full-disclosure mailing list - 2006/12

Messages by day:

December 1 (69 messages)

• Re: Nmap Online ("Jason Miller" <jammer128@...il.com>)
• Re: ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• NetBSD FTPD and ports ***REMOTE ROOOOOT HOLE*** ("kcope" <kingcope@....net>)
• Re: NetBSD FTPD and ports ***REMOTE ROOOOOT HOLE*** ("K F (lists)" <kf_lists@...italmunition.com>)
• Re: ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• [ MDKSA-2006:220 ] - Updated libgsf packages fix heap buffer overflow vulnerability (security@...driva.com)
• [ MDKSA-2006:221 ] - Updated gnupg packages fix vulnerability (security@...driva.com)
• Re: SSH brute force blocking tool (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• 3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow Exploit ("Davide Del Vecchio" <dante@...ghieri.org>)
• Re: Nmap Online ("Mike Huber" <michael.huber@...il.com>)
• rPSA-2006-0220-1 dovecot (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2006-0221-1 openldap openldap-clients openldap-servers (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2006-0222-1 tar (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2006-0224-1 gnupg (rPath Update Announcements <announce-noreply@...th.com>)
• deV!L`z Clanportal - SQL Injection [061124a] (Tim Weber <scy-adv@...tale.de>)
• deV!L`z Clanportal - Arbitrary File Upload [061124b] (Tim Weber <scy-adv@...tale.de>)
• Outpost Bypassing Self-Protection via Advanced DLL injection with handle stealing Vulnerability (David Matousek <david@...ousec.com>)
• Re: Nmap Online ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: SSH brute force blocking tool (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• Re: SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
• Re: SSH brute force blocking tool (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• Re: SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
• Re: Nmap Online ("Jason Miller" <jammer128@...il.com>)
• Re: Nmap Online ("David Taylor" <ltr@....upenn.edu>)
• Re: SSH brute force blocking tool (Raphael Marichez <falco@...too.org>)
• Re: SSH brute force blocking tool (Raphael Marichez <falco@...too.org>)
• Re: Nmap Online ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: SSH brute force blocking tool ("J. Oquendo" <sil@...iltrated.net>)
• Financial firms warned of Qaeda cyber attack (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: Nmap Online (Col <colweb@...il.com>)
• Re: Nmap Online ("David Swafford" <dswafford@...erhighschool.org>)
• Layered Defense Advisory: Novell Client 4.91 Format String Vulnerability (Deral Heiland <dh@...ereddefense.com>)
• Re: Nmap Online (David Matousek <david@...ousec.com>)
• how to hide files, services and process in windows 2k/xp/2k3 box (Mark Baker <mark@...kbaker.net>)
• Re: Financial firms warned of Qaeda cyber attack ("Julio Cesar Fort" <julio@...slabs.com.br>)
• Re: Financial firms warned of Qaeda cyber attack (SDALAN04@...mn.edu)
• Re: Nmap Online ("Randall M" <randallm@...mail.com>)
• Re: Financial firms warned of Qaeda cyber attack (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: Nmap Online (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: Financial firms warned of Qaeda cyber attack (SDALAN04@...mn.edu)
• Re: Financial firms warned of Qaeda cyber attack (chedder1@...il.com)
• [SECURITY] [DSA 1205-2] New thttpd packages fix insecure temporary file creation (Steve Kemp <skx@...ian.org>)
• Re: Financial firms warned of Qaeda cyber attack (Valdis.Kletnieks@...edu)
• phpmyfaq exploit using PHP bug, CVE-2006-1490 (Tonu Samuel <tonu@....ee>)
• Re: how to hide files, services and process in windows 2k/xp/2k3 box ("Colin Copley" <colin.75@...nternet.com>)
• Re: Financial firms warned of Qaeda cyber attack (b.hines@...cast.net)
• Re: Nmap Online ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Nmap Online ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Nmap Online (merlyn@...nehenge.com (Randal L. Schwartz))
• Re: Nmap Online (merlyn@...nehenge.com (Randal L. Schwartz))
• Re: Nmap Online (merlyn@...nehenge.com (Randal L. Schwartz))
• Re: Financial firms warned of Qaeda cyber attack (chedder1@...il.com)
• [SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite (Noah Meyerhans <noahm@...ian.org>)
• Re: Nmap Online (endrazine <endrazine@...il.com>)
• Re: Nmap Online ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Nmap Online ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Nmap Online (merlyn@...nehenge.com (Randal L. Schwartz))
• Re: Nmap Online ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Nmap Online ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Nmap Online (Michael Holstein <michael.holstein@...ohio.edu>)
• [SECURITY] [DSA 1222-2] New proftpd packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Nmap Online ("Dave Moore" <dave.j.moore@...il.com>)
• Re: Financial firms warned of Qaeda cyber attack (TheGesus <thegesus@...il.com>)
• 802.1X tool? (Ozan Ozkara <ozan@...ptos.net>)
• Re: 802.1X tool? (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: 802.1X tool? (Michael Holstein <michael.holstein@...ohio.edu>)
• iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [ MDKSA-2006:222 ] - Updated koffice packages fixes integer overflow vulnerability (security@...driva.com)

• [ MDKSA-2006:223 ] - Updated ImageMagick packages fixes vulnerability (security@...driva.com)
• Re: 802.1X tool? ("Douglas Haider" <douglashaider@...mail.com>)
• Re: 802.1X tool? ("Guillaume Barberot" <guillaume.barberot@...il.com>)

