full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2007/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 35
² 46	³ 44	⁴ 67	⁵ 65	⁶ 40	⁷ 13	⁸ 19
⁹ 12	¹⁰ 40	¹¹ 20	¹² 19	¹³ 22	¹⁴ 2	¹⁵ 19
¹⁶ 18	¹⁷ 34	¹⁸ 45	¹⁹ 13	²⁰ 22	²¹ 10	²² 12
²³ 17	²⁴ 23	²⁵ 24	²⁶ 31	²⁷ 18	²⁸ 3	²⁹ 3
³⁰ 16

Messages by day:

April 1 (35 messages)

Digg Delicious Technorati & Netscape XSS (worm?) (mybeni websecurity <mybeni@...eni.rootzilla.de>)
Cisco IP Phone vulnerability ("J. Oquendo" <sil@...iltrated.net>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("James Matthews" <nytrokiss@...il.com>)
Re: Cisco IP Phone vulnerability ("alessandro salvatori" <sandr8@...il.com>)
ISP in the UK Terminates Account after Full Disclosure (Aviram Jenik <aviram@...ondsecurity.com>)
CAU-2007-0001: Window Transparency Information Disclosure ("I)ruid" <druid@...ghq.org>)
April 1 joke (V Comics <vcomics@...oo.ca>)
Maria Sharapova is a Cisco Certified Specialist ("Valery Marchuk" <tecklord@...ocom.cv.ua>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Norton Multiple insufficient argument validation of hooked SSDT function Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)
Kcpentrix 2.0 is Out !! (Fred <fred.frazao@...dericofrazao.com>)
Re: Busting The Bluetooth Myth ("Giorgio Fedon" <giorgio.fedon@...il.com>)
Re: Busting The Bluetooth Myth (jf <jf@...glingpointers.net>)
Re: Busting The Bluetooth Myth ("Giorgio Fedon" <giorgio.fedon@...il.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("dev code" <devcode29@...mail.com>)
Re: April 1 joke ("Jason Miller" <jammer128@...il.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow (wac <waldoalvarez00@...il.com>)
Re: Busting The Bluetooth Myth ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Chris Lyon" <cslyon@...il.com>)
Re: Busting The Bluetooth Myth ("Ed Carp" <edcarp@...il.com>)
Re: Busting The Bluetooth Myth ("Giorgio Fedon" <giorgio.fedon@...il.com>)
Re: Busting The Bluetooth Myth (Thierry Zoller <Thierry@...ler.lu>)
Re: Busting The Bluetooth Myth (Anders B Jansson <hdw@...listi.se>)
Re: Busting The Bluetooth Myth (Anders B Jansson <hdw@...listi.se>)
Re: Busting The Bluetooth Myth ("Giorgio Fedon" <giorgio.fedon@...il.com>)
Re: April 1 joke ("James Matthews" <nytrokiss@...il.com>)
Re: Busting The Bluetooth Myth ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Goodfellas Research Security Team - Callax" <callax@...dfellas.shellcode.com.ar>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: April 1 joke ("Matti Ranta" <mdranta@...il.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("dev code" <devcode29@...mail.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("ad@...poverflow.com" <ad@...poverflow.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("ad@...poverflow.com" <ad@...poverflow.com>)

April 2 (46 messages)

Severe CSRF vulnerabilities allow mail/msg spoofing in Libero.it portal ("Rosario Valotta" <rosario.valotta@...il.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("George Ou" <george_ou@...architect.net>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("James Matthews" <nytrokiss@...il.com>)
Re: April 1 joke ("Dude VanWinkle" <dudevanwinkle@...il.com>)
MS Patch Coming Tuesday ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: [funsec] MS Patch Coming Tuesday (Blue Boar <BlueBoar@...evco.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow -> Its ok, its in IE Protected Mode (Haroon Meer <haroon@...sepost.com>)
Metasploit vs ANI (H D Moore <fdlist@...italoffense.net>)
Re: Metasploit vs ANI ("George Ou" <george_ou@...architect.net>)
Re: Windows .ANI LoadAniIcon Stack Overflow (Alexander Sotirov <asotirov@...ermina.com>)
0day Oracle 10g exploit - dbms_aq.enqueue - become DBA ("Andrea \"bunker\" Purificato" <bunker@...twebnet.it>)
Re: Windows .ANI LoadAniIcon Stack Overflow (Thierry Zoller <Thierry@...ler.lu>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Jason Areff" <hailtheczar@...il.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Jason Areff" <hailtheczar@...il.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow (Thierry Zoller <Thierry@...ler.lu>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow (Thierry Zoller <Thierry@...ler.lu>)
Re: Windows .ANI LoadAniIcon Stack Overflow (Thierry Zoller <Thierry@...ler.lu>)
Re: Cisco IP Phone vulnerability ("Shawn Merdinger" <shawnmer@...il.com>)
iDefense Security Advisory 03.31.07: Multiple Vendor ImageMagick DCM and XWD Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow (Dave Aitel <dave@...unityinc.com>)
More information on ZERT patch for ANI 0day (Gadi Evron <ge@...uxbox.org>)
MS announces out-of-band patch for ANI 0day (Gadi Evron <ge@...uxbox.org>)
Re: [WEB SECURITY] Preventing Cross-site Request Forgeries (Stephen de Vries <stephen@...steddelight.org>)
[SECURITY] [DSA 1274-1] New file packages fix arbitrary code execution (Noah Meyerhans <noahm@...ian.org>)
SecTor Call for Papers & Registration now open ("Gord Taylor" <taylorgo@...il.com>)
Re: More information on ZERT patch for ANI 0day ("James (njan) Eaton-Lee" <james.mailing@...il.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Michele Cicciotti" <mc@...msa.net>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Morning Wood" <se_cur_ity@...mail.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("George Ou" <george_ou@...architect.net>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("George Ou" <george_ou@...architect.net>)
Death by Cockatoo (<neal.krawetz@....hush.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Kristian Hermansen" <kristian.hermansen@...il.com>)
Re: 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA (Andrea Purificato - bunker <bunker@...twebnet.it>)
iDefense Security Advisory 04.02.07: Hewlett-Packard Mercury Quality Center ActiveX Control ProgColor Buffer Overflow … (iDefense Labs <labs-no-reply@...fense.c…)
Re: More information on ZERT patch for ANI 0day ("James (njan) Eaton-Lee" <james.mailing@...il.com>)
Re: More information on ZERT patch for ANI 0day ("James (njan) Eaton-Lee" <james.mailing@...il.com>)
Re: More information on ZERT patch for ANI 0day ("James (njan) Eaton-Lee" <james.mailing@...il.com>)
Re: More information on ZERT patch for ANI 0day (wac <waldoalvarez00@...il.com>)
[ GLSA 200704-01 ] Asterisk: Two SIP Denial of Service vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
iDefense Security Advisory 03.31.07: IBM Tivoli Provisioning Manager for OS Deployment Multiple Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
More information on ZERT patch for ANI 0day ("Randall M" <randallm@...mail.com>)
Why Microsoft should make windows open source ("James Matthews" <nytrokiss@...il.com>)

April 3 (44 messages)

