full-disclosure mailing list - 2007/12

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2007/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 26	² 31
³ 18	⁴ 20	⁵ 32	⁶ 41	⁷ 27	⁸ 15	⁹ 53
¹⁰ 22	¹¹ 31	¹² 45	¹³ 34	¹⁴ 22	¹⁵ 10	¹⁶ 6
¹⁷ 8	¹⁸ 20	¹⁹ 10	²⁰ 36	²¹ 35	²² 8	²³ 4
²⁴ 8	²⁵ 2	²⁶ 8	²⁷ 12	²⁸ 26	²⁹ 15	³⁰ 8
³¹ 11

Messages by day:

December 1 (26 messages)

Re: High Value Target Selection (Peter Besenbruch <prb@...a.net>)
Re: High Value Target Selection (coderman <coderman@...il.com>)
Re: ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability ("Williams, James K" <James.Williams@...com>)
Re: PlayStation 3 predicts next US president (fwd) ("Slythers Bro" <slythers@...il.com>)
DC4420 - London DEFCON chapter Christmas Party - 11th December (Major Malfunction <majormal@...ate-radio.org>)
Phioust gets all emotional to gobbles and friends ... ("Gobbles is back" <isbackgobbles@...glemail.com>)
MD5 algorithm considered toxic (and harmful) ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Firefox 2.0.0.11 File Focus Stealing vulnerability ("carl hardwick" <hardwick.carl@...il.com>)
Re: MD5 algorithm considered toxic (and harmful) ("Steven Adair" <steven@...urityzone.org>)
Re: Firefox 2.0.0.11 File Focus Stealing vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
rPSA-2007-0255-1 nss_ldap (rPath Update Announcements <announce-noreply@...th.com>)
Re: Firefox 2.0.0.11 File Focus Stealing vulnerability ("Randal, Phil" <prandal@...efordshire.gov.uk>)
Re: High Value Target Selection (gmaggro <gmaggro@...ers.com>)
Re: High Value Target Selection (gmaggro <gmaggro@...ers.com>)
Re: Firefox 2.0.0.11 File Focus Stealing vulnerability ("Nate McFeters" <nate.mcfeters@...il.com>)
Re: MD5 algorithm considered toxic (and harmful) ("James Matthews" <nytrokiss@...il.com>)
Re: MD5 algorithm considered toxic (and harmful) (Enno Rey <erey@...w.de>)
Re: MD5 algorithm considered toxic (and harmful) (Tim <tim-security@...tinelchicken.org>)
Re: Firefox 2.0.0.11 File Focus Stealing vulnerability ("Static Rez" <staticrez@...il.com>)
Firefox explicit charset inheritance (Paul Szabo <psz@...hs.usyd.edu.au>)
Re: MD5 algorithm considered toxic (and harmful) (Paul Schmehl <pauls@...allas.edu>)
Phioust is now getting really emotional ... ("Gobbles is back" <isbackgobbles@...glemail.com>)
Phioust is now getting really emotional ... ("Gobbles is back" <isbackgobbles@...glemail.com>)
Re: Full-Disclosure Digest, Vol 34, Issue 1 (Randy Mueller <randallm@...mail.com>)
Re: MD5 algorithm considered toxic (and harmful) (coderman <coderman@...il.com>)
Re: High Value Target Selection (coderman <coderman@...il.com>)

December 2 (31 messages)

