full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2007/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 31	² 22	³ 12	⁴ 17	⁵ 2	⁶ 5
⁷ 11	⁸ 21	⁹ 19	¹⁰ 20	¹¹ 17	¹² 15	¹³ 11
¹⁴ 31	¹⁵ 21	¹⁶ 17	¹⁷ 32	¹⁸ 18	¹⁹ 6	²⁰ 9
²¹ 35	²² 39	²³ 25	²⁴ 33	²⁵ 20	²⁶ 10	²⁷ 5
²⁸ 10	²⁹ 12	³⁰ 25	³¹ 19

Messages by day:

[ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability (security@...driva.com)
Re: Month of ActiveX Bug ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Month of ActiveX Bug ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Month of ActiveX Bug ("Larry Seltzer" <Larry@...ryseltzer.com>)
[SECURITY] [DSA 1286-1] New Linux 2.6.18 packages fix several vulnerabilities (Dann Frazier <dannf@...ian.org>)
Medium security hole affecting DSL-G624T (Tim Brown <timb@...-dimension.org.uk>)
XSS in secure.somethingawful.com at Something Awful AGAIN. (jeremy borne <jeremy_borne_again@...oo.ca>)
Re: Month of ActiveX Bug ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Month of ActiveX Bug ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Month of ActiveX Bug ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Medium security hole affecting DSL-G624T (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Medium security hole affecting DSL-G624T (3APA3A <3APA3A@...URITY.NNOV.RU>)

Re: Month of ActiveX Bug (Felix von Leitner <felix-fulldisclosure@...e.de>)
Exploitation Realm in Ajax Based Load Tab Modules (Aditya K Sood <zeroknock@...aeye.org>)
rPSA-2007-0085-1 lftp (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0088-1 xscreensaver (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0089-1 net-snmp net-snmp-utils (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0090-1 gimp (rPath Update Announcements <announce-noreply@...th.com>)
Re: Medium security hole affecting DSL-G624T (Tim Brown <timb@...-dimension.org.uk>)
Re: Medium security hole affecting DSL-G624T (Tim Brown <timb@...-dimension.org.uk>)
Re: Month of ActiveX Bug (bugtraq@...security.net)
Re: Month of ActiveX Bug ("M. Shirk" <shirkdog_list@...mail.com>)
Re: Month of ActiveX Bug (Alex Kirk <alex.kirk@...rcefire.com>)
Re: Month of ActiveX Bug ("Larry Seltzer" <Larry@...ryseltzer.com>)
Multiple vendors ZOO file decompression infinite loop DoS (Jean-Sébastien Guay-Leroux <jean-sebastien@...y-leroux.com>)
ASA-2007-013: IAX2 users can cause unauthorized data disclosure ("Kevin P. Fleming" <kpfleming@...ium.com>)
Re: Month of ActiveX Bug ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Month of ActiveX Bug ("Brendan Dolan-Gavitt" <mooyix@...il.com>)
Re: Month of ActiveX Bug (teo <teOok@...e2.it>)

Vulnerabilities Hashes DB needed (shadown <shadown@...il.com>)
Mini Web Shop v.2 vulnerable to XSS (<corrado.liotta@...ce.it>)
Re: Month of ActiveX Bug (Goetz Von Berlichingen <goetzvonberlichingen@...cast.net>)
Re: Vulnerabilities Hashes DB needed ("Morning Wood" <se_cur_ity@...mail.com>)
Re: Vulnerabilities Hashes DB needed (Alexander Klink <a.klink@...ops.de>)