Re: Windows .ANI LoadAniIcon Stack Overflow (KJKHyperion <hackbunny@...tpj.org>)
Re: Windows .ANI LoadAniIcon Stack Overflow (Alexander Sotirov <asotirov@...ermina.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("George Ou" <george_ou@...architect.net>)
Re: Windows .ANI LoadAniIcon Stack Overflow (Alexander Sotirov <asotirov@...ermina.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("George Ou" <george_ou@...architect.net>)
Re: More information on ZERT patch for ANI 0day (Gadi Evron <ge@...uxbox.org>)
Re: 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA (Gadi Evron <ge@...uxbox.org>)
Re: More information on ZERT patch for ANI 0day (Gadi Evron <ge@...uxbox.org>)
Re: More information on ZERT patch for ANI 0day (Gadi Evron <ge@...uxbox.org>)
Re: More information on ZERT patch for ANI 0day (Gadi Evron <ge@...uxbox.org>)
[SECURITY] [DSA 1275-1] New zope2.7 packages fix cross-site scripting flaw (Noah Meyerhans <noahm@...ian.org>)
[CFP] VNSECON 07 - Call for Papers / HCMC - August 03-04, 2007 (rd <rd@...ecurity.net>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow (Alexander Sotirov <asotirov@...ermina.com>)
HP Mercury Quality Center Any SQL execution ("Isma Khan" <ismakhan100@...il.com>)
Vulnerable Vectors in PHP Based Redirection Pages[redirect.php4/redirect.php5] (Aditya K Sood <zeroknock@...aeye.org>)
Re: [RECTIFY] Oracle 10g exploit - dbms_aq.enqueue - become DBA ("Andrea \"bunker\" Purificato" <bunker@...twebnet.it>)
Re: Vulnerable Vectors in PHP Based Redirection Pages[redirect.php4/redirect.php5] (Aditya K Sood <zeroknock@...aeye.org>)
Re: Exploiting Microsoft dynamic Dns updates (Denis Jedig <dj@...eticon.de>)
another .ani 0-day bug third party patcher more usefull this time, version 0.2 (wac <waldoalvarez00@...il.com>)
Re: Exploiting Microsoft dynamic Dns updates ("Andres Tarasco" <atarasco@...il.com>)
Re: More information on ZERT patch for ANI 0day (Stefan Kelm <stefan.kelm@...orvo.de>)
Re: More information on ZERT patch for ANI 0day ("Matthew Murphy" <mattmurphy@...rr.com>)
iDefense Security Advisory 04.03.07: Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
FLEA-2007-0006-1: ImageMagick (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
FLEA-2007-0006-2: ImageMagick (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Re: More information on ZERT patch for ANI 0day ("Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@...bell.net>)
Re: More information on ZERT patch for ANI 0day (<neal.krawetz@....hush.com>)
iDefense Security Advisory 04.03.07: Multiple Vendor Kerberos kadmind Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
FLEA-2007-0007-1: nas (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
ZDI-07-012: Yahoo! Messenger AudioConf ActiveX Control Buffer Overflow (zdi-disclosures@...m.com)
[SECURITY] [DSA 1276-1] New krb5 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[ GLSA 200704-02 ] MIT Kerberos 5: Arbitrary remote code execution (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("George Ou" <george_ou@...architect.net>)
[ GLSA 200704-03 ] OpenAFS: Privilege escalation (Raphael Marichez <falco@...too.org>)
[ GLSA 200704-04 ] OpenPBS: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
[ GLSA 200704-05 ] zziplib: Buffer Overflow (Raphael Marichez <falco@...too.org>)
April Chi2600 / DefCon 312 Information ("Steven McGrath" <steven.mcgrath@...geek.com>)
JIKTO Full Disclosure ("Shaded Systems" <shadesinc@...il.com>)
iDefense Security Advisory 04.03.07: Multiple Vendor X Server BDF Font Parsing Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 04.03.07: Multiple Vendor X Server fonts.dir File Parsing Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 04.03.07: Multiple Vendor X Server XC-MISC Extension Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

April 4 (67 messages)

[USN-448-1] X.org vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("ad@...poverflow.com" <ad@...poverflow.com>)
Re: More information on ZERT patch for ANI 0day ("Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@...bell.net>)
[USN-449-1] krb5 vulnerabilities (Kees Cook <kees@...ntu.com>)
[ MDKSA-2007:074 ] - Updated qt3 packages to address utf8 decoder bug (security@...driva.com)
[ MDKSA-2007:075 ] - Updated qt4 packages to address utf8 decoder bug (security@...driva.com)
[ MDKSA-2007:076 ] - Updated kdelibs packages to address UTF8 issue in KJS (security@...driva.com)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow (Alexander Sotirov <asotirov@...ermina.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow (Alexander Sotirov <asotirov@...ermina.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow (Daniel Veditz <dveditz@...zio.com>)
Windows .ANI LoadAniIcon third party patch latest version 0.3 (so people can rollback their system before applying the patches) (wac <waldoalvarez00@...il.com>)
rPSA-2007-0062-1 firefox (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0063-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0064-1 ImageMagick (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0065-1 freetype xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0066-1 kdelibs qt-x11-free (rPath Update Announcements <announce-noreply@...th.com>)
Re: More information on ZERT patch for ANI 0day ("Jason Frisvold" <xenophage0@...il.com>)
Re: More information on ZERT patch for ANI 0day ("Jason Frisvold" <xenophage0@...il.com>)
Re: JIKTO Full Disclosure (rembrandt <rembrandt@...ith.org>)
Mozilla Firefox Insecure Element Stealth Injection Vulnerability ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
Three New Papers on Oracle Forensics ("David Litchfield" <davidl@...software.com>)
CYBSEC Security Pre-Advisory: SAP RFC_SET_REG_SERVER_PROPERTY RFC Function Denial Of Service (CYBSEC Advisories <advisories@...sec.com>)
CYBSEC Security Pre-Advisory: SAP RFC_START_GUI RFC Function Buffer Overflow (CYBSEC Advisories <advisories@...sec.com>)
CYBSEC Security Pre-Advisory: SAP RFC_SET_REG_SERVER_PROPERTY RFC Function Denial Of Service (CYBSEC Advisories <advisories@...sec.com>)
CYBSEC Security Pre-Advisory: SAP RFC_START_PROGRAM RFC Function Multiple Vulnerabilities (CYBSEC Advisories <advisories@...sec.com>)
CYBSEC Pre-Advisory: SAP TRUSTED_SYSTEM_SECURITY RFC Function Information Disclosure (CYBSEC Advisories <advisories@...sec.com>)
CYBSEC Security Pre-Advisory: SAP RFC_SET_REG_SERVER_PROPERTY RFC Function Denial Of Service (CYBSEC Advisories <advisories@...sec.com>)
CYBSEC Security Pre-Advisory: SAP SYSTEM_CREATE_INSTANCE RFC Function Buffer Overflow (CYBSEC Advisories <advisories@...sec.com>)
Stereotyping DoS and Don'ts (<neal.krawetz@....hush.com>)
CYBSEC Security Pre-Advisory: SAP SYSTEM_CREATE_INSTANCE RFC Function Buffer Overflow (CYBSEC Advisories <advisories@...sec.com>)
Re: Stereotyping DoS and Don'ts (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: Stereotyping DoS and Don'ts ("J. Oquendo" <sil@...iltrated.net>)
CYBSEC Release: SAP Security - Paper & Tool release (Mariano Nuñez Di Croce <mnunez@...sec.com>)
Re: Why Microsoft should make windows open source (Troy Cregger <tcregger@...nedyinfo.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Peter Ferrie" <pferrie@...antec.com>)
Re: Mozilla Firefox Insecure Element Stealth Injection Vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Why Microsoft should make windows open source (Simon Smith <simon@...soft.com>)
Re: Why Microsoft should make windows open source ("Morning Wood" <se_cur_ity@...mail.com>)
Re: Stereotyping DoS and Don'ts (Valdis.Kletnieks@...edu)
Re: Stereotyping DoS and Don'ts ("J. Oquendo" <sil@...iltrated.net>)
Re: Why Microsoft should make windows open source (Valdis.Kletnieks@...edu)
Re: Why Microsoft should make windows open source (Troy Cregger <tcregger@...nedyinfo.com>)
Re: Why Microsoft should make windows open source (Troy Cregger <tcregger@...nedyinfo.com>)
Re: Why Microsoft should make windows open source (Valdis.Kletnieks@...edu)
Fabio has Tagged you! :) (Fabio Sarmento <fabior2@...il.com>)
VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates (VMware Security team <security@...are.com>)
The Cyber war on Iran ("United Hackers" <united_against_islam@...l.com>)
Re: The Cyber war on Iran (Andrew Redman <aredman@...cation.ucsb.edu>)
Hackers uniting against Iran? ("United Hackers" <united_against_islam@...l.com>)
Re: Hackers uniting against Iran? ("Slythers Bro" <slythers@...il.com>)
[ MDKSA-2007:077 ] - Updated krb5 packages fix vulnerabilities (security@...driva.com)
Re: The Cyber war on Iran (Shyaam <shyaam@...il.com>)
[ MDKSA-2007:078 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
rPSA-2007-0067-1 nas (rPath Update Announcements <announce-noreply@...th.com>)
[SECURITY] [DSA 1277-1] New XMMS packages fix arbitrary code execution (Noah Meyerhans <noahm@...ian.org>)
Re: Hackers uniting against Iran? (uberspritzer@....net)
Re: The Cyber war on Iran (Valdis.Kletnieks@...edu)
[ MDKSA-2007:079 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities (security@...driva.com)
[ MDKSA-2007:080 ] - Updated tightvnc packages fix integer overflow vulnerabilities (security@...driva.com)
Re: The Cyber war on Iran ("Kian Mohageri" <kian.mohageri@...il.com>)
[ MDKSA-2007:081 ] - Updated freetype2 packages fix vulnerability (security@...driva.com)
iDefense Security Advisory 04.04.07: Kaspersky AntiVirus SysInfo ActiveX Control Information Disclosure Vulnerability (iDefense Labs <labs-no-reply@...fense.co…)
iDefense Security Advisory 04.04.07: Kaspersky Internet Security Suite klif.sys Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: [WEB SECURITY] Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug (Daniel Veditz <dveditz@...zio.com>)

April 5 (65 messages)