• Re: how to hide files, services and process in windows 2k/xp/2k3 box (kefka <kefka@...inbeardsucks.com>)
• fl0p - passive L7 flow fingerprinting (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Financial firms warned of Qaeda cyber attack (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Financial firms warned of Qaeda cyber attack ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: Financial firms warned of Qaeda cyber attack (mikeiscool <michaelslists@...il.com>)
• Re: Financial firms warned of Qaeda cyber attack (mikeiscool <michaelslists@...il.com>)
• Re: Financial firms warned of Qaeda cyber attack ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: 802.1X tool? (Ozan Ozkara <ozan@...ptos.net>)
• Detect prrf rootkit ("Jin San" <jinsan07@...il.com>)
• [SECURITY] [DSA 1224-1] New Mozilla packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 1225-1] New Mozilla Firefox packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Re: 802.1X tool? ("Guillaume Barberot" <guillaume.barberot@...il.com>)
• [SECURITY] [DSA 1225-2] New Mozilla Firefox packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• [SECURITY] [DSA 1226-1] New links packages fix arbitrary shell command execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Financial firms warned of Qaeda cyber attack ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• SMF upload XSS vulnerability ("Jessica Hope" <jessicasaulhope@...glemail.com>)

• [SECURITY] [DSA 1227-1] New Mozilla Thunderbird packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• F-Prot Antivirus for Unix: heap overflow and Denial of Service (research@...g.net)
• [ MDKSA-2006:214-1 ] - Updated gv packages fix buffer overflow vulnerability (security@...driva.com)
• Re: Financial firms warned of Qaeda cyber attack (TheGesus <thegesus@...il.com>)
• rPSA-2006-0211-2 doxygen libpng (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Financial firms warned of Qaeda cyber attack ("Zub By" <zubray@...il.com>)
• [USN-392-1] xine-lib vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-391-1] libgsf vulnerability (Kees Cook <kees@...ntu.com>)

• TSRT-06-14: IBM Tivoli Storage Manager Mutiple Buffer Overflow Vulnerabilities (TSRT@...m.com)
• Re: Financial firms warned of Qaeda cyber attack (<ninjadaito@...hmail.com>)
• PBNJ 2.04 - a suite of tools to monitor changes on a network over time. ("Joshua D. Abraham" <jabra@....neu.edu>)
• CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Undocumented Features (Mariano Nuñez Di Croce <mnunez@...sec.com>)
• CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Arbitrary File Removal (Mariano Nuñez Di Croce <mnunez@...sec.com>)
• [SECURITY] [DSA 1228-1] New elinks packages fix arbitrary shell command execution (Moritz Muehlenhoff <jmm@...ian.org>)
• BIOS Flash erases all prior passwords on Acer Aspire 5102WLMi ("richard cassidy" <digital.richard@...il.com>)
• Re: BIOS Flash erases all prior passwords on Acer Aspire 5102WLMi ("Tyop?" <tyoptyop@...il.com>)
• Re: BIOS Flash erases all prior passwords on Acer Aspire 5102WLMi (Valdis.Kletnieks@...edu)
• Re: BIOS Flash erases all prior passwords on Acer Aspire 5102WLMi (endrazine <endrazine@...il.com>)
• Re: BIOS Flash erases all prior passwords on Acer Aspire 5102WLMi (endrazine <endrazine@...il.com>)

• EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability ("eEye Advisories" <Advisories@...e.com>)
• [ MDKSA-2006:224 ] - Updated xine-lib packages fix buffer overflow vulnerability (security@...driva.com)
• Re: Nmap Online (Simon Smith <simon@...soft.com>)
• Re: SSH brute force blocking tool (Simon Smith <simon@...soft.com>)
• Re: Nmap Online ("Ed Carp" <edcarp@...il.com>)
• [USN-390-2] evince vulnerability (Kees Cook <kees@...ntu.com>)
• Re: Nmap Online ("Greg" <full-disclosure3@...andyman.com.au>)
• Barracuda Convert-UUlib library buffer overflow leads to remote compromise (Jean-Sébastien Guay-Leroux <jean-sebastien@...y-leroux.com>)
• Re: Nmap Online (Richard A Nelson <cowboy@...ein.org>)
• Re: Nmap Online ("Ed Carp" <edcarp@...il.com>)
• eEye's Zero-Day Tracker Launch ("chinese soup" <noodle.mastah@...il.com>)
• Hail list! (aNub15 <mail4anub15@...il.com>)
• [SECURITY] [DSA 1229-1] New Asterisk packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• Re: Nmap Online (Schanulleke <schalulleke@...il.com>)
• Re: Nmap Online (Timo Schoeler <timo.schoeler@...cworks.net>)
• Oracle PL/SQL Fuzzing Tool (Joxean Koret <joxeankoret@...oo.es>)
• Another former 'hacker' now 'security guru' (Reece Mills <sniffhog@...oo.com>)
• rPSA-2006-0226-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Nmap Online ("Christian \"Khark\" Lauf" <full-disclosure@...rkerlake.net>)
• [ MDKSA-2006:225 ] - Updated ruby packages fix DoS vulnerability (security@...driva.com)
• Re: Nmap Online ("Greg" <full-disclosure3@...andyman.com.au>)

