full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2007/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 35	² 62	³ 10	⁴ 24
⁵ 29	⁶ 14	⁷ 13	⁸ 28	⁹ 33	¹⁰ 21	¹¹ 13
¹² 36	¹³ 23	¹⁴ 32	¹⁵ 18	¹⁶ 14	¹⁷ 14	¹⁸ 16
¹⁹ 14	²⁰ 30	²¹ 17	²² 11	²³ 4	²⁴ 1	²⁵ 7
²⁶ 16	²⁷ 20	²⁸ 17	²⁹ 16	³⁰ 12

Messages by day:

November 1 (35 messages)

Re: spammer wades into US Presidential race ("lsi" <stuart@...erdelix.net>)
Re: Flash that simulates virus scan (reepex <reepex@...il.com>)
Re: ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability (reepex <reepex@...il.com>)
Re: ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability (reepex <reepex@...il.com>)
Re: spammer wades into US Presidential race ("Aaron Katz" <atkatz@...il.com>)
Re: Flash that simulates virus scan (scott <redhowlingwolves@...lsouth.net>)
Re: Flash that simulates virus scan (Nick FitzGerald <nick@...us-l.demon.co.uk>)
an open letter to kevin bacon: hello, how's it going? (silky <michaelslists@...il.com>)
SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client (Bernhard Mueller <research@...-consult.com>)
Re: Full-Disclosure Digest, Vol 33, Issue 1 (Joxean Koret <joxeankoret@...oo.es>)
Re: Flash that simulates virus scan (Simon Smith <simon@...soft.com>)
Re: an open letter to kevin bacon: hello, how's it going? ("Kollberg, Dirk" <Dirk_Kollberg@...rtlabs.com>)
[ MDKSA-2007:203 ] - Updated xen packages fix multiple vulnerabilities (security@...driva.com)
Re: mac trojan in-the-wild (nnp <version5@...il.com>)
Re: Full-Disclosure Digest, Vol 33, Issue 1 (reepex <reepex@...il.com>)
Re: mac trojan in-the-wild (reepex <reepex@...il.com>)
[ MDKSA-2007:204 ] - Updated cups packages fix vulnerability (security@...driva.com)
rPSA-2007-0227-1 cups (rPath Update Announcements <announce-noreply@...th.com>)
mac trojan in-the-wild (Gadi Evron <ge@...uxbox.org>)
Re: mac trojan in-the-wild (Steven Block <scblock@...15.com>)
Re: mac trojan in-the-wild ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: mac trojan in-the-wild (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: mac trojan in-the-wild (Paul Schmehl <pauls@...allas.edu>)
Re: mac trojan in-the-wild (reepex <reepex@...il.com>)
Re: mac trojan in-the-wild (Paul Schmehl <pauls@...allas.edu>)
Re: mac trojan in-the-wild (reepex <reepex@...il.com>)
Re: mac trojan in-the-wild (nnp <version5@...il.com>)
Re: mac trojan in-the-wild (Nick FitzGerald <nick@...us-l.demon.co.uk>)
N3TD3V INTERNET SECURITY THREAT CENTER ("worried security" <worriedsecurity@...glemail.com>)
[ GLSA 200711-01 ] gFTP: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Re: mac trojan in-the-wild ("Dude VanWinkle" <dudevanwinkle@...il.com>)
[ GLSA 200711-02 ] OpenSSH: Security bypass (Pierre-Yves Rofes <py@...too.org>)
Re: mac trojan in-the-wild (nnp <version5@...il.com>)
[ GLSA 200711-03 ] Gallery: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Re: mac trojan in-the-wild (Peter Besenbruch <prb@...a.net>)

November 2 (62 messages)

Re: mac trojan in-the-wild ("worried security" <worriedsecurity@...glemail.com>)
Re: mac trojan in-the-wild ("Alex Eckelberry" <AlexE@...belt-software.com>)
XSS - www.howtoforge.com ("Emmanouil Gavriil" <emmanouilgavriil@...il.com>)
Re: mac trojan in-the-wild ("Adam St. Onge" <adamst.onge@...il.com>)
Re: mac trojan in-the-wild ("Roger A. Grimes" <roger@...neretcs.com>)
Re: mac trojan in-the-wild (Jim Harrison <Jim@...tools.org>)
Re: [botnets] re MAC trojan (fwd) (Gadi Evron <ge@...uxbox.org>)
Re: mac trojan in-the-wild (Gadi Evron <ge@...uxbox.org>)
Re: mac trojan in-the-wild (Peter Besenbruch <prb@...a.net>)
Re: mac trojan in-the-wild (Paul Schmehl <pauls@...allas.edu>)
Re: mac trojan in-the-wild (Jay Sulzberger <jays@...ix.com>)
Re: mac trojan in-the-wild (Paul Schmehl <pauls@...allas.edu>)
Re: mac trojan in-the-wild (Jay Sulzberger <jays@...ix.com>)
Re: mac trojan in-the-wild ("Thor (Hammer of God)" <thor@...merofgod.com>)
Skype IM upgrade/repair automated social engineering attack (Dragos Ruiu <dr@....net>)
Re: mac trojan in-the-wild (Jay Sulzberger <jays@...ix.com>)
Re: mac trojan in-the-wild (Peter Besenbruch <prb@...a.net>)
Re: mac trojan in-the-wild (Paul Schmehl <pauls@...allas.edu>)
Re: mac trojan in-the-wild ("Steven Adair" <steven@...urityzone.org>)
Re: XSS - www.howtoforge.com (reepex <reepex@...il.com>)
Re: mac trojan in-the-wild (Paul Schmehl <pauls@...allas.edu>)
Re: mac trojan in-the-wild (Jay Sulzberger <jays@...ix.com>)
Re: [botnets] re MAC trojan (fwd) (reepex <reepex@...il.com>)
Re: N3TD3V INTERNET SECURITY THREAT CENTER (reepex <reepex@...il.com>)
Re: mac trojan-vs-USERS ("RMueller" <randallm@...mail.com>)
Re: N3TD3V INTERNET SECURITY THREAT CENTER (scott <redhowlingwolves@...lsouth.net>)
Re: mac trojan in-the-wild (Nick FitzGerald <nick@...us-l.demon.co.uk>)
the heart of the problem [was: RE: mac trojan in-the-wild] (Gadi Evron <ge@...uxbox.org>)
Re: mac trojan in-the-wild ("Roger A. Grimes" <roger@...neretcs.com>)
Secunia Research: ACDSee Products Image and Archive Plug-ins Buffer Overflows (Secunia Research <remove-vuln@...unia.com>)
Re: mac trojan in-the-wild ("Robert McArdle" <robertmcardle@...il.com>)
Re: mac trojan in-the-wild ("Robert McArdle" <robertmcardle@...il.com>)
Re: [funsec] the heart of the problem [was: RE: mac trojan in-the-wild] (Drsolly <drsollyp@...olly.com>)
Re: mac trojan in-the-wild ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: the heart of the problem [was: RE: mac trojan in-the-wild] ("Roger A. Grimes" <roger@...neretcs.com>)
Re: XSS - bank of america ("kevin horvath" <kevin.horvath@...il.com>)
Re: spammer wades into US Presidential race ("Aaron Katz" <atkatz@...il.com>)
Re: [funsec] the heart of the problem [was: RE: mac trojan in-the-wild] (yiri <yirimyah@...il.com>)
Re: mac trojan-vs-USERS (<full-disclosure@....hush.com>)
[USN-537-2] Compiz vulnerability (Kees Cook <kees@...ntu.com>)
Re: [OSX Ninjashe] ("Muskegon Whitehall" <muskegon.whitehall@...il.com>)
Re: spammer wades into US Presidential race ("lsi" <stuart@...erdelix.net>)
Matasano on the mac "trojan" (reepex <reepex@...il.com>)
The Daytona Nine: Shallow, Behringer ("tom skilling jr." <manweather@...oo.com>)
oracle (<oraclefun@...hmail.com>)
[UPH-07-01] Firefly Media Server DoS (nnp <version5@...il.com>)
[UPH-07-02] Firefly Media Server DoS (nnp <version5@...il.com>)
[UPH-07-03] Firefly Media Server remote format string vulnerability (nnp <version5@...il.com>)
Re: [UPH-07-03] Firefly Media Server remote format string vulnerability (nnp <version5@...il.com>)
Re: [UPH-07-01] Firefly Media Server DoS (nnp <version5@...il.com>)
Re: mac trojan in-the-wild ("David Harley" <david.a.harley@...il.com>)
Firefox 2.0.0.9 remote DoS vulnerability ("carl hardwick" <hardwick.carl@...il.com>)
Re: mac trojan in-the-wild ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Local Privilege Escalation in Norton AntiVirus for Mac ("William A. Carrel" <william.a@...rel.org>)
Re: mac trojan in-the-wild ("J. Oquendo" <sil@...iltrated.net>)
Re: mac trojan in-the-wild ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: mac trojan in-the-wild (reepex <reepex@...il.com>)
DoS Exploit for DHCPd bug (Bugtraq ID 25984 ; CVE-2007-5365) (Roman Medina-Heigl Hernandez <roman@...labs.com>)
Re: mac trojan in-the-wild (Simon Smith <simon@...soft.com>)
[ MDKSA-2007:205 ] - Updated opal packages fix vulnerability (security@...driva.com)
[ MDKSA-2007:206 ] - Updated pwlib packages fix vulnerability (security@...driva.com)
Re: mac trojan in-the-wild -- antair restored (gjgowey@...il.com)