Re: The Cyber war on Iran ("Dingo Ugly" <dingo.ugly@...il.com>)
Re: Hackers uniting against Iran? ("Fajar Edisya Putera" <fajarep@...il.com>)
iDefense Security Advisory 04.04.07: ESRI ArcSDE Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: The Cyber war on Iran (Paul Schmehl <pauls@...allas.edu>)
Re: Hackers uniting against Iran? (scott <redhowlingwolves@...lsouth.net>)
Re: Hackers uniting against Iran? (evilrabbi <evilrabbi@...il.com>)
Re: Hackers uniting against Iran? (scott <redhowlingwolves@...lsouth.net>)
Re: The Cyber war on Iran (Valdis.Kletnieks@...edu)
Re: Hackers uniting against Iran? (Paul Schmehl <pauls@...allas.edu>)
Re: Hackers uniting against Iran? (scott <redhowlingwolves@...lsouth.net>)
Re: Hackers uniting against Iran? (scott <redhowlingwolves@...lsouth.net>)
Re: Hackers uniting against Iran? (scott <redhowlingwolves@...lsouth.net>)
Re: The Cyber war on Iran (Paul Schmehl <pauls@...allas.edu>)
Re: The Cyber war on Iran ("Randal T. Rioux" <randy@...cyonlabs.com>)
Re: The Cyber war on Iran ("Nick Oliver" <nwoliver@...il.com>)
Re: Hackers uniting against Iran? (Kian Mohageri <kian.mohageri@...il.com>)
Re: The Cyber war on Iran ("George Ou" <george_ou@...architect.net>)
Re: The Cyber war on Iran (jf <jf@...glingpointers.net>)
Re: The Cyber war on Iran (scott <redhowlingwolves@...lsouth.net>)
Re: The Cyber war on Iran (Kian Mohageri <kian.mohageri@...il.com>)
Re: group hug (scott <redhowlingwolves@...lsouth.net>)
Re: The Cyber war on Iran (rgolodner@...ratection.com)
Re: well done folks (scott <redhowlingwolves@...lsouth.net>)
Re: Why Microsoft should make windows open ("Jodi Middleton" <jodi.middleton@...il.com>)
Re: Iran Cyber-War, Capitalism, etc... ("Throwaway1@...umbus.rr.com" <Throwaway1@...umbus.rr.com>)
Re: well done folks (Shyaam <shyaam@...il.com>)
Re: Why Microsoft should make windows open (Shyaam <shyaam@...il.com>)
Re: Iran Cyber-War, Capitalism, etc... (Shyaam <shyaam@...il.com>)
Re: Hackers uniting against Iran? ("Carlos Carvalho" <carloslack@...il.com>)
Re: Why Microsoft should make windows open ("Jodi Middleton" <jodi.middleton@...il.com>)
Re: Hackers uniting against Iran? (uberspritzer@....net)
Re: Hackers uniting against Iran? (Troy Cregger <tcregger@...nedyinfo.com>)
Re: Hackers uniting against Iran? ("Open Phugu" <openphugu@...il.com>)
Re: The Cyber war on Iran ("Open Phugu" <openphugu@...il.com>)
Re: Fabio has Tagged you! :) ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: The Cyber war on Iran (Timo Schoeler <timo.schoeler@...cworks.net>)
Microsoft .NET request filtering bypass vulnerability (BID 20753) (Adrian Pastor <adrian.pastor@...checkup.com>)
Re: Hackers uniting against Iran? (Paul Schmehl <pauls@...allas.edu>)
Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
AN OUNCE OF PREVENTION... (<neal.krawetz@....hush.com>)
Re: The Cyber war on Iran ("DUCK MAN!" <squee.uk@...glemail.com>)
Re: Hackers uniting against Iran? (uberspritzer@....net)
Re: The Cyber war on Iran (Justin Klein Keane <justin@...irish.net>)
Re: group hug (v3dt3n <mkmaxx@...il.com>)
Re: Hackers uniting against Iran? ("matthew wollenweber" <mwollenweber@...il.com>)
Re: The Cyber war on Iran ("Open Phugu" <openphugu@...il.com>)
Re: Hackers uniting against Iran? (Valdis.Kletnieks@...edu)
FLEA-2007-0008-1: krb5 (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
FLEA-2007-0009-1: xorg-x11 freetype (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Re: Hackers uniting against Iran? (Timo Schoeler <timo.schoeler@...ce-dsl.net>)
Re: Hackers uniting against Iran? (Timo Schoeler <timo.schoeler@...ce-dsl.net>)
Re: Hackers uniting against Iran? (Shyaam <shyaam@...il.com>)
Re: Hackers uniting against Iran? (Timo Schoeler <timo.schoeler@...ce-dsl.net>)
FLEA-2007-0010-1: evolution (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Re: Hackers uniting against Iran? (rek2 GNU/Linux LO LO LO <rek2@...aryfreedom.info>)
Re: Hackers uniting against Iran? (rek2 GNU/Linux LO LO LO <rek2@...aryfreedom.info>)
Re: Hackers uniting against Iran? (Troy Cregger <tcregger@...nedyinfo.com>)
Re: Hackers uniting against Iran? ("Peter Dawson" <slash.pd@...il.com>)
Re: Hackers uniting against Iran? (Paul Szabo <psz@...hs.usyd.edu.au>)
Re: Hackers uniting against Iran? (Martin Hudec <corwin@...ernal.net>)
Re: Hackers uniting against Iran? (Red Leg <redleg18@...il.com>)
uberspritzer's rant ("ericscher@....com" <ericscher@....com>)
Wordpress 2.1.2 xmlrpc Vulnerabilities ("Sumit Siddharth" <sumit.siddharth@...il.com>)
ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-07-014: Kaspersky Anti-Virus ActiveX Control Unsafe Method Exposure Vulnerablity (zdi-disclosures@...m.com)

April 6 (40 messages)

CAUNewswire - CAU Introduces PHREAK® Certification for telephony hackers ("I)ruid" <druid@...ghq.org>)
Question Regarding Wireless Frames ("Code Breaker" <cbreaker@...il.com>)
Re: Hackers uniting against Iran? (Timo Schoeler <timo.schoeler@...ce-dsl.net>)
Re: Hackers uniting against Iran? (Timo Schoeler <timo.schoeler@...ce-dsl.net>)
Re: Hackers uniting against Iran? (Timo Schoeler <timo.schoeler@...ce-dsl.net>)
Re: The Cyber war on Iran (V Comics <vcomics@...oo.ca>)
AOL Nullsoft Winamp S3M Module "IN_MOD.DLL" Remote Heap Memory Corruption (Piotr Bania <bania.piotr@...il.com>)
AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption (Off By Zero) (Piotr Bania <bania.piotr@...il.com>)
AOL Nullsoft Winamp IT Module "IN_MOD.DLL" Remote Heap Memory Corruption (Piotr Bania <bania.piotr@...il.com>)
Re: Hackers uniting against Iran? ("ericscher@....com" <ericscher@....com>)
Re: Hackers uniting against Iran? (Timo Schoeler <timo.schoeler@...ce-dsl.net>)
Re: Hackers uniting against Iran? ("Michele Cicciotti [Khamsa Italia Srl]" <mc@...msa.net>)
Re: Question Regarding Wireless Frames (Michael Holstein <michael.holstein@...ohio.edu>)
Re: Question Regarding Wireless Frames ("kevin horvath" <kevin.horvath@...il.com>)
Re: Hackers uniting against Iran? (Timo Schoeler <timo.schoeler@...ce-dsl.net>)
Re: Question Regarding Wireless Frames (Michael Holstein <michael.holstein@...ohio.edu>)
Re: Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug ("Thor Larholm" <larholm@...il.com>)
Re: Hackers uniting against Iran? ("James Rankin" <kz20fl@...glemail.com>)
WEEPING FOR WEP (<neal.krawetz@....hush.com>)
Re: Hackers uniting against Iran? (Timo Schoeler <timo.schoeler@...ce-dsl.net>)
Re: Hackers uniting against Iran? (jptrash@...online.net)
Re: Question Regarding Wireless Frames (AMILABS <amilabs@...online.net>)
Re: WEEPING FOR WEP (Troy Cregger <tcregger@...nedyinfo.com>)
Re: WEEPING FOR WEP (Valdis.Kletnieks@...edu)
Re: WEEPING FOR WEP (Bruce Ediger <eballen1@...st.net>)
Re: WEEPING FOR WEP (Valdis.Kletnieks@...edu)
Re: WEEPING FOR WEP (Michael Holstein <michael.holstein@...ohio.edu>)
Re: WEEPING FOR WEP (george_ou@...architect.net)
Re: WEEPING FOR WEP (Michael Holstein <michael.holstein@...ohio.edu>)
Re: WEEPING FOR WEP ("Mike Vasquez" <mike.vasquez@...il.com>)
Re: WEEPING FOR WEP ("Steven Adair" <steven@...urityzone.org>)
Re: WEEPING FOR WEP (Troy Cregger <tcregger@...nedyinfo.com>)
Re: WEEPING FOR WEP (george_ou@...architect.net)
Re: WEEPING FOR WEP ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
Re: WEEPING FOR WEP (Gary Warner <gar@...gar.com>)
Re: WEEPING FOR WEP ("James (njan) Eaton-Lee" <james.mailing@...il.com>)
Re: WEEPING FOR WEP ("Mike Vasquez" <mike.vasquez@...il.com>)
[ GLSA 200704-06 ] Evince: Stack overflow in included gv code (Raphael Marichez <falco@...too.org>)
[ GLSA 200704-07 ] libwpd: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Re: Hackers uniting against Iran? (Red Leg <redleg18@...il.com>)

