghost <ghosts@...il.com>)
• rPSA-2006-0187-1 idle python (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Googling:Google Meta Bugs ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• Re: pacsec hype security advisory: seven words ofwarning about Flash player nine. ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• Re: Googling:Google Meta Bugs (Aditya Sood <zeroknock@...aeye.org>)
• Re: Googling:Google Meta Bugs (Aditya Sood <zeroknock@...aeye.org>)
• Secunia Research: Microsoft Windows Object Packager Dialog Spoofing (Secunia Research <remove-vuln@...unia.com>)
• [USN-363-1] libmusicbrainz vulnerability (Kees Cook <kees@...ntu.com>)
• [ MDKSA-2006:182 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
• Re: Googling:Google Meta Bugs (Andrew Farmer <andfarm@...il.com>)
• iDefense Security Advisory 10.11.06: AOL YGPPDownload SetAlbumName ActiveX Control Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• New Vuln... ("hitham hitham" <sp1der_net@...mail.com>)
• UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Chris <cke@...aclysmal.org>)
• UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Chris <cke@...aclysmal.org>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• MS06-060 Microsoft Word Memmove Code Execution (<David_Marcus@...fee.com>)

• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("Jonathan Glass (GM)" <jonathan.glass@...il.com>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (PERFECT.MATERIAL <perfect.material@...il.com>)
• XeoPort <= 0.81 SQL Injection Vulnerability (Tamriel <tamriel@....net>)
• Xeobook <= 0.93 Multiple SQL Injection Vulnerabilities (Tamriel <tamriel@....net>)
• Re: Googling:Google Meta Bugs (Aditya Sood <zeroknock@...aeye.org>)
• MHL-2006-002 Public Advisory: "Call-Center-Software" Multiple Security Issues (Mayhemic Labs Security <security@...hemiclabs.com>)
• Squid sniffer (pedro <pedro@...ona.com>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Ferdinand Klinzer <Klinzer@....de>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("y0himba" <y0himba@...hnolounge.org>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Ferdinand Klinzer <Klinzer@....de>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("y0himba" <y0himba@...hnolounge.org>)
• Google Sitemap Directory and File Enumeration 0day (Adam Muntner <adam.muntner@...etmove.com>)
• Re: Squid sniffer ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Paul Schmehl <pauls@...allas.edu>)
• Cisco Security Advisory: Default Password in Wireless Location Appliance (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• iDefense Security Advisory 10.10.06: FreeBSD ptrace PT_LWPINFO Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("Edgardo Zavala" <edgardo.zavala@...il.com>)
• distributed cracking countermeasures ("Brian Eaton" <eaton.lists@...il.com>)
• Google Earth (kml & kmz files) buffer overflow ("Alexander Hristov" <joffer@...il.com>)
• Re: Googling:Google Meta Bugs ("Morning Wood" <se_cur_ity@...mail.com>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (<ninjadaito@...hmail.com>)
• Mcafee Network Agent (mcnasvc.exe) Remote DoS ("Alexander Hristov" <joffer@...il.com>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (<ninjadaito@...hmail.com>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (rek2 GNU/Linux LO LO LO <rek2@...aryfreedom.info>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("Nick Oliver" <nwoliver@...il.com>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("Peter Dawson" <slash.pd@...il.com>)

• McAfee CEO, chairman retires after probe ("Ivan ." <ivanhec@...il.com>)
• Black Hat CFP, Registration, and Announcements for October (Jeff Moss <jmoss@...ckhat.com>)
• MS Supports Enablement / FUD Theater / VT helps flatten the world ("Kenneth F. Belva" <ken@...security.com>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (<ninjadaito@...hmail.com>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Paul Schmehl <pauls@...allas.edu>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Paul Schmehl <pauls@...allas.edu>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("Scott T. Cameron" <scameron@...tehero.com>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("Scott T. Cameron" <scameron@...tehero.com>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Paul Schmehl <pauls@...allas.edu>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("Scott T. Cameron" <scameron@...tehero.com>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Paul Schmehl <pauls@...allas.edu>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (<ninjadaito@...hmail.com>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("Jason Areff" <hailtheczar@...il.com>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Turgut Baumann <t_baumann@....net>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Ferdinand Klinzer <Klinzer@....de>)
• Ask for spam... ("Louis Wang" <bill.louis@...il.com>)
• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Xavier <compromise@...il.com>)
• Re: Ask for spam... ("Michael Simpson" <mikie.simpson@...il.com>)
• masages cannes escort girl in france ("sabrina massages" <escortgirl@...l.com>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("Nick Oliver" <nwoliver@...il.com>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("joshua@...e.ws" <joshua@...e.ws>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Valdis.Kletnieks@...edu)
• [SECURITY] [DSA 1166-2] New cheesetraceker packages fix buffer overflow (Steve Kemp <skx@...ian.org>)
• Re: Ask for spam... (mikeiscool <michaelslists@...il.com>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH (Valdis.Kletnieks@...edu)
• ISOI II - a DA Workshop (announcement and CFP) (Gadi Evron <ge@...uxbox.org>)
• Vuln .... ("hitham hitham" <sp1der_net@...mail.com>)
• Oh no friday the 13th freebsd local dos x 3 (Knud Erik Højgaard <knud.hojgaard@...us.dk>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("Eliah Kagan" <degeneracypressure@...il.com>)
• As long as you guys are THIS easy to troll let me say.. ("Jeb Osama" <mkmaxx@...il.com>)
• Re: As long as you guys are THIS easy to troll let me say.. ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: As long as you guys are THIS easy to troll let mesay.. ("Exibar" <exibar@...lair.com>)
• Re: As long as you guys are THIS easy to trolllet mesay.. ("y0himba" <y0himba@...hnolounge.org>)
• ****[ NOT SPAM ]**** (scripteaze <scripteaze@...il.com>)
• iDefense Security Advisory 10.13.06: Apache HTTP Server mod_tcl set_var Format String Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability (Marco Ivaldi <raptor@...eadbeef.info>)
• Re: masages cannes escort girl in france (Col <colweb@...il.com>)
• Re: ****[ NOT SPAM ]**** ("Stack Smasher" <stacksmasher@...il.com>)
• Re: As long as you guys are THIS easy to trolllet mesay.. (evilrabbi <evilrabbi@...il.com>)
• Re: masages cannes escort girl in france ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: masages cannes escort girl in france ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: [vendor-sec] Fwd: probably integer overflow in konqueror 3.5-latest and earlier (Georgi Guninski <guninski@...inski.com>)
• Re: masages cannes escort girl in france (Valdis.Kletnieks@...edu)
• Re: [inbox] ****[ NOT SPAM ]**** ("Exibar" <exibar@...lair.com>)
• Re: Ask for spam... (scripteaze <scripteaze@...il.com>)