November 3 (10 messages)

Re: mac trojan in-the-wild ("David Harley" <david.a.harley@...il.com>)
eBay redirects: next step in fake blogs and web search abuse (Gadi Evron <ge@...uxbox.org>)
Re: [funsec] eBay redirects: next step in fake blogs and web searchabuse ("Larry Seltzer" <Larry@...ryseltzer.com>)
[SECURITY] [DSA 1397-1] New mono packages fix integer overflow (Moritz Muehlenhoff <jmm@...ian.org>)
Bank Of America Vulnerable ("Jamal Al-Aseer" <suproot@...il.com>)
SF-Shoutbox 1.2.1 <= 1.4 HTML/JS Injection Vulnerability (SkyOut <skyout@....net>)
Re: Bank Of America Vulnerable (nocfed <nocfed@...il.com>)
stop cross posting ("worried security" <worriedsecurity@...glemail.com>)
IDS logs showing outgoing packets on port 80 ("Kelly Robinson" <caliana1989@...il.com>)
Suspicious URL in IDS ("Kelly Robinson" <caliana1989@...il.com>)

November 4 (24 messages)

Re: Suspicious URL in IDS (Andrew Farmer <andfarm@...il.com>)
Re: stop cross posting ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: IDS logs showing outgoing packets on port 80 ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Chris-chan Christian Chandler (Bud Frank <youtubewatchdog@...oo.com>)
breaking SIP for fun and toll fraud ("Radu State" <State@...ia.fr>)
browser exploit web sites ("Geo." <geoincidents@....net>)
Re: IDS logs showing outgoing packets on port 80 ("Morning Wood" <se_cur_ity@...mail.com>)
Re: stop cross posting (reepex <reepex@...il.com>)
Re: stop cross posting ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: breaking SIP for fun and toll fraud (reepex <reepex@...il.com>)
on xss and its technical merit (reepex <reepex@...il.com>)
Re: on xss and its technical merit (gjgowey@....blackberry.net)
Re: on xss and its technical merit (Volker Tanger <vtlists@...e.de>)
Re: on xss and its technical merit (reepex <reepex@...il.com>)
Re: on xss and its technical merit (reepex <reepex@...il.com>)
Re: on xss and its technical merit (reepex <reepex@...il.com>)
Re: on xss and its technical merit ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: on xss and its technical merit ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: on xss and its technical merit (nate.mcfeters@...il.com)
Re: on xss and its technical merit ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: on xss and its technical merit ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: on xss and its technical merit ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: on xss and its technical merit ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: on xss and its technical merit (reepex <reepex@...il.com>)

November 5 (29 messages)

Re: on xss and its technical merit (reepex <reepex@...il.com>)
Conferences material, etc (Roman Medina-Heigl Hernandez <roman@...labs.com>)
Re: on xss and its technical merit (reepex <reepex@...il.com>)
Re: on xss and its technical merit ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
[Tool] sqlmap: a blind SQL injection tool (release 0.5) (Bernardo Damele <bernardo.damele@...il.com>)
Re: on xss and its technical merit ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
Re: browser exploit web sites (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: on xss and its technical merit ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: on xss and its technical merit ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: on xss and its technical merit ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
[SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution (Noah Meyerhans <noahm@...ian.org>)
Re: on xss and its technical merit (nate.mcfeters@...il.com)
Re: on xss and its technical merit ("Eric Rachner" <eric@...hner.us>)
iDefense Security Advisory 11.02.07: Sun Microsystems Solaris srsexec Format String Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: mac trojan in-the-wild (Peter Besenbruch <prb@...a.net>)
Re: Firefox 2.0.0.9 remote DoS vulnerability (Ismail Dönmez <ismail@...dus.org.tr>)
Re: Firefox 2.0.0.9 remote DoS vulnerability (Shyaam <shyaam@...il.com>)
Re: mac trojan in-the-wild ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: mac trojan in-the-wild (Paul Schmehl <pauls@...allas.edu>)
sometimes peepee goes in my mouf (Dirty Sanchez <whataboutmyassitshardfromsports@...oo.com>)
[NETRAGARD-20070313 SECURITY ADVISORY] [OpenBase SQL Relational Database 10.0.5 - SYSTEM/root compromise] (Netragard Security Advisories <advisories@...ragard.…)
iDefense Security Advisory 11.05.07: Apple QuickTime Panorama Sample Atom Heap Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[SECURITY] [DSA 1399-1] New pcre3 packages fix arbitrary code execution (Florian Weimer <fw@...ian.org>)
Leopard's firewall damages Skype and WoW (Juergen Schmidt <ju@...heise.de>)
ZDI-07-065: Apple QuickTime Color Table RGB Parsing Heap Corruption Vulnerability (zdi-disclosures@...m.com)
ZDI-07-068: Apple QuickTime Uncompressedfile Opcode Stack Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability (zdi-disclosures@...m.com)
ZDI-07-066: Apple Quicktime PICT File PackBitsRgn Parsing Heap Corruption Vulnerability (zdi-disclosures@...m.com)
[SECURITY] [DSA 1401-1] New iceape packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)