April 7 (13 messages)

[SECURITY] [DSA 1278-1] New man-db packages fix arbitrary code execution (Noah Meyerhans <noahm@...ian.org>)
Re: WEEPING FOR WEP ("Robert Allinson" <allinson.robert@...il.com>)
word to buchkov (jf <jf@...ec.net>)
Re: Hackers uniting against Iran? (Paul Hem <paulhem@...lhem.com>)
Re: Hackers uniting against Iran? (Valdis.Kletnieks@...edu)
Re: Hackers uniting against Iran?, Battle of Kursk ("Security Admin (NetSec)" <secadmin@...secdesign.com>)
Re: Hackers uniting against Iran?, Battle of Kursk ("Security Admin (NetSec)" <secadmin@...secdesign.com>)
Re: Question Regarding Wireless Frames ("Code Breaker" <cbreaker@...il.com>)
Re: Hackers uniting against Iran? ("Peter Dawson" <slash.pd@...il.com>)
Re: word to buchkov (evilrabbi <evilrabbi@...il.com>)
Re: Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation (GomoR <fd@...or.org>)
Re: Hackers uniting against Iran? ("Carlos Barros" <barros001@...il.com>)
Vista Protected Processes Bypassed ("Randall M" <randallm@...mail.com>)

April 8 (19 messages)

Re: Vista Protected Processes Bypassed (scott <redhowlingwolves@...lsouth.net>)
Hackers Humiliate Security Researcher (<neal.krawetz@....hush.com>)
Security Researcher Not Particularly Humiliated (Raven Alder <raven@...eyedcrow.net>)
Re: Security Researcher Not Particularly Humiliated ("James Matthews" <nytrokiss@...il.com>)
Re: Hackers uniting against Iran? (Timo Schoeler <timo.schoeler@...cworks.net>)
Re: Hackers uniting against Iran? (Timo Schoeler <timo.schoeler@...cworks.net>)
Re: Hackers uniting against Iran? (Timo Schoeler <timo.schoeler@...cworks.net>)
Re: [funsec] Vista Protected Processes Bypassed ("C Q" <kyle.c.quest@...il.com>)
Re: Security Researcher Not Particularly Humiliated ("George Ou" <george_ou@...architect.net>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
Re: Security Researcher Not Particularly Humiliated ("James Matthews" <nytrokiss@...il.com>)
Re: [funsec] Vista Protected Processes Bypassed (Valdis.Kletnieks@...edu)
Re: Windows .ANI LoadAniIcon Stack Overflow (wac <waldoalvarez00@...il.com>)
Re: [funsec] Vista Protected Processes Bypassed (Fernando Gont <fernando.gont@...il.com>)
Re: Backdoor within popular security software. ("Anonymous User" <aserfgjgmdf@...il.com>)
Re: Security Researcher Not Particularly Humiliated (<neal.krawetz@....hush.com>)
Re: Backdoor within popular security software. ("Open Phugu" <openphugu@...il.com>)
Re: Security Researcher Not Particularly Humiliated ("George Ou" <george_ou@...architect.net>)
Re: Security Researcher Not Particularly Humiliated (<neal.krawetz@....hush.com>)

April 9 (12 messages)

Re: Security Researcher Not Particularly Humiliated ("George Ou" <george_ou@...architect.net>)
Re: [funsec] Vista Protected Processes Bypassed ("C Q" <kyle.c.quest@...il.com>)
Some 0day Pocs ("Muts" <muts@...ensive-security.com>)
Re: WEEPING FOR WEP (Troy Cregger <tcregger@...nedyinfo.com>)
DNS mining ? ("Maxim Veksler" <hq4ever@...il.com>)
Re: DNS mining ? (Valdis.Kletnieks@...edu)
Re: DNS mining ? ("Steven Adair" <steven@...urityzone.org>)
Re: DNS mining ? ("Aaron Gray" <angray@...b.net>)
Re: Security Researcher Not Particularly Humiliated ("Ham Beast" <i.am.hambeast@...il.com>)
Re: DNS mining ? (Brian Dessent <brian@...sent.net>)
iDefense Security Advisory 04.09.07: AOL AIM and ICQ File Transfer Path-Traversal Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[USN-450-1] ipsec-tools vulnerability (Kees Cook <kees@...ntu.com>)

April 10 (40 messages)

rPSA-2007-0070-1 openoffice.org (rPath Update Announcements <announce-noreply@...th.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Re: Security Researcher Not Particularly Humiliated (jf <jf@...glingpointers.net>)
Fwd: threat to corporate security (n3td3v <n3td3v@...il.com>)
DEF CON One Five CfP in effect! (The Dark Tangent <dtangent@...con.org>)
Re: Fwd: threat to corporate security ("n3td3v" <n3td3v@...h.com>)
Re: [++++SPAM++++] Fwd: threat to corporate security ("Marco Ermini" <markoer@...koer.org>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
War against Iran: Update from front lines ("Hackers United" <against_islam@...l.com>)
War against Iran: Update from front lines ("United Hackers" <united_against_islam@...l.com>)
Re: War against Iran: Update from front lines ("Slythers Bro" <slythers@...il.com>)
Re: War against Iran: Update from front lines (Paul Sebastian Ziegler <psz@...erved.de>)
Re: Why Microsoft should make windows open source (Vincent Archer <varcher@...yall.com>)
Re: War against Iran: Update from front lines ("Menzer, Mathias SZ/BHL-IN" <mathias.menzer@...aeffler.com>)
Re: War against Iran: Update from front lines (Troy Cregger <tcregger@...nedyinfo.com>)
Re: War against Iran: Update from front lines ("Open Phugu" <openphugu@...il.com>)
Re: Security Researcher Not Particularly Humiliated ("Mr Zebedee" <time4bed@...il.com>)
Re: War against Iran: Update from front lines (Timo Schoeler <timo.schoeler@...cworks.net>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Brooks, Shane" <SBrooks@...ngelake.com>)
Re: War against Iran: Update from front lines (rek2 GNU/Linux LO LO LO <rek2@...aryfreedom.info>)
DropAFew - SQL injection and authorization issues (Alexander Klink <a.klink@...ops.de>)
EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation ("eEye Advisories" <Advisories@...e.com>)
EEYE: Windows VDM Zero Page Race Condition Privilege Escalation ("eEye Advisories" <Advisories@...e.com>)
iDefense Security Advisory 04.10.07: Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ MDKSA-2007:077-1 ] - Updated krb5 packages fix vulnerabilities (security@...driva.com)
Re: AN OUNCE OF PREVENTION... (Graham Reed <greed@...ox.com>)
Re: DNS mining ? ("Maxim Veksler" <hq4ever@...il.com>)
Re: DNS mining ? ("Maxim Veksler" <hq4ever@...il.com>)
Re: DNS mining ? (Valdis.Kletnieks@...edu)
Named and the mysterious .so resolves (James Lay <jlay@...ve-tothe-box.net>)
Re: Named and the mysterious .so resolves ("Knud Erik Højgaard" <kokanin@...il.com>)
Re: Windows .ANI LoadAniIcon Stack Overflow ("Knud Erik Højgaard" <kokanin@...il.com>)
Re: Named and the mysterious .so resolves (don bailey <don.bailey@...il.com>)
[ MDKSA-2007:081-1 ] - Updated freetype2 packages fix vulnerability (security@...driva.com)
Re: Named and the mysterious .so resolves (Michal Zalewski <lcamtuf@...ne.ids.pl>)
flickR Hack (KaT <kstewartjr77@...il.com>)
[ MDKSA-2007:080-1 ] - Updated tightvnc packages fix integer overflow vulnerabilities (security@...driva.com)
flickR Hack (KaT <kstewartjr77@...il.com>)
Re: [++++SPAM++++] Fwd: threat to corporate security (n3td3v <n3td3v@...il.com>)
Re: War against Iran: Update from front lines (n3td3v <n3td3v@...il.com>)

April 11 (20 messages)