• Re: ****[ NOT SPAM ]**** ("Stuart Dunkeld" <stuartd@...il.com>)
• Re: [vendor-sec] Fwd: probably integer overflow in konqueror 3.5-latest and earlier ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: [vendor-sec] Fwd: probably integer overflow in konqueror 3.5-latest and earlier (Josh Bressers <bressers@...hat.com>)
• List moderation (Jason <security@...enik.com>)
• Re: ***SPAM*** Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("joshua@...e.ws" <joshua@...e.ws>)
• Re: ****[ NOT SPAM ]**** (scripteaze <scripteaze@...il.com>)
• Re: [vendor-sec] Fwd: probably integer overflow in konqueror 3.5-latest and earlier (Georgi Guninski <guninski@...inski.com>)
• Re: Vuln .... ("TheSur" <sourvivor@...il.com>)
• Re: ****[ NOT SPAM ]**** ("Stack Smasher" <stacksmasher@...il.com>)
• Vuln ("hitham hitham" <sp1der_net@...mail.com>)
• Kmail <= 1.9.1 (table/frameset) DOS (nnp <version5@...il.com>)

• Re: UNOFFICIAL ZERT PATCH CAUSES NYC PLANECRASH ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Kmail <= 1.9.1 (table/frameset) DOS (Vidar Løkken <vidarlo@...tdata.no>)
• Advisory 10/2006: ViewVC Undefined Charset UTF-7 XSS Vulnerability (Stefan Esser <sesser@...dened-php.net>)
• CTF in a box? ("Ron Sweeney" <ron.sweeney@...il.com>)
• ISS BlackICE PC Protection Filelock protection bypass Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)
• Re: Vuln (upb <upbupb@...il.com>)
• Re: Vuln ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Re: CTF in a box? (Felix Groebert <felix@...ebert.org>)
• Re: Vuln ("Chris Kuethe" <chris.kuethe@...il.com>)
• Fwd: يرغب sp1der_net@...mail.com في التحدث إليك! ("Pink Hat" <pinkhat.h4x0r@...il.com>)

• Re: Fwd: يرغب sp1der_net@...mail.com في التحدث إليك! (Ferdinand Klinzer <Klinzer@....de>)
• [ GLSA 200610-04 ] Seamonkey: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• Asbru HardCore Web Content Editor - Command Injection (<security@...ns.com>)
• Re: Vuln .... (wac <waldoalvarez00@...il.com>)
• Re: Vuln .... ("Pink Hat" <pinkhat.h4x0r@...il.com>)
• Asbru HardCore Web Content Editor - Command Injection (<security@...ns.com>)
• AttackAPI 0.8 is OUT ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• speaking of code crunching... (challenge) (Gadi Evron <ge@...uxbox.org>)
• Re: Vuln .... ("C. Hamby" <fixer@....net>)
• Re: Vuln .... (Ferdinand Klinzer <Klinzer@....de>)
• Re: Vuln .... ("C. Hamby" <fixer@....net>)
• VoMM: Taking browser exploits to the next level (avivra <avivra@...il.com>)
• :ShAnKaR: WoltLab Burning Book <=1.1.2 multiple vulnerabilities (3APA3A <3APA3A@...urity.nnov.ru>)
• Netflix Cross Site Request Forgery Vulnerability ("Dave Ferguson" <gmdavef@...il.com>)
• Re: Ask for spam... (Joe Feise <jfeise@...se.com>)
• Re: Ask for spam... (Michael Holstein <michael.holstein@...ohio.edu>)
• [USN-364-1] Xsession vulnerability (Kees Cook <kees@...ntu.com>)
• iDefense Security Advisory 10.15.06: Clam AntiVirus ClamAV rebuildpe Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.15.06: Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• some solutions for HITB 2006 CTF ("matador matador" <m4t4d00r@...il.com>)
• Re: Ask for spam... ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• NVIDIA Linux/BSD/Solaris Drivers Local Root Buffer Overflow ("Alexander Hristov" <joffer@...il.com>)
• [USN-365-1] libksba vulnerability (Kees Cook <kees@...ntu.com>)