November 6 (14 messages)

[ MDKSA-2007:207 ] - Updated perl packages fix vulnerability (security@...driva.com)
[ MDKSA-2007:208 ] - Updated ghostscript packages fix vulnerability (security@...driva.com)
[ MDKSA-2007:209 ] - Updated netpbm packages fix vulnerability (security@...driva.com)
[USN-539-1] CUPS vulnerability (Kees Cook <kees@...ntu.com>)
MySQL 5.x DoS (unknown) ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Re: Firefox 2.0.0.9 remote DoS vulnerability (FRLinux <frlinux@...il.com>)
rPSA-2007-0232-1 perl (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0232-1 perl (rPath Update Announcements <announce-noreply@...th.com>)
iDefense Security Advisory 11.06.07: Microsoft DebugView Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
rPSA-2007-0231-1 pcre (rPath Update Announcements <announce-noreply@...th.com>)
These days of several XSS vulns on known sites (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[ GLSA 200711-04 ] Evolution: User-assisted remote execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ MDKSA-2007:210 ] - Updated xfs package prevents arbitrary code execution vulnerabilities (security@...driva.com)
[ GLSA 200711-05 ] SiteBar: Multiple issues (Pierre-Yves Rofes <py@...too.org>)

November 7 (13 messages)

[SECURITY] [DSA 1400-1] New perl packages fix arbitrary code execution (Florian Weimer <fw@...ian.org>)
Re: Firefox 2.0.0.9 remote DoS vulnerability ("Martin Aberastegue" <xyborg@...il.com>)
Secunia Research: Link Grammar "separate_sentence()" Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: AbiWord Link Grammar "separate_sentence()" Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
[ GLSA 200711-06 ] Apache: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-07 ] Python: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-08 ] libpng: Multiple Denials of Service (Pierre-Yves Rofes <py@...too.org>)
[SECURITY] [DSA 1402-1] New gforge packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
[ GLSA 200711-09 ] MadWifi: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
Announcement : CCWAPSS methodology release 1.1 (Frederic Charpentier <fcharpen@...opartners.com>)
iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ GLSA 200711-10 ] Mono: Buffer overflow (Pierre-Yves Rofes <py@...too.org>)

November 8 (28 messages)

Gmail 0day ("Scripter Hack" <xss2root@...il.com>)
Re: spammer wades into US Presidential race ("lsi" <stuart@...erdelix.net>)
Re: spammer wades into US Presidential race ("James Matthews" <nytrokiss@...il.com>)
[OpenPKG-SA-2007.023] OpenPKG Security Advisory (perl) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
Re: spammer wades into US Presidential race (Bob Bruen <bruen@...drain.net>)
Re: Gmail 0day ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
Hushmail == Narqz ("Paul Melson" <pmelson@...il.com>)
[ GLSA 200711-11 ] Nagios Plugins: Two buffer overflows (Pierre-Yves Rofes <py@...too.org>)
Re: Hushmail == Narqz ("Peter Dawson" <slash.pd@...il.com>)
Re: Gmail 0day (silky <michaelslists@...il.com>)
Re: Hushmail == Narqz (adnan habib <lifesaver68@...mail.com>)
Re: Hushmail == Narqz (Simon Smith <simon@...soft.com>)
[ GLSA 200711-12 ] Tomboy: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
Re: Hushmail == Narqz ("php0t" <php0t@...ro.hu>)
Re: spammer wades into US Presidential race ("Aaron Katz" <atkatz@...il.com>)
[ GLSA 200711-13 ] 3proxy: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
Re: Hushmail == Narqz (Michael Bann <mbann@...s.umn.edu>)
Re: Gmail 0day ("Juergen Marester" <marester.juergen@...il.com>)
[ MDKSA-2007:211 ] - Updated pcre packages fix vulnerability (security@...driva.com)
[ MDKSA-2007:212 ] - Updated pcre packages fix vulnerability (security@...driva.com)
[ MDKSA-2007:213 ] - Updated pcre packages fix vulnerability (security@...driva.com)
Re: Gmail 0day (silky <michaelslists@...il.com>)
Re: Gmail 0day ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: Gmail 0day ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: Gmail 0day (silky <michaelslists@...il.com>)
AST-2007-024 - Fallacious security advisory spread on the Internet involving buffer overflow in Zaptel's sethdlc appli… (The Asterisk Development Team <security…)
Re: Gmail 0day (jam@...dtechnologies.com)
Re: Gmail 0day (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

November 9 (33 messages)