Re: flickR Hack (John Kinsella <jlk@...ashyour.com>)
Re: War against Iran: Update from front lines ("merda user" <database1257@...il.com>)
[USN-451-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
Secunia Research: Microsoft Agent URL Parsing Memory Corruption Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[ MDKSA-2007:075-1 ] - Updated qt4 packages to address utf8 decoder bug (security@...driva.com)
Re: War against Iran: Update from front lines ("Dingo Ugly" <dingo.ugly@...il.com>)
Re: [++++SPAM++++] Fwd: threat to corporate security ("Marco Ermini" <markoer@...koer.org>)
Re: [++++SPAM++++] Fwd: threat to corporate security ("Marco Ermini" <markoer@...koer.org>)
Re: [++++SPAM++++] Fwd: threat to corporate security (afed <bsdusr@...il.com>)
Re: Hackers uniting against Iran? (Lubomir Kundrak <lkundrak@...bsd.sk>)
com_zoom2 Mambo Module Remote File Include Vulnerability ("0o_zeus_o0 elitemexico.org" <zeus.olimpusklan@...il.com>)
Application Layer Anti-virus/Firewall ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Cosign SSO Authentication Bypass (Jon Oberheide <jon@...rheide.org>)
Vulnerability Purchasing Program Questions ("Steven Adair" <steven@...urityzone.org>)
Re: Vulnerability Purchasing Program Questions (Valdis.Kletnieks@...edu)
[ MDKSA-2007:079-1 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities (security@...driva.com)
[ MDKSA-2007:082 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities (security@...driva.com)
[ MDKSA-2007:083 ] - Updated apache-mod_perl packages fix DoS vulnerability (security@...driva.com)
iDefense Security Advisory 04.11.07: Apache HTTPD suEXEC Multiple Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
[USN-452-1] KDE library vulnerability (Kees Cook <kees@...ntu.com>)

April 12 (19 messages)

Let's Winnuke Google! (<neal.krawetz@....hush.com>)
Re: Let's Winnuke Google! ("J. Oquendo" <sil@...iltrated.net>)
Re: Let's Winnuke Google! ("James Matthews" <nytrokiss@...il.com>)
[ GLSA 200704-08 ] DokuWiki: Cross-site scripting vulnerability (Matthias Geerdsen <vorlon@...too.org>)
CVE-2007-1871: Cross site scripting in chcounter 3.1.3 ("Hanno Böck" <mail@...eck.de>)
CVE-2007-1872: Cross site scripting in toendaCMS 1.5.3 ("Hanno Böck" <mail@...eck.de>)
Cross site scripting in mephisto 0.7.3 ("Hanno Böck" <mail@...eck.de>)
A Botted Fortune 500 a Day (Gadi Evron <ge@...uxbox.org>)
INFIGO-2007-04-05: Enterprise Security Analyzer server remote buffer overflows (infocus@...igo.hr)
Dotclear 1.* Cross Site Scripting Vulnerability ("nssimo nssimo" <nsimou@...il.com>)
Re: Let's Winnuke Google! ("jt5944-27a" <jt5944@...hmail.com>)
Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless LAN Controller and Cisco Lightweight Access Po… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless Control System (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Aircrack-ng (airodump-ng) remote buffer overflow vulnerability (jonnyboi <jonnyboi@...il.com>)
Re: A Botted Fortune 500 a Day ("James Matthews" <nytrokiss@...il.com>)
iDefense Security Advisory 04.12.07: Hewlett Packard HP-UX Remote pfs_mountd.rpc Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Spam is funny! (<neal.krawetz@....hush.com>)
A Botted Fortune 500 a Day ("RMueller" <randallm@...mail.com>)
[Argeniss] Hacking Databases for owning your data (paper) (Cesar <cesarc56@...oo.com>)

April 13 (22 messages)

patch-9449 (Steward Smith <fulldisc@...ll.org>)
Re: patch-9449 ("Matti Ranta" <mdranta@...il.com>)
Re: patch-9449 (mis@...den.com)
Ettercap-NG 0.7.3 Remote DoS (evilrabbi <evilrabbi@...il.com>)
Ettercap-NG 0.7.3 Remote DoS (evilrabbi <evilrabbi@...il.com>)
Re: A Botted Fortune 500 a Day ("Knud Erik Højgaard" <kokanin@...il.com>)
Re: patch-9449 ("Wong Chee Chun" <cheechun2005@...il.com>)
Re: patch-9449 (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[OPENADS-SA-2007-003] Openads 2.0.11 vulnerability fixed (Matteo Beccati <php@...cati.com>)
[OPENADS-SA-2007-004] Max Media Manager v0.1.29-rc and v0.3.31-alpha-pr2 vulnerability fixed (Matteo Beccati <php@...cati.com>)
Re: A Botted Fortune 500 a Day ("Randall M" <randallm@...mail.com>)
Re: A Botted Fortune 500 a Day ("Steven Adair" <steven@...urityzone.org>)
Re: A Botted Fortune 500 a Day ("Jamie Riden" <jamie.riden@...il.com>)
Re: Spam is funny! (<neal.krawetz@....hush.com>)
Re: Spam is funny! (<neal.krawetz@....hush.com>)
Re: Spam is funny! (<neal.krawetz@....hush.com>)
Re: A Botted Fortune 500 a Day ("Steven Adair" <steven@...urityzone.org>)
Re: A Botted Fortune 500 a Day ("Jamie Riden" <jamie.riden@...il.com>)
Re: A Botted Fortune 500 a Day (Simon Smith <simon@...soft.com>)
Re: patch-9449 (Mike Shafer <news-letter-subs@...-secured.com>)
TSRT-07-04: LANDesk Management Suite Alert Service Stack Overflow Vulnerability (TSRT@...m.com)
Re: A Botted Fortune 500 a Day ("Dude VanWinkle" <dudevanwinkle@...il.com>)

April 14 (2 messages)

Re: A Botted Fortune 500 a Day ("RMueller" <randallm@...mail.com>)
[ GLSA 200704-09 ] xine-lib: Heap-based buffer overflow (Raphael Marichez <falco@...too.org>)

April 15 (19 messages)

Vista typographical vulnerability ("lsi" <stuart@...erdelix.net>)
Re: War against Iran: Update from front lines (chedder1@...il.com)
Re: War against Iran: Update from front lines (Tremaine Lea <tremaine@...il.com>)
Re: War against Iran: Update from front lines (Timo Schoeler <timo.schoeler@...cworks.net>)
Re: War against Iran: Update from front lines ("Dude VanWinkle" <dudevanwinkle@...il.com>)
ZoneAlarm Multiple insufficient argument validation of hooked SSDT function Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)
Re: [exploits] RPC vuln in DNS Server (fwd) (Gadi Evron <ge@...uxbox.org>)
Re: War against Iran: Update from front lines (jonnyboi <jonnyboi@...il.com>)
URL Encoding/Decoding Flaw Mechanism In ASP.net[1.0-2.0] Based Web Applications. (Aditya K Sood <zeroknock@...aeye.org>)
Windows DNS DnssrvQuery Stack Overflow ("dev code" <devcode29@...mail.com>)
Re: War against Iran: Update from front lines (Valdis.Kletnieks@...edu)
Cross Domain XMLHttpRequest ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
Re: Vista typographical vulnerability (John English <john@...namono.net>)
Re: Cross Domain XMLHttpRequest (ascii <ascii@...amail.com>)
Re: Cross Domain XMLHttpRequest ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
Re: Cross Domain XMLHttpRequest (Stefan Esser <sesser@...dened-php.net>)
Re: Cross Domain XMLHttpRequest ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
Re: Cross Domain XMLHttpRequest (Michal Zalewski <lcamtuf@...ne.ids.pl>)
Re: Cross Domain XMLHttpRequest ("Michal Majchrowicz" <m.majchrowicz@...il.com>)

April 16 (18 messages)

Re: War against Iran: Update from front lines (Tremaine Lea <tremaine@...il.com>)
Microsoft DNS Server Remote Code execution Exploit and analysis ("Andres Tarasco" <atarasco@...il.com>)
IMF 2007 - 2nd Call for Papers (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
INVASION OF THE CHILD HACKERS ("Dr. Neal Krawetz, PhD" <neal.krawetz@....hush.com>)
Re: INVASION OF THE CHILD HACKERS ("J. Oquendo" <sil@...iltrated.net>)
Re: INVASION OF THE CHILD HACKERS ("Stack Smasher" <stacksmasher@...il.com>)
[ GLSA 200704-10 ] Inkscape: Two format string vulnerabilities (Matthias Geerdsen <vorlon@...too.org>)
iDefense Security Advisory 04.16.07: ClamAV CAB File Unstore Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Vista typographical vulnerability (Troy <gimmespam@...il.com>)
Re: INVASION OF THE CHILD HACKERS ("Allen,Steve" <steve.allen@...s.state.tx.us>)
[ GLSA 200704-11 ] Vixie Cron: Denial of Service (Matthias Geerdsen <vorlon@...too.org>)
Re: Vista typographical vulnerability ("Peter Dawson" <slash.pd@...il.com>)
Re: Vista typographical vulnerability (Valdis.Kletnieks@...edu)
[ MDKSA-2007:084 ] - Updated ipsec-tools packages fix DoS vulnerability (security@...driva.com)
[ MDKSA-2007:085 ] - Updated freeradius packages fix DoS vulnerability (security@...driva.com)
[ GLSA 200704-12 ] OpenOffice.org: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
[ MDKSA-2007:086 ] - Updated cups packages fix DoS vulnerability (security@...driva.com)
iDefense Security Advisory 04.16.07: Akamai Download Manager ActiveX Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

April 17 (34 messages)