• [USN-390-3] evince-gtk vulnerability (Kees Cook <kees@...ntu.com>)
• ZDI-06-044: Adobe Download Manager AOM Parsing Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• rPSA-2006-0227-1 gnupg (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Nmap Online ("Mike Vasquez" <mike.vasquez@...il.com>)
• TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability (TSRT@...m.com)
• Linksys WIP 330 VoIP wireless phone crash from Nmap scan ("Shawn Merdinger" <shawnmer@...il.com>)
• [USN-393-1] GnuPG vulnerability (Kees Cook <kees@...ntu.com>)
• Re: Linksys WIP 330 VoIP wireless phone crash from Nmap scan ("Knud Erik Højgaard" <kokanin@...il.com>)
• Re: Linksys WIP 330 VoIP wireless phone crash from Nmap scan ("Knud Erik Højgaard" <kokanin@...il.com>)
• Re: Linksys WIP 330 VoIP wireless phone crash from Nmap scan ("Shawn Merdinger" <shawnmer@...il.com>)
• Re: Hail list! ("Eliah Kagan" <degeneracypressure@...il.com>)
• New MySpace worm could be on its way ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• [ GLSA 200612-01 ] wv library: Multiple integer overflows (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Joke, Full Version, 0 day exploit for “PING” ("KaiJern Lau" <xwings.net@...il.com>)
• Some Thoughts about Office Open XML and Malware Detection ("Jan P. Monsch" <jan.monsch@...osion.com>)
• [USN-393-2] GnuPG2 vulnerabilities (Kees Cook <kees@...ntu.com>)
• Orkut Email Address Disclosure Vulnerability (Rajesh Sethumadhavan <rajesh.sethumadhavan@...oo.com>)
• EEYE: Intel Network Adapter Driver Local Privilege Escalation ("eEye Advisories" <Advisories@...e.com>)
• Re: Orkut Email Address Disclosure Vulnerability ("Ronald MacDonald" <ronald@...cd.com>)

• Microsoft Word 0-day Vulnerability FAQ (CVE-2006-5994) written (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: Orkut Email Address Disclosure Vulnerability (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• Re: Hail list! ("pingywon" <pingywon@...mail.com>)
• Re: Linksys WIP 330 VoIP wireless phone crash fromNmap scan ("pingywon" <pingywon@...mail.com>)
• Re: Hail list! ("pingywon" <pingywon@...mail.com>)
• Re: Some Thoughts about Office Open XML and Malware Detection ("Robert Kim Wireless Internet Advisor" <evdo.hsdpa@...il.com>)
• [USN-394-1] Ruby vulnerability (Kees Cook <kees@...ntu.com>)
• Orkut Multiple Cross Site Scripting Vulnerabilities (Rajesh Sethumadhavan <rajesh.sethumadhavan@...oo.com>)
• Re: Linksys WIP 330 VoIP wireless phone crash fromNmap scan ("Shawn Merdinger" <shawnmer@...il.com>)
• What was the name of the web site ... ("solenoid (lists)" <radules@...ekom.yu>)
• Google pageranked 4 doamin on sale... ("Louis Wang" <lwang@...ng.org>)
• Re: Linksys WIP 330 VoIP wireless phone crash fromNmap scan ("pingywon" <pingywon@...mail.com>)
• [SECURITY] [DSA-1230-1] new l2tpns packages fix buffer overflow (Steve Kemp <skx@...ian.org>)
• Re: Google pageranked 4 doamin on sale... ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Call For Participants For A Research Study Of Hacker Culture (Thomas Holt <researchonhackers@...oo.com>)
• Enforcing Java Security Manager in Restricted Windows Environments? ("Jan P. Monsch" <jan.monsch@...osion.com>)
• Re: Call For Participants For A Research Study Of Hacker Culture (Simon Richter <Simon.Richter@...yros.de>)
• [CAID 34846]: CA BrightStor ARCserve Backup Discovery Service Buffer Overflow Vulnerability ("Williams, James K" <James.Williams@...com>)
• Re: Call For Participants For A Research Study Of Hacker Culture (Thomas Holt <researchonhackers@...oo.com>)
• This is serious business (crook <sovietnam_88@...oo.com>)
• MICHAEL CROOK COCK JPEG VULNERABILITY (crook <sovietnam_88@...oo.com>)
• Re: Call For Participants For A Research Study Of Hacker Culture ("chinese soup" <noodle.mastah@...il.com>)
• [Madwifi] Madwifi SIOCGIWSCAN buffer overflow // France Telecom ("Tyop?" <tyoptyop@...il.com>)
• Re: Call For Participants For A Research Study Of Hacker Culture (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: What was the name of the web site ... (Nicolas RUFF <nicolas.ruff@...il.com>)
• Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) ("chinese soup" <noodle.mastah@...il.com>)
• iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: What was the name of the web site ... ("/dev/null" <exceed@...il.si>)

• Re: Google pageranked 4 doamin on sale... ("Bill Louis" <bill.louis@...il.com>)
• Re: Google pageranked 4 doamin on sale... ("Louis Wang" <lwang@...ng.org>)
• Re: EEYE: Intel Network Adapter Driver Local Privilege Escalation (Josh Bressers <bressers@...hat.com>)
• PHP 5.2.0 session.save_path safe_mode and open_basedir bypass (Maksymilian Arciemowicz <max@...tsuper.pl>)
• LS-20060908 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability (advisories@...ec.com)
• LS-20061001 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability (advisories@...ec.com)
• Agenda and Schedule for January ISOI 2 Workshop (Gadi Evron <ge@...uxbox.org>)
• Re: Call For Participants For A Research Study Of Hacker Culture ("Evan Stawnyczy" <ejes@...free.net>)
• Call For Papers: SecurityOPUS 2007 (Sharkey <pdxsharkey@...il.com>)
• ASX Playlists and Jumping to Conclusions (Sûnnet Beskerming <info@...kerming.com>)
• Re: Call For Participants For A Research Study Of Hacker Culture (Andrew Farmer <andfarm@...il.com>)
• [ GLSA 200612-02 ] xine-lib: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [SECURITY] [DSA 1231-1] New gnupg packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Linksys WIP 330 VoIP wireless phone crash from Nmap scan ("Collin R. Mulliner" <collin@...aversion.net>)
• Re: iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability (Damian Put <pucik@...rflow.pl>)
• (no subject) (Ēriks <eriks00@...n.lv>)
• Re: Google pageranked 4 doamin on sale... ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• [SECURITY] [DSA 1232-1] New clamav packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Call For Participants For A Research Study Of Hacker Culture ("Alessio L.R. Pennasilico" <mayhem@...ursiva.org>)
• Re: Google pageranked 4 doamin on sale... ("Louis Wang" <lwang@...ng.org>)
• Re: Call For Participants For A Research Study Of Hacker Culture (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• PostgreSQL and Informix Function Fuzzing Tool (Joxean Koret <joxeankoret@...oo.es>)
• Re: Linksys WIP 330 VoIP wireless phone crash from Nmap scan ("Shawn Merdinger" <shawnmer@...il.com>)

