full-disclosure mailing list - 2007/03

Messages by day:

March 1 (11 messages)

• [ MDKSA-2007:051 ] - Updated snort packages fix DoS vulnerability (security@...driva.com)
• March 2nd Chicago 2600/DefCon 312 Meeting Information ("Steven McGrath" <steven.mcgrath@...geek.com>)
• Re: Stealing Browser History Without Using JavaScript ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Stealing Browser History Without Using JavaScript (Matthew Flaschen <matthew.flaschen@...ech.edu>)
• [USN-416-2] nvidia-glx-config regression (Martin Pitt <martin.pitt@...onical.com>)
• MPlayer DMO buffer overflow (Moritz Jodeit <moritz@...eit.org>)
• tcpdump: off-by-one heap overflow in 802.11 printer (Moritz Jodeit <moritz@...eit.org>)
• Serendipity unauthenticated SQL-Injection (SaMuschie <samuschie@...oo.de>)
• Re: Stealing Browser History Without Using JavaScript (Peter Besenbruch <prb@...a.net>)
• Re: Angel LMS 7.1 - Remote SQL Injection (don bailey <don.bailey@...il.com>)
• Comodo Bypassing settings protection using magic pipe Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)

• Re: Angel LMS 7.1 - Remote SQL Injection (don bailey <don.bailey@...il.com>)
• [ GLSA 200703-03 ] ClamAV: Denial of Service (Raphael Marichez <falco@...too.org>)
• [ GLSA 200703-02 ] SpamAssassin: Long URI Denial of Service (Raphael Marichez <falco@...too.org>)
• [ GLSA 200703-01 ] Snort: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
• Re: Angel LMS 7.1 - Remote SQL Injection (str0ke <str0ke@...w0rm.com>)
• [USN-428-2] Firefox regression (Kees Cook <kees@...ntu.com>)
• Re: March 2nd Chicago 2600/DefCon 312 Meeting Information ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• G.R.I.D.S. virus being spread by the Younger Woolwich Boyz (Jaime Demetur <sniffikins@...oo.com>)
• Knorr.de SQL Injection and XSS Vulnerabilities (sbauer@...-network.net)
• Re: March 2nd Chicago 2600/DefCon 312 Meeting Information ("James Matthews" <nytrokiss@...il.com>)
• Re: Knorr.de SQL Injection and XSS Vulnerabilities ("Knud Erik Højgaard" <kokanin@...il.com>)
• Re: Knorr.de SQL Injection and XSS Vulnerabilities (Sebastian Bauer <sbauer@...-network.net>)
• Re: Knorr.de SQL Injection and XSS Vulnerabilities ("Joe Hancock" <joe.hancock@...il.com>)
• Re: Knorr.de SQL Injection and XSS Vulnerabilities (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• MailEnable v2.37 APPEND exploit (mu-b <mu-b@...it-labs.org>)
• ZDI-07-008: Apache Tomcat JK Web Server Connector Long URL Stack Overflow Vulnerability (zdi-disclosures@...m.com)
• Woltlab Burning Board (wbb) 2.3.6 CSRF/XSS - 0day (SaMuschie <samuschie@...oo.de>)
• iDefense Security Advisory 03.02.07: Kaspersky AntiVirus UPX File Decompression DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: MailEnable v2.37 APPEND exploit ("T Biehn" <tbiehn@...il.com>)
• Re: March 2nd Chicago 2600/DefCon 312 Meeting Information ("Walt Williams" <walt.williams@...il.com>)
• Limited format string in Netrek 2.12.0 (Luigi Auriemma <aluigi@...istici.org>)
• [ MDKSA-2007:050-1 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
• [ GLSA 200703-04 ] Mozilla Firefox: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)

• [ GLSA 200703-05 ] Mozilla Suite: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• rPSA-2007-0048-1 tcpdump (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0040-3 firefox thunderbird (rPath Update Announcements <announce-noreply@...th.com>)
• March NorthernVirginia 2600/DefCon 571 Meeting Information (Shyaam <shyaam@...il.com>)
• Re: March 2nd Chicago 2600/DefCon 312 Meeting Information (M.B.Jr. <marcio.barbado@...il.com>)
• Re: Woltlab Burning Board (wbb) 2.3.6 CSRF/XSS - 0day ("MC Iglo" <mc.iglo@...glemail.com>)
• Re: MailEnable v2.37 APPEND exploit (poo <skodliv@...il.com>)
• Tyger Bug Tracking System Multiple Vulnerability (<corrado.liotta@...ce.it>)
• PostScript security research (Paul Sebastian Ziegler <psz@...erved.de>)
• ERRATA: [ GLSA 200703-01 ] Snort: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
• Re: PostScript security research (Ulf Harnhammar <metaur@...ia.com>)

• [ GLSA 200703-06 ] AMD64 x86 emulation Qt library: Integer overflow (Raphael Marichez <falco@...too.org>)
• Re: md5 is breaked with my new lib qbyte v2 ("Slythers Bro" <slythers@...il.com>)
• md5 is breaked with my new lib qbyte v2 ("Slythers Bro" <slythers@...il.com>)
• Re: Knorr.de SQL Injection and XSS Vulnerabilities ("Lolek of TK53" <lolek1337@...glemail.com>)
• month of PHP bugs, secondary message? (Gadi Evron <ge@...uxbox.org>)
• asterisk remote pre-auth denial of service ("Anonymous Person" <anonymousperzon@...il.com>)
• Re: month of PHP bugs, secondary message? (Marcus Meissner <meissner@...e.de>)
• Re: md5 is breaked with my new lib qbyte v2 ("Jason Miller" <jammer128@...il.com>)
• [SECURITY] [DSA 1262-1] New gnomemeeting packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• MOPB-08-2007 - dejavu of dejavu (3APA3A <3APA3A@...urity.nnov.ru>)
• Re: PostScript security research (Valdis.Kletnieks@...edu)
• Re: MOPB-08-2007 - dejavu of dejavu (Stefan Esser <sesser@...dened-php.net>)
• Arbitrary file disclosure vulnerability in rrdbrowse <= 1.6 (Sebastian Wolfgarten <sebastian@...fgarten.com>)
• Re: month of PHP bugs, secondary message? ("Tyop?" <tyoptyop@...il.com>)
• Extending JavaScript Portscanning to Include Banner Grabbing (mark <mark@...dshell.net>)
• Konqueror DoS Via JavaScript Read Of FTP Iframe (mark <mark@...dshell.net>)

• HITBSecConf2007 - Malaysia: Call for Papers now Open (Praburaajan <prabu@...kinthebox.org>)
• Hakin9 Magazine - Request for Article (Shyaam <shyaam@...il.com>)
• ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities (Stefan Friedli <stfr@...p.ch>)
• Re: Knorr.de SQL Injection and XSS Vulnerabilities (poo <skodliv@...il.com>)
• iDefense Security Advisory 03.05.07: Apple QuickTime Color Table ID Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