• Re: Ask for spam... ("Louis Wang" <bill.louis@...il.com>)
• Re: Ask for spam... ("Peter Dawson" <slash.pd@...il.com>)
• Rapid7 Advisory R7-0025: Buffer Overflow in NVIDIA Binary Graphics Driver For Linux (advisory@...id7.com)
• Apple Xcode WebObjects / OpenBase SQL multiple vulnerabilities ("K F (lists)" <kf_lists@...italmunition.com>)
• Re: iDefense Security Advisory 10.15.06: Clam AntiVirus ClamAV rebuildpe Heap Overflow Vulnerability (Damian Put <pucik@...eta.pl>)
• Joe Job (bluepill <bluepill@...usanswers.com>)
• Re: Ask for spam... (gabriel rosenkoetter <gr@...ipsed.net>)
• Re: speaking of code crunching... (challenge) (Gadi Evron <ge@...uxbox.org>)
• Hacker Pumpking Carving Contest (RSnake <h@...rs.org>)
• Re: Ask for spam... (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: Hacker Pumpking Carving Contest ("J. Oquendo" <sil@...iltrated.net>)
• Re: Hacker Pumpking Carving Contest ("J. Oquendo" <sil@...iltrated.net>)
• Joe Job - to blue pill ("Joseph McCray" <joe@...rnsecurityonline.com>)
• [NETRAGARD-20060810 SECURITY ADVISORY] [HP Tru64 dtmail Unchecked Buffer - Local Root Compromise] [ http://www.netragar… (Netragard Security Advisories <advisori…)
• Re: Ask for spam... (Valdis.Kletnieks@...edu)
• Windows XP SP2 .manifest file BSOD ("/dev/null" <exceed@...il.si>)
• [ GLSA 200610-05 ] CAPI4Hylafax fax receiver: Execution of arbitrary code (Raphael Marichez <falco@...too.org>)
• [ GLSA 200610-06 ] Mozilla Network Security Service (NSS): RSA signature forgery (Raphael Marichez <falco@...too.org>)
• {x0n3-h4ck} DEV Web Manager System <= 1.5 XSS Exploit (<corrado.liotta@...ce.it>)
• Re: [NETRAGARD-20060810 SECURITY ADVISORY] [HP Tru64 dtmail Unchecked Buffer - Local Root Compromise] [ http://www.net… (Roman Medina-Heigl Hernandez <roman@rs-…)
• iDefense Security Advisory 10.17.06: Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Rapid7 Advisory R7-0026: HTTP Header Injection Vulnerabilities in the Flash Player Plugin (advisory@...id7.com)
• [ GLSA 200610-07 ] Python: Buffer Overflow (Raphael Marichez <falco@...too.org>)

• [ MDKSA-2006:185 ] - Updated php packages to address multiple vulnerabilities (security@...driva.com)
• [ MDKSA-2006:184 ] - Updated clamav packages fix vulnerabilities (security@...driva.com)
• [ MDKSA-2006:183 ] - Updated libksba packages correct DoS vulnerability (security@...driva.com)
• PHP 5 ecalloc memory manager unserialize() array int overflow ia 32 bits poc ("Slythers Bro" <slythers@...il.com>)
• Comdev One Admin 4.1 Remote File Inclusion (disfigure <disfigure@...il.com>)
• (no subject) (noreply@...ecurity.com)
• Re: PHP 5 ecalloc memory manager unserialize() array int overflow ia 32 bits poc (Josh Bressers <josh@...ss.net>)
• Simplog 0.9.3.1 SQL Injection (disfigure <disfigure@...il.com>)
• Re: Joe Job - to blue pill (William Knowles <wk@....org>)
• rPSA-2006-0194-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
• Analysis of the Oracle October 2006 Critical Patch Update ("David Litchfield" <davidl@...software.com>)
• shttpd long get request vuln ( retro ) ("Morning Wood" <se_cur_ity@...mail.com>)
• [MU-200610-01] Denial of Service in XORP OSPFv2 (noreply@...ecurity.com)
• Re: Vuln .... (wac <waldoalvarez00@...il.com>)
• Re: Comdev One Admin 4.1 Remote File Inclusion ("Knud Erik Højgaard" <kokanin@...il.com>)
• Boonex Dolphin 5.2 Remote File Inclusion (disfigure <disfigure@...il.com>)
• Re: PHP 5 ecalloc memory manager unserialize() array int overflow ia 32 bits poc ("Slythers Bro" <slythers@...il.com>)
• Airmagnet management interfaces multiple vulnerabilities (noreply@...ecurity.ru)
• Re: Joe Job - to blue pill ("Larry Pesce" <LPesce@...eNE.org>)
• Re: Analysis of the Oracle October 2006 Critical Patch Update (Paul Schmehl <pauls@...allas.edu>)
• Multiple vulnerabilities in Highwall Enterprise and Highwall Endpoint management interface (noreply@...ecurity.ru)
• Re: speaking of code crunching... (challenge) ("Peter Ferrie" <pferrie@...antec.com>)
• Re: shttpd long get request vuln ( retro ) (vile <vileone@...il.com>)
• XNetMine (no version) multiple buffer overflow. (Federico Fazzi <federico@...istici.org>)
• Secunia Research: Joomla BSQ Sitestats Script Insertion and SQL Injection (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: IBM Lotus Notes Insecure Default Folder Permissions (Secunia Research <remove-vuln@...unia.com>)
• Re: Secunia Research: IBM Lotus Notes Insecure Default Folder Permissions (Valdis.Kletnieks@...edu)
• ERRATA: [ GLSA 200610-07 ] Python: Buffer Overflow (Raphael Marichez <falco@...too.org>)
• How To Spot A Narq With Ease (vile <vileone@...il.com>)
• Re: speaking of code crunching... (challenge) (vile <vileone@...il.com>)
• Re: Use Google to discover web attacks (vile <vileone@...il.com>)
• Re: Joe Job - to blue pill (vile <vileone@...il.com>)
• Re: Attacking the local LAN via XSS (vile <vileone@...il.com>)
• Re: Analysis of the Oracle October 2006 Critical Patch Update (vile <vileone@...il.com>)
• [USN-366-1] binutils vulnerability (Kees Cook <kees@...ntu.com>)
• Re: How To Spot A Narq With Ease ("Jason Miller" <jammer128@...il.com>)
• Security-Assessment.com Advisory: Asterisk remote heap overflow (Adam Boileau <adam.boileau@...urity-assessment.com>)
• rPSA-2006-0195-1 kdelibs (rPath Update Announcements <announce-noreply@...th.com>)
• [USN-367-1] Pike vulnerability (Kees Cook <kees@...ntu.com>)

