full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2006/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 16	² 23	³ 21	⁴ 13	⁵ 7
⁶ 16	⁷ 23	⁸ 22	⁹ 20	¹⁰ 17	¹¹ 7	¹² 10
¹³ 26	¹⁴ 34	¹⁵ 13	¹⁶ 17	¹⁷ 12	¹⁸ 6	¹⁹ 4
²⁰ 19	²¹ 20	²² 22	²³ 9	²⁴ 7	²⁵ 8	²⁶ 10
²⁷ 56	²⁸ 46	²⁹ 23	³⁰ 13

Messages by day:

November 1 (16 messages)

November 2 (23 messages)

November 3 (21 messages)

November 4 (13 messages)

[USN-377-1] NVIDIA vulnerability (Kees Cook <kees@...ntu.com>)
[USN-378-1] RPM vulnerability (Kees Cook <kees@...ntu.com>)
Re: Internet Explorer 7 - Still Spyware Writers' Heaven ("Eliah Kagan" <degeneracypressure@...il.com>)
Re: linksys WRT54g authentication bypass (pagvac <unknown.pentester@...il.com>)
Re: Internet Explorer 7 - Still Spyware Writers' Heaven (Thierry Zoller <Thierry@...ler.lu>)
OT Question ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: OT Question ("joshua@...e.ws" <joshua@...e.ws>)
Re: OT Question ("Dude VanWinkle" <dudevanwinkle@...il.com>)
[x0n3-h4ck.org] Bug on Drake CMS v0.2 (<corrado.liotta@...ce.it>)
Re: OT Question ("Dude VanWinkle" <dudevanwinkle@...il.com>)
[x0n3-h4ck.org] Essentia Web Server 2.15 Buffer Overflow (<corrado.liotta@...ce.it>)
IE7 endless loop (Ben Lambrey <ben@...brey.net>)
Re: Internet Explorer 7 - Still Spyware Writers' Heaven ("Eliah Kagan" <degeneracypressure@...il.com>)

November 5 (7 messages)

alert() (<auto113922@...h.ai>)
Extremely critical Windows XMLHTTP ActiveX 0-day reported (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: alert() (Matthew Flaschen <matthew.flaschen@...ech.edu>)
IE7 endless loop (Filbert <filbert@...dora.be>)
Re: Internet Explorer 7 - Still Spyware Writers' Heaven ("Joshua Gimer" <jgimer@...il.com>)
SinFP 2.04 release, works under Windows (GomoR <fd@...or.org>)
Re: Mail Drives Security Considerations (gabriel rosenkoetter <gr@...ipsed.net>)

November 6 (16 messages)

November 7 (23 messages)

November 8 (22 messages)

November 9 (20 messages)

November 10 (17 messages)

Re: New Tor http proxy ("f t" <tbiehn@...il.com>)
rPSA-2006-0204-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2006-0205-1 php php-mysql php-pgsql (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2006-0206-1 firefox thunderbird (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2006-0207-1 openssh openssh-client openssh-server (rPath Update Announcements <announce-noreply@...th.com>)
[NETRAGARD-20061109 SECURITY ADVISORY] [HP Tru64 libpthread buffer overflow][http://www.netragard.com] (Netragard Security Advisories <advisories@...ragard.com…)
Seeking anyone damaged by Yuma Arizona! ("J.A. Terranson" <measl@....org>)
Re: New Tor http proxy ("Patrick Otto" <patrick.otto@...il.com>)
PHP Array and Null Bytes (Stefan Lochbihler <steve01@...llo.at>)
[ GLSA 200611-05 ] Netkit FTP Server: Privilege escalation (Raphael Marichez <falco@...too.org>)
Re: Seeking anyone damaged by Yuma Arizona! ("Throwaway1@...umbus.rr.com" <Throwaway1@...umbus.rr.com>)
Re: Seeking anyone damaged by Yuma Arizona! (gabriel rosenkoetter <gr@...ipsed.net>)
Re: Seeking anyone damaged by Yuma Arizona! ("J.A. Terranson" <measl@....org>)
ZDI-06-039: Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability (zdi-disclosures@...m.com)
Re: Seeking anyone damaged by Yuma Arizona! (Valdis.Kletnieks@...edu)
Locking down (L)AMP from XSSKiddiots ("J. Oquendo" <sil@...iltrated.net>)
Re: Seeking anyone damaged by Yuma Arizona! ("stinks like" <stinkslike@...il.com>)

November 11 (7 messages)