• Re: Extending JavaScript Portscanning to Include Banner Grabbing ("Robert Wesley McGrew" <wesley@...rewsecurity.com>)
• Apple QuickTime Player Remote Heap Overflow (Piotr Bania <bania.piotr@...il.com>)
• Apple QuickTime udta ATOM Integer Overflow (Sowhat <smaillist@...il.com>)
• Mercury/32 4.01b (mu-b <mu-b@...it-labs.org>)
• Call for Participation Chaos Communication Camp 2007 (fukami <fukami@...lin.ccc.de>)
• silc-server 1.0.2 denial-of-service vulnerability (Alexander Heidenreich <a.heidenreich@...cksec.de>)
• rPSA-2007-0050-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
• [ GLSA 200703-07 ] STLport: Possible remote execution of arbitrary code (Matthias Geerdsen <vorlon@...too.org>)
• [USN-429-1] tcpdump vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-430-1] mod_python vulnerability (Kees Cook <kees@...ntu.com>)
• [SECURITY] [DSA 1263-1] New clamav packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
• BackTrack v.2.0 Is out ("Mati Aharoni" <muts@...ensive-security.com>)

• Re: BackTrack v.2.0 Is out ("Jason Miller" <jammer128@...il.com>)
• [ MDKSA-2007:052 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
• [USN-431-1] Thunderbird vulnerabilities (Kees Cook <kees@...ntu.com>)
• [ MDKSA-2007:053 ] - Updated util-linux packages address umount crash issue (security@...driva.com)
• iDefense Security Advisory 03.07.07: Ipswitch IMail Server 2006 Multiple ActiveX Control Buffer Overflow Vulnerabilitie… (iDefense Labs <labs-no-reply@...fense.c…)
• ZDI-07-010: Apple Quicktime UDTA Parsing Heap Overflow Vulnerability (zdi-disclosures@...m.com)
• ZDI-07-009: Novell Netmail WebAdmin Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• [SECURITY] [DSA 1264-1] New php4 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Buffer-overflow in Conquest client 8.2a (svn 691) (Luigi Auriemma <aluigi@...istici.org>)

• Black Hat USA CFP Now Open! (Jeff Moss <jmoss@...ckhat.com>)
• [USN-432-1] GnuPG vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-424-2] PHP regression (Kees Cook <kees@...ntu.com>)
• Ann: Backtrack 2.0 released (Thierry Zoller <Thierry@...ler.lu>)
• rPSA-2007-0051-1 mod_python (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0052-1 kdelibs (rPath Update Announcements <announce-noreply@...th.com>)
• [ MDKSA-2007:057 ] - Updated xine-lib packages to address buffer overflow vulnerability (security@...driva.com)
• [MU-200703-01] Remote DOS in Asterisk SIP (noreply@...ecurity.com)
• FLSA - foresight linux security announcements (Jonathan Smith <smithj@...esightlinux.org>)
• [ MDKSA-2007:056 ] - Updated tcpdump packages address off-by-one overflow (security@...driva.com)
• [ MDKSA-2007:055 ] - Updated mplayer packages to address buffer overflow vulnerability (security@...driva.com)
• [ MDKSA-2007:054 ] - Updated kdelibs packages to address DoS issue in KDE Javascript (security@...driva.com)
• YouTube email exploit being used by Casey Nunez AKA TheDramaTube AKA The Hurricane (Jaime Demetur <sniffikins@...oo.com>)
• Re: YouTube email exploit being used by Casey Nunez AKA TheDramaTube AKA The Hurricane ("Knud Erik Højgaard" <kokanin@...il.com>)
• Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
• PHP import_request_variables() arbitrary variable overwrite (Stefano Di Paola <stefano.dipaola@...ec.it>)
• PHP import_request_variables() vs extract() (ascii <ascii@...amail.com>)

• List Charter (John Cartwright <johnc@...k.org.uk>)
• Good resources on Web 2.0 ("Justin Boem" <ktriv3di@....com>)
• Re: Good resources on Web 2.0 ("Michael Silk" <michaelslists@...il.com>)
• [USN-433-1] Xine vulnerability (Kees Cook <kees@...ntu.com>)
• [CAID 35145]: CA eTrust Admin Privilege Escalation Vulnerability ("Williams, James K" <James.Williams@...com>)
• [USN-434-1] Ekiga vulnerability (Kees Cook <kees@...ntu.com>)
• [ MDKSA-2007:058 ] - Updated ekiga packages fix string vulnerabilities. (security@...driva.com)
• [ MDKSA-2007:059 ] - Updated gnupg packages provide enhanced forgery detection (security@...driva.com)
• Re: Good resources on Web 2.0 ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Buffer Overflow in Linux Drivers for Omnikey CardMan 4040 (CVE-2007-0005) (Daniel Roethlisberger <daniel.roethlisberger@...c.ch>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Php Nuke POST XSS on steroids (ascii <ascii@...amail.com>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (KJKHyperion <hackbunny@...ctos.com>)
• SyScan'07 - Call for Paper - NEW UPDATES ("organiser@...can.org" <organiser@...can.org>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Roger A. Grimes" <roger@...neretcs.com>)
• Re: [WEB SECURITY] Re: Good resources on Web 2.0 ("Dinis Cruz" <dinis@...lus.net>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues ("M. Burnett" <mb@...o.net>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Roger A. Grimes" <roger@...neretcs.com>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (Tim <tim-security@...tinelchicken.org>)
• hello! (just that) ("Santiago Marenssi" <smarenssi@...il.com>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Michele Cicciotti" <mc@...msa.net>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (Tim <tim-security@...tinelchicken.org>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (Tim <tim-security@...tinelchicken.org>)
• SEC Consult SA-20070309-0 :: MySQL 5 Single Row Subselect Denial of Service (research@...-consult.com)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Roger A. Grimes" <roger@...neretcs.com>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues ("M. Burnett" <mb@...o.net>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Roger A. Grimes" <roger@...neretcs.com>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Roger A. Grimes" <roger@...neretcs.com>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Laundrup, Jens" <Jens.Laundrup@...ROKC.GOV>)
• firefox 2.0.0.2 crash (Tõnu Samuel <tonu@....ee>)
• Re: [WEB SECURITY] Re: Good resources on Web 2.0 ("Kasey Cross" <kasey@...erva.com>)
• Re: firefox 2.0.0.2 crash (fire-eyes <sgtphou@...e-eyes.org>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: firefox 2.0.0.2 crash (Valdis.Kletnieks@...edu)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (steven@...ebug.org)
• [ MDKSA-2007:060 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
• Re: firefox 2.0.0.2 crash ("M. Shirk" <shirkdog_list@...mail.com>)
• Re: firefox 2.0.0.2 crash ("moniker monikerd" <monikerd@...il.com>)
• Re: firefox 2.0.0.2 crash (Valdis.Kletnieks@...edu)
• [ GLSA 200703-08 ] SeaMonkey: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200703-09 ] Smb4K: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)