• Re: How To Spot A Narq With Ease ("Ham Beast" <i.am.hambeast@...il.com>)
• [ANNOUNCE] Aimject 0.8 (Jon Oberheide <jon@...rheide.org>)
• [SECURITY] [DSA 1196-1] New clamav packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Devil Linux 1.2.10 has an IRC bot onboard (Victor Grishchenko <gritzko@...tinka.ru>)
• Re: Joe Job - to blue pill (Valdis.Kletnieks@...edu)
• Re: Windows XP SP2 .manifest file BSOD ("Tiago Halm" <tiago.lists@...il.com>)
• Advisory 11/2006: Serendipity Weblog XSS Vulnerabilities (Stefan Esser <sesser@...dened-php.net>)
• Re: Devil Linux 1.2.10 has an IRC bot onboard ("Heiko Zuerker" <heiko@...rker.org>)
• [DRUPAL-SA-2006-025] Drupal 4.6.10 / 4.7.4 fixes CRF issue (Uwe Hermann <uwe@...mann-uwe.de>)
• [DRUPAL-SA-2006-024] Drupal 4.6.10 / 4.7.4 fixes multiple XSS issues (Uwe Hermann <uwe@...mann-uwe.de>)
• [DRUPAL-SA-2006-026] Drupal 4.6.10 / 4.7.4 fixes HTML attribute injection issue (Uwe Hermann <uwe@...mann-uwe.de>)
• Genetic method to detect the presence of any virtual machine ("Bipin Gautam" <gautam.bipin@...il.com>)
• Re: Genetic method to detect the presence of anyvirtual machine ("Peter Ferrie" <pferrie@...antec.com>)
• [ MDKSA-2006:186 ] - Updated kdelibs packages fix KHTML vulnerability (security@...driva.com)
• Re: Genetic method to detect the presence of anyvirtual machine ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• iDefense Security Advisory 10.19.06: Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Genetic method to detect the presence of any virtual machine (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Google Source Code Bug Finder - Automated Version ("E. Kellinis" <manos@...her.org.uk>)

• Re: Genetic method to detect the presence of any virtual machine ("Bipin Gautam" <gautam.bipin@...il.com>)
• trouble in milwaukee? ("Edward F. Klimowicz" <edwardk@...cenet.com>)
• Re: trouble in milwaukee? (Valdis.Kletnieks@...edu)
• [CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities (UPDATED) ("Williams, James K" <James.Williams@...com>)
• [ GLSA 200610-08 ] Cscope: Multiple buffer overflows (Raphael Marichez <falco@...too.org>)
• Re: trouble in milwaukee? (<daylasoul@...h.com>)
• Re: Vuln (<daylasoul@...h.com>)
• Re: trouble in milwaukee? (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Web-style Wireless IDS attacks (noreply@...ecurity.ru)
• Re: [funsec] tiny PE now at... 304 bytes. Is this the end? (Valdis.Kletnieks@...edu)
• Re: Devil Linux 1.2.10 has an IRC bot onboard (Victor Grishchenko <gritzko@...tinka.ru>)
• tiny PE now at... 304 bytes. Is this the end? (Gadi Evron <ge@...uxbox.org>)
• Re: [funsec] tiny PE now at... 304 bytes. Is this the end? (Paul Schmehl <pauls@...allas.edu>)
• "Fire and forget" exploits? ("Brendan Dolan-Gavitt" <mooyix@...il.com>)
• Re: Devil Linux has NO irc bots onboard (Victor Grishchenko <gritzko@...tinka.ru>)
• Re: "Fire and forget" exploits? (endrazine <endrazine@...il.com>)
• Re: "Fire and forget" exploits? ("Bruce Ediger" <eballen1@...st.net>)
• Re: [funsec] tiny PE now at... 304 bytes. Is this the end? ("Peter Ferrie" <pferrie@...antec.com>)
• Advisory for Oneorzero helpdesk ("Mike Klingler" <whitehatguru@...il.com>)
• Re: "Fire and forget" exploits? (Marcus Meissner <meissner@...e.de>)
• *ADVISORY UPDATE* [NETRAGARD-20060810 SECURITY ADVISORY] [HP Tru64 dtmail Unchecked Buffer - Local Root Compromise] [ … (Netragard Security Advisories <advisori…)
• Re: [NETRAGARD-20060810 SECURITY ADVISORY] [HP Tru64 dtmail Unchecked Buffer - Local Root Compromise] [ http://www.net… (Roman Medina-Heigl Hernandez <roman@rs-…)
• Re: Windows Command Processor CMD.EXE Buffer Overflow ("Luis Alberto Cortes Zavala" <napasn@...uritynation.com>)
• Re: [NETRAGARD-20060810 SECURITY ADVISORY] [HP Tru64 dtmail Unchecked Buffer - Local Root Compromise] [ http://www.net… (Roman Medina-Heigl Hernandez <roman@rs-…)
• Re: "Fire and forget" exploits? (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: [NETRAGARD-20060810 SECURITY ADVISORY] [HP Tru64 dtmail Unchecked Buffer - Local Root Compromise] [ http://www.net… (Netragard Security Advisories <advisori…)
• Re: [funsec] Who is n3td3v? (Gadi Evron <ge@...uxbox.org>)

• Hustle Labs & MNIN eDirectory Vulnerability ("Ryan Smith" <whatstheaddress@...il.com>)
• Re: trouble in milwaukee? (<cdejrhymeswithgay@...h.com>)
• Re: [funsec] Who is n3td3v? (<cdejrhymeswithgay@...h.com>)
• Re: [funsec] Who is n3td3v? ("Alice Bryson <abryson@...efocus.com>" <abryson@...efocus.com>)

• Plague Proof of Concept Linux backdoor ("J. Oquendo" <sil@...iltrated.net>)
• Windows Bugged ("Guess 1" <mordox@...il.com>)
• iDefense Security Advisory 10.21.06: Novell eDirectory NCP over IP length Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Windows Bugged (<cdejrhymeswithgay@...h.com>)
• Re: Windows Bugged ("y0himba" <y0himba@...hnolounge.org>)
• Re: Windows Bugged (wayne dawson <waydaws@...us.net>)
• Re: Plague Proof of Concept Linux backdoor ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Who is n3td3v? (<daylasoul@...h.com>)
• Re: Plague Proof of Concept Linux backdoor (hijacker@...um.net)
• HP Tru64 dtmail bug - Really exploitable? (Roman Medina-Heigl Hernandez <roman@...labs.com>)
• [ GLSA 200610-09 ] libmusicbrainz: Multiple buffer overflows (Matthias Geerdsen <vorlon@...too.org>)
• Re: HP Tru64 dtmail bug - Really exploitable? ("K F (lists)" <kf_lists@...italmunition.com>)
• [SECURITY] [DSA 1197-1] New python2.4 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• AROUNDMe 0.6.9 remonte file inclusion (noislet.nospam@...il.com)
• Re: HP Tru64 dtmail bug - Really exploitable? (<cdejrhymeswithgay@...h.com>)
• Re: Plague Proof of Concept Linux backdoor (<cdejrhymeswithgay@...h.com>)
• Re: HP Tru64 dtmail bug - Really exploitable? ("K F (lists)" <kf_lists@...italmunition.com>)