Re: Firefox 2.0.0.11 File Focus Stealing vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: MD5 algorithm considered toxic (and harmful) (Valdis.Kletnieks@...edu)
Re: MD5 algorithm considered toxic (and harmful) ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Re: High Value Target Selection (gmaggro <gmaggro@...ers.com>)
Hell Camp: A Terrifying Story of Lies and Middle-Men (Goebbels Amadeus <paul.goebbels@...email.hu>)
Re: High Value Target Selection (Valdis.Kletnieks@...edu)
Re: Signature or checksum? (was: MD5 considered harmful) (coderman <coderman@...il.com>)
Re: authentic hackers still do it for the love ... (was: Hell Camp: It never pays enough) (coderman <coderman@...il.com>)
Re: authentic hackers still do it for the love ... (was: Hell Camp: It never pays enough) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
Re: authentic hackers still do it for the love ... (was: Hell Camp: It never pays enough) (coderman <coderman@...il.com>)
Re: authentic hackers still do it for the love ... (was: Hell Camp: It never pays enough) (coderman <coderman@...il.com>)
Re: Firefox 2.0.0.11 File Focus Stealing vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
need help in managing administrators (happy nino <nadtec@...mail.com>)
Bypassing group policy ("Eric Rachner" <eric@...hner.us>)
[SECURITY] [DSA 1417-1] New asterisk packages fix SQL injection (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Signature or checksum? ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Re: Phioust gets all emotional to gobbles and friends... (3lucid8 <3lucid8@...glemail.com>)
[SECURITY] [DSA 1418-1] New cacti packages fix SQL injection (Thijs Kinkhorst <thijs@...ian.org>)
Web Beam, the new concept web application penetration testing tool (Billy.Hoffman@...dynamics.com)
Re: need help in managing administrators ("T Biehn" <tbiehn@...il.com>)
Re: authentic hackers still do it for the love ... (was: Hell Camp: It never pays enough) (jf <jf@...glingpointers.net>)
Re: need help in managing administrators (Valdis.Kletnieks@...edu)
Re: authentic hackers still do it for the love ... (was: Hell Camp: It never pays enough) (Valdis.Kletnieks@...edu)
Re: authentic hackers still do it for the love ... (was: Hell Camp: It never pays enough) (coderman <coderman@...il.com>)
Re: need help in managing administrators ("James Matthews" <nytrokiss@...il.com>)
Re: authentic hackers still do it for the love ... (was: Hell Camp: It never pays enough) ("James Matthews" <nytrokiss@...il.com>)
Re: need help in managing administrators (Valdis.Kletnieks@...edu)
Re: need help in managing administrators ("T Biehn" <tbiehn@...il.com>)
Re: need help in managing administrators ("T Biehn" <tbiehn@...il.com>)
Re: need help in managing administrators (Valdis.Kletnieks@...edu)
Re: need help in managing administrators (Paul Schmehl <pauls@...allas.edu>)

December 3 (18 messages)

SCADA refresher (gmaggro <gmaggro@...ers.com>)
Re: need help in managing administrators ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: need help in managing administrators ("T Biehn" <tbiehn@...il.com>)
Re: need help in managing administrators ("Joel R. Helgeson" <joel@...geson.com>)
Re: High Value Target Selection (Vincent Archer <varcher@...yall.com>)
unsubscribe full-disclosure ("Makousky, Steve C" <SMAKOUS1@...rview.org>)
Phioust is dead, long live Matasano !!! ("Gobbles is back" <isbackgobbles@...glemail.com>)
Re: need help in managing administrators ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Web Beam, the new concept web application penetration testing tool ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: SCADA refresher (Elazar Broad <elazarb@...thlink.net>)
Re: SCADA refresher ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: High Value Target Selection (reepex <reepex@...il.com>)
Anyone have a reason for 2x the email flow today? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
[USN-550-1] Cairo vulnerability (Kees Cook <kees@...ntu.com>)
Re: authentic hackers still do it for the love ... (was: Hell Camp: It never pays enough) ("Adrian P" <unknown.pentester@...il.com>)
Re: authentic hackers still do it for the love ... (was: Hell Camp: It never pays enough) ("Adrian P" <unknown.pentester@...il.com>)
[ MDKSA-2007:234 ] - Updated vixie-cron packages fix DoS vulnerability (security@...driva.com)
[ MDKSA-2007:235 ] - Updated apache packages fix vulnerabilities (security@...driva.com)

December 4 (20 messages)

Re: SCADA refresher ("I. D." <soufre@...il.com>)
Re: Anyone have a reason for 2x the email flow today? ("Joey Mengele" <joey.mengele@...hmail.com>)
Re: Anyone have a reason for 2x the email flow today? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Anyone have a reason for 2x the email flow today? (gjgowey@....blackberry.net)
Anyone have a reason for 2x the email flow today? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
[USN-551-1] OpenLDAP vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
[USN-549-2] PHP regression (Kees Cook <kees@...ntu.com>)
Firefox UTF-7 Universal XSS (Paul Szabo <psz@...hs.usyd.edu.au>)
Re: SCADA refresher ("Joey Mengele" <joey.mengele@...hmail.com>)
SEC Consult SA-20071204-0 :: SonicWALL Global VPN Client Format String Vulnerability (Bernhard Mueller <research@...-consult.com>)
Re: Anyone have a reason for 2x the email flow today? ("Maloney, Michael" <MMaloney@...dlesexcc.edu>)
The first release of SWFIntruder is out ! (Stefano Di Paola <stefano.dipaola@...dedsecurity.com>)
TIBCO Rendezvous Exploitation Video ("IRM Research" <research@...plc.com>)
SecNiche Garbage Dumps on mailinglists ("Lamer Buster" <lamerbuster@...il.com>)
Re: SCADA refresher (gmaggro <gmaggro@...ers.com>)
Professional IT Security Service Providers - Exposed (<secreview@...hmail.com>)
Re: Professional IT Security Service Providers - Exposed (trains <trains@...torunix.com>)
[USN-546-2] Firefox regression (Kees Cook <kees@...ntu.com>)
Internet Explorer Vuln Report, Debunked [Jeff R. Jones is becoming FUD-master] ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Re: Professional IT Security Service Providers - Exposed (<secreview@...hmail.com>)