• [Argeniss] Practical 10 minutes security audit: Oracle Case (Paper) (Cesar <cesarc56@...oo.com>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Brent Stackhouse" <brent@...issecurity.com>)
• Re: firefox 2.0.0.2 crash (Mihai Dontu <mihai.dontu@...il.com>)
• Pre-open files attack agains locked file (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: PHP import_request_variables() arbitrary variable overwrite (Stefan Esser <sesser@...dened-php.net>)
• Re: PHP import_request_variables() arbitrary variable overwrite (ascii <ascii@...amail.com>)
• Re: PHP import_request_variables() arbitrary variable overwrite (Stefano Di Paola <stefano.dipaola@...ec.it>)
• [ GLSA 200703-10 ] KHTML: Cross-site scripting (XSS) vulnerability (Raphael Marichez <falco@...too.org>)
• Re: PHP import_request_variables() arbitrary variable overwrite (Stefan Esser <sesser@...dened-php.net>)
• [SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues ("Roger A. Grimes" <roger@...neretcs.com>)
• Is OWASP vulnerable ?? (Scarlet Pimpernel <kishfellow@...oo.com>)
• Re: Is OWASP vulnerable ?? (jf <jf@...glingpointers.net>)
• Re: Is OWASP vulnerable ?? (Paul Schmehl <pauls@...allas.edu>)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Is OWASP vulnerable ?? (Andrew Farmer <andfarm@...il.com>)
• Re: Is OWASP vulnerable ?? (Valdis.Kletnieks@...edu)
• Re: Is OWASP vulnerable ?? (Paul Schmehl <pauls@...allas.edu>)

• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (KJKHyperion <hackbunny@...tpj.org>)
• Re: Is OWASP vulnerable ?? (Scarlet Pimpernel <kishfellow@...oo.com>)
• Re: Is OWASP vulnerable ?? (jf <jf@...glingpointers.net>)
• Exploit selling service up and running ("kingcope" <kingcope@....net>)
• Re: Exploit selling service up and running ("James Matthews" <nytrokiss@...il.com>)
• Re: Is OWASP vulnerable ?? (Valdis.Kletnieks@...edu)
• Re: Is OWASP vulnerable ?? (Paul Schmehl <pauls@...allas.edu>)
• Re: Is OWASP vulnerable ?? (jf <jf@...glingpointers.net>)
• Firefox: about:blank is phisher's best friend (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: [WEB SECURITY] Re: Good resources on Web 2.0 (bugtraq@...security.net)
• Re: [WEB SECURITY] Re: Good resources on Web 2.0 (czino2@....com)
• Re: Is OWASP vulnerable ?? (czino2@....com)
• Re: Exploit selling service up and running (czino2@....com)
• Re: Is OWASP vulnerable ?? (czino2@....com)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues (czino2@....com)
• etom 7.0 paper. (Ozan Ozkara <ozan@...ptos.net>)
• Re: is scarlet pimpernel a dork? [was] Is OWASP vulnerable ?? ("Knud Erik Højgaard" <kokanin@...il.com>)
• Re: firefox 2.0.0.2 crash (endrazine <endrazine@...il.com>)
• Re: Is OWASP vulnerable ?? ("Michael Silk" <michaelslists@...il.com>)
• Re: Php Nuke POST XSS on steroids (ascii <ascii@...amail.com>)
• Re: Php Nuke POST XSS on steroids (Paul Laudanski <paul@...tlecops.com>)

• XSS and SQL Injection in Election Commision of India website (now fixed) (Ajay Pal Singh Atwal <ajaypal@...bec.org>)
• Re: firefox 2.0.0.2 crash (Rik Bobbaers <Rik.Bobbaers@...kuleuven.be>)
• Re: firefox 2.0.0.2 crash (Sam Hocevar <sam@....org>)
• A small phishing operation (phpninja <phpninja@...il.com>)
• R: A small phishing operation (<bunker@...twebnet.it>)
• TinyMCE_exp Remote File Include Vulnerability ("0o_zeus_o0 elitemexico.org" <zeus.olimpusklan@...il.com>)
• a heeeee he announcement ("heeeee he" <heeeee.he@...il.com>)
• a heeeee he announcement ("heeeee he" <heeeee.he@...il.com>)
• a heeee he announcement ("heeeee he" <heeeee.he@...il.com>)
• Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. (Thierry Zoller <Thierry@...ler.lu>)
• RIM BlackBerry Pearl 8100 Browser DoS ("mike kemp" <clappymonkey@...il.com>)
• Re: firefox 2.0.0.2 crash ("Kristian Hermansen \(khermans\)" <khermans@...co.com>)
• Call for Papers: DeepSec IDSC 2007 Europe/Vienna: 20-23 Nov 2007 ("Paul Böhm" <paul@...hm.org>)
• Re: firefox 2.0.0.2 crash ("Jason Areff" <hailtheczar@...il.com>)
• XSS on eplus.de, german mobile telephony provider ("Hanno Böck" <mail@...eck.de>)
• Re: Is OWASP vulnerable ?? ("Steven M. Christey" <coley@...re.org>)
• Re: PHP import_request_variables() arbitrary variable overwrite ("Steven M. Christey" <coley@...re.org>)
• [USN-435-1] Xine vulnerability (Kees Cook <kees@...ntu.com>)

• new AttackAPI ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• [USN-436-1] KTorrent vulnerabilities (Kees Cook <kees@...ntu.com>)
• XSS on eplus.de, german mobile telephony provider (security@...ed.com)
• XSS at Aon.at, Austrian ISP (Florian Stinglmayr <fstinglmayr@...il.com>)
• Re: firefox 2.0.0.2 crash (Troy Cregger <tcregger@...nedyinfo.com>)
• [USN-432-2] GnuPG2, GPGME vulnerability (Kees Cook <kees@...ntu.com>)
• heeee he ("heeeee he" <heeeee.he@...il.com>)
• heeeee he ("heeeee he" <heeeee.he@...il.com>)
• Re: firefox 2.0.0.2 crash ("Kristian Hermansen \(khermans\)" <khermans@...co.com>)
• Re: heeeee he (Thierry Zoller <Thierry@...ler.lu>)
• Unrarlib 0.4.0 (urarlib_get) Local buffer overflow (starcadi <starcadi@...istici.org>)
• [ MDKSA-2007:062 ] - Updated xine-lib packages to address buffer overflow vulnerability (security@...driva.com)
• vbulletin admincp sql injection (disfigure <disfigure@...il.com>)
• [ MDKSA-2007:061 ] - Updated mplayer packages to address buffer overflow vulnerability (security@...driva.com)
• Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. ("Net Tech" <net.tech11@...il.com>)
• Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. (Thierry Zoller <Thierry@...ler.lu>)
• CarolinaCon presentation drafts (Vic Vandal <vvandal@...l.com>)
• New report on Windows Vista network attack surface (Jim Hoagland <jim_hoagland@...antec.com>)
• [ GLSA 200703-11 ] Amarok: User-assisted remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)