• Re: Plague Proof of Concept Linux backdoor ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: HP Tru64 dtmail bug - Really exploitable? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Plague Proof of Concept Linux backdoor (<daylasoul@...h.com>)
• Re: Plague Proof of Concept Linux backdoor (Andrew Farmer <andfarm@...il.com>)
• Re: Plague Proof of Concept Linux backdoor (virus@...og.org)
• Re: Plague Proof of Concept Linux backdoor (hijacker@...um.net)
• Re: Plague Proof of Concept Linux backdoor (Rik Bobbaers <Rik.Bobbaers@...kuleuven.be>)
• Re: Plague Proof of Concept Linux backdoor (hijacker@...um.net)
• Re: Plague Proof of Concept Linux backdoor (Rik Bobbaers <Rik.Bobbaers@...kuleuven.be>)
• Re: Plague re-visited ("J. Oquendo" <sil@...iltrated.net>)
• [PHPADSNEW-SA-2006-002] phpAdsNew and phpPgAds 2.0.8-pr1 fix XSS vulnerability (Matteo Beccati <security@...adsnew.com>)
• Tel Aviv University Security Forum (TAUSEC) is back - 3.12.06 (Gadi Evron <ge@...uxbox.org>)
• Plague take two ("J. Oquendo" <sil@...iltrated.net>)
• Re: Plague re-visited (hijacker@...um.net)
• [USN-368-1] Qt vulnerability (Martin Pitt <martin.pitt@...onical.com>)
• Re: Windows Command Processor CMD.EXE Buffer Overflow (Tillmann Werner <tillmann.werner@....de>)
• [Fwd: London DEFCON meet this Wednesday - more fun with RFID!] (Adam Laurie <adam.laurie@...bunker.net>)
• Re: Plague re-visited (hijacker@...um.net)
• Re: Windows Command Processor CMD.EXE Buffer Overflow (offset@...vanet.com)
• Re: Windows Command Processor CMD.EXE Buffer Overflow (Arnaud Jacques <webmaster@...uriteinfo.com>)
• hack.lu Bluetooth demo ("K F (lists)" <kf_lists@...italmunition.com>)
• Various Cross-Site-Scripting Vulnerabilities in Oracle Reports ("Alexander Kornbrust" <ak@...-database-security.com>)
• SQL Injection Vulnerability in Oracle WWV_FLOW_UTILITIES ("Alexander Kornbrust" <ak@...-database-security.com>)
• Cross-Site-Scripting Vulnerabilitiy in Oracle APEX NOTIFICATION_MSG ("Alexander Kornbrust" <ak@...-database-security.com>)
• Cross-Site-Scripting Vulnerability in Oracle APEX WWV_FLOW_ITEM_HELP ("Alexander Kornbrust" <ak@...-database-security.com>)
• Modify Data via Inline Views ("Alexander Kornbrust" <ak@...-database-security.com>)
• SQL Injection in Oracle package SYS.DBMS_SQLTUNE_INTERNAL ("Alexander Kornbrust" <ak@...-database-security.com>)
• SQL Injection in Oracle package SYS.DBMS_CDC_IMPDP ("Alexander Kornbrust" <ak@...-database-security.com>)
• SQL Injection in Oracle package MDSYS.SDO_LRS ("Alexander Kornbrust" <ak@...-database-security.com>)
• SQL Injection in Oracle package XDB.DBMS_XDBZ0 ("Alexander Kornbrust" <ak@...-database-security.com>)
• Re: hack.lu Bluetooth demo (Thierry Zoller <Thierry@...ler.lu>)
• Re: Windows Command Processor CMD.EXE Buffer Overflow ("C. Hamby" <fixer@....net>)
• Re: Windows Command Processor CMD.EXE Buffer Overflow (David Taylor <ltr@....upenn.edu>)
• Re: Plague re-visited (Philosophil <flosofl@...il.com>)
• Re: Windows Command Processor CMD.EXE Buffer Overflow ("Brian Eaton" <eaton.lists@...il.com>)
• [SECURITY] [DSA 1198-1] New python2.3 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Windows Command Processor CMD.EXE Buffer Overflow (Thierry Zoller <Thierry@...ler.lu>)
• Skype personnel ("J. Oquendo" <sil@...iltrated.net>)
• Re: Windows Command Processor CMD.EXE Buffer Overflow ("Brian Eaton" <eaton.lists@...il.com>)
• Comment Service (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Windows Command Processor CMD.EXE Buffer Overflow (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: Windows Command Processor CMD.EXE BufferOverflow ("Peter Ferrie" <pferrie@...antec.com>)
• Re: Windows Command Processor CMD.EXE BufferOverflow (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Windows Command Processor CMD.EXE BufferOverflow ("Brian Eaton" <eaton.lists@...il.com>)