• DadaIMC default configuration vulnerability ("Hagbard Celine" <discordian@...il.com>)
• [ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200612-04 ] ModPlug: Multiple buffer overflows (Raphael Marichez <falco@...too.org>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• [ GLSA 200612-05 ] KOffice shared libraries: Heap corruption (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• Re: DadaIMC default configuration vulnerability ("Julio Cesar Fort" <julio@...slabs.com.br>)
• [ GLSA 200612-06 ] Mozilla Thunderbird: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200612-07 ] Mozilla Firefox: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200612-08 ] SeaMonkey: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• Evasion Schemes or techniques ("Kassem Nasser" <kassem.nasser@...il.com>)
• Multiple vulnerabilities in Winamp Web Interface 7.5.13 (Luigi Auriemma <aluigi@...istici.org>)
• RFIDIOt release - version 0.1i (Adam Laurie <adam.laurie@...bunker.net>)
• [ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow (Raphael Marichez <falco@...too.org>)
• Several updates in Microsoft Word 0-day (CVE-2006-5994) FAQ document (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Another, different MS Word 0-day vulnerability reported (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: Another, different MS Word 0-day vulnerability reported (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• [SECURITY] [DSA 1233-1] New Linux 2.6.8 packages fix several vulnerabilities (Dann Frazier <dannf@...ian.org>)
• looking for security community input (Gadi Evron <ge@...uxbox.org>)
• [SBDA] - ColdFusion MX7 - Multiple Vulnerabilities ("Brett Moore" <brett.moore@...urity-assessment.com>)

• Re: looking for security community input ("Stack Smasher" <stacksmasher@...il.com>)
• Re: Another, different MS Word 0-day vulnerability reported (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• ERRATA: [ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• Secunia Research: MailEnable IMAP Service Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)

• [ MDKSA-2006:226 ] - Updated squirrelmail packages fix vulnerabilities (security@...driva.com)
• [ MDKSA-2006:227 ] - Updated kdegraphics packages fix EXIF vulnerability (security@...driva.com)
• Re: Financial firms warned of Qaeda cyber attack ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• Orkut Group Cross Site Scripting Vulnerability (Rajesh Sethumadhavan <rajesh.sethumadhavan@...oo.com>)
• Re: LS-20061001 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability ("Williams, James K" <James.Williams@...com>)
• Re: LS-20060908 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability ("Williams, James K" <James.Williams@...com>)
• The newest Word flaw is due to malformed data structure handling (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• [ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow (Raphael Marichez <falco@...too.org>)
• Re: The newest Word flaw is due to malformed data structure handling (Alexander Sotirov <asotirov@...ermina.com>)
• Re: Secunia Research: AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow (zdi-disclosures@...m.com)
• Re: EEYE: Intel Network Adapter Driver Local Privilege Escalation ("Randal T. Rioux" <randy@...cyonlabs.com>)
• Card Fraud ("Stack Smasher" <stacksmasher@...il.com>)
• Unauthenticated access to IBM Host On-Demand administration pages ("Ferguson, David \(Kansas City\)" <Dave.Ferguson@...hnetsecurity.com>)
• Re: Evasion Schemes or techniques (3APA3A <3APA3A@...URITY.NNOV.RU>)
• RFID access control tokens widely open to cloning (Adam Laurie <adam.laurie@...bunker.net>)
• [ GLSA 200612-10 ] Tar: Directory traversal vulnerability (Matthias Geerdsen <vorlon@...too.org>)
• [SBDA] SiteKiosk - FileSystem Access ("Brett Moore" <brett.moore@...urity-assessment.com>)
• [ MDKSA-2006:228 ] - Updated gnupg packages fix vulnerability (security@...driva.com)
• Google's Orkut Group Cross Site Scripting Vulnerability (Rajesh Sethumadhavan <rajesh.sethumadhavan@...oo.com>)
• Re: looking for security community input (ZYRO <zyro1001@...oo.com>)
• Re: Call For Participants For A Research Study Of Hacker Culture ("Evan Stawnyczy" <ejes@...free.net>)
• RFID access control tokens widely open to cloning (Adam Laurie <adam.laurie@...bunker.net>)
• OpenLDAP kbind authentication buffer overflow (Solar Eclipse <solareclipse@...eedom.org>)
• Re: Card Fraud ("J. Patterson Wicks" <pwicks@...gen.com>)
• Re: [fuzzing] OWASP Fuzzing page (Joxean Koret <joxeankoret@...oo.es>)
• ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability (zdi-disclosures@...m.com)
• ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability (zdi-disclosures@...m.com)
• ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so 'doprf()' Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so Directory Traversal Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Evading Oracle Database IDS and Auditing Solutions ("Integrigy Alerts" <alerts@...egrigy.com>)
• Secunia Research: Internet Explorer Script Error Handling Memory Corruption (Secunia Research <remove-vuln@...unia.com>)
• rPSA-2006-0230-1 evince (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2006-0231-1 squirrelmail (rPath Update Announcements <announce-noreply@...th.com>)
• [ GLSA 200612-12 ] F-PROT Antivirus: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [ GLSA 200612-13 ] libgsf: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• [ GLSA 200612-14 ] Trac: Cross-site request forgery (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)