December 5 (32 messages)

[USN-552-1] Perl vulnerability (Kees Cook <kees@...ntu.com>)
[USN-553-1] Mono vulnerability (Kees Cook <kees@...ntu.com>)
The recent number of unpatched QuickTime flaws is: two (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[ MDKSA-2007:236 ] - Updated openssh packages fix X11 cookie vulnerability (security@...driva.com)
[ MDKSA-2007:237 ] - Updated openssl packages fix DTLS vulnerability (security@...driva.com)
0day XSS for MPAA.org ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
rPSA-2007-0257-1 rsync (rPath Update Announcements <announce-noreply@...th.com>)
XSS Early Warning Mailing List Now Open (security@...ed.com)
Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Alexander Klink <a.klink@...ops.de>)
Re: need help in managing administrators (happy nino <nadtec@...mail.com>)
Cisco Phone 7940 remote DOS ("Radu State" <State@...ia.fr>)
[SECURITY] [DSA 1419-1] New OpenOffice.org packages fix arbitrary Java code execution (joey@...odrom.org (Martin Schulze))
Nokia N95 cellphone remote DoS using the SIP Stack ("Radu State" <State@...ia.fr>)
Information about recent malware exploited vulnerabilities - a blog post ("uday kumar" <ericuday@...il.com>)
Cisco Security Advisory: Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability (Cisco Systems Product Security Incident Response …)
Re: Nokia N95 cellphone remote DoS using the SIP Stack (reepex <reepex@...il.com>)
Re: 0day XSS for MPAA.org ("Ham Beast" <i.am.hambeast@...il.com>)
Re: GOBBLES or n3td3v (coderman <coderman@...il.com>)
Re: Nokia N95 cellphone remote DoS using the SIP Stack (reepex <reepex@...il.com>)
Re: Anyone have a reason for 2x the email flow today? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Nokia N95 cellphone remote DoS using the SIP Stack (state@...ia.fr)
Re: Nokia N95 cellphone remote DoS using the SIP Stack (reepex <reepex@...il.com>)
Re: Nokia N95 cellphone remote DoS using the SIP Stack (nnp <version5@...il.com>)
[ GLSA 200712-01 ] Hugin: Insecure temporary file creation (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200712-02 ] Cacti: SQL injection (Pierre-Yves Rofes <py@...too.org>)
Re: need help in managing administrators (Valdis.Kletnieks@...edu)
Report: Foreign Countries Develop U.S. Defense Systems Software ("worried security" <worriedsecurity@...glemail.com>)
Re: Professional IT Security Service Providers - Exposed (Valdis.Kletnieks@...edu)
CiscoWorks Server XSS Vulnerability ("Liquidmatrix Security Digest" <disclosure@...uidmatrix.org>)
UPDATE: [ GLSA 200711-29 ] Samba: Execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
Re: Professional IT Security Service Providers - Exposed ("SecReview" <secreview@...hmail.com>)
Defense board sounds louder alarm about foreign software development ("worried security" <worriedsecurity@...glemail.com>)

December 6 (41 messages)