[ MDKSA-2007:214 ] - Updated flac packages fix vulnerability (security@...driva.com)
JAR: protocol vulnerability in Firefox, word processing applications reported (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Dissecting The Electronic Jihad v3.0 ("Dancho Danchev" <dancho.danchev@...il.com>)
[SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 1404-1] New gallery2 packages fix privilege escalation (Thijs Kinkhorst <thijs@...ian.org>)
Adobe Shockwave ShockwaveVersion() Stack Overflow (Elazar Broad <elazarb@...thlink.net>)
[ MDKSA-2007:215 ] - Updated openldap packages fix vulnerability (security@...driva.com)
CanSecWest 2008 CFP (deadline Nov 30, conf Mar 26-28) and PacSec Dojo's (Dragos Ruiu <dr@....net>)
still some 0days to sell ("Juergen Marester" <marester.juergen@...il.com>)
Re: still some 0days to sell (Michael Bann <mbann@...s.umn.edu>)
Re: still some 0days to sell ("T Biehn" <tbiehn@...il.com>)
Re: Hushmail == Narqz (Byron Sonne <blsonne@...ers.com>)
Re: Gmail 0day ("XSS Worm XSS Security Information Portal" <cross-site-scripting-security@...worm.com>)
Re: Hushmail == Narqz (Simon Smith <simon@...soft.com>)
Why I hate you (and a philanthropic challenge!) (don bailey <don.bailey@...il.com>)
Re: Why I hate you (and a philanthropic challenge!) ("John C. A. Bambenek, CISSP" <bambenek.infosec@...il.com>)
Re: Hushmail == Narqz ("Micheal Espinola Jr" <michealespinola@...il.com>)
Re: Why I hate you (and a philanthropic challenge!) ("T Biehn" <tbiehn@...il.com>)
Exploit Brokering (Simon Smith <simon@...soft.com>)
Re: Exploit Brokering (Thierry Zoller <Thierry@...ler.lu>)
Re: Exploit Brokering (Simon Smith <simon@...soft.com>)
Re: Exploit Brokering (Simon Smith <simon@...soft.com>)
Re: Exploit Brokering (Simon Smith <simon@...soft.com>)
Re: Exploit Brokering (security curmudgeon <jericho@...rition.org>)
Re: Exploit Brokering (jf <jf@...glingpointers.net>)
Re: Exploit Brokering (Thierry Zoller <Thierry@...ler.lu>)
iDefense Security Advisory 11.09.07: AOL AmpX ActiveX Control Multiple Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
Re: Exploit Brokering (Simon Smith <simon@...soft.com>)
Re: Exploit Brokering (Valdis.Kletnieks@...edu)
Re: Exploit Brokering (Simon Smith <simon@...soft.com>)
Re: Exploit Brokering (Thierry Zoller <Thierry@...ler.lu>)
Re: Exploit Brokering (Simon Smith <simon@...soft.com>)
iDefense Security Advisory 11.09.07: IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

November 10 (21 messages)

Re: Gmail 0day ("Adrian P" <unknown.pentester@...il.com>)
[SECURITY] [DSA 1405-1] New zope-cmfplone packages fix arbitrary code execution (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 1406-1] New horde3 packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Canonicalization issues in Flash Cross-domain policy file request (s4tan <s4tan@....it>)
Re: still some 0days to sell ("Joey Mengele" <joey.mengele@...hmail.com>)
MS explorer.exe high_load caused by malformed png (Code Audit Labs <vulnhunt@...il.com>)
FLEA-2007-0063-1 perl (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Re: MS explorer.exe high_load caused by malformed png (cocoruder. <frankruder@...mail.com>)
0day Shockwave and Flash XSS Fish Exploits on Youtube, Revver, Metacafe, Google. ("XSS Worm XSS Security Information Portal" <cross-site-scripting-security@xs…)
RealPlayer 0-day exploit was found in malicious (lzscg <lzscg@....com>)
A friend wants to Share Favorites with you (gautam.singh@...il.com)
Standing Up Against German Laws - Project HayNeedle (Paul Sebastian Ziegler <psz@...erved.de>)
Re: Standing Up Against German Laws - Project HayNeedle (Nico Golde <fd@...lde.de>)
Re: Standing Up Against German Laws - ProjectHayNeedle (nate.mcfeters@...il.com)
Re: Standing Up Against German Laws - Project HayNeedle (Paul Sebastian Ziegler <psz@...erved.de>)
Re: Standing Up Against German Laws - ProjectHayNeedle (Paul Sebastian Ziegler <psz@...erved.de>)
Re: Exploit Brokering (don bailey <don.bailey@...il.com>)
300$ is more than 0$ (don bailey <don.bailey@...il.com>)
Re: Standing Up Against German Laws - Project HayNeedle ("LT" <lt@....hush.com>)
Re: 300$ is more than 0$ (reepex <reepex@...il.com>)

November 11 (13 messages)

Re: 300$ is more than 0$ ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
Wiretapping ("Kelly Robinson" <caliana1989@...il.com>)
Re: Standing Up Against German Laws - Project HayNeedle (Paul Sebastian Ziegler <psz@...erved.de>)
Re: 300$ is more than 0$ ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
Re: Wiretapping ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
BT Home Flub: Pwnin the BT Home Hub - Vulnerabilities details published ("Adrian P" <unknown.pentester@...il.com>)
WabiSabiLabi Co-Founder Arrested ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
Re: WabiSabiLabi Co-Founder Arrested (<auto221567@...hmail.com>)
Norfolkdesign.com theft and deceit (<netwatch@...hmail.com>)
Re: Norfolkdesign.com theft and deceit (<netwatch@...hmail.com>)
Alice - dns spoofer (fabio <ctrlaltca@...ero.it>)
Re: Norfolkdesign.com theft and deceit (<netwatch@...hmail.com>)
Cyber Jihad? Yeah, right... ("worried security" <worriedsecurity@...glemail.com>)

November 12 (36 messages)

Re: Cyber Jihad? Yeah, right... ("Kollberg, Dirk" <Dirk_Kollberg@...rtlabs.com>)
Re: Wiretapping ("Joel R. Helgeson" <joel@...geson.com>)
Re: Wiretapping (nate.mcfeters@...il.com)
FLEA-2007-0065-1 libpng (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
FLEA-2007-0066-1 ImageMagick (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
FLEA-2007-0067-1 pidgin (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
FLEA-2007-0068-1 ruby (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
FLEA-2007-0064-1 pcre (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
FLEA-2007-0069-1 perl (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Port scanning question...SYN/FIN ... SYN/ACK ("Kelly Robinson" <caliana1989@...il.com>)
Re: Standing Up Against German Laws - Project HayNeedle (Vincent Archer <varcher@...yall.com>)
Re: Port scanning question...SYN/FIN ... SYN/ACK ("Abuse 007" <abuse007@...il.com>)
Cisco IOS Shellcode ("Research" <Research@...plc.com>)
Re: Wiretapping (Kevin Wilcox <kevin@....appstate.edu>)
Re: Wiretapping (Michael Holstein <michael.holstein@...ohio.edu>)
Re: Standing Up Against German Laws - Project HayNeedle (Jan Newger <memger@....net>)
Office Web Controls DataSourceControl Memory Access Violation (Elazar Broad <elazarb@...thlink.net>)
[SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression (Thijs Kinkhorst <thijs@...ian.org>)
CVE-2007-3694: Cross site scripting (XSS) in broadcast machine ("Hanno Böck" <hanno@...eck.de>)
Re: Exploit Brokering ("Joey Mengele" <joey.mengele@...hmail.com>)
Re: Norfolkdesign.com theft and deceit ("Ronnie - Norfolk Design" <ronnie@...folkdesign.com>)
Re: Cyber Jihad? Yeah, right... (Mario D <phisher_hunter@...oo.com>)
Re: Wiretapping (Valdis.Kletnieks@...edu)
Re: wiretapping -- antair restored (gjgowey@....blackberry.net)
Re: Cyber Jihad? Yeah, right... ("Steven Adair" <steven@...urityzone.org>)
Re: Port scanning question...SYN/FIN ... SYN/ACK (Paul Schmehl <pauls@...allas.edu>)
Re: Wiretapping ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
Re: Port scanning question...SYN/FIN ... SYN/ACK ("Steven Adair" <steven@...urityzone.org>)
Re: Norfolkdesign.com theft and deceit ("Morning Wood" <se_cur_ity@...mail.com>)
iDefense Security Advisory 11.12.07: WinPcap NPF.SYS bpf_filter_init Arbitrary Array Indexing Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ GLSA 200711-14 ] Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-15 ] FLAC: Buffer overflow (Pierre-Yves Rofes <py@...too.org>)
[ MDKSA-2007:204-1 ] - Updated cups packages fix vulnerability (security@...driva.com)
[ GLSA 200711-16 ] CUPS: Memory corruption (Pierre-Yves Rofes <py@...too.org>)
Re: Standing Up Against German Laws - Project HayNeedle (johan beisser <jb@...stic.org>)
0day0day0day0day AURACMS XSS!! LATEST VERSION!!! 0day0day0day0day ("ULTRA.HAQRS.4.ALL ULTRA.HAQRS.4.ALL" <ultra.haqrs.4.all@...il.com>)