• Re: [SBDA] - ColdFusion MX7 - Multiple Vulnerabilities ("Darren Bounds" <dbounds@...il.com>)
• Coolplayer buffer overflow vulnerabilities ("Siegfried" <admin@...e-h.fr>)
• ASP Cmd Shell On IIS 5.1 ("Brett Moore" <brett.moore@...urity-assessment.com>)
• [SECURITY] [DSA-1234-1] New ruby1.6 package fix denial of service (Steve Kemp <skx@...ian.org>)
• [SECURITY] [DSA-1235-1] New ruby1.8 package fix denial of service (Steve Kemp <skx@...ian.org>)
• [SECURITY] [DSA-1236-1] New enemies-of-carlotta package fix missing sanity checks (Steve Kemp <skx@...ian.org>)
• Re: [SPAM-1] Full-Disclosure Digest, Vol 22, Issue 17 (Roger Howorth <roger@...erh.com>)
• SinFP OS fingerprinting online demo (GomoR <fd@...or.org>)
• Re: SinFP OS fingerprinting online demo (fd@...or.org)
• [USN-395-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
• IBM DB2 Remote DoS during CONNECT processing (Team SHATTER <shatter@...secinc.com>)
• ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• ZDI-06-050: Symantec Veritas NetBackup CONNECT_OPTIONS Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• [Fwd: MOST URGENT] ("Ag. System Administrator" <sysadmin@...nt.co.il>)

• CanSecWest 2007 (April 18-20) Call For Papers (Deadline Jan 7th) (Dragos Ruiu <dr@....net>)
• Re: SinFP OS fingerprinting online demo (Simon Smith <simon@...soft.com>)
• [ MDKSA-2006:229 ] - Updated evince packages fix buffer overflow vulnerability (security@...driva.com)
• [ MDKSA-2006:230 ] - Updated clamav packages fix vulnerability (security@...driva.com)
• [ GLSA 200612-15 ] McAfee VirusScan: Insecure DT_RPATH (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• HyperAccess - Multiple Vulnerabilities ("Brett Moore" <brett.moore@...urity-assessment.com>)
• rPSA-2006-0232-1 libgsf (rPath Update Announcements <announce-noreply@...th.com>)
• Re: HyperAccess - Multiple Vulnerabilities ("Knud Erik Højgaard" <kokanin@...il.com>)
• Re: SinFP OS fingerprinting online demo ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• [USN-380-2] avahi regression (Martin Pitt <martin.pitt@...onical.com>)
• mailing list submissions (Kuldeep <kuldeep@...bolinux.co.in>)
• Intergenia hosting malware ("lsi" <stuart@...erdelix.net>)
• NOT a 0day! Re: [fuzzing] OWASP Fuzzing page (Gadi Evron <ge@...uxbox.org>)
• Re: [Fwd: MOST URGENT] (Valdis.Kletnieks@...edu)
• [ GLSA 200612-16 ] Links: Arbitrary Samba command execution (Raphael Marichez <falco@...too.org>)
• [ GLSA 200612-17 ] GNU Radius: Format string vulnerability (Raphael Marichez <falco@...too.org>)
• Re: [fuzzing] NOT a 0day! Re: OWASP Fuzzing page (Gadi Evron <ge@...uxbox.org>)
• [ MDKSA-2006:164-2 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities (security@...driva.com)
• iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities ("Williams, James K" <James.Williams@...com>)
• Re: The newest Word flaw is due to malformed data structure handling (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Google AdWords Multiple HTTP response splitting vulnerabilities ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• Fwd: NOT a 0day! Re: [fuzzing] OWASP Fuzzing page ("Nuno Treez" <nunotreez@...il.com>)
• Re: [fuzzing] NOT a 0day! Re: OWASP Fuzzing page (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: [fuzzing] NOT a 0day! Re: OWASP Fuzzing page (Gadi Evron <ge@...uxbox.org>)
• Kerio MailServer < 6.3.1 remote Denial of Service (research@...g.net)
• Re: [Fwd: MOST URGENT] ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)

• [USN-396-1] gdm vulnerability (Kees Cook <kees@...ntu.com>)
• Re: [ GLSA 200612-15 ] McAfee VirusScan: Insecure DT_RPATH (<David_Coffey@...fee.com>)
• Re: [ GLSA 200612-15 ] McAfee VirusScan: Insecure DT_RPATH (Tavis Ormandy <taviso@...too.org>)
• [ MDKSA-2006:231 ] - Updated gdm packages fix string vulnerability (security@...driva.com)
• ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• Re: [Fwd: MOST URGENT] (Peter van den Heuvel <peter@...k-connect.com>)
• Project Server 2003 - Credential Disclosure ("Brett Moore" <brett.moore@...urity-assessment.com>)
• Fuzzers and brute forcers (Joxean Koret <joxeankoret@...oo.es>)
• Backdooring Image Files - security notice ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• BitDefender AV Packed PE File Parsing Engine Heap Overflow (<security@...ns.com>)
• Bypassing process identification of several personal firewalls and HIPS (Matousec - Transparent security Research <research@...ousec.com>)
• Hacking HomePlug Networks ("David Kierznowski" <david.kierznowski@...il.com>)
• [ MDKSA-2006:220 ] - Updated libgsf packages fix heap buffer overflow vulnerability (security@...driva.com)
• [ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
• [ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
• [ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
• [ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
• [OOT] Thesis for master degree ("Fajar Edisya Putera" <fajarep@...il.com>)
• [ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
• Re: [OOT] Thesis for master degree (scott hollatz <shollatz@...mn.edu>)
• Re: [OOT] Thesis for master degree (xyberpix <xyberpix@...erpix.com>)