Re: Linux big bang theory.... ("Just1n T1mberlake" <hotpackets@...lokitty.com>)
Re: Linux big bang theory.... (Valdis.Kletnieks@...edu)
Re: Linux big bang theory.... (Andrew Farmer <andfarm@...il.com>)
Re: Linux big bang theory.... (Andrew Farmer <andfarm@...il.com>)
Re: Linux big bang theory.... ("Just1n T1mberlake" <hotpackets@...lokitty.com>)
WordPress 2.1.3 Akismet Vulnerability ("David Kierznowski" <david.kierznowski@...il.com>)
Re: Linux big bang theory.... (Tremaine Lea <tremaine@...il.com>)
Uninformed Journal Release Announcement: Volume 7 (fdlist@...italoffense.net)
Re: Linux big bang theory.... (scott <redhowlingwolves@...lsouth.net>)
Re: Linux big bang theory.... ("Just1n T1mberlake" <hotpackets@...lokitty.com>)
Re: Linux big bang theory.... (Andrew Farmer <andfarm@...il.com>)
Re: Linux big bang theory.... (KJKHyperion <hackbunny@...tpj.org>)
Thierry@...ler.lu (winsoc winsoc <wins0c@...oo.com>)
Re: Thierry@...ler.lu ("mugutu sumulunu" <sumulunu@...il.com>)
Re: Thierry@...ler.lu (Thierry Zoller <Thierry@...ler.lu>)
SonicBB version 1.0 Multiple Path Disclosure Vulnerabilities ("SecurityResearch" <securityresearch@...vigilance.com>)
SonicBB version 1.0 Multiple SQL Injection Vulnerabilities ("SecurityResearch" <securityresearch@...vigilance.com>)
SonicBB version 1.0 XSS Attack Vulnerabilities ("SecurityResearch" <securityresearch@...vigilance.com>)
IMF 2007 - Deadline Extension (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
Re: Linux big bang theory.... (Kradorex Xeron <admin@...ibase.ca>)
GMX MultiMessenger (tomzeidler@....de)
iDefense Security Advisory 05.14.07: Samba SAMR Change Password Remote Command Injection Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
What RedHat doesn't want you to know about ExecShield (without NX) (spender@...ecurity.net (Brad Spengler))
Ze Germans are coming ("anonymous.8d90275026" <anonymous.8d90275026@...nymousspeech.com>)
Re: What RedHat doesn't want you to know about ExecShield (without NX) (Valdis.Kletnieks@...edu)
Re: What RedHat doesn't want you to know about ExecShield (without NX) (h4h <aza@...teh8.org>)
Re: [Dailydave] What RedHat doesn't want you to know about ExecShield (without NX) (Steve Grubb <sgrubb@...hat.com>)
Wordpress Akismet XSS flaw (mybeni websecurity <mybeni@...eni.rootzilla.de>)
Re: What RedHat doesn't want you to know about ExecShield (without NX) (spender@...ecurity.net (Brad Spengler))
Re: Linux big bang theory.... (Troy <gimmespam@...il.com>)
[USN-459-1] pptpd vulnerability (Kees Cook <kees@...ntu.com>)

[SECURITY] [DSA 1292-1] New qt4-x11 packages fix cross-site scripting vulnerability (Noah Meyerhans <noahm@...ian.org>)
[USN-460-1] Samba vulnerabilities (Kees Cook <kees@...ntu.com>)
Month of [something] Bugs ("Guasconi Vincent" <tyoptyop@...il.com>)
Re: Exciting new Paimei release! (Jared DeMott <demottja@....edu>)
Windows POC ("Stack Smasher" <stacksmasher@...il.com>)
Re: Windows POC ("Larry Seltzer" <Larry@...ryseltzer.com>)
Re: Windows POC ("Larry Seltzer" <Larry@...ryseltzer.com>)
About the Post: Exciting new Paimei release! (Jared DeMott <demottja@....edu>)
Re: Windows POC (str0ke <str0ke@...w0rm.com>)
Re: Month of [something] Bugs ("Kristian Hermansen" <kristian.hermansen@...il.com>)
Re: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60) ("Robert McArdle" <robertmcardle@...il.com>)
(no subject) ("wafa louis" <w_jl63@...mail.com>)
Re: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60) (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60) (Michael Holstein <michael.holstein@...ohio.edu>)
Re: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60) (Davide Del Vecchio <dante@...ghieri.org>)
CA BrightStor ARCserve Backup Mediasvr.exe and caloggerd.exe Vulnerabilities ("Williams, James K" <James.Williams@...com>)
A Story about my Childhood: Destionation Whitehat ("Ross Brown" <rossbrown42@...glemail.com>)