November 13 (23 messages)

Microsoft Remote Help safrcdlg.dll Buffer Overflow (Elazar Broad <elazarb@...thlink.net>)
Microsoft Forms 2.0 Controls Multiple Memory Access Violations (Elazar Broad <elazarb@...thlink.net>)
Security contact @ TrendMicro? (Sowhat <smaillist@...il.com>)
Re: Standing Up Against German Laws - Project HayNeedle ("Sysman" <sysman@...l.com>)
Re: Standing Up Against German Laws - Project HayNeedle (Paul Sebastian Ziegler <psz@...erved.de>)
Skype network scanning? (halfdog@....at)
End of the world? (<whupass@...hmail.com>)
Re: End of the world? ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
Re: Standing Up Against German Laws - Project HayNeedle (Valdis.Kletnieks@...edu)
[ MDKSA-2007:216 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
Re: Standing Up Against German Laws - Project HayNeedle (Timo Schoeler <timo@...cworks.net>)
Oracle 11g/10g Installation Vulnerability ("David Litchfield" <davidl@...software.com>)
iDefense Security Advisory 11.12.07: Novell NetWare Client Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
WebEx GPCContainer Memory Access Violation (Elazar Broad <elazarb@...thlink.net>)
[paper] protocol hopping covert channels (Steffen Wendzel <cdp_xe@....net>)
Re: End of the world? (imipak <imipak@...il.com>)
[ MDKSA-2007:217 ] - Updated libpng packages fix multiple vulnerabilities (security@...driva.com)
[USN-540-1] flac vulnerability (Kees Cook <kees@...ntu.com>)
[USN-541-1] Emacs vulnerability (Kees Cook <kees@...ntu.com>)
Crafted SYN Packets... ("Kelly Robinson" <caliana1989@...il.com>)
Re: Crafted SYN Packets... (Simon Smith <simon@...soft.com>)
Re: Crafted SYN Packets... (Paul Schmehl <pauls@...allas.edu>)
Re: Crafted SYN Packets... (Thierry Zoller <Thierry@...ler.lu>)

November 14 (32 messages)

Re: Crafted SYN Packets... (Dean Pierce <piercede@....edu>)
Re: Crafted SYN Packets... (nocfed <nocfed@...il.com>)
Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com ("XSS Worm XSS Security Information Portal" <cross-site-scripting-secu…)
Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com (Andrew Farmer <andfarm@...il.com>)
[USN-541-1] Emacs vulnerability (Kees Cook <kees@...ntu.com>)
[USN-542-1] poppler vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com (dave-san <dave@...verted.org>)
Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com ("XSS Worm XSS Security Information Portal" <cross-site-scripting-…)
Citrix Brute Force Tool ("Lohan Spies" <lohan.spies@...il.com>)
Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com (nocfed <nocfed@...il.com>)
Fwd: Citrix Brute Force Tool ("Lohan Spies" <lohan.spies@...il.com>)
Re: Fwd: Citrix Brute Force Tool ("James Matthews" <nytrokiss@...il.com>)
Re: Fwd: Citrix Brute Force Tool (foofus@...fus.net)
Predictable DNS transaction IDs in Microsoft DNS Server (Alla Bezroutchko <alla@...nit.be>)
Six Remote Memory Corruption Vulnerabilities in IBM WebSphere MQ 6.0 ("IRM Research" <research@...plc.com>)
Re: Oracle 11g/10g Installation Vulnerability ("Peter Dawson" <slash.pd@...il.com>)
Re: Standing Up Against German Laws - Project HayNeedle (streck@...afloh.de (Florian Streck))
[ MDKSA-2007:218 ] - Updated mono packages fix arbitrary code execution vulnerability (security@...driva.com)
Re: Standing Up Against German Laws - Project HayNeedle (imipak <imipak@...il.com>)
Re: WebEx GPCContainer Memory Access Violation (Elazar Broad <elazarb@...thlink.net>)
Re: Standing Up Against German Laws - Project HayNeedle ("Sysman" <sysman@...l.com>)
Re: Standing Up Against German Laws - Project HayNeedle (Florian Echtler <echtler@...tum.de>)
[ GLSA 200711-17 ] Ruby on Rails: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-18 ] Cpio: Buffer overflow (Pierre-Yves Rofes <py@...too.org>)
save gary mckinnon or lock away dan egerstad ("worried security" <worriedsecurity@...glemail.com>)
[ GLSA 200711-19 ] TikiWiki: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-20 ] Pioneers: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
Re: save gary mckinnon or lock away dan egerstad ("worried security" <worriedsecurity@...glemail.com>)
Re: save gary mckinnon or lock away dan egerstad ("James Rankin" <kz20fl@...glemail.com>)
iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk ASP Message Kernel Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk Socket IOCTL Kernel Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.co…)
iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk mbuf Kernel Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