• Re: [OOT] Thesis for master degree ("Bill Stout" <bill.stout@...enborder.com>)
• ftpd ld.so.preload fun ("kcope" <kingcope@....net>)
• Odysseus 2.0 / Telemachus 1.0 (Beta) (Dave <dave@...dshell.net>)
• Drone Armies C&C Report - 15 Dec 2006 (c2report@...tf.org)
• (no subject) ("jamella" <jamella@....com>)
• Re: Bloodhound.Exploit.106/108 detection Was:(no subject) (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: [OOT] Thesis for master degree ("Aaron Gray" <angray@...b.net>)

• Re: Full-Disclosure Digest, Vol 22, Issue 27 ("badr muhyeddin" <gigiyousef@...mail.com>)
• Re: Full-Disclosure Digest, Vol 22, Issue 27 ("badr muhyeddin" <gigiyousef@...mail.com>)
• Re: Full-Disclosure Digest, Vol 22, Issue 27 ("badr muhyeddin" <gigiyousef@...mail.com>)
• [SECURITY] [DSA 1238-1] New clamav packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1239-1] New sql-ledger packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: [OOT] Thesis for master degree ("Fajar Edisya Putera" <fajarep@...il.com>)

• [SECURITY] [DSA 1237-1] New Linux 2.4.27 packages fix several vulnerabilities (Dann Frazier <dannf@...ian.org>)
• 0-day hackers are vista-ready ("Crew-X Security" <crewxsecurity@...glemail.com>)
• Who call talk about the heuristic tech of norton? ("caojunsccd" <caojunsccd@...a.com>)
• Re: [OOT] Thesis for master degree (Valdis.Kletnieks@...edu)
• Re: 0-day hackers are vista-ready (afed <bsdusr@...il.com>)
• Secunia Research: MailEnable POP Service "PASS" Command Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• RateMe <= all versions => ( main.inc.php ) Remote File Include Vulnerability ("saudi arabia" <saudi@...mail.fr>)
• Re: [OOT] Thesis for master degree (Tim <tim-security@...tinelchicken.org>)
• SQL Injection - Vulnerable Brazilian Website ( AJAX / Web 2.0 ) ("Fabio Neves Sarmento [ Gmail ]" <fabior2@...il.com>)
• [ GLSA 200612-18 ] ClamAV: Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
• emergent security properties ("Nguyen Pham" <nguyen.petronius@...il.com>)
• Re: emergent security properties (Tim <tim-security@...tinelchicken.org>)
• Re: SinFP OS fingerprinting online demo (Simon Smith <simon@...soft.com>)
• Re: SinFP OS fingerprinting online demo (GomoR <fd@...or.org>)
• Security contact at McAfee (Sebastian Wolfgarten <sebastian.wolfgarten@....net>)
• Security contact at McAfee (follow-up) (Sebastian Wolfgarten <sebastian.wolfgarten@....net>)

• Re: Security contact at McAfee (xyberpix <xyberpix@...erpix.com>)
• Web Backdoor Compilation ("David Kierznowski" <david.kierznowski@...il.com>)
• [ MDKSA-2006:232 ] - Updated proftpd packages fix mod_ctrls vulnerability (security@...driva.com)
• [ MDKSA-2006:233 ] - Updated dbus packages fix vulnerability (security@...driva.com)
• HITBSecConf2007 - Dubai - Call for Papers now open! (Praburaajan <prabu@...kinthebox.org>)
• Re: Backdooring Image Files - security notice ("HASEGAWA Yosuke " <yosuke.hasegawa@...il.com>)
• Skype worm in the wild (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• HP Printers FTP Server Denial Of Service (Joxean Koret <joxeankoret@...oo.es>)
• Re: Skype worm in the wild (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• comparing information security to other industries ("KT" <ktriv3di@....com>)
• Re: comparing information security to other industries (Valdis.Kletnieks@...edu)
• Re: [WEB SECURITY] comparing information security to other industries ("Will Jefferies" <wjefferies@...inc.com>)
• Re: comparing information security to other industries (coderman <coderman@...il.com>)

• Re: comparing information security to other industries (Nancy Kramer <nekramer@...dtheater.net>)
• ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability (zdi-disclosures@...m.com)
• Re: [Discuss-gnuradio] VT receives NSF grant for SDR security (fwd) (Jay Sulzberger <jays@...ix.com>)
• [WEB SECURITY] comparing information security to other industries (Albert <caruabertu@...il.com>)
• comparing information security to other industries - (Albert <caruabertu@...il.com>)
• SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability ("SEC Consult Research" <research@...-consult.com>)
• NOD32 Antivirus DOC parsing Arbitrary Code Execution Advisory (<security@...ns.com>)
• Oracle Portal 10g HTTP Response Splitting ("putosoft softputo" <hasecorp@...mail.com>)
• [ GLSA 200612-19 ] pam_ldap: Authentication bypass vulnerability (Raphael Marichez <falco@...too.org>)
• [ GLSA 200612-20 ] imlib2: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200612-21 ] Ruby: Denial of Service vulnerability (Raphael Marichez <falco@...too.org>)
• [USN-397-1] mono vulnerability (Kees Cook <kees@...ntu.com>)
• [ MDKSA-2006:234 ] - Updated mono packages fix vulnerability (security@...driva.com)