May 19 (6 messages)

Spoofing via Google ("Aaron Gray" <angray@...b.net>)
Re: PsychoStats 3.0.6b and prior (kefka <kefka@...inbeardsucks.com>)
[SECURITY] [DSA 1295-1] New php5 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Erratasec Research MD5 ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
[ MDKSA-2007:106 ] - Updated squirrelmailpackages fix vulnerabilities (security@...driva.com)
finance ("Salman Al Olayan" <saudi-industrial@...mail.com>)

May 20 (9 messages)

Rainbow tables and Oracle SYSTEM salt (coderman <coderman@...il.com>)
FLEA-2007-0020-1: freetype (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
[ MDKSA-2007:109 ] - Updated tetex packages fix vulnerabilities (security@...driva.com)
Re: Cisco CallManager 4.1 Input ValidationVulnerability ("Mark-David McLaughlin \(marmclau\)" <marmclau@...co.com>)
Secunia Research: eScan Products Agent Service Command Decryption Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
rPSA-2007-0107-1 mysql mysql-bench mysql-server (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0108-1 freetype (rPath Update Announcements <announce-noreply@...th.com>)
Re: TCP/IP vulnerability ("Mohit Kohli" <mkohli@...hMahindra.com>)
Re: TCP/IP vulnerability (Andrew Farmer <andfarm@...il.com>)
[ MDKSA-2007:104-1 ] - Updated samba packages fix multiple vulnerabilities (security@...driva.com)
Re: Rainbow tables and Oracle SYSTEM salt ("Knud Erik Højgaard" <kokanin@...il.com>)
[OpenPKG-SA-2007.018] OpenPKG Security Advisory (freetype) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
WordPress Community Vulnerable ("David Kierznowski" <david.kierznowski@...il.com>)
Re: WordPress Community Vulnerable ("Larry Seltzer" <Larry@...ryseltzer.com>)
n.runs-SA-2007.008 - Avast! Antivirus CAB parsing Arbitrary Code Execution Advisory (<security@...ns.com>)
Re: WordPress Community Vulnerable (Valdis.Kletnieks@...edu)
Re: WordPress Community Vulnerable ("Steven Adair" <steven@...urityzone.org>)
[SECURITY] [DSA 1297-1] New gforge-plugin-scmcvs packages fix arbitrary shell command execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: WordPress Community Vulnerable (Paul Schmehl <pauls@...allas.edu>)
Re: WordPress Community Vulnerable ("Steven Adair" <steven@...urityzone.org>)
Re: WordPress Community Vulnerable (Kradorex Xeron <admin@...ibase.ca>)
OpenBSD owned ("Suzuki Kawasaki" <dsphunxion@...il.com>)
Re: OpenBSD owned (security curmudgeon <jericho@...rition.org>)
Re: OpenBSD owned ("Robert Wesley McGrew" <wesley@...rewsecurity.com>)
Re: OpenBSD owned (Timo Schoeler <timo.schoeler@...cworks.net>)
Re: OpenBSD owned (Timo Schoeler <timo.schoeler@...cworks.net>)
Re: OpenBSD owned (charlie derr <cderr@...ons-rock.edu>)
FLEA-2007-0021-1: madwifi (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
FLEA-2007-0022-1: file (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Re: OpenBSD owned (don bailey <don.bailey@...il.com>)
iDefense Security Advisory 05.24.07: Apple Computer Mac OS X pppd Plugin Loading Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
rPSA-2007-0109-1 file (rPath Update Announcements <announce-noreply@...th.com>)
[USN-464-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)