• Multiple HTTP response splitting vulnerabilities in SHOP-SCRIPT ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• xxs in Firefox 2.0 ? (<auto113922@...h.ai>)
• Re: Windows Command Processor CMD.EXE BufferOverflow ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• [SECURITY] [DSA 1199-1] New webmin packages fix input validation problems (Noah Meyerhans <noahm@...ian.org>)
• Month of Kernel Bugs and fsfuzzer release (0.6) (L.M.H. <lmh@...o-pull.com>)
• [vuln.sg] CruiseWorks Directory Traversal and Buffer Overflow Vulnerabilities (TAN Chew Keong <vulnpost-remove@...n.sg>)
• Re: Ask for spam... ("Louis Wang" <bill.louis@...il.com>)
• who needs a server ... (<auto113922@...h.ai>)
• prdelka.blackart.org.uk (Micheal Turner <wh1t3h4t3@...oo.co.uk>)
• [ GLSA 200610-10 ] ClamAV: Multiple Vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200610-11 ] OpenSSL: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200610-12 ] Apache mod_tcl: Format string vulnerability (Raphael Marichez <falco@...too.org>)
• Re: who needs a server ... (<cdejrhymeswithgay@...h.com>)
• Re: prdelka.blackart.org.uk (<cdejrhymeswithgay@...h.com>)
• [USN-369-1] PostgreSQL vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• Enron Mail archive..... oops (Thierry Zoller <Thierry@...ler.lu>)
• Re: [funsec] Who is n3td3v? (Georgi Guninski <guninski@...inski.com>)
• Yahoo! Messenger Service 18 Remote Buffer Overflow Vulnerability ("Jain, Siddhartha" <Siddhartha.Jain@...-tencor.com>)
• Re: Enron Mail archive..... oops (Peter Besenbruch <prb@...a.net>)
• Re: [funsec] Who is n3td3v? (Gadi Evron <ge@...uxbox.org>)
• [funsec] Haxdoor: UK Police Count 8, 500 Victims in Data Theft (So Far) (fwd) (Gadi Evron <ge@...uxbox.org>)
• Vulnerability automation and Botnet "solutions" I expect to see this year (Gadi Evron <ge@...uxbox.org>)
• Re: Windows Command Processor CMD.EXE ("Randall M" <randallm@...mail.com>)
• Fwd: Windows Command Processor CMD.EXE BufferOverflow ("Mark Senior" <senatorfrog@...il.com>)

• [ MDKSA-2006:187 ] - Updated Qt packages fix vulnerability (security@...driva.com)
• Putty Proxy login/password discolsure.... ("Antoine SANTO" <Antoine.SANTO@...f.fr>)
• Re: Yahoo! Messenger Service 18 Remote Buffer Overflow Vulnerability (Gadi Evron <ge@...uxbox.org>)
• RE : Putty Proxy login/password discolsure.... ("Antoine SANTO" <Antoine.SANTO@...f.fr>)
• Re: [funsec] Who is n3td3v? (Col <colweb@...il.com>)
• Re: Windows Command Processor CMD.EXEBufferOverflow ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• Re: RE : Putty Proxy login/password discolsure.... ("Heiko Zuerker" <heiko@...rker.org>)
• Re: Putty Proxy login/password discolsure.... ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• RE : Putty Proxy login/password discolsure....(Answer from PUTTY Staff) ("Antoine SANTO" <Antoine.SANTO@...f.fr>)
• Re: RE : Putty Proxy login/password discolsure....(Answer from PUTTY Staff) (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Putty Proxy login/password discolsure.... (mflaschen3@...l.gatech.edu)
• Cisco Security Advisory: Cisco Security Agent for Linux Port Scan Denial of Service (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Re: Putty Proxy login/password discolsure.... (Paul Schmehl <pauls@...allas.edu>)
• Re: Putty Proxy login/password discolsure.... (cardoso <cardosolistas@...traditorium.com>)
• Re: Putty Proxy login/password discolsure.... (Raj Mathur <raju@...ux-delhi.org>)
• Re: Putty Proxy login/password discolsure.... (cardoso <cardosolistas@...traditorium.com>)
• Re: RE : Putty Proxy login/password discolsure....(Answer from PUTTY Staff) (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Putty Proxy login/password discolsure.... (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Putty Proxy login/password discolsure.... (Paul Schmehl <pauls@...allas.edu>)
• Re: Putty Proxy login/password discolsure.... (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Putty Proxy login/password discolsure.... (Paul Schmehl <pauls@...allas.edu>)
• Re: Putty Proxy login/password discolsure.... (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Putty Proxy login/password discolsure.... (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Putty Proxy login/password discolsure.... ("North, Quinn" <QNorth@....com>)
• Re: RE : Putty Proxy login/password discolsure....(Answer from PUTTY Staff) (Simon Tatham <anakin@...ox.com>)
• FTPXQ Denial of service exploit. (Federico Fazzi <federico@...istici.org>)
• Re: RE : Putty Proxy login/password discolsure....(Answer from PUTTY Staff) (Simon Tatham <anakin@...ox.com>)
• iDefense Security Advisory 10.25.06: AOL Nullsoft Winamp Ultravox Lyrics3 v2.00 tags Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.25.06: AOL Nullsoft Winamp Ultravox 'ultravox-max-msg' Header Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.c…)
• iDefense Security Advisory 10.25.06: AOL YGPPDownload downloadFileDirectory ActiveX Control Heap Corruption Vulnerabil… (iDefense Labs <labs-no-reply@...fense.c…)
• iDefense Security Advisory 10.25.06: AOL YGPPDownload AddPictureNoAlbum ActiveX Control Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.c…)
• Re: Flaw in Firefox 2.0 RC2 ("Tyop?" <tyoptyop@...il.com>)
• Re: Putty Proxy login/password discolsure.... (endrazine <endrazine@...il.com>)
• Re: Putty Proxy login/password discolsure.... (endrazine <endrazine@...il.com>)
• IE7 status: 8 days after release, 3 unfixed issues (Moritz Naumann <security@...itz-naumann.com>)
• Re: Putty Proxy login/password discolsure.... (cardoso <cardosolistas@...traditorium.com>)