• Re: Oracle Portal 10g HTTP Response Splitting ("Brian Eaton" <eaton.lists@...il.com>)
• [CAID 34876]: CA CleverPath Portal Session Inheritance Vulnerability ("Williams, James K" <James.Williams@...com>)
• [SECURITY] [DSA-1240-1] New links2 packages fix arbitrary shell command execution (Steve Kemp <skx@...ian.org>)
• New Windows tool - PWDumpX v1.1 (with CacheDump functionality) ("Reed Arvin" <reedarvin@...il.com>)
• Re: [WEB SECURITY] comparing information security to other industries ("Jason Muskat, GCFA, GCUX, de VE3TSJ" <Jason@...hDude.Ca>)
• Windows is very holy ("Aaron Gray" <aaronngray@...il.com>)
• NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory (<security@...ns.com>)
• Tele2 - Versatel and Vivendi - exploit PATCHED (CyTRAP Labs - advisory <Report_exploit@...RAP.eu>)
• Microsoft Windows XP/2003/Vista memory corruption 0day (3APA3A <3APA3A@...URITY.NNOV.RU>)
• SinFP 2.06, now works under big-endian architectures (GomoR <fd@...or.org>)
• Fun with event logs (semi-offtopic) (3APA3A <3APA3A@...URITY.NNOV.RU>)
• n3td3v calls on month of bug campaigns to stop (n3td3v <xploitable@...il.com>)
• Re: n3td3v calls on month of bug campaigns to stop (Timo Schoeler <timo.schoeler@...cworks.net>)
• Re: Fun with event logs (semi-offtopic) (endrazine <endrazine@...il.com>)
• Re: Microsoft Windows XP/2003/Vista memory corruption 0day (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Fun with event logs (semi-offtopic) ("Michele Cicciotti" <mc@...msa.net>)
• Re: Fun with event logs (semi-offtopic) (Tim <tim-security@...tinelchicken.org>)
• Re: Fun with event logs (semi-offtopic) ("Michele Cicciotti" <mc@...msa.net>)
• SQID v0.1 - SQL Injection Digger. (Metaeye SG <contact@...aeye.org>)
• Re: Fun with event logs (semi-offtopic) (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Fun with event logs (semi-offtopic) (3APA3A <3APA3A@...URITY.NNOV.RU>)
• [NETRAGARD-20061220 SECURITY ADVISORY] [@Mail WebMail Cross Site Scripting Vulnerabilitity] (Netragard Security Advisories <advisories@...ragard.com>)
• Re: [fuzzing] NOT a 0day! Re: OWASP Fuzzing page (Jerome Athias <jerome.athias@...e.fr>)
• Re: Fun with event logs (semi-offtopic) ("Michele Cicciotti" <mc@...msa.net>)
• Re: Microsoft Windows XP/2003/Vista memory corruption 0day (Alexander Sotirov <asotirov@...ermina.com>)
• Re: [WEB SECURITY] comparing information security to other industries (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: Windows is very holy ("Aaron Gray" <angray@...b.net>)
• Re: Microsoft Windows XP/2003/Vista memory corruption 0day ("Pukhraj Singh" <pukhraj.singh@...il.com>)

• Re: Windows is very holy (Valdis.Kletnieks@...edu)
• Re: Microsoft Windows XP/2003/Vista memory corruption 0day ("Michele Cicciotti" <mc@...msa.net>)
• Re: Windows is very holy (Jim Popovitch <jimpop@...oo.com>)
• Re: Windows is very holy (Jim Popovitch <jimpop@...oo.com>)
• [TOOL] untidy - XML Fuzzer ("Andres Riancho" <andres.riancho@...il.com>)
• Re: Windows is very holy ("Michele Cicciotti" <mc@...msa.net>)
• SQID v0.2 - SQL Injection Digger. (Metaeye SG <contact@...aeye.org>)
• rPSA-2006-0234-1 firefox (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Oracle Portal 10g HTTP Response Splitting ("putosoft softputo" <hasecorp@...mail.com>)
• Oracle Applications/Portal 9i/10g Cross Site Scripting ("putosoft softputo" <hasecorp@...mail.com>)
• Re: Microsoft Windows XP/2003/Vista memory corruption 0day (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Windows is very holy ("Aaron Gray" <angray@...b.net>)
• Re: Windows is very holy ("Aaron Gray" <angray@...b.net>)
• Test Posting ("Aaron Gray" <angray@...b.net>)
• Re: Microsoft Windows XP/2003/Vista memory corruption 0day (Alexander Sotirov <asotirov@...ermina.com>)
• Re: [WEB SECURITY] Re: comparing information security to other industries ("Dinis Cruz" <dinis@...lus.net>)
• Re: Multiple Remote Vulnerabilities in KISGB (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Sacure Enterprise Security - A Farce (<exposeyourass@...h.ai>)
• Re: Multiple Remote Vulnerabilities in KISGB (str0ke <str0ke@...w0rm.com>)

• ZDI-06-052: Novell NetMail NMAP STOR Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• ZDI-06-054: Novell NetMail IMAP APPEND Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• ZDI-06-053: Novell NetMail IMAP Verb Literal Heap Overflow Vulnerability (zdi-disclosures@...m.com)
• Harold C. Turner a.k.a. Hal Turner - Internet Radio Talk Show Host (Pedro Martinez <halturnerchansechorselol@...oo.com>)
• Re: Harold C. Turner a.k.a. Hal Turner - Internet Radio Talk Show Host ("Rob \"Nexis\" Nelson" <nexisentertainment@...il.com>)
• Botnets: a retrospective to 2006, and where we are headed in 2007 (Gadi Evron <ge@...uxbox.org>)
• Multiple Remote Vulnerabilities in KISGB ("0o_zeus_o0 elitemexico.org" <zeus.olimpusklan@...il.com>)
• Re: Full-Disclosure Digest, Vol 22, Issue 36 (Joseph Hamm <jhamm@...cope.com>)
• Re: n3td3v calls on month of bug campaigns to stop ("Jeb Osama" <mkmaxx@...il.com>)
• Re: n3td3v calls on month of bug campaigns to stop (SDALAN04@...mn.edu)