Re: INVASION OF THE CHILD HACKERS (Anders B Jansson <hdw@...listi.se>)
Persistent CSRF and The Hotlink Hell ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
rPSA-2007-0071-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
Akamai Technologies Security Advisory 2007-0001 (Akamai Security Team <security@...mai.com>)
Re: [WEB SECURITY] Persistent CSRF and The Hotlink Hell ("Ryan Barnett" <rcbarnett@...il.com>)
Re: [WEB SECURITY] Persistent CSRF and The Hotlink Hell (Blue Boar <BlueBoar@...evco.com>)
Re: [linux-elitists] Gutsy Gibbon to include strictly-free branch (fwd) (Jay Sulzberger <jays@...ix.com>)
Re: INVASION OF THE CHILD HACKERS (wac <waldoalvarez00@...il.com>)
Tiscali webmail exploited ("Rosario Valotta" <rosario.valotta@...il.com>)
Dotclear 1.* Cross Site Scripting Vulnerability (Julien Dhaille <julien@...gan.com>)
Re: Dotclear 1.* Cross Site Scripting Vulnerability ("Nikolay Kichukov" <hijacker@...um.net>)
Re: Dotclear 1.* Cross Site Scripting Vulnerability (Julien Dhaille <julien@...gan.com>)
Re: INVASION OF THE CHILD HACKERS ("Marco Ermini" <markoer@...koer.org>)
Re: INVASION OF THE CHILD HACKERS ("Stack Smasher" <stacksmasher@...il.com>)
Internet Explorer Crash ("J. Oquendo" <sil@...iltrated.net>)
Re: Internet Explorer Crash ("Nikolay Kichukov" <hijacker@...um.net>)
...Alright I need a little help.... ("srxnr srxnr" <srx.srxnr@...il.com>)
Internet Explorer Crash ("carl hardwick" <hardwick.carl@...il.com>)
Re: ...Alright I need a little help.... ("srxnr srxnr" <srx.srxnr@...il.com>)
Re: ...Alright I need a little help.... (H D Moore <fdlist@...italoffense.net>)
Re: Internet Explorer Crash (3APA3A <3APA3A@...URITY.NNOV.RU>)
Follow up browser DoS ("J. Oquendo" <sil@...iltrated.net>)
Re: ...Alright I need a little help.... ("Knud Erik Højgaard" <kokanin@...il.com>)
Re: Internet Explorer Crash ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
n.runs-SA-2007.007 - Sun Solaris 10 - Format string vulnerability (<security@...ns.com>)
Re: A Botted Fortune 500 a Day ("K K" <kkadow@...il.com>)
FyLasso Antivulnerability 1.6.1 Released today! (William Kimball <wk@...asso.com>)
Re: Internet Explorer Crash ("Dr. Neal Krawetz, PhD" <neal.krawetz@....hush.com>)
[ GLSA 200704-13 ] File: Denial of Service (Raphael Marichez <falco@...too.org>)
[ GLSA 200704-14 ] FreeRADIUS: Denial of Service (Raphael Marichez <falco@...too.org>)
[ GLSA 200704-15 ] MadWifi: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Re: A Botted Fortune 500 a Day (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: Internet Explorer Crash (Troy <gimmespam@...il.com>)
Re: A Botted Fortune 500 a Day (Troy <gimmespam@...il.com>)

April 18 (45 messages)

iDefense Security Advisory 04.17.07: McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 04.17.07: McAfee E-Business Admin Server Invalid Data Length DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
UK ISP threatens security researcher (Gadi Evron <ge@...uxbox.org>)
Re: [funsec] Re: A Botted Fortune 500 a Day ("Fergie" <fergdawg@...zero.net>)
Re: A Botted Fortune 500 a Day (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: A Botted Fortune 500 a Day (Valdis.Kletnieks@...edu)
hiding routers ("Kristian Hermansen" <kristian.hermansen@...il.com>)
Firefox 2.0.0.3 Phishing Protection Bypass Vulnerability ("carl hardwick" <hardwick.carl@...il.com>)
Re: hiding routers (Sebastian Krahmer <krahmer@...e.de>)
Re: Firefox 2.0.0.3 Phishing Protection Bypass Vulnerability (3APA3A <3APA3A@...URITY.NNOV.RU>)
Advisory: Bypass Oracle Logon Trigger (Alexander Kornbrust <ak@...-database-security.com>)
Advisory: SQL Injection in package SYS.DBMS_AQADM_SYS (Alexander Kornbrust <ak@...-database-security.com>)
Advisory: Shutdown unprotected Oracle TNS Listener via Oracle Discoverer Servlet [AS01] (Alexander Kornbrust <ak@...-database-security.com>)
Advisory: Cross-Site-Scripting Vulnerability in Oracle Secure Enterprise Search [SES01] (Alexander Kornbrust <ak@...-database-security.com>)
Advisory: SQL Injection in package SYS.DBMS_UPGRADE_INTERNAL (Alexander Kornbrust <ak@...-database-security.com>)
Re: hiding routers (Felix Lindner <fx@...re-labs.com>)
Re: UK ISP threatens security researcher ("Dr. Neal Krawetz, PhD" <neal.krawetz@....hush.com>)
Reminder: HITBSecConf2007 - Malaysia: Call for Papers closing in 2 weeks (Praburaajan <prabu@...kinthebox.org>)
MS DNS worm ("Geo." <geoincidents@....net>)
Re: MS DNS worm ("ad@...poverflow.com" <ad@...poverflow.com>)
Re: UK ISP threatens security researcher (Ajay Pal Singh Atwal <ajaypal@...bec.org>)
Re: UK ISP threatens security researcher (Tremaine Lea <tremaine@...il.com>)
CfP: Hack.lu 2007 ("Hack Lu" <info.hacklu@...il.com>)
Re: UK ISP threatens security researcher ("Thomas Pollet" <thomas.pollet@...il.com>)
Re: UK ISP threatens security researcher ("Matt Richard" <matt.richard@...il.com>)
Re: UK ISP threatens security researcher (<Glenn.Everhart@...se.com>)
Analysis of the Oracle April 2007 Critical Patch Update ("David Litchfield" <davidl@...software.com>)
Oracle E-Business Suite Vulnerability Information April 2007 ("Integrigy Alerts" <alerts@...egrigy.com>)
Re: Internet Explorer Crash (Kradorex Xeron <admin@...ibase.ca>)
Re: Internet Explorer Crash (Valdis.Kletnieks@...edu)
rPSA-2007-0072-1 lighttpd (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0073-1 php php-mysql php-pgsql (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0074-1 dovecot (rPath Update Announcements <announce-noreply@...th.com>)
Re: MS DNS worm ("Zed Qyves" <zqyves.spamtrap@...il.com>)
UNIX man pages based fuzzing ("E. Kellinis" <me@...her.org.uk>)
Re: Internet Explorer Crash ("Michele Cicciotti" <mc@...msa.net>)
Re: UK ISP threatens security researcher ("jt5944-27a" <jt5944@...hmail.com>)
Oracle Database Buffer overflow vulnerabilities in package DBMS_SNAP_INTERNAL (Team SHATTER <shatter@...secinc.com>)
ZDI-07-015: Novell Groupwise WebAccess Base64 Decoding Stack Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability (zdi-disclosures@...m.com)
ZDI-07-017: Oracle E-Business Suite Arbitrary Document Download Vulnerability (zdi-disclosures@...m.com)
ZDI-07-018: IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability (zdi-disclosures@...m.com)
ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability (zdi-disclosures@...m.com)
ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability (zdi-disclosures@...M.COM)
[USN-453-1] X.org vulnerability (Kees Cook <kees@...ntu.com>)

April 19 (13 messages)

[ MDKSA-2007:087 ] - Updated php packages fix multiple vulnerabilities (security@...driva.com)
[ MDKSA-2007:088 ] - Updated php packages fix multiple vulnerabilities (security@...driva.com)
[ MDKSA-2007:089 ] - Updated php packages fix multiple vulnerabilities (security@...driva.com)
[ MDKSA-2007:090 ] - Updated php packages fix multiple vulnerabilities (security@...driva.com)
[ MDKSA-2007:091 ] - Updated sqlite packages fix vulnerability (security@...driva.com)
Anyone have a Lindows/Linspire contact ("J. Oquendo" <sil@...iltrated.net>)
Re: ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability (<rashbi@...hmail.com>)
Re: hiding routers ("Maxime Ducharme" <mducharme@...ergeneration.com>)
Firefox 2.0.0.3 DoS crash ("carl hardwick" <hardwick.carl@...il.com>)
US State department rooted by 0-day Word attack ("ad@...poverflow.com" <ad@...poverflow.com>)
Re: US State department rooted by 0-day Word attack (Jim Popovitch <yahoo@...pop.com>)
Re: US State department rooted by 0-day Word attack (Nick FitzGerald <nick@...us-l.demon.co.uk>)
XSS in freePBX 2.2.x portal's Asterisk Log tool (XenoMuta <xenomuta@...eaker.net>)

April 20 (22 messages)