• Re: Putty Proxy login/password discolsure.... (Robert Jaroszuk <zim@...pl>)
• rPSA-2006-0198-1 screen (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2006-0195-2 kdelibs qt-x11-free (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Yahoo! Messenger Service 18 Remote Buffer Overflow Vulnerability (<cdejrhymeswithgay@...h.com>)
• Re: Vulnerability automation and Botnet "solutions" I expect to see this year (<cdejrhymeswithgay@...h.com>)
• Re: Yahoo! Messenger Service 18 Remote Buffer Overflow Vulnerability (Gadi Evron <ge@...uxbox.org>)
• S4: SCADA Security Scientific Symposium (rrushi@....unimi.it)
• Re: [funsec] Who is n3td3v? ("Bipin Gautam" <gautam.bipin@...il.com>)
• Re: FTPXQ Denial of service exploit. (Bernhard Mueller <research@...-consult.com>)
• Exploiting integer overflows (Joxean Koret <joxeankoret@...oo.es>)
• iDefense Security Advisory 10.26.06: Multiple Vendor wvWare LFO Count Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.26.06: Multiple Vendor wvWare LVL Count Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Authentication Issue DD-WRT ("João Francisco" <jfcastilho@...il.com>)
• IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006 ("LIUDIEYU dot COM" <liudieyu.com@...il.com>)
• ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• [ GLSA 200610-13 ] Cheese Tracker: Buffer Overflow (Raphael Marichez <falco@...too.org>)

• Re: Yahoo! Messenger Service 18 Remote Buffer Overflow Vulnerability ("Jain, Siddhartha" <Siddhartha.Jain@...-tencor.com>)
• Re: IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006 ("HASEGAWA Yosuke " <yosuke.hasegawa@...il.com>)
• MHL-2006-003 Public Advisory: "ezOnlineGallery" Multiple Security Issues (Mayhemic Labs Security <security@...hemiclabs.com>)
• Re: Vulnerability automation and Botnet "solutions" I expect to see this year (poo <skodliv@...il.com>)
• [ Capture Skype trafic ] ("Tyop?" <tyoptyop@...il.com>)
• parallels Desktop file permission notice ("Fabio Pietrosanti (naif)" <naif@...tpj.org>)
• Re: [ Capture Skype trafic ] ("Exibar" <exibar@...lair.com>)
• Re: Vulnerability automation and Botnet "solutions" I expect to see this year ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: [ Capture Skype trafic ] ("Tyop?" <tyoptyop@...il.com>)
• ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• Coppermine 1.4.9 SQL injection (disfigure <disfigure@...il.com>)
• [ MDKSA-2006:188 ] - Updated mono packages fix vulnerability (security@...driva.com)
• [ MDKSA-2006:189 ] - Updated xsupplicant fixes possible remote root stack smash vulnerability (security@...driva.com)
• [ MDKSA-2006:190 ] - Updated mutt packages fix multiple vulnerabilities (security@...driva.com)
• Re: [ Capture Skype trafic ] (gabriel rosenkoetter <gr@...ipsed.net>)
• [ MDKSA-2006:191 ] - Updated screen packages fix vulnerability (security@...driva.com)
• RFID enabled e-passport skimming proof of concept code released (RFIDIOt) (Adam Laurie <adam.laurie@...bunker.net>)
• Re: IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006 (Jerome Athias <jerome.athias@...e.fr>)
• [ MDKSA-2006:192 ] - Updated ruby packages fix DoS vulnerability (security@...driva.com)
• Re: [ Capture Skype trafic ] ("Nick FitzGerald" <nick@...us-l.demon.co.uk>)

• Re: ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability ("Matt Richard" <matt.richard@...il.com>)
• Re: [ Capture Skype trafic ] (Cedric Blancher <blancher@...tel-securite.fr>)
• blocking GIF, PNG and JPG with MIME ("lsi" <stuart@...erdelix.net>)
• Removing Hidden fields automatically in Paros ("Richard Braganza" <iwtb0202@...glemail.com>)
• Re: [ Capture Skype trafic ] (gabriel rosenkoetter <gr@...ipsed.net>)
• Asteroid SIP Denial of Service Tool ("J. Oquendo" <sil@...iltrated.net>)
• Re: ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability (FistFuXXer <FistFuXXer@....de>)
• Re: [funsec] Haxdoor: UK Police Count 8, 500 Victims in Data Theft (So Far) (fwd) (Marshall Eubanks <tme@...ticasttech.com>)
• Re: [ Capture Skype trafic ] (Cedric Blancher <blancher@...tel-securite.fr>)
• Re: [ Capture Skype trafic ] (gabriel rosenkoetter <gr@...ipsed.net>)
• Signature for new bot? ("Line Noise" <300baud@...il.com>)
• Re: [ Capture Skype trafic ] (Nick FitzGerald <nick@...us-l.demon.co.uk>)

• Re: [ Capture Skype trafic ] (Peter Thoenen <eol1@...oo.com>)
• Multiple websites iframe vulnerability (SkyOut <sky_out@....net>)
• Re: [ Capture Skype trafic ] ("Brian Eaton" <eaton.lists@...il.com>)
• Fwd: IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006 ("LIUDIEYU dot COM" <liudieyu.com@...il.com>)
• Re: [ Capture Skype trafic ] ("Tyop?" <tyoptyop@...il.com>)
• MS are doing Windows Updates for XP to IE7 ("Aaron Gray" <angray@...b.net>)
• Re: MS are doing Windows Updates for XP to IE7 (Valdis.Kletnieks@...edu)
• Re: Putty Proxy login/password discolsure.... (Juan Pablo Daniel Borgna <jpdborgna@...llcode.com.ar>)
• Re: MS are doing Windows Updates for XP to IE7 (Charles Hamby <fixer@....net>)
• Re: MS are doing Windows Updates for XP to IE7 (Paul Szabo <psz@...hs.usyd.edu.au>)
• Re: [ Capture Skype trafic ] (Fabian Wenk <fabian@...ks.ch>)
• Re: MS are doing Windows Updates for XP to IE7 (Valdis.Kletnieks@...edu)
• Re: [ Capture Skype trafic ] (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: MS are doing Windows Updates for XP to IE7 (Nick FitzGerald <nick@...us-l.demon.co.uk>)