• Re: Php Nuke POST XSS on steroids (Paul Laudanski <paul@...tlecops.com>)
• Re: Php Nuke POST XSS on steroids (Paul Laudanski <paul@...tlecops.com>)
• [SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery (Moritz Muehlenhoff <jmm@...til.org>)
• [Advisory]McAfee ePolicy Orchestrator Multiple Remote Buffer Overflow Vulnerabilities ("hfli" <hfli@...tinet.com>)
• n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation (<security@...ns.com>)
• n.runs-SA-2007.004 - PHProjekt 5.2.0 - Cross Site Scripting and Filter Evasion (<security@...ns.com>)
• n.runs-SA-2007.003 - PHProjekt 5.2.0 - SQL Injection (<security@...ns.com>)
• n.runs-SA-2007.005 - PHProjekt 5.2.0 - Cross Site Request Forgery (<security@...ns.com>)
• [ GLSA 200703-12 ] SILC Server: Denial of Service (Matthias Geerdsen <vorlon@...too.org>)
• SEC Consult SA-20070314-0 :: Apache HTTP Server / Tomcat directory traversal (David Matscheko <research@...-consult.com>)
• Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability ("starcadi starcadi" <starcadi@...il.com>)
• XSS on RIS of the Austrian Government ("Florian Stinglmayr" <fstinglmayr@...il.com>)
• iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• bindtty.c can not use in RHEL4 box (modversion <modversion@...il.com>)
• GMail Contact Information Disclosure PoC (beNi <backebackekuchen@...il.com>)
• Phishing using IE7 local resource vulnerability ("avivra" <avivra@...il.com>)
• heee he ("heeeee he" <heeeee.he@...il.com>)
• Re: Php Nuke POST XSS on steroids (Paul Laudanski <info@...t.uz>)
• Re: Phishing using IE7 local resource vulnerability ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• [ GLSA 200703-13 ] SSH Communications Security's Secure Shell Server: SFTP privilege escalation (Raphael Marichez <falco@...too.org>)

• Horde IMP Webmail Client version H3 (4.1.4) fixes multiple XSS issues (Moritz Naumann <security@...itz-naumann.com>)
• Horde 3.1.4 (RC1) fixes XSS issue (Moritz Naumann <security@...itz-naumann.com>)
• Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability ("James Matthews" <nytrokiss@...il.com>)
• Woltab Burning Board SQL Injection usergroups.php (x666@...e-mail.net)
• Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability (Ismail Dönmez <ismail@...dus.org.tr>)
• Norton Insufficient validation of 'SymTDI' driver input buffer (Matousec - Transparent security Research <research@...ousec.com>)
• Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability (Marcus Meissner <meissner@...e.de>)
• Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability (Ismail Dönmez <ismail@...dus.org.tr>)
• Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability (Ismail Dönmez <ismail@...dus.org.tr>)
• Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability (Valdis.Kletnieks@...edu)
• iDefense Security Advisory 03.15.07: Horde Project Cleanup Script Arbitrary File Deletion Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• tinyurl.com - Local Clipboard (<jay.tomas@...osecguru.com>)
• Re: tinyurl.com - Local Clipboard (Shaun <shaun@...unc.com>)
• Re: tinyurl.com - Local Clipboard (<jay.tomas@...osecguru.com>)
• QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow ("starcadi starcadi" <starcadi@...il.com>)
• Re: tinyurl.com - Local Clipboard ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• Re: tinyurl.com - Local Clipboard ("Rod Trent" <rodtrent@...Tforum.com>)
• LIBFtp 5.0 (sprintf(), strcpy()) Multiple local buffer overflow ("starcadi starcadi" <starcadi@...il.com>)
• Re: Phishing using IE7 local resource vulnerability ("avivra" <avivra@...il.com>)
• Re: QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow ("Knud Erik Højgaard" <kokanin@...il.com>)
• Re: Phishing using IE7 local resource vulnerability ("avivra" <avivra@...il.com>)
• Re: Woltab Burning Board SQL Injection usergroups.php (Bastian Ahrens <mail@...ks.com>)
• Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability (Ulf Harnhammar <metaur@...ia.com>)
• [SECURITY] [DSA 1267-1] New webcalendar packages fix remote file inclusion (Moritz Muehlenhoff <jmm@...ian.org>)

• Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability (Ismail Dönmez <ismail@...dus.org.tr>)
• [CAID 34817, 35058, 35158, 35159]: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities ("Williams, James K" <James.Williams@...com>)
• Re: tinyurl.com - Local Clipboard ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability (Alejandro Barrera <abarrera@...n-gate.net>)
• Re: QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow (Valdis.Kletnieks@...edu)
• Re: Phishing using IE7 local resource vulnerability ("Matthew Murphy" <mattmurphy@...rr.com>)
• heeeee he ("heeeee he" <heeeee.he@...il.com>)
• Tel Aviv University Security Forum - 18th of March (Gadi Evron <ge@...uxbox.org>)
• April, 2007 is the "Month of Myspace Bugs" ("Mondo Armando" <mondo_armando@...holic.org>)
• Re: Tel Aviv University Security Forum - 18th of March ("Hakuna Matata" <narender.hooda@...il.com>)
• Re: QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow ("starcadi starcadi" <starcadi@...il.com>)
• Re: Tel Aviv University Security Forum - 18th of March ("James Matthews" <nytrokiss@...il.com>)
• TOOL: LLTD implementation in Perl (GomoR <fd@...or.org>)
• Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability ("Brian Eaton" <eaton.lists@...il.com>)
• OWASP Spring of Code 2007 ("Dinis Cruz" <dinis@...lus.net>)

• Re: Tel Aviv University Security Forum - 18th of March (Gadi Evron <ge@...uxbox.org>)
• Call For Papers - IT Underground Dublin ("Marcin Tkaczyk" <marcin.tkaczyk@...nderground.org>)
• iDefense Security Advisory 03.16.07: Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• Double Trap XSS Injection : An Analysis (Aditya K Sood <zeroknock@...aeye.org>)
• [ MDKSA-2007:063 ] - Updated libwpd packages to address heap overflow vulnerabilities (security@...driva.com)
• [ MDKSA-2007:064 ] - Updated openoffice.org packages to address libwpd heap overflow vulnerabilities (security@...driva.com)
• [NETRAGARD-20070316 SECURITY ADVISORY][FrontBase Database <= 4.2.7 ALL PLATFORMS][REMOTE BUFFER OVERFLOW CONDITION][LEV… (Netragard Security Advisories <advisori…)
• [ GLSA 200703-14 ] Asterisk: SIP Denial of Service (Raphael Marichez <falco@...too.org>)
• Re: tinyurl.com - Local Clipboard (gabriel rosenkoetter <gr@...ipsed.net>)
• [ GLSA 200703-15 ] PostgreSQL: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200703-16 ] Apache JK Tomcat Connector: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
• rPSA-2007-0056-1 gnupg (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0057-1 libwpd (rPath Update Announcements <announce-noreply@...th.com>)
• ANNOUNCE: Apache-SSL release, version 1.3.37+ssl_1.57 (Adam Laurie <adam.laurie@...bunker.net>)
• Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability (starcadi <starcadi@...il.com>)
• [SECURITY] [DSA 1268-1] New libwpd packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• Xbox live accounts are being stolen ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)