[USN-465-1] PulseAudio vulnerability (Kees Cook <kees@...ntu.com>)
Long live the phrack (<theinnercircle@...hmail.com>)
Re: Linux big bang theory.... (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: [ GLSA 200705-07 ] Lighttpd: Two Denials of Service ("Michel Arboi" <michel.arboi@...il.com>)
Re: Linux big bang theory.... (Valdis.Kletnieks@...edu)
[ GLSA 200705-19 ] PHP: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
[ GLSA 200705-20 ] Blackdown Java: Applet privilege escalation (Raphael Marichez <falco@...too.org>)
How to protect RFI ?? ("Mark Sec" <mark.sec@...il.com>)
Re: How to protect RFI ?? ("Jamie Riden" <jamie.riden@...il.com>)
PHRACK 64 Released (The Circle of Lost Hackers <circle@...ack.org>)

May 27 (5 messages)

Re: How to protect RFI ?? (Kradorex Xeron <admin@...ibase.ca>)
Re: Linux big bang theory.... (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
phpPgAdmin Multiple XSS Vulnerabilities ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
OpenOffice.org 2.2.0 Writer DoS vulnerability ("carl hardwick" <hardwick.carl@...il.com>)
OpenOffice.org 2.2.0 Writer DoS vulnerability ("carl hardwick" <hardwick.carl@...il.com>)

n.runs-SA-2007.011 - Avira Antivir Antivirus UPX parsing Divide by Zero Advisory (<security@...ns.com>)
Hashes ("I)ruid" <druid@...ghq.org>)
CyTRAP Labs - Urs+Nahum's Security Checklist (CyTRAP Labs - advisory <Report_exploit@...RAP.eu>)
alexa.com XSS ("MC Iglo" <mc.iglo@...glemail.com>)
BO in http://rad.msn.com/ADSAdClient31.dll ("eytan drory" <e-drory@...ener.org.il>)
Re: Hashes (Kradorex Xeron <admin@...ibase.ca>)
Re: Hashes ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: alexa.com XSS ("Morning Wood" <se_cur_ity@...mail.com>)
Re: Hashes (Spudster <spudster3@...il.com>)
Re: Hashes ("Open Phugu" <openphugu@...il.com>)
Re: alexa.com XSS (kefka <kefka@...inbeardsucks.com>)
Re: CyTRAP Labs - Urs+Nahum's Security Checklist (blah <blah@...kogre.com>)

Re: im in yr boxor. crackin yr pedophilez. ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Firefox 2.0.0.4 0day local file reading flaw ("carl hardwick" <hardwick.carl@...il.com>)
0day to sell ("toto toto" <snacker@...uxmail.org>)
CORRECTION: June 1st Chicago 2600 Meeting Information ("Steven McGrath" <steven.mcgrath@...geek.com>)
June 1st Chicago 2500 Meeting Information ("Steven McGrath" <steven.mcgrath@...geek.com>)
CyTRAP Labs - Urs+Nahum's Security Checklist (CyTRAP Labs - advisory <Report_exploit@...RAP.eu>)
Palimm Palimmm (Thierry Zoller <Thierry@...ler.lu>)
Re: Palimm Palimmm (Marcus Meissner <meissner@...e.de>)
Re: Palimm Palimmm (Thierry Zoller <Thierry@...ler.lu>)
Re: Palimm Palimmm (mailing-lists <mailing-lists@...pl>)
Re: Palimm Palimmm ("Joey Mengele" <joey.mengele@...hmail.com>)
[ GLSA 200705-23 ] Sun JDK/JRE: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
[ GLSA 200705-24 ] libpng: Denial of Service (Raphael Marichez <falco@...too.org>)
[ GLSA 200705-25 ] file: Integer overflow (Raphael Marichez <falco@...too.org>)
Microsoft Windows Active Directory Logon Hours User Enumeration Weakness ("Sumit Siddharth" <sid@...sosecure.com>)
Re: Certain Prior Notices Concerning the Unauthorized Distribution of HBO Television Programming (Michael Holstein <michael.holstein@...ohio.edu>)
FLEA-2007-0023-1: firefox (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
[USN-467-1] Gimp vulnerability (Kees Cook <kees@...ntu.com>)
rPSA-2007-0112-1 firefox thunderbird (rPath Update Announcements <announce-noreply@...th.com>)

570 messages