Re: US State department rooted by 0-day Word attack ("James Matthews" <nytrokiss@...il.com>)
ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
eXtremail-v9 (mu-b <mu-b@...it-labs.org>)
ShortNotes : Stack Smashing with GCC4 ("xWinGs @ KJ" <xwings@...urity.net.my>)
Re: [VulnWatch] Cross Domain XMLHttpRequest (anurag.agarwal@...oo.com)
Re: ShortNotes : Stack Smashing with GCC4 (Marcus Meissner <meissner@...e.de>)
Re: US State department rooted by 0-day Word attack ("Net Tech" <net.tech11@...il.com>)
Re: US State department rooted by 0-day Word attack (Valdis.Kletnieks@...edu)
Tel Aviv University Security Forum - Sunday, Apr 29 (TAUSEC) (Gadi Evron <ge@...uxbox.org>)
Re: Firefox 2.0.0.3 DoS crash (Tõnu Samuel <tonu@....ee>)
Re: Firefox 2.0.0.3 DoS crash (ascii <ascii@...amail.com>)
Re: ShortNotes : Stack Smashing with GCC4 ("Guasconi Vincent" <tyoptyop@...il.com>)
iDefense Security Advisory 04.20.07: Check Point Zone Labs SRESCAN IOCTL Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
eEye Announcement, CEO blog and addiction ("Ross Brown" <rossbrown42@...glemail.com>)
Re: ShortNotes : Stack Smashing with GCC4 ("Chris Rohlf" <chris.rohlf@...il.com>)
OT? - TDBanknorth + merchant's CC auth (Troy <tcregger@...nedyinfo.com>)
Re: OT? - TDBanknorth + merchant's CC auth ("Jason Miller" <jammer128@...il.com>)
Re: OT? - TDBanknorth + merchant's CC auth ("Micheal Espinola Jr" <michealespinola@...il.com>)
FLEA-2007-0011-1: lighttpd (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Re: OT? - TDBanknorth + merchant's CC auth ("James Matthews" <nytrokiss@...il.com>)
Re: eEye Announcement, CEO blog and addiction ("T Biehn" <tbiehn@...il.com>)
UseBB Version 1.0.4 Path Disclosure Vulnerability ("SecurityResearch" <securityresearch@...vigilance.com>)

April 21 (10 messages)

[MU-200704-01] Pre-Authentication Vulnerability in Mac OS X RPC runtime library (noreply@...ecurity.com)
OpenSSH - System Account Enumeration if S/Key is used (rembrandt <rembrandt@...ith.org>)
Re: OT? - TDBanknorth + merchant's CC auth (Troy Cregger <troy.cregger@...il.com>)
Re: eEye Announcement, CEO blog and addiction ("Knud Erik Højgaard" <kokanin@...il.com>)
Re: eEye Announcement, CEO blog and addiction ("ad@...poverflow.com" <ad@...poverflow.com>)
Re: Internet Explorer Crash (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: eEye Announcement, CEO blog and addiction (poo <skodliv@...il.com>)
Re: Internet Explorer Crash (cardoso <cardosolistas@...traditorium.com>)
Apparently eEye's blog got p0wnd (Paul Schmehl <pauls@...allas.edu>)
aMSN <= 0.96 remote DoS vulnerability (Levent Kayan <levent@...ehack.org>)

April 22 (12 messages)

freePBX 2.2.x's Music-on-hold Remote Code Execution Injection (XenoMuta <xenomuta@...eaker.net>)
Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability (kakaroto@...aroto.homelinux.net (Youness Alaoui))
Re: Apparently eEye's blog got p0wnd (poo <skodliv@...il.com>)
Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability (Ismail Dönmez <ismail@...dus.org.tr>)
[SECURITY] [DSA 1279-1] New webcalendar packages fix cross-site scripting (Moritz Muehlenhoff <jmm@...ian.org>)
Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability (Levent Kayan <levent@...ehack.org>)
Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability (Ismail Dönmez <ismail@...dus.org.tr>)
Re: [levent@...ehack.org: Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability] (Levent Kayan <levent@...ehack.org>)
Re: Apparently eEye's blog got p0wnd (Paul Schmehl <pauls@...allas.edu>)
[ GLSA 200704-16 ] Aircrack-ng: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
[ GLSA 200704-17 ] 3proxy: Buffer overflow (Raphael Marichez <falco@...too.org>)
[ GLSA 200704-18 ] Courier-IMAP: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)

April 23 (17 messages)

FLEA-2007-0012-1: madwifi (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability (Ferdinand Klinzer <Klinzer@....de>)
Re: Apparently eEye's blog got p0wnd (Valdis.Kletnieks@...edu)
3proxy 0.5.3i bugfix release (Vladimir Dubrovin <3APA3A@...URITY.NNOV.RU>)
Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability (Levent Kayan <levent@...ehack.org>)
Re: Apparently eEye's blog got p0wnd (Paul Schmehl <pauls@...allas.edu>)
Re: Apparently eEye's blog got p0wnd ("David Maynor" <dave@...atasec.com>)
Re: Apparently eEye's blog got p0wnd (Paul Schmehl <pauls@...allas.edu>)
FLEA-2007-0013-1: xine-lib (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
[ GLSA 200704-19 ] Blender: User-assisted remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
[ MDKSA-2007:092 ] - Updated freeradius packages fix vulnerability (security@...driva.com)
[ MDKSA-2007:093 ] - Updated zziplib packages fix vulnerability (security@...driva.com)
[ GLSA 200704-20 ] NAS: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Apache/PHP REQUEST_METHOD XSS Vulnerability ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
Re: Apache/PHP REQUEST_METHOD XSS Vulnerability (Kradorex Xeron <admin@...ibase.ca>)
Re: Apache/PHP REQUEST_METHOD XSS Vulnerability ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
Re: Apache/PHP REQUEST_METHOD XSS Vulnerability ("Michal Majchrowicz" <m.majchrowicz@...il.com>)

April 24 (23 messages)

Re: Apache/PHP REQUEST_METHOD XSS Vulnerability ("Michał Majchrowicz" <mmajchrowicz@...il.com>)
Apache Illegal Request Handling Possible XSS Vulnerability ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
Re: Apache Illegal Request Handling Possible XSS Vulnerability (Richard Moore <rich@...tpoint.ltd.uk>)
Re: Apache Illegal Request Handling Possible XSS Vulnerability ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
Re: Apache Illegal Request Handling Possible XSS Vulnerability ("Guasconi Vincent" <tyoptyop@...il.com>)
Re: Apache Illegal Request Handling Possible XSS Vulnerability ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
Re: Apache Illegal Request Handling Possible XSS Vulnerability (Richard Moore <rich@...tpoint.ltd.uk>)
Re: OpenSSH - System Account Enumeration if S/Key is used (Stanislaw Klekot <dozzie@...amit.im.pwr.wroc.pl>)
Re: Apache Illegal Request Handling Possible XSS Vulnerability ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
Re: Apache Illegal Request Handling Possible XSS Vulnerability (Kradorex Xeron <admin@...ibase.ca>)
Re: Apache Illegal Request Handling Possible XSS Vulnerability (Kradorex Xeron <admin@...ibase.ca>)
Re: Apache Illegal Request Handling Possible XSS Vulnerability (Kradorex Xeron <admin@...ibase.ca>)
Re: [VulnWatch] Apache/PHP REQUEST_METHOD XSS Vulnerability ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
Re: Apache Illegal Request Handling Possible XSS Vulnerability (KJKHyperion <hackbunny@...tpj.org>)
Re: Apache Illegal Request Handling Possible XSS Vulnerability (Richard Moore <rich@...tpoint.ltd.uk>)
Linksys SPA941 remote DOS with \377 character ("Radu State" <state@...ia.fr>)
Re: Apache/PHP REQUEST_METHOD XSS Vulnerability (Kradorex Xeron <admin@...ibase.ca>)
rPSA-2007-0081-1 postgresql postgresql-server (rPath Update Announcements <announce-noreply@...th.com>)
Re: OpenSSH - System Account Enumeration if S/Key is used ("Brian Eaton" <eaton.lists@...il.com>)
[ GLSA 200704-21 ] ClamAV: Multiple vulnerabilities (Matthias Geerdsen <vorlon@...too.org>)
Security Advisory: CA CleverPath SQL Injection ("Irene Abezgauz" <irene@...ktics.com>)
[SECURITY] [DSA 1280-1] New aircrack-ng packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
ZDI-07-022: CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities (zdi-disclosures@...m.com)

April 25 (24 messages)