November 12 (10 messages)

retiring from public security stuff (Georgi Guninski <guninski@...inski.com>)
Re: 18th anniversary of Internet worma.k.a. Morris worm ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
sun and their pathetic forum management (xss, etc) (<auto158202@...h.ai>)
XSS in roundcube.com and users of it (RSnake <h@...rs.org>)
Old SAP exploits (Nicob <nicob@...ob.net>)
Re: retiring from public security stuff ("David Kierznowski" <david.kierznowski@...il.com>)
Re: 18th anniversary of Internet worma.k.a. Morris worm (Valdis.Kletnieks@...edu)
[SECURITY] [DSA 1209-1] New trac packages fix cross-site request forgery (Moritz Muehlenhoff <jmm@...ian.org>)
Keylogger ("0 0" <0192a0339@...glemail.com>)
Re: Keylogger (Karl Ordnung <karlordnung_ar@...oo.com.ar>)

November 13 (26 messages)

Re: retiring from public security stuff (<nexttuesday@...h.com>)
Re: Keylogger (Matthew Flaschen <matthew.flaschen@...ech.edu>)
Re: Keylogger (<nexttuesday@...h.com>)
Re: retiring from public security stuff ("Dude VanWinkle" <dudevanwinkle@...il.com>)
ELOG Web Logbook Remote Denial of Service Vulnerability ("OS2A BTO" <os2a.bto@...il.com>)
[FLSA-2006:211760] Updated gzip package fixes security issues (David Eisenstein <secnotice@...oralegacy.org>)
Re: Keylogger ("Colin Copley" <colin.75@...nternet.com>)
Re: Keylogger (Matthew Flaschen <matthew.flaschen@...ech.edu>)
Re: Keylogger ("Colin Copley" <colin.75@...nternet.com>)
AVG Anti-Virus - Arbitrary Code Execution (remote) (<security@...ns.com>)
Team Evil - Incident #2 (beSIRT <beSIRT@...ondsecurity.com>)
Re: New Tor http proxy ("T Biehn" <tbiehn@...il.com>)
DoS kiddiots can face 10 years in jail ("J. Oquendo" <sil@...iltrated.net>)
Wireless fun! (H D Moore <fdlist@...italoffense.net>)
Re: DoS kiddiots can face 10 years in jail ("Eliah Kagan" <degeneracypressure@...il.com>)
[SECURITY] [DSA 1209-2] New trac packages fix cross-site request forgery (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Keylogger ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
Re: retiring from public security stuff ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
Re: Keylogger (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: 18th anniversary of Internet worma.k.a.Morris worm ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability ("Nick Boyce" <nick.boyce@...il.com>)
[ GLSA 200611-06 ] OpenSSH: Multiple Denial of Service vulnerabilities (Raphael Marichez <falco@...too.org>)
[ GLSA 200611-07 ] GraphicsMagick: PALM and DCM buffer overflows (Raphael Marichez <falco@...too.org>)
(no subject) ("Mukti Barker" <thelostjenius@...il.com>)
[ GLSA 200611-08 ] RPM: Buffer overflow (Raphael Marichez <falco@...too.org>)
Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability (Raphael Marichez <falco@...too.org>)

November 14 (34 messages)

November 15 (13 messages)

November 16 (17 messages)

November 17 (12 messages)

Re: Vulnerabilities in Client Service for NetWare (<daylasoul@...h.com>)
[USN-383-1] libpng vulnerability (Kees Cook <kees@...ntu.com>)
[ GLSA 200611-09 ] libpng: Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200611-10 ] WordPress: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Phising Alert ("Emmanouil Gavriil" <egavriil@...tinel.gr>)
Patch tuesday debris ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
Re: Vulnerabilities in Client Service for NetWare ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
Re: Vulnerabilities in Client Service for NetWare ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
Re: Patch tuesday debris (Peter Besenbruch <prb@...a.net>)
Re: Vulnerabilities in Client Service for NetWare (<daylasoul@...h.com>)
[ MDKSA-2006:214 ] - Updated gv packages fix buffer overflow vulnerability (security@...driva.com)
Re: Phising Alert ("Ronald MacDonald" <ronald@...cd.com>)

November 18 (6 messages)

November 19 (4 messages)

November 20 (19 messages)

November 21 (20 messages)

November 22 (22 messages)

November 23 (9 messages)

November 24 (7 messages)

November 25 (8 messages)

[ANNOUNCE] Aimject 1.0 (Jon Oberheide <jon@...rheide.org>)
Re: Anonymizing RFI Attacks Through Google (endrazine <endrazine@...il.com>)
Re: Anonymizing RFI Attacks Through Google ("Dude VanWinkle" <dudevanwinkle@...il.com>)
CubeCart <=3.0.14 Bind Sql Injection POC. ("Nicholas Williams" <nicholas.d.williams@...il.com>)
Re: RCSR fun: stealing FF passwords the easy way (pagvac <unknown.pentester@...il.com>)
AttackAPI 2.0 alpha ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
New Windows tool - NBTEnum 3.3 ("Reed Arvin" <reedarvin@...il.com>)
Re: RCSR fun: stealing FF passwords the easy way (Stefan Esser <sesser@...dened-php.net>)