November 15 (18 messages)

iDefense Security Advisory 11.14.07: Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
SUSE Security Announcement: xpdf and more (SUSE-SA:2007:060) (Thomas Biege <thomas@...e.de>)
Re: Standing Up Against German Laws - Project HayNeedle ("sysman" <sysman@...l.com>)
TPTI-07-20: Apple Quicktime Movie Stack Overflow Vulnerability (DVLabs <dvlabs@...pingpoint.com>)
Some hashes for the record (shadown <shadown@...il.com>)
Police swoop on 'hacker of the year' ("worried security" <worriedsecurity@...glemail.com>)
Re: Police swoop on 'hacker of the year' ("Peter Dawson" <slash.pd@...il.com>)
Re: save gary mckinnon or lock away dan egerstad (Jim Popovitch <yahoo@...pop.com>)
Re: n3td3v denounces the actions of www.derangedsecurity.com ("worried security" <worriedsecurity@...glemail.com>)
Re: n3td3v denounces the actions of www.derangedsecurity.com ("XSS Worm XSS Security Information Portal" <cross-site-scripting-security@...worm.com>)
Re: n3td3v denounces the actions of www.derangedsecurity.com ("XSS Worm XSS Security Information Portal" <cross-site-scripting-security@...worm.com>)
Re: Standing Up Against German Laws - Project HayNeedle (Timo Schoeler <timo.schoeler@...cworks.net>)
Secunia Research: Samba "reply_netbios_packet()" Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: save gary mckinnon or lock away dan egerstad (reepex <reepex@...il.com>)
[TKADV2007-001] Mac OS X TIOCSETD IOCTL Kernel Memory Corruption Vulnerability ("Tobias Klein" <tk@...pkit.de>)
[ MDKSA-2007:219 ] - Updated xpdf packages fix vulnerabilities (security@...driva.com)
[ MDKSA-2007:220 ] - Updated gpdf packages fix vulnerabilities (security@...driva.com)
[USN-543-1] VMWare vulnerabilities (Kees Cook <kees@...ntu.com>)

November 16 (14 messages)

Re: Some hashes for the record (Alexander Klimov <alserkli@...ox.ru>)
ComponentOne FlexGrid 7.1 Light Multiple Stack Overflows (Elazar Broad <elazarb@...thlink.net>)
[USN-542-2] KOffice vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
[RISE-2007004] Apple Mac OS X 10.4.x Kernel i386_set_ldt() Integer Overflow Vulnerability (RISE Security <advisories@...esecurity.org>)
[USN-544-1] Samba vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
[ MDKSA-2007:221 ] - Updated kdegraphics packages fix vulnerabilities in kpdf (security@...driva.com)
Popular Spammers Strategies and Tactics ("Dancho Danchev" <dancho.danchev@...il.com>)
Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (cocoruder <cocoruder@...il.com>)
AhnLab AntiVirus Remote Kernel Memory Corruption (Sowhat <smaillist@...il.com>)
dangerous vulnerability (<netclown@...hmail.com>)
Anti-arp (lzscg <lzscg@....com>)
Re: Some hashes for the record ("Open Phugu" <openphugu@...il.com>)
Re: n3td3v denounces the actions of www.derangedsecurity.com ("worried security" <worriedsecurity@...glemail.com>)
Re: n3td3v denounces the actions ofwww.derangedsecurity.com ("Richard Golodner" <rgolodner@...ratection.com>)

November 17 (14 messages)

TROJAN FOUND ("electric" <electric_cissp@...oo.com>)
[USN-544-2] Samba regression (Jamie Strandboge <jamie@...ntu.com>)
How to become a Computer Security Professional ? ("Meef" <massa@...-dhaka.edu>)
rPSA-2007-0241-1 samba samba-swat (rPath Update Announcements <announce-noreply@...th.com>)
Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (dev code <devcode29@...mail.com>)
Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability ("CaseArmour.net Security Administrator" <security@...earmour.net>)
Re: n3td3v denounces the actions of www.derangedsecurity.com (Prohest <prohest@...il.com>)
Re: How to become a Computer Security Professional ? (Fabio Pietrosanti <lists@...osecurity.ch>)
Re: Microsoft Jet Engine MDB File Parsing StackOverflow Vulnerability ("Peter Ferrie" <pferrie@...antec.com>)
Re: Microsoft Jet Engine MDB File Parsing StackOverflow Vulnerability ("Peter Ferrie" <pferrie@...antec.com>)
[ MDKSA-2007:222 ] - Updated koffice packages fix vulnerabilities (security@...driva.com)
[ MDKSA-2007:223 ] - Updated pdftohtml packages fix vulnerabilities (security@...driva.com)
[ MDKSA-2007:224 ] - Updated samba packages fix vulnerabilities (security@...driva.com)
[ GLSA 200711-21 ] Bochs: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)

November 18 (16 messages)

Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (jf <jf@...glingpointers.net>)
Vulnerability Hash Database - Maillist (Sowhat <smaillist@...il.com>)
When will Matasano stop the retarded commentary? ("Gobbles is back" <isbackgobbles@...glemail.com>)
[SECURITY] [DSA 1407-1] New cupsys packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Bluetooth Security; Bluetooth Penetration Testing Framework (Odley Mike <bluetooth-pentest@...dex.ru>)
Re: Bluetooth Security; Bluetooth Penetration Testing Framework ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
Re: How to become a Computer Security Professional ? ("M. Shirk" <shirkdog_list@...mail.com>)
Crash in LIVE555 Media Server 2007.11.01 (Luigi Auriemma <aluigi@...istici.org>)
[ GLSA 200711-22 ] Poppler, KDE: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-23 ] VMware Workstation and Player: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-24 ] Mozilla Thunderbird: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Nils Toedtmann <full-disclosure-mail@...s.toedtmann.net>)
[ GLSA 200711-25 ] MySQL: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-26 ] teTeX: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-27 ] Link Grammar: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)

November 19 (14 messages)

Re: How to become a Computer Security Professional ? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Standing Up Against German Laws - Project HayNeedle (Simon Richter <Simon.Richter@...yros.de>)
Re: How to become a Computer Security Professional ? ("worried security" <worriedsecurity@...glemail.com>)
Re: How to become a Computer Security Professional ? (Paul Schmehl <pauls@...allas.edu>)
Re: How to become a Computer Security Professional ? ("Richard Golodner" <rgolodner@...ratection.com>)
Re: n3td3v denounces the actions of www.derangedsecurity.com ("XSS Worm XSS Security Information Portal" <cross-site-scripting-security@...worm.com>)
Re: How to become a Computer Security Professional ? ("XSS Worm XSS Security Information Portal" <cross-site-scripting-security@...worm.com>)
[ MDKSA-2007:225 ] - Updated net-snmp packages fix remote denial of service vulnerability (security@...driva.com)
Wordpress Cookie Authentication Vulnerability ("Steven J. Murdoch" <fulldisc+Steven.Murdoch@...cam.ac.uk>)
[ GLSA 200711-28 ] Perl: Buffer overflow (Pierre-Yves Rofes <py@...too.org>)
[ MDKSA-2007:226 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
H2HC Materials ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
rPSA-2007-0242-1 php5 php5-cgi php5-mysql php5-pear php5-pgsql php5-soap php5-xsl (rPath Update Announcements <announce-noreply@...th.com>)
Multiple stack-based buffer overflows in dxmsft.dll (Elazar Broad <elazarb@...thlink.net>)