ASA-2007-011: Multiple problems in SIP channel parser handling response codes (Asterisk Development Team <asteriskteam@...ium.com>)
ASA-2007-012: Remote Crash Vulnerability in Manager Interface (Asterisk Development Team <asteriskteam@...ium.com>)
ASA-2007-010: Two stack buffer overflows in SIP channel's T.38 SDP parsing code (Asterisk Development Team <asteriskteam@...ium.com>)
Re: OpenSSH - System Account Enumeration if S/Key is used (rembrandt <rembrandt@...ith.org>)
Re: Apache/PHP REQUEST_METHOD XSS Vulnerability ("Michał Majchrowicz" <mmajchrowicz@...il.com>)
Anti-Virus vendors prove less-effective ("David Kierznowski" <david.kierznowski@...il.com>)
Re: Apache/PHP REQUEST_METHOD XSS Vulnerability ("عبد الله احمد عنان" <enan2700@...il.com>)
Re: Anti-Virus vendors prove less-effective ("James Matthews" <nytrokiss@...il.com>)
Re: Anti-Virus vendors prove less-effective (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: Apache/PHP REQUEST_METHOD XSS Vulnerability (Vincent Archer <varcher@...yall.com>)
requesting info ("n n" <s_x_dls@...mail.com>)
Re: requesting info (Tim <tim-security@...tinelchicken.org>)
Re: Apache/PHP REQUEST_METHOD XSS Vulnerability (Kradorex Xeron <admin@...ibase.ca>)
requesting info ("n n" <s_x_dls@...mail.com>)
Re: requesting info (Paul Sebastian Ziegler <psz@...erved.de>)
Re: Apache/PHP REQUEST_METHOD XSS Vulnerability (Vincent Archer <varcher@...yall.com>)
Re: requesting info (Michael Holstein <michael.holstein@...ohio.edu>)
[Fwd: Re: Apache Illegal Request Handling Possible XSS Vulnerability] (Tõnu Samuel <tonu@....ee>)
Cisco Security Advisory: Default Passwords in NetFlow Collection Engine (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Re: OpenSSH - System Account Enumeration if S/Key is used (Nico Golde <fd@...lde.de>)
IE 7 and Firefox Browsers Digest Authentication Request Splitting (Stefano Di Paola <stefano.dipaola@...ec.it>)
[SECURITY] [DSA 1281-1] New clamav packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: OpenSSH - System Account Enumeration if S/Key is used ("Knud Erik Højgaard" <kokanin@...il.com>)
Re: OpenSSH - System Account Enumeration if S/Key is used (Kradorex Xeron <admin@...ibase.ca>)

April 26 (31 messages)

[ MDKSA-2007:094 ] - Updated postgresql packages fix vulnerability (security@...driva.com)
Severe vulnerability in https://secure.somethingawful.com ("Pedro Martinez" <sassycophants@...erdude.com>)
Re: Severe vulnerability in https://secure.somethingawful.com (evilrabbi <evilrabbi@...il.com>)
Re: requesting info ("Jason Miller" <jammer128@...il.com>)
Re: Anti-Virus vendors prove less-effective ("David Kierznowski" <david.kierznowski@...il.com>)
Re: requesting info ("James Matthews" <nytrokiss@...il.com>)
[CAID 35198, 35276]: CA BrightStor ARCserve Backup Media Server Vulnerabilities ("Williams, James K" <James.Williams@...com>)
[CAID 35277]: CA CleverPath Portal SQL Injection Vulnerability ("Williams, James K" <James.Williams@...com>)
Rapid integer factorization = end of RSA? (Eugene Chukhlomin <chukh29ru@...oline.su>)
Re: Rapid integer factorization = end of RSA? (Stanislaw Klekot <dozzie@...amit.im.pwr.wroc.pl>)
Re: Rapid integer factorization = end of RSA? (Eugene Chukhlomin <chukh29ru@...oline.su>)
Re: Rapid integer factorization = end of RSA? (Stanislaw Klekot <dozzie@...amit.im.pwr.wroc.pl>)
Re: Rapid integer factorization = end of RSA? (Eugene Chukhlomin <chukh29ru@...oline.su>)
Re: Rapid integer factorization = end of RSA? (Stanislaw Klekot <dozzie@...amit.im.pwr.wroc.pl>)
[USN-453-2] rdesktop regression (Martin Pitt <martin.pitt@...onical.com>)
Re: Rapid integer factorization = end of RSA? (virus@...og.org)
Re: Rapid integer factorization = end of RSA? ("Brendan Dolan-Gavitt" <mooyix@...il.com>)
Re: WordPress v2.1.3 >> remote file include~ ("Tod Beardsley" <todb@...nb-security.net>)
Re: Rapid integer factorization = end of RSA? (virus@...og.org)
Re: Rapid integer factorization = end of RSA? ("Kurt Buff" <kurt.buff@...il.com>)
[SECURITY] [DSA 1282-1] New php4 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Rapid integer factorization = end of RSA? (Stephan Gammeter <st@...rent.ch>)
Re: Rapid integer factorization = end of RSA? (ShadowGamers <shadowgamers@...il.com>)
Re: Rapid integer factorization = end of RSA? ("e.chukhlomin" <chukh29ru@...oline.su>)
Re: Rapid integer factorization = end of RSA? (Valdis.Kletnieks@...edu)
Re: WordPress v2.1.3 >> remote file include~ ("Guasconi Vincent" <tyoptyop@...il.com>)
FW: Steganos Encrypted Safe NOT so safe ("Dan Bambach" <dan@...mbach.net>)
iDefense Security Advisory 04.26.07: Novell eDirectory NCP Fragment Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: FW: Steganos Encrypted Safe NOT so safe ("Steven Adair" <steven@...urityzone.org>)
Re: Rapid integer factorization = end of RSA? (Peter Kosinar <goober@....sk>)
Re: FW: Steganos Encrypted Safe NOT so safe ("Dan Bambach" <dan@...mbach.net>)

April 27 (18 messages)

Re: FW: Steganos Encrypted Safe NOT so safe ("James Matthews" <nytrokiss@...il.com>)
Re: FW: Steganos Encrypted Safe NOT so safe ("Dan Bambach" <Dan@...mbach.net>)
mydns-1.1.0 remote heap overflow (mu-b <mu-b@...it-labs.org>)
Buying zeroday vulnerabilities (0buy@...e-mail.net)
Re: Buying zeroday vulnerabilities ("ad@...poverflow.com" <ad@...poverflow.com>)
[USN-455-1] PHP vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-454-1] PostgreSQL vulnerability (Martin Pitt <martin.pitt@...onical.com>)
iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Service Manager Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Recovery Points Insecure Password Storage Vulnerability (iDefense Labs <labs-no-reply@...fense.co…)
Re: Buying zeroday vulnerabilities ("T Biehn" <tbiehn@...il.com>)
Re: Rapid integer factorization = end of RSA? (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: Rapid integer factorization = end of RSA? ("e.chukhlomin" <chukh29ru@...oline.su>)
[ GLSA 200704-22 ] BEAST: Denial of Service (Raphael Marichez <falco@...too.org>)
[ GLSA 200704-23 ] capi4k-utils: Buffer overflow (Raphael Marichez <falco@...too.org>)
AFFLIB(TM): Time-of-Check-Time-of-Use File Race (VSR Advisories <advisories@...curity.com>)
AFFLIB(TM): Multiple Format String Injections (VSR Advisories <advisories@...curity.com>)
AFFLIB(TM): Multiple Buffer Overflows (VSR Advisories <advisories@...curity.com>)
AFFLIB(TM): Multiple Shell Metacharacter Injections (VSR Advisories <advisories@...curity.com>)

April 28 (3 messages)

Polynomials and factoring ("r ahead" <aheadr@...glemail.com>)
Subject: Bruce Schneier facts not so Factual? (Core Core <memphis23456@...oo.com>)
Subject: Bruce Schneier facts not so Factual? (Core Core <memphis23456@...oo.com>)

April 29 (3 messages)

Re: Polynomials and factoring (Valdis.Kletnieks@...edu)
Cryptome is dead (at least for now) ("Line Noise" <300baud@...il.com>)
[SECURITY] [DSA 1283-1] New php5 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)

April 30 (16 messages)

Re: AFFLIB(TM): Time-of-Check-Time-of-Use File Race (Tim <tmorgan@...curity.com>)
Re: Spam is funny! (Shaun <shaun@...unc.com>)
Re: Spam is funny! (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: Apparently eEye's blog got p0wnd ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Spam is funny! ("Aaron Gray" <angray@...b.net>)
Re: Cryptome is dead (at least for now) ("Fetch, Brandon" <bfetch@....com>)
Firefox 2.0.0.3 non-existent applet DoS flaw ("carl hardwick" <hardwick.carl@...il.com>)
Aventail Connect SSL VPN Client Buffer Overflow ("Thomas Pollet" <thomas.pollet@...il.com>)
iDefense Security Advisory 04.27.07: VMware Workstation Shared Folders Directory Traversal Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
after hrs patch/malware scanning (bills <bills@...ineen.org>)
FLEA-2007-0014-1: vim (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Re: Spam is funny! ("Morning Wood" <se_cur_ity@...mail.com>)
FLEA-2007-0015-1: gimp (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
NSA's surveillance project:True or crap (scott <redhowlingwolves@...lsouth.net>)
Re: NSA's surveillance project:True or crap (Tremaine Lea <tremaine@...il.com>)
Re: NSA's surveillance project:True or crap (foofus@...fus.net)

752 messages