• Re: Xbox live accounts are being stolen ("Jason Miller" <jammer128@...il.com>)
• fabios ultra vulnerability extravaganza (<fabiodancedjsupreme@...hmail.com>)
• Re: Xbox live accounts are being stolen ("Peter Dawson" <slash.pd@...il.com>)
• Re: Xbox live accounts are being stolen (Andrew Redman <aredman@...cation.ucsb.edu>)
• Re: Xbox live accounts are being stolen ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
• Re: Xbox live accounts are being stolen ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
• Re: Xbox live accounts are being stolen ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
• Re: Xbox live accounts are being stolen ("php0t" <php0t@...ro.hu>)
• Web Security and Bookmarklet Exploits ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• [SECURITY] [DSA 1269-1] New lookup-el packages fix insecure temporary file (joey@...odrom.org (Martin Schulze))
• nac-gaf spam attacks ("Steve Cooperman" <worried@...il.com>)
• [ GLSA 200703-17 ] ulogd: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
• [ GLSA 200703-18 ] Mozilla Thunderbird: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200703-19 ] LTSP: Authentication bypass in included LibVNCServer code (Raphael Marichez <falco@...too.org>)
• [ GLSA 200703-20 ] LSAT: Insecure temporary file creation (Raphael Marichez <falco@...too.org>)

• Re: [WEB SECURITY] GMail Contact Information Disclosure PoC (<chris@...tsrightrecords.com>)
• Layered Defense Research Advisory: F-Secure Anti-Virus Client Security 6.02 Format String Vulnerability (Deral Heiland <dh@...ereddefense.com>)
• unsubscribe ("Tucker Jeff" <Jeff.Tucker@...Healthcare.com>)
• Re: [WEB SECURITY] GMail Contact Information Disclosure PoC ("Dror Shalev" <drors@...ckpoint.com>)
• Asterisk SDP DOS vulnerability ("Radu State" <state@...ia.fr>)
• w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities ("Jesper Jurcenoks" <jesper.jurcenoks@...vigilance.com>)
• w-agora version 4.2.1 Information Disclosure Vulnerability ("Jesper Jurcenoks" <jesper.jurcenoks@...vigilance.com>)
• A new apache 1.x 0day (x666@...e-mail.net)
• dkftpbench 0.45 (Platoon:init) Local buffer overflow vulnerability (starcadi <starcadi@...il.com>)
• Re: A new apache 1.x 0day (Thierry Zoller <Thierry@...ler.lu>)
• Re: A new apache 1.x 0day (don bailey <don.bailey@...il.com>)
• cftp 0.12 (readrc) Local buffer overflow vulnerability (starcadi <starcadi@...il.com>)
• Re: A new apache 1.x 0day ("Knud Erik Højgaard" <kokanin@...il.com>)
• [USN-437-1] libwpd vulnerability (Kees Cook <kees@...ntu.com>)
• ZynOS v3.40 One packet killer (Joxean Koret <joxeankoret@...oo.es>)

• Re: Xbox live accounts are being stolen (update) ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
• heeee he ("heeeee he" <heeeee.he@...il.com>)
• Microsoft coverup ? Stolen Xbox live accounts list of known victims - Please Help ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
• Sexy, spankable 22 year old girl looking for a wild time (Miss Aveline <niceandkinky84@...oo.com>)
• Re: Sexy, spankable 22 year old girl looking for a wild time (rgolodner@...ratection.com)
• Re: Sexy, spankable 22 year old girl looking for a wild time (Ken Swain <ken@...swain.com>)
• Re: Sexy, spankable 22 year old girl looking for a wild time ("cocoruder ." <frankruder@...mail.com>)
• CISCO Phone 7940 DOS vulnerability (Radu State <state@...ia.fr>)
• Phishing site (fabio <ctrlaltca@...ero.it>)
• Re: Sexy, spankable 22 year old girl looking for a wild time ("C. Hamby" <fixer@....net>)
• Re: cftp 0.12 (readrc) Local buffer overflow vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: dkftpbench 0.45 (Platoon:init) Local buffer overflow vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Sexy, spankable 22 year old girl looking for a wild time (Raj Mathur <raju@...ux-delhi.org>)
• Re: CISCO Phone 7940 DOS vulnerability (Matthew Cerha <mcerha@...co.com>)
• Advisory - Redirection Vulnerability in wp-login.php. (Metaeye SG <contact@...aeye.org>)
• Re: dkftpbench 0.45 (Platoon:init) Local buffer overflow vulnerability (starcadi <starcadi@...il.com>)
• Mercur SP4 IMAPD (mu-b <mu-b@...it-labs.org>)
• Re: Sexy, spankable 22 year old girl looking for a wild time ("Stack Smasher" <stacksmasher@...il.com>)
• Microsoft Internet Explorer Multiple Vulnerabilities(mshtml.dll) (saied hackeriran <saiedhackeriran@...oo.com>)
• Re: Sexy, spankable 22 year old girl looking for a wild time (Troy Cregger <tcregger@...nedyinfo.com>)
• [SECURITY] [DSA 1270-1] New OpenOffice.org packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Re: [SECURITY] [DSA 1270-1] New OpenOffice.org packages fix several vulnerabilities (Peter Besenbruch <prb@...a.net>)
• [ GLSA 200703-21 ] PHP: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• Re: CISCO Phone 7940 DOS vulnerability ("Shawn Merdinger" <shawnmer@...il.com>)
• [ GLSA 200703-22 ] Mozilla Network Security Service: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
• [ GLSA 200703-23 ] WordPress: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)