November 20 (30 messages)

[ MDKSA-2007:227 ] - Updated poppler packages fix vulnerabilities (security@...driva.com)
[ MDKSA-2007:228 ] - Updated cups packages fix vulnerabilities (security@...driva.com)
Tha Manual. (rchrafe <rchrafe@...il.com>)
The Call to Reason (rchrafe <rchrafe@...il.com>)
Re: How to become a Computer Security Professional ? (rchrafe <rchrafe@...il.com>)
Re: How to become a Computer Security Professional ? (rchrafe <rchrafe@...il.com>)
Re: How to become a Computer Security Professional ? (rchrafe <rchrafe@...il.com>)
Large Scale MySpace Phishing Attack ("Dancho Danchev" <dancho.danchev@...il.com>)
Re: Multiple stack-based buffer overflows in dxmsft.dll (Elazar Broad <elazarb@...thlink.net>)
Re: so gay huh? (rchrafe <rchrafe@...il.com>)
Re: so gay huh? (rchrafe <rchrafe@...il.com>)
RIPA powers being used ("James Rankin" <kz20fl@...glemail.com>)
major security breach in united kingdom ("worried security" <worriedsecurity@...glemail.com>)
Re: Wordpress Cookie Authentication Vulnerability ("XSS Worm XSS Security Information Portal" <cross-site-scripting-security@...worm.com>)
Re: Wordpress Cookie Authentication Vulnerability (Steven Murdoch <fulldisc+Steven.Murdoch@...cam.ac.uk>)
Re: Wordpress Cookie Authentication Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
Re: Wordpress Cookie Authentication Vulnerability ("Steven J. Murdoch" <fulldisc+Steven.Murdoch@...cam.ac.uk>)
Wordpress 0day: Hacking into computers now easier than previously believed - Heise Security ("XSS Worm XSS Security Information Portal" <cross-site-scripting-…)
Re: Wordpress Cookie Authentication Vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Wordpress Cookie Authentication Vulnerability ("Steven Adair" <steven@...urityzone.org>)
[ GLSA 200711-29 ] Samba: Execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-30 ] PCRE: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Re: Wordpress Cookie Authentication Vulnerability ("James Matthews" <nytrokiss@...il.com>)
[ GLSA 200711-31 ] Net-SNMP: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-32 ] Feynmf: Insecure temporary file creation (Pierre-Yves Rofes <py@...too.org>)
Websense security contact? ("The Security Community" <thesecuritycommunity@...il.com>)
Re: Websense security contact? ("Ronald MacDonald" <ronald@...cd.com>)
Re: Websense security contact? (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[ MDKSA-2007:229 ] - Updated phpMyAdmin packages fix multiple vulnerabilities (security@...driva.com)
Re: Wordpress Cookie Authentication Vulnerability ("Eduardo Tongson" <propolice@...il.com>)

November 21 (17 messages)

Re: Wordpress Cookie Authentication Vulnerability (Valdis.Kletnieks@...edu)
Re: Wordpress Cookie Authentication Vulnerability (Paul Schmehl <pauls@...allas.edu>)
[ MDKSA-2007:230 ] - Updated tetex packages fix vulnerabilities (security@...driva.com)
Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] ("XSS Worm XSS Security Information Portal" <cross-site-scripting-security@...worm…)
Websense security contact? ("Hubbard, Dan" <dhubbard@...sense.com>)
Re: Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] (Paul Schmehl <pauls@...allas.edu>)
rPSA-2007-0243-1 flac (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0245-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0245-2 kernel (rPath Update Announcements <announce-noreply@...th.com>)
Re: RIPA powers being used ("Morning Wood" <se_cur_ity@...mail.com>)
Re: Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] (Gadi Evron <ge@...uxbox.org>)
Re: RIPA powers being used ("North, Quinn" <QNorth@....com>)
Barbut (Simon Smith <simon@...soft.com>)
Re: Barbut (Valdis.Kletnieks@...edu)
Re: Barbut (Simon Smith <simon@...soft.com>)
Re: Wordpress Cookie Authentication Vulnerability ("Adrian P" <unknown.pentester@...il.com>)
[SECURITY] [DSA 1408-1] New kdegraphics packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)

November 22 (11 messages)

[ MDKSA-2007:224-1 ] - Updated samba packages fix vulnerabilities (security@...driva.com)
Re: RIPA powers being used (reepex <reepex@...il.com>)
Re: Barbut (Ben van Staveren <ben.vanstaveren@...lua.com>)
[Argeniss] Data0: Next generation malware for stealing databases (Paper) (Cesar <cesarc56@...oo.com>)
Re: Barbut (Aleksandar Nikolic <anikolic@...arless.org>)
Aurigma ImageUploader 4.1 Multiple stack overflows (Elazar Broad <elazarb@...thlink.net>)
Re: Wordpress Cookie Authentication Vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Knowing you're Secure! (rchrafe <rchrafe@...il.com>)
[ MDKSA-2007:231 ] - Updated cacti packages fix SQL injection vulnerability (security@...driva.com)
[SECURITY] [DSA 1409-1] New samba packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
Using CSRF to Attack Mobile Phones ("avivra" <avivra@...il.com>)

November 23 (4 messages)

*****SPAM***** [WEB SECURITY] Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com (dave-san <dave@...verted.org>)
*****SPAM***** [WEB SECURITY] Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com (Andrew Farmer <andfarm@...il.com>)
Google Sacure V2.0 -- Sacure Corporation (<whupass@...hmail.com>)
[ MDKSA-2007:224-2 ] - Updated samba packages fix vulnerabilities (security@...driva.com)

November 24 (1 message)

Re: [Argeniss] Data0: Next generation malware for stealing databases (Paper) (reepex <reepex@...il.com>)

November 25 (7 messages)

[SECURITY] [DSA 1410-1] New ruby1.8 packages fix insecure SSL certificate validation (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1412-1] New ruby1.9 packages fix insecure SSL certificate validation (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Aurigma ImageUploader 4.1 Multiple stack overflows (Elazar Broad <elazarb@...thlink.net>)
PHP 5.2.4 mail.force_extra_parameters unsecure ("Maksymilian Arciemowicz" <cxib@...urityreason.com>)
[ GLSA 200711-33 ] nss_ldap: Information disclosure (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-34 ] CSTeX: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)

November 26 (16 messages)