• iDefense Security Advisory 12.23.06: Novell NetMail IMAPD subscribe Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 12.23.06: Novell Netmail IMAP append Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• new backframe release ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: comparing information security to other industries (Michael Zimmermann <zim@...aa.de>)
• Re: comparing information security to other industries ("Brian Eaton" <eaton.lists@...il.com>)
• TimberWolf 1.2.2 vulnerable to XSS (<corrado.liotta@...ce.it>)
• Distributed Rainbow Table Project (opticfiber <opticfiber@...sight.net>)
• DNS-Pinning demo (Kanatoko <anvil@...perz.net>)
• Merry Christmas Youtube! (XSS vuln) (Paul <pvnick@...il.com>)
• [YST] Full Disclosure - Paul Robinette / Renetto ("Dexa Rouskies" <dexarouskies@...ich.com>)

• Re: comparing information security to other industries (Michael Zimmermann <zim@...aa.de>)
• Happy Holidays (evilrabbi <evilrabbi@...il.com>)
• Re: [WEB SECURITY] Re: comparing information security to other industries ("Andre Gironda" <andre@...rations.net>)
• Re: [YST] Full Disclosure - Paul Robinette / Renetto (SDALAN04@...mn.edu)
• w3m format string bug (<sftsi@...hmail.com>)
• [SECURITY] [DSA 1241-1] New squirrelmail packages fix cross-site scripting (Moritz Muehlenhoff <jmm@...ian.org>)
• logahead UNU edition 1.0 Remote upload file & code execution (<corrado.liotta@...ce.it>)

• xss problems (Deepan <codeshepherd@...il.com>)
• Re: xss problems (Deepan <codeshepherd@...il.com>)
• AppleScript: Even easier than VBS? (kf_lists <kf_lists@...italmunition.com>)
• SACURE IS A REAL COMPANY! ("Todd Michael Cohan" <info@...ure.com>)
• Sacure Enterprise Security - Real Company! (<auto475758@...hmail.com>)
• Vista RDP bug? ("/dev/null" <exceed@...il.si>)
• Re: [WEB SECURITY] Re: comparing information security to other industries (coderman <coderman@...il.com>)
• FW: Vista RDP bug? (Larry Seltzer <Larry@...ryseltzer.com>)
• Re: Sacure Enterprise Security - Real Company! ("K F (lists)" <kf_lists@...italmunition.com>)
• Re: emergent security properties (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)

• Re: [WEB SECURITY] Re: comparing information security to other industries (Krainium <krainium@...il.com>)
• Re: emergent security properties (coderman <coderman@...il.com>)
• Re: emergent security properties (Roland Dobbins <rdobbins@...co.com>)
• Re: SQID v0.2 - SQL Injection Digger. (icecoldeuro@...il.com)
• Re: emergent security properties (Peter Swire <peter@...erswire.net>)
• Re: [WEB SECURITY] Re: comparing information security to other industries (Michael Zimmermann <zim@...aa.de>)
• Re: emergent security properties (coderman <coderman@...il.com>)
• AppleScript: Even easier than VBS? (kfinisterre <kevin@...finite.org>)
• WordPress Persistent XSS ("David Kierznowski" <david.kierznowski@...il.com>)
• Re: [WEB SECURITY] Re: comparing information security to other industries (coderman <coderman@...il.com>)
• Re: emergent security properties ("Brian Eaton" <eaton.lists@...il.com>)
• FW: [Fwd: Re[2]: Fun with event logs (semi-offtopic)] ("BART. ...." <need4angel@...mail.com>)
• ShmooCon Announcements (B Potter <gdead@...oo.com>)
• [SECURITY] [DSA 1242-1] New elog packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1214-2] Updated gv packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)

• [SECURITY] [DSA 1243-1] New evince packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: [WEB SECURITY] Re: comparing information security to other industries (imipak <imipak@...il.com>)
• Re: [WEB SECURITY] Re: comparing information security to other industries ("Michael Simpson" <mikie.simpson@...il.com>)
• [SECURITY] [DSA 1244-1] New xine-lib packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)

• msgina.dll BSOD ("/dev/null" <exceed@...il.si>)
• Information Security Behavior Management System ("no me" <letmefocus@...il.com>)
• Re: msgina.dll BSOD (3APA3A <3APA3A@...URITY.NNOV.RU>)

• Postcard.exe malware spammed with Happy New Year messages (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: FW: Vista RDP bug? ("Michele Cicciotti" <mc@...msa.net>)
• hello ("ivan chollet" <ivan.chollet@...anda.com>)
• Re: WordPress Persistent XSS (Deepan <codeshepherd@...il.com>)
• n3td3v's year in brief: 2006 (n3td3v <crewxsecurity@...glemail.com>)
• [vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability (TAN Chew Keong <vulnpost-remove@...n.sg>)
• WordPress template.php Exploit ("David Kierznowski" <david.kierznowski@...il.com>)
• Re: WordPress Persistent XSS ("David Kierznowski" <david.kierznowski@...il.com>)
• Advisory: SQL Injection Vulnerability In Multiple AOL Websites. (Metaeye SG <contact@...aeye.org>)

• Re: Postcard.exe malware spammed with Happy New Year messages (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service ("Collin R. Mulliner" <collin@...aversion.net>)
• Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files ("gregory_panakkal" <gregory_panakkal@...tmail.fm>)
• Happy New Year to you all. ("Dingo Ugly" <dingo.ugly@...il.com>)
• [NGSEC] ngGame #3 - BrainStorming ("labs@...EC" <labs@...ec.com>)
• Re: SACURE IS A REAL COMPANY! (<c-boost@...h.ai>)
• edbrowse buffer overflow (<sftsi@...hmail.com>)
• LOL VISTA EXPL0IT WAREZ LOL (<soundoftheunderground@...h.com>)
• Authenticated users can sniff WPA traffic? ("/dev/null" <exceed@...il.si>)

503 messages

Powered by blists - more mailing lists