• [ MDKSA-2007:065 ] - Updated nas packages address multiple vulnerabilities (security@...driva.com)
• [ MDKSA-2007:066 ] - Updated OpenAFS packages address vulnerability (security@...driva.com)
• Helix Server heap overflow (research@...g.net)
• kill -9 coz it's my time to shine (Gadi Evron <ge@...uxbox.org>)
• [USN-438-1] Inkscape vulnerability (Kees Cook <kees@...ntu.com>)
• Newest hacks (wangkaig@...ovo.com)
• Re: Newest hacks (Jim Popovitch <jimpop@...oo.com>)
• Re: Newest hacks (Saeed Abu Nimeh <drellman@...mail.com>)
• Re: Newest hacks (Sebastian Krahmer <krahmer@...e.de>)
• Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) ("Michael Silk" <michaelslists@...il.com>)
• Grandstream Budge Tone-200 denial of service vulnerability ("Radu State" <state@...ia.fr>)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Sexy, spankable 22 year old girl looking for a wild time ("Michael Silk" <michaelslists@...il.com>)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (Tim <tim-security@...tinelchicken.org>)
• Re: Newest hacks ("Nick Eoannidis" <nikon@...lioncomputers.com>)
• Re: kill -9 coz it's my time to shine (Tremaine Lea <tremaine@...il.com>)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (Blue Boar <BlueBoar@...evco.com>)
• Re: Sexy, spankable 22 year old girl looking for a wild time ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: Sexy, spankable 22 year old girl looking for a wild time (Valdis.Kletnieks@...edu)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (Blue Boar <BlueBoar@...evco.com>)
• Re: Newest hacks ("Jason Miller" <jammer128@...il.com>)
• Re: Sexy, spankable 22 year old girl looking for a wild time (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Newest hacks ("Jason Miller" <jammer128@...il.com>)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (Blue Boar <BlueBoar@...evco.com>)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (3APA3A <3APA3A@...URITY.NNOV.RU>)

• I did not have sexual relations with that woman (xbox live pretexting) ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
• [USN-440-1] MySQL vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-439-1] file vulnerability (Kees Cook <kees@...ntu.com>)
• [SECURITY] [DSA 1271-1] New openafs packages fix remote privilege escalation bug (Noah Meyerhans <noahm@...ian.org>)
• Secunia Research: InterActual Player / CinePlayer IASystemInfo.dll ActiveX Control Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: Evolution Shared Memo Categories Format String Vulnerability (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: XMMS Integer Overflow and Underflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (Valdis.Kletnieks@...edu)
• Re: Newest hacks (scott <redhowlingwolves@...lsouth.net>)
• Re: Sexy, spankable 22 year old girl looking for a wild time (evilrabbi <evilrabbi@...il.com>)
• Re: Sexy, spankable 22 year old girl looking for a wild time (scott <redhowlingwolves@...lsouth.net>)
• Re: kill -9 coz it's my time to shine (scott <redhowlingwolves@...lsouth.net>)
• FLEA-2007-0001-1: firefox (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: Sexy, spankable 22 year old girl looking for a wild time ("Michael Silk" <michaelslists@...il.com>)
• Re: kill -9 coz it's my time to shine (scott <redhowlingwolves@...lsouth.net>)
• ZombieMap - GEO Zombie Mapper ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• rPSA-2007-0059-1 file (rPath Update Announcements <announce-noreply@...th.com>)
• Exploiting Microsoft dynamic Dns updates ("Andres Tarasco" <atarasco@...il.com>)
• IntraProgrammed Search Engines Are XSS Driven (Aditya K Sood <zeroknock@...aeye.org>)
• Re: Sexy, spankable 22 year old girl looking for a wild time (str0ke <str0ke@...w0rm.com>)
• Re: Chinese Professor Cracks Fifth Data SecurityAlgorithm (SHA-1) ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
• [ MDKSA-2007:067 ] - Updated file packages fix heap-based buffer overflow vulnerability (security@...driva.com)
• [ MDKSA-2007:068 ] - Updated squid packages fix DoS vulnerability (security@...driva.com)
• [SECURITY] [DSA 1272-1] New tcpdump packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)

• [ MDKSA-2007:069 ] - Updated inkscape packages to format string vulnerability (security@...driva.com)
• Re: Sexy, spankable 22 year old girl looking for a wild time (evilrabbi <evilrabbi@...il.com>)
• Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability ("Kingcope" <kingcope@....net>)
• Re: Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability (Joxean Koret <joxeankoret@...oo.es>)
• Re: Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability ("Kingcope" <kingcope@....net>)
• dproxy - arbitrary code execution through stack buffer overflow vulnerability (Alexander Klink <a.klink@...ops.de>)
• XBOX ID's being Jacked (richfa1@....com)
• Re: XBOX ID's being Jacked ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
• Re: Sexy, spankable 22 year old girl looking for a wild time ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: dproxy - arbitrary code execution through stack buffer overflow vulnerability (mu-b <mu-b@...it-labs.org>)
• Re: dproxy - arbitrary code execution through stack buffer overflow vulnerability (Alexander Klink <a.klink@...ops.de>)
• Fuzzled - Perl fuzzing framework (Tim Brown <tmb@...35.com>)
• iDefense Security Advisory 03.23.07: DataRescue IDA Pro Remote Debugger Server Authentication Bypass Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 03.23.07: Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error V… (iDefense Labs <labs-no-reply@...fense.c…)
• Fix Update: Disable Google Desktop Link Integration with IE & FireFox ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)

• Re: Chinese Professor Cracks Fifth Data SecurityAlgorithm (SHA-1) ("Michael Silk" <michaelslists@...il.com>)
• POC: for Asterisk SIP INVITE remote DOS ("Radu State" <state@...ia.fr>)
• Re: Sexy, spankable 22 year old girl looking for a wild time ("rob musial" <sqrroot@...il.com>)
• Re: Chinese Professor Cracks Fifth Data SecurityAlgorithm (SHA-1) ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• FLEA-2007-0002-1: inkscape (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: [fuzzing] Fuzzled - Perl fuzzing framework (Jared DeMott <demottja@....edu>)
• Re: Sexy, spankable 22 year old girl looking for a wild time ("Knud Erik Højgaard" <kokanin@...il.com>)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (wac <waldoalvarez00@...il.com>)
• Fizzle : Firefox Extension Vulnerability ("CrYpTiC MauleR" <crypticmauler@...uxmail.org>)
• Fizzle : Firefox Extension Vulnerability ("CrYpTiC MauleR" <crypticmauler@...uxmail.org>)
• hi5 Antiphishing Departement (beNi <backebackekuchen@...il.com>)
• Re: XBOX ID's being Jacked ("Jason Miller" <jammer128@...il.com>)