XSS with UTF-7 in yahoo.com ("HASEGAWA Yosuke" <yosuke.hasegawa@...il.com>)
False advertisting and possible click fraud about n3td3v ("worried security" <worriedsecurity@...glemail.com>)
RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows (Elazar Broad <elazarb@...thlink.net>)
RichFX nprfxins.dll ActiveX Control Multiple Stack Overflows (Elazar Broad <elazarb@...thlink.net>)
two bytehoard bugs (Ernesto Alvarez <ealvarez@...ivesec.biz>)
[SECURITY] [DSA 1409-2] New samba packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
oh oh 0 day - MyTV/x Version 3.6.6 & 4.0.8 for MyTV.PVR allows local authentication bypass and root access on Apple Ma… (David Wharton <security@...idwharton.us…)
Eee PC Security (Danny <nocmonkey@...il.com>)
False advertisting and possible click fraud about n3td3v ("blackhat4lyf3 blackhat4lyf3" <blackhat4lyf3@...il.com>)
Re: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows (Elazar Broad <elazarb@...thlink.net>)
Re: oh oh 0 day - MyTV/x Version 3.6.6 & 4.0.8 for MyTV.PVR allows local authentication bypass and root access on Appl… ("Kevin Finisterre (lists)" <kf_lists@di…)
To Hell With Georgia (<georgepburdell@...h.com>)
[SECURITY] [DSA 1413-1] New mysql packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
unsubscribe ("LT" <lt@....hush.com>)
UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows (Elazar Broad <elazarb@...thlink.net>)
ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability (zdi-disclosures@...m.com)

November 27 (20 messages)

Re: UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows ("James Matthews" <nytrokiss@...il.com>)
[USN-545-1] link-grammar vulnerability (Kees Cook <kees@...ntu.com>)
[USN-546-1] Firefox vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-547-1] PCRE vulnerabilities (Kees Cook <kees@...ntu.com>)
[SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[ GLSA 200711-34 ] CSTeX: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200711-33 ] nss_ldap: Information disclosure (Pierre-Yves Rofes <py@...too.org>)
ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability (zdi-disclosures@...m.com)
Creating Backdoors in Cisco IOS using Tcl ("IRM Research" <research@...plc.com>)
Announce: RFIDIOt release RFIDIOt-0.1r, November 2007 (Adam Laurie <adam@...roup.co.uk>)
Re: Creating Backdoors in Cisco IOS using Tcl (Nicolas FISCHBACH <nicolist@...urite.org>)
Trent Lott (Ned Bender <benderduck@...oo.com>)
CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor (Core Security Technologies Advisories <advisories@...esecurity.com>)
Re: UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows (Elazar Broad <elazarb@...thlink.net>)
Re: UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows ("Joey Mengele" <joey.mengele@...hmail.com>)
Re: UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows ("Joey Mengele" <joey.mengele@...hmail.com>)
Re: Eee PC Security (Matthew Hall <matt@...c.co.uk>)
[SECURITY] [DSA 1416-1] New tk8.3 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1415-1] New tk8.4 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Eee PC Security (Michael Holstein <michael.holstein@...ohio.edu>)

November 28 (17 messages)

Security Contact @ Avast! (Sowhat <smaillist@...il.com>)
Re: ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Expos (cocoruder. <frankruder@...mail.com>)
Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Rajesh Sethumadhavan <rajesh.sethumadhavan@...oo.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("KJK::Hyperion" <hackbunny@...tpj.org>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("KJK::Hyperion" <hackbunny@...tpj.org>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (reepex <reepex@...il.com>)
Secunia Research: Symantec Backup Exec Job Engine Denial of Service (Secunia Research <remove-vuln@...unia.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Valdis.Kletnieks@...edu)
[ MDKSA-2007:232 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (dev code <devcode29@...mail.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("Stan Bubrouski" <stan.bubrouski@...il.com>)
[ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities (security@...driva.com)
[ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities (security@...driva.com)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("Peter Dawson" <slash.pd@...il.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (reepex <reepex@...il.com>)

November 29 (16 messages)

Re: Full-Disclosure Digest, Vol 33, Issue 52 (admin@...heco-family.net)
[USN-548-1] Pidgin vulnerability (Kees Cook <kees@...ntu.com>)
rPSA-2007-0252-1 cups poppler tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi (rPath Update Announcements <announce-noreply@...th.com>)
Re: Microsoft FTP Client Multiple ("Daniel H. Renner" <dan@...angelescomputerhelp.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("KJK::Hyperion" <hackbunny@...tpj.org>)
IRM025: TIBCO Rendezvous RVD Daemon Remote Memory Leak DoS ("IRM Research" <research@...plc.com>)
[SECURITY] [DSA 1409-3] New samba packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
Re: n3td3v denounces the actions of www.derangedsecurity.com (Byron Sonne <blsonne@...ers.com>)
Re: Microsoft FTP Client Multiple (Valdis.Kletnieks@...edu)
Re: Security Contact @ Avast! (Thierry Zoller <Thierry@...ler.lu>)
Re: Microsoft FTP Client Multiple ("Dude VanWinkle" <dudevanwinkle@...il.com>)
ERRATA: [ GLSA 200711-20 ] Pioneers: Multiple Denials of Service (Pierre-Yves Rofes <py@...too.org>)
[USN-549-1] PHP vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Microsoft FTP Client Multiple ("Daniel H. Renner" <dan@...angelescomputerhelp.com>)
AST-2007-025 - SQL Injection issue in res_config_pgsql (Asterisk Security Team <security@...erisk.org>)
AST-2007-026 - SQL Injection issue in cdr_pgsql (Asterisk Security Team <security@...erisk.org>)

November 30 (12 messages)

Re: Microsoft FTP Client Multiple (Peter Besenbruch <prb@...a.net>)
[ MDKSA-2007:224-3 ] - Updated samba packages fix regressions (security@...driva.com)
AST-2007-026 - SQL Injection issue in cdr_pgsql (Asterisk Security Team <security@...ium.com>)
AST-2007-025 - SQL Injection issue in res_config_pgsql (Asterisk Security Team <security@...ium.com>)
Yahoo Toolbar Helper c() Method Stack Overflow DoS (Elazar Broad <elazarb@...thlink.net>)
Re: n3td3v denounces the actions of www.derangedsecurity.com ("Joey Mengele" <joey.mengele@...hmail.com>)
Matasano watchdog blog opening shortly .. ("Gobbles is back" <isbackgobbles@...glemail.com>)
rPSA-2007-0254-1 idle python (rPath Update Announcements <announce-noreply@...th.com>)
Re: Yahoo Toolbar Helper c() Method Stack Overflow DoS ("Joey Mengele" <joey.mengele@...hmail.com>)
High Value Target Selection (gmaggro <gmaggro@...ers.com>)
PlayStation 3 predicts next US president (fwd) (Jay Sulzberger <jays@...ix.com>)
27Mhz based wireless security insecurities - Aka - "We know what you typed last summer" ("Max Moser" <max.moser@...il.com>)

600 messages