• Re: MS are doing Windows Updates for XP to IE7 (Valdis.Kletnieks@...edu)
• Re: [inbox] Re: MS are doing Windows Updates for XP to IE7 ("Exibar" <exibar@...lair.com>)
• Re: [inbox] Re: [ Capture Skype trafic ] ("Exibar" <exibar@...lair.com>)
• Re: MS are doing Windows Updates for XP to IE7 (Larry Seltzer <Larry@...ryseltzer.com>)
• Re: MS are doing Windows Updates for XP to IE7 (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Signature for new bot? (Devdas Bhagat <devdas@....homelinux.org>)
• [ GLSA 200610-14 ] PHP: Integer overflow (Raphael Marichez <falco@...too.org>)
• [SECURITY] [DSA 1200-1] New Qt packages fix integer overflow (Noah Meyerhans <noahm@...ian.org>)
• Firefox <= 2.0 crash (Carlos Barros <NOREPLY@...fault.net>)
• Re: RFID enabled e-passport skimming proof of concept code released (RFIDIOt) (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: Enron Mail archive..... oops ("Randal T. Rioux" <randy@...cyonlabs.com>)
• Re: Firefox <= 2.0 crash (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Firefox <= 2.0 crash (Mihai Dontu <mdontu@...defender.com>)
• Metasploit Framework 2.7 Released (H D Moore <fdlist@...italoffense.net>)
• Re: RFID enabled e-passport skimming proof of concept code released (RFIDIOt) (Adam Laurie <adam.laurie@...bunker.net>)
• Re: RFID enabled e-passport skimming proof of concept code released (RFIDIOt) (Adam Laurie <adam.laurie@...bunker.net>)
• Re: RFID enabled e-passport skimming proof of concept code released (RFIDIOt) (Valdis.Kletnieks@...edu)
• [ GLSA 200610-15 ] Asterisk: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• Metasploit Framework 3.0 Beta 3 Released (H D Moore <fdlist@...italoffense.net>)
• Re: RFID enabled e-passport skimming proof of concept code released (RFIDIOt) (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability ("Matt Richard" <matt.richard@...il.com>)
• CORE FORCE R0.95 released! ("CORE FORCE Team" <force@...ce.coresecurity.com>)
• unreliable vulnerability reports en-masee [was:Re: vulnerability in Symantec products] (Gadi Evron <ge@...uxbox.org>)
• Re: [botnets] [funsec] Haxdoor: UK Police Count 8, 500 Victims in Data Theft (So Far) (fwd) (Gadi Evron <ge@...uxbox.org>)
• Re: Firefox <= 2.0 crash (Ozan Ozkara <ozan@...ptos.net>)
• Re: [botnets] [funsec] Haxdoor: UK Police Count 8, 500 Victims in Data Theft (So Far) (fwd) (bf <illuminatus.master@...il.com>)
• Asterisk Local and Remote Denial of Service Vulnerability ("J. Oquendo" <sil@...iltrated.net>)

• OT: Stern Environmental Review, a British Government Report published Online ("Aaron Gray" <angray@...b.net>)
• Re: Firefox <= 2.0 crash (Mariusz Kozlowski <m.kozlowski@...land.pl>)
• Re: Firefox <= 2.0 crash (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• [ MDKSA-2006:194 ] - Updated PostgreSQL packages fix vulnerabilities (security@...driva.com)
• [ MDKSA-2006:193 ] - Updated ImageMagick packages fix vulnerabilities (security@...driva.com)
• Re: Firefox <= 2.0 crash (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Firefox <= 2.0 crash (tommy <tommy@...urity-protocols.com>)
• Sun java System Messenger Express XSS ("handrix cobra" <handrix@...il.com>)
• Re: Firefox <= 2.0 crash (Sven Strittmatter <sven.strittmatter@...esoft.de>)
• [FLSA-2006:195418] Updated sendmail packages fix security issue (David Eisenstein <secnotice@...oralegacy.org>)
• JavaScript Attack Console (Backweb) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• November 3rd Chicago2600 Meeting Information ("Steven McGrath" <steven.mcgrath@...geek.com>)
• Re: Firefox <= 2.0 crash (Lubomir Kundrak <lkundrak@...hat.com>)
• Re: [inbox] Re: [ Capture Skype trafic ] ("form guru" <formguru@...il.com>)
• Authentication bypass in BytesFall Explorer (RedTeam Pentesting <release@...team-pentesting.de>)
• Parallels Workstation - Rogue autostart.. (Thierry Zoller <Thierry@...ler.lu>)
• [SECURITY] [DSA 1201-1] New ethereal packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1202-1] New screen packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• SQL Injection + Stored Procedures ("Andres Molinetti" <andymolinetti@...mail.com>)
• Re: unreliable vulnerability reports en-masee [was:Re: vulnerability in Symantec products] ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• Re: SQL Injection + Stored Procedures (m.delibero@...cast.net)
• Directory listing on B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD" ("LegendaryZion" <moskito@...le.net.il>)
• Cross Site Scripting (XSS) Vulnerability in Web Mail service by "Walla! Communications LTD" ("LegendaryZion" <moskito@...le.net.il>)
• Cross Site Scripting (XSS) Vulnerability in Web Mail platform by "Mirapoint" ("LegendaryZion" <moskito@...le.net.il>)
• Cross Site Scripting (XSS) Vulnerability in "ViewImage.asp" by Daronet Internet Solutions ("LegendaryZion" <moskito@...le.net.il>)
• Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun" ("LegendaryZion" <moskito@...le.net.il>)
• Local Heap OverFlow Vulnerability in "Answering Service" of Icq ("LegendaryZion" <moskito@...le.net.il>)
• Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech" ("LegendaryZion" <moskito@...le.net.il>)
• Re: unreliable vulnerability reports en-masee - THE THREAT OF GADI EVRON ("Ham Beast" <i.am.hambeast@...il.com>)
• iDefense Security Advisory 10.31.06: Novell iManager Tomcat DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.31.06: Sophos Anti-Virus Petite File Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 10.27.06: Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

686 messages

Powered by blists - more mailing lists