• Fizzle : Firefox Extension Vulnerability (CrYpTiC MauleR <crypticmauler@...oo.com>)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (Valdis.Kletnieks@...edu)
• Re: XSS at Aon.at, Austrian ISP ("Nikolay Kichukov" <hijacker@...um.net>)
• Re: Local user to root escalation in apache 1.3.34 (Debian only) ("Nikolay Kichukov" <hijacker@...um.net>)
• Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) (wac <waldoalvarez00@...il.com>)
• Redirection vulnerability in oracle entreprise manager ("handrix cobra" <handrix@...il.com>)
• Phishing vulnerability in oracle entreprise manager ("handrix cobra" <handrix@...il.com>)
• Re: hi5 Antiphishing Departement (wac <waldoalvarez00@...il.com>)
• Phishtank.com Gone? (Michael Ward <mike-ward@....edu>)
• I'm not the only one who can't resolve phishtank.com, but some can.. (Michael Ward <mike-ward@....edu>)
• Re: Phishtank.com Gone? ("adam lamarre" <mistermicro@...il.com>)
• Re: I'm not the only one who can't resolve phishtank.com, but some can.. (Tremaine Lea <tremaine@...il.com>)
• Re: Phishtank.com Gone? ("Larry Seltzer" <Larry@...ryseltzer.com>)
• FLEA-2007-0003-1: cups (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: Phishtank.com Gone? (Tremaine Lea <tremaine@...il.com>)
• Re: Phishtank.com Gone? ("Anshuman G" <anshu.pg@...il.com>)
• Re: I'm not the only one who can't resolve phishtank.com, but some can.. (Tim <tim-security@...tinelchicken.org>)
• I'm not the only one who can't resolve phishtank.com, but some can.. (Michael Ward <mike-ward@....edu>)
• Re: I'm not the only one who can't resolve phishtank.com, but some can.. (Kradorex Xeron <kxeron@...il.com>)
• Re: I'm not the only one who can't resolve phishtank.com, but some can.. (Michael Ward <mike-ward@....edu>)
• Re: I'm not the only one who can't resolve phishtank.com, but some can.. (Tim <tim-security@...tinelchicken.org>)
• Re: Phishtank.com Gone? (Kradorex Xeron <admin@...ibase.ca>)
• Re: Phishtank.com Gone? ("Mike N" <niceman@....net>)
• Re: Phishtank.com Gone? (Kradorex Xeron <admin@...ibase.ca>)

• Re: Local user to root escalation in apache 1.3.34 (Debian only) ("James Matthews" <nytrokiss@...il.com>)
• Re: I'm not the only one who can't resolve phishtank.com, but some can.. (Florian Weimer <fw@...eb.enyo.de>)
• Libero.it (italian ISP) XSS vulnerability ("Rosario Valotta" <rosario.valotta@...il.com>)
• Re: Libero.it (italian ISP) XSS vulnerability (Florian Stinglmayr <fstinglmayr@...il.com>)
• Xbox live account stolen. ("David Vernaci" <wellcraft55@...mail.com>)
• Re: Phishtank.com Gone? (Pieter de Boer <pieter@...darkside.nl>)
• Re: Xbox live account stolen. ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
• RainbowCrack-Online ("T Biehn" <tbiehn@...il.com>)
• Rootkit.com : Prone To Redirection and Looping Attacks (Aditya K Sood <zeroknock@...aeye.org>)
• Re: RainbowCrack-Online ("T Biehn" <tbiehn@...il.com>)
• Re: Xbox live account stolen. ("Morning Wood" <se_cur_ity@...mail.com>)
• [USN-441-1] Squid vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-442-1] Evolution vulnerability (Kees Cook <kees@...ntu.com>)
• [ GLSA 200703-24 ] mgv: Stack overflow in included gv code (Raphael Marichez <falco@...too.org>)

• Re: RainbowCrack-Online (Tõnu Samuel <tonu@....ee>)
• Re: RainbowCrack-Online ("James Matthews" <nytrokiss@...il.com>)
• SignKorea's ActiveX Buffer Overflow Vulnerability ("Alex Park" <saintlinu@...il.com>)
• Metasploit Framework 3.0 RELEASED! (H D Moore <fdlist@...italoffense.net>)
• Linux Kernel DCCP Memory Disclosure Vulnerability (Robert Święcki <jagger@...ecki.net>)
• [ MDKSA-2007:070 ] - Updated evolution packages to address vulnerability (security@...driva.com)
• Re: RainbowCrack-Online (poo <skodliv@...il.com>)
• RainbowCrack-Online Drama ("T Biehn" <tbiehn@...il.com>)
• Buffer Overflow in InterVetions' NaviCopa HTTP server 2.01 ("skillTube.com" <lists73@...lltube.com>)
• Remote DOS HP JetDirect Print Servers ("handrix cobra" <handrix@...il.com>)
• Rootkit.com Redirection Looping Attack Analysis (Aditya K Sood <zeroknock@...aeye.org>)
• [USN-443-1] Firefox vulnerability (Kees Cook <kees@...ntu.com>)
• Re: Linux Kernel DCCP Memory Disclosure Vulnerability (Robert Święcki <jagger@...ecki.net>)
• [USN-444-1] OpenOffice.org vulnerabilities (Kees Cook <kees@...ntu.com>)
• [USN-445-1] XMMS vulnerabilities (Kees Cook <kees@...ntu.com>)

• [SECURITY] [DSA 1273-1] New nas packages fix multiple remote vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
• [USN-446-1] NAS vulnerabilities (Kees Cook <kees@...ntu.com>)
• Corel Wordperfect X3 Stack Overflow (jonnyboi <jonnyboi@...il.com>)
• iDefense Security Advisory 03.28.07: IBM Lotus Domino Web Access Cross Site Scripting Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 03.28.07: IBM Lotus Domino Server LDAP Request Invalid DN Message Heap Overflow Vulnerabilit… (iDefense Labs <labs-no-reply@...fense.c…)
• Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Resp…)
• Another XSS vulnerability in Italian provider Libero.it (LK <mf@...teoflora.com>)
• Re: SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000). ("William A. Rowe, Jr." <wrowe@...e-clan.…)
• Another XSS vulnerability in Italian provider Libero.it ("Matteo G.P. Flora" <mf@...teoflora.com>)
• ZDI-07-011: IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• Update: ViewCVS and ViewVC 'checkout view' content type fixation issue (Moritz Naumann <security@...itz-naumann.com>)
• Another XSS vulnerability in italian Libero.it ("Matteo G.P. Flora" <mf@...teoflora.com>)
• NewOrder.box.sk Inherits Severe Redirection Vulnerability (Aditya K Sood <zeroknock@...aeye.org>)
• [SECURITY] [DSA 1270-2] New OpenOffice.org packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
• Another XSS vulnerability in Italian provider Libero.it ("Matteo G.P. Flora" <mf@...teoflora.com>)
• Re: [viewvc-users] Update: ViewCVS and ViewVC 'checkout view' content type fixation issue ("C. Michael Pilato" <cmpilato@...lab.net>)
• Re: RainbowCrack-Online Drama (Asaf Rafaely <a.rafaely@...il.com>)
• Re: RainbowCrack-Online Drama (Kradorex Xeron <admin@...ibase.ca>)
• Re: RainbowCrack-Online Drama ("James Matthews" <nytrokiss@...il.com>)