November 26 (10 messages)

November 27 (56 messages)

[ GLSA 200611-21 ] Kile: Incorrect backup file permission (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200611-22 ] Ingo H3: Folder name shell command injection (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Cursor snarfing - a new class of vulnerability and attack in Oracle ("David Litchfield" <davidl@...software.com>)
Re: Anonymizing RFI Attacks Through Google (Vincent Archer <varcher@...yall.com>)
Defeating Image-Based Virtual Keyboards and Phishing Banks (fwd) (Gadi Evron <ge@...uxbox.org>)
Sasser or other nasty worm needed ("kikazz" <kikazz@...il.com>)
MHL-2006-003 Public Advisory: "mboard" file creation issue (Mayhemic Labs Security <security@...hemiclabs.com>)
The state of JavaScript Hacking ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
rPSA-2006-0218-1 ImageMagick (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2006-0219-1 info install-info texinfo (rPath Update Announcements <announce-noreply@...th.com>)
REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability ("Jesper Jurcenoks" <jesper.jurcenoks@...vigilance.com>)
[SECURITY] [DSA 1219-1] New texinfo packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
Re: Sasser or other nasty worm needed ("ericscher@....com" <ericscher@....com>)
Re: [inbox] Sasser or other nasty worm needed ("Exibar" <exibar@...lair.com>)
Re: Sasser or other nasty worm needed (Michael Holstein <michael.holstein@...ohio.edu>)
Re: Sasser or other nasty worm needed ("K F (lists)" <kf_lists@...italmunition.com>)
Re: Defeating Image-Based Virtual Keyboards andPhishing Banks (fwd) ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
Re: Sasser or other nasty worm needed ("deep fried" <pigmy.meat@...il.com>)
Re: The state of JavaScript Hacking ("Martin Johns" <martin.johns@...il.com>)
SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
Re: Sasser or other nasty worm needed ("K F (lists)" <kf_lists@...italmunition.com>)
Re: Defeating Image-Based Virtual KeyboardsandPhishing Banks (fwd) ("Lyal Collins" <lyal.collins@...2it.com.au>)
Re: SSH brute force blocking tool (Tavis Ormandy <taviso@...too.org>)
Re: Sasser or other nasty worm needed (Valdis.Kletnieks@...edu)
Re: SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
Re: SSH brute force blocking tool (Tavis Ormandy <taviso@...too.org>)
Re: Sasser or other nasty worm needed ("Peter Dawson" <slash.pd@...il.com>)
Re: SSH brute force blocking tool (gabriel rosenkoetter <gr@...ipsed.net>)
Re: SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
Re: SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
Re: SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
Re: SSH brute force blocking tool ("Brian Eaton" <eaton.lists@...il.com>)
Re: SSH brute force blocking tool (gabriel rosenkoetter <gr@...ipsed.net>)
Re: SSH brute force blocking tool (Tavis Ormandy <taviso@...too.org>)
Re: SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
Re: SSH brute force blocking tool (Tavis Ormandy <taviso@....lonestar.org>)
Re: SSH brute force blocking tool (gabriel rosenkoetter <gr@...ipsed.net>)
Re: SSH brute force blocking tool (Michael Holstein <michael.holstein@...ohio.edu>)
Re: SSH brute force blocking tool (Tavis Ormandy <taviso@...too.org>)
Re: SSH brute force blocking tool (gabriel rosenkoetter <gr@...ipsed.net>)
Re: SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
ProFTPD 1.3.0 remote stack overflow (research@...g.net)
Re: SSH brute force blocking tool (gabriel rosenkoetter <gr@...ipsed.net>)
Re: SSH brute force blocking tool (Michael Holstein <michael.holstein@...ohio.edu>)
Re: SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
Re: SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
Re: SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
Re: SSH brute force blocking tool ("Joshua D. Abraham" <jabra@....neu.edu>)
Re: SSH brute force blocking tool (Tavis Ormandy <taviso@...too.org>)
Potentially OT: AJAX article ("mike kemp" <clappymonkey@...il.com>)
Re: Sasser or other nasty worm needed (Octal <octetstream@...il.com>)
Re: Sasser or other nasty worm needed (Valdis.Kletnieks@...edu)
Re: Sasser or other nasty worm needed (Valdis.Kletnieks@...edu)
Re: Sasser or other nasty worm needed (Rick <optik@...net.org>)
ProFTPD remote buffer overflow vulnerability (research@...g.net)
[USN-385-1] tar vulnerability (Kees Cook <kees@...ntu.com>)

November 28 (46 messages)

November 29 (23 messages)

November 30 (13 messages)

540 messages