• Kathy Sierra (djbb <djfooroach@...elinuxemail.com>)
• Re: unsure, Kathy Sierra ("ad@...poverflow.com" <ad@...poverflow.com>)
• Re: Kathy Sierra ("Patrick Nolan" <p.nolan@...cast.net>)
• [USN-447-1] KDE library vulnerabilities (Kees Cook <kees@...ntu.com>)
• Re: Kathy Sierra (scott <redhowlingwolves@...lsouth.net>)
• Re: Kathy Sierra ("Mary Landesman" <mlande@...lsouth.net>)
• rPSA-2007-0061-1 inkscape (rPath Update Announcements <announce-noreply@...th.com>)
• Widespread vulnerabilities in Libero.it/Infostrada.it web portals ("Rosario Valotta" <rosario.valotta@...il.com>)
• Re: Another XSS vulnerability in Italian provider Libero.it (Kradorex Xeron <admin@...ibase.ca>)
• Re: Another XSS vulnerability in Italian providerLibero.it (paura@...istici.org)
• Re: Another XSS vulnerability in Italian providerLibero.it (Edmond Dantes <jk3380@...da.org>)
• Re: NewOrder.box.sk Inherits Severe RedirectionVulnerability ("Nikolay Kichukov" <hijacker@...um.net>)
• Re: NewOrder.box.sk Inherits Severe RedirectionVulnerability (Aditya K Sood <zeroknock@...aeye.org>)
• [ MDKSA-2007:071 ] - Updated xmms packages to address integer vulnerabilities (security@...driva.com)
• Re: NewOrder.box.sk Inherits Severe RedirectionVulnerability ("Nikolay Kichukov" <hijacker@...um.net>)
• Re: NewOrder.box.sk Inherits Severe (Aditya K Sood <zeroknock@...aeye.org>)
• iDefense Security Advisory 03.29.07: IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Buy 0day vulnerability (opportunity2007@...e-mail.net)
• Re: Buy 0day vulnerability (Michael Bann <mbann@...s.umn.edu>)
• Re: Buy 0day vulnerability (don bailey <don.bailey@...il.com>)
• FLEA-2007-0004-1: openoffice.org (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• [ MDKSA-2007:072 ] - Updated kdelibs packages to address FTP PASV issue in konqueror (security@...driva.com)
• [ GLSA 200703-25 ] Ekiga: Format string vulnerability (Raphael Marichez <falco@...too.org>)
• [ MDKSA-2007:073 ] - Updated openoffice.org packages to address vulnerabilities (security@...driva.com)
• FLEA-2007-0005-1: slocate (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: Buy 0day vulnerability ("James Matthews" <nytrokiss@...il.com>)

• CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability ("M. Shirk" <shirkdog_list@...mail.com>)
• Re: Another XSS vulnerability in Italian providerLibero.it ("MailLists Listas" <seclistas@...il.com>)
• VMSA-2007-0002 VMware ESX security updates (VMware Security team <security@...are.com>)
• 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) (Alexander Sotirov <asotirov@...ermina.com>)
• Re: NewOrder.box.sk Inherits Severe (bugtraq@...security.net)
• ANI Zeroday, Third Party Patch ("Marc Maiffret" <mmaiffret@...e.com>)
• Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) ("James Rankin" <kz20fl@...glemail.com>)
• secure listserv config (imipak <imipak@...il.com>)
• Preventing Cross-site Request Forgeries ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: Buy 0day vulnerability ("Guasconi Vincent" <tyoptyop@...il.com>)
• Re: Buy 0day vulnerability ("Peter Dawson" <slash.pd@...il.com>)
• Re: Buy 0day vulnerability ("Guasconi Vincent" <tyoptyop@...il.com>)
• Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
• MADYNES voip fuzzer (Juan Perez <jperez12@...oo.com>)
• Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
• A lot of XSS ("Hanno Böck" <mail@...eck.de>)
• Re: Buy 0day vulnerability ("Maxime Ducharme" <mducharme@...ergeneration.com>)
• Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) ("James Matthews" <nytrokiss@...il.com>)
• Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability ("James Matthews" <nytrokiss@...il.com>)
• [ GLSA 200703-26 ] file: Integer underflow (Raphael Marichez <falco@...too.org>)
• Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability (Jim Popovitch <jimpop@...oo.com>)
• TSRT-07-03: America Online SuperBuddy ActiveX Control Code Execution Vulnerability (TSRT@...m.com)
• Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability ("Guasconi Vincent" <tyoptyop@...il.com>)

• dproxy-nexgen remote (mu-b <mu-b@...it-labs.org>)
• Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) (Alexander Sotirov <asotirov@...ermina.com>)
• CA BrightStor ARCserve Backup Mediasvr.exe vulnerability ("Williams, James K" <James.Williams@...com>)
• Re: 0-day ANI vulnerability in Microsoft Windows(CVE-2007-0038) ("Eric Sites" <erics@...belt-software.com>)
• Re: CA BrightStor ARCserve Backup Mediasvr.exevulnerability ("Morning Wood" <se_cur_ity@...mail.com>)
• Re: [WEB SECURITY] Preventing Cross-site Request Forgeries [ASP.NET crowd] ("Chris Weber" <chris@...kout.net>)
• Re: [WEB SECURITY] Preventing Cross-site Request Forgeries [ASP.NET crowd] ("Michael Sutton" <msutton@...dynamics.com>)
• On-going Internet Emergency and Domain Names (Gadi Evron <ge@...uxbox.org>)
• Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) (Jan Wrobel <wrobel@...es.ath.cx>)
• n3td3v calls for immediate halt to the month of Myspace bugs (n3td3v <crewxsecurity@...glemail.com>)
• Re: [WEB SECURITY] Preventing Cross-site Request Forgeries [ASP.NET crowd] ("Chris Weber" <chris@...kout.net>)
• Windows .ANI LoadAniIcon Stack Overflow ("dev code" <devcode29@...mail.com>)
• Re: A lot of XSS ("Nikolay Kichukov" <hijacker@...um.net>)
• Re: dproxy-nexgen remote (Alexander Klink <a.klink@...ops.de>)
• Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) (Alexander Sotirov <asotirov@...ermina.com>)
• Re: Windows .ANI LoadAniIcon Stack Overflow (wac <waldoalvarez00@...il.com>)
• Global Space Exploitation In PHP Based Web Applications (Aditya K Sood <zeroknock@...aeye.org>)
• Re: Windows .ANI LoadAniIcon Stack Overflow ("dev code" <devcode29@...mail.com>)
• [ GLSA 200703-27 ] Squid: Denial of Service (Raphael Marichez <falco@...too.org>)
• [ GLSA 200703-28 ] CUPS: Denial of Service (Raphael Marichez <falco@...too.org>)
• Re: [WEB SECURITY] Re: Global Space Exploitation In PHP Based Web Applications (Aditya K Sood <zeroknock@...aeye.org>)

577 messages

Powered by blists - more mailing lists