Re: 0day XSS for MPAA.org ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Re: need help in managing administrators ("T Biehn" <tbiehn@...il.com>)
Re: Anyone have a reason for 2x the email flow today? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: need help in managing administrators ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Anyone have a reason for 2x the email flow today? (Bob Bruen <bruen@...drain.net>)
Inside the "Ron Paul" Spam Botnet ("lsi" <stuart@...erdelix.net>)
Re: Anyone have a reason for 2x the email flow today? ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: need help in managing administrators (Valdis.Kletnieks@...edu)
Re: need help in managing administrators ("Dude VanWinkle" <dudevanwinkle@...il.com>)
[UPDATE]CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability (cocoruder <cocoruder@...il.com>)
Re: Professional IT Security Service Providers - Exposed ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: need help in managing administrators (Valdis.Kletnieks@...edu)
Re: need help in managing administrators ("Dude VanWinkle" <dudevanwinkle@...il.com>)
SUSE Security Announcement: samba (SUSE-SA:2007:065) (Thomas Biege <thomas@...e.de>)
[SECURITY] [DSA 1420-1] New zabbix packages fix privilege escalation (Thijs Kinkhorst <thijs@...ian.org>)
Re: Anyone have a reason for 2x the email flow today? ("Kosala Atapattu" <kosala.atapattu@...il.com>)
Re: Anyone have a reason for 2x the email flow today? ("Jerry L. Ivey" <jerry@...vey.com>)
Re: Anyone have a reason for 2x the email flow today? ("James C. Slora Jr." <james.slora@...a.com>)
Re: need help in managing administrators (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: need help in managing administrators (Valdis.Kletnieks@...edu)
Avast! AntiVirus TAR Processing Remote Heap Corruption (Sowhat <smaillist@...il.com>)
Re: need help in managing administrators ("T Biehn" <tbiehn@...il.com>)
pcap flow extraction ("Ivan ." <ivanhec@...il.com>)
Re: [UPDATE]CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability (Code Audit Labs <vulnhunt@...il.com>)
Re: pcap flow extraction (John Kinsella <jlk@...ashyour.com>)
Re: pcap flow extraction ("SilentRunner" <silentrunner@...hmail.com>)
Re: Nokia N95 cellphone remote DoS using the SIP Stack (Humberto Abdelnur <Humberto.Abdelnur@...ia.fr>)
Re: pcap flow extraction, Net::Frame is your friend (GomoR <fd@...or.org>)
[SECURITY] [DSA 1421-1] New wesnoth packages fix arbitrary file disclosure (joey@...odrom.org (Martin Schulze))
[SECUNIA] Vendors still use the "legal" weapon (Thomas Kristensen <tk@...unia.com>)
Re: [SECUNIA] Vendors still use the "legal" weapon (Simon Smith <simon@...soft.com>)
[ MDKSA-2007:238 ] - Updated liblcms package fixes buffer overflow (security@...driva.com)
[USN-554-1] teTeX and TeX Live vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
Re: High Value Target Selection (gmaggro <gmaggro@...ers.com>)
ZDI-07-070: Skype skype4com URI Handler Remote Heap Corruption Vulnerability (zdi-disclosures@...m.com)
Re: Anyone have a reason for 2x the email flow today? ("Sven Meeus" <sven.meeus@...s.be>)
[Security Advisorie] OpenNewsletter v2.5 Multipe XSS Attacks (Sarasa <Intrabytes@...rabytes.com>)
HackerSafe Labs - Security Advisory - Xigla Absolute Banner Manager v4.0 ("Joseph Pierini" <joseph.pierini@...kersafe.com>)
TCP Port randomization paper (Fernando Gont <fernando.gont@...il.com>)
ZDI-07-071: HP OpenView Network Node Manager Multiple CGI Buffer Overflows (zdi-disclosures@...m.com)
R7-0031: JFreeChart Image Map Cross-Site Scripting Vulnerabilities (advisory@...id7.com)

December 7 (27 messages)

[CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities ("Williams, James K" <James.Williams@...com>)
[ MDKSA-2007:239 ] - Updated heimdal packages fix potential vulnerability (security@...driva.com)
rPSA-2007-0260-1 firefox (rPath Update Announcements <announce-noreply@...th.com>)
GOBBLE ALERT FOR PEOPLES !! ("Gobbles is back" <isbackgobbles@...glemail.com>)
Google / GMail bug, all accounts vulnerable ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Re: TCP Port randomization paper (Vladimir Vitkov <v.vitkov@...ys.bg>)
Re: b0b27a223b66678f24aec254366526d7910d0f38679f6478804c7480d2271ce9 [was: TCP Port randomization paper] (coderman <coderman@...il.com>)
[SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution (Steve Kemp <skx@...ian.org>)
Re: Google / GMail bug, all accounts vulnerable ("Aaron Katz" <atkatz@...il.com>)
Re: Google / GMail bug, all accounts vulnerable ("Mukul Dharwadkar" <mukul.dharwadkar@...il.com>)
netkit-ftpd/ftp uninitialized vulnerability ("xiaojunli.air" <xiaojunli.air@...il.com>)
Heimdal ftpd uninitialized vulnerability ("xiaojunli.air" <xiaojunli.air@...il.com>)
MIT Kerberos 5: Multiple vulnerabilities ("xiaojunli.air" <xiaojunli.air@...il.com>)
Re: Google / GMail bug, all accounts vulnerable ("worried security" <worriedsecurity@...glemail.com>)
Re: Google / GMail bug, all accounts vulnerable ("Ed Carp" <erc@...ox.com>)
[SECURITY] [DSA 1423-1] New sitebar packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
Sign the Downing Street E-Petition Submitted by Neil Stinchcombe of Infosecurity Europe ("worried security" <worriedsecurity@...glemail.com>)
Re: Google / GMail bug, all accounts vulnerable (M.B.Jr. <marcio.barbado@...il.com>)
Fwd: Google / GMail bug, all accounts vulnerable ("Aaron Katz" <atkatz@...il.com>)
Re: Google / GMail bug, all accounts vulnerable ("Aaron Katz" <atkatz@...il.com>)
Re: MIT Kerberos 5: Multiple vulnerabilities (Jonathan Smith <smithj@...ethemallocs.com>)
[ MDKSA-2007:240 ] - Updated libnfsidmap packages fix username lookup flaw (security@...driva.com)
Limited upload directory traversal in HTTP File Server 2.2a / 2.3 beta (build #146) (Luigi Auriemma <aluigi@...istici.org>)
Two vulnerabilities in Simple HTTPD 1.38 (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699 (Luigi Auriemma <aluigi@...istici.org>)
Upload directory traversal in Easy File Sharing 4.5 (Luigi Auriemma <aluigi@...istici.org>)
Re: TCP Port randomization paper ("Fernando Gont" <fernando.gont@...il.com>)

December 8 (15 messages)

Re: Google / GMail bug, all accounts vulnerable ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
[USN-555-1] e2fsprogs vulnerability (Kees Cook <kees@...ntu.com>)
Re: Google / GMail bug, all accounts vulnerable ("alessandro salvatori" <sandr8@...il.com>)
Re: Google / GMail bug, all accounts vulnerable (Joseph Hick <leet16y@...oo.com>)
Re: Google / GMail bug, all accounts vulnerable ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Re: Cisco Phone 7940 remote DOS (Clay Seaman-Kossmey <ckossmey@...co.com>)
[SECURITY] [DSA 1424-1] New iceweasel packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1425-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1426-1] New qt-x11-free packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Compromise of Tor, anonymizing networks/utilities (gmaggro <gmaggro@...ers.com>)
Re: Compromise of Tor, anonymizing networks/utilities (Peter Besenbruch <prb@...a.net>)
Re: Compromise of Tor, anonymizing networks/utilities ("Fetch, Brandon" <bfetch@....com>)
Re: Compromise of Tor, anonymizing networks/utilities (coderman <coderman@...il.com>)
Re: Compromise of Tor, anonymizing networks/utilities (coderman <coderman@...il.com>)
Re: Compromise of Tor, anonymizing networks/utilities (gmaggro <gmaggro@...ers.com>)

December 9 (53 messages)

Re: Compromise of Tor, anonymizing networks/utilities (coderman <coderman@...il.com>)
Re: Compromise of Tor, anonymizing networks/utilities (gmaggro <gmaggro@...ers.com>)
Re: Compromise of Tor, anonymizing networks/utilities (jf <jf@...glingpointers.net>)
Re: Compromise of Tor, anonymizing networks/utilities (coderman <coderman@...il.com>)
Re: Google / GMail bug, all accounts vulnerable It's just stopped working for me. ("Ashly A K" <ashlyak@...il.com>)
Re: Compromise of Tor, anonymizing networks/utilities (jf <jf@...glingpointers.net>)
Re: Compromise of Tor, anonymizing networks/utilities (coderman <coderman@...il.com>)
Vista's been hacked ("Aaron Gray" <angray@...b.net>)
Re: Vista's been hacked (evilrabbi <evilrabbi@...il.com>)
Re: Vista's been hacked (dripping <dripping@....org>)
Re: Vista's been hacked (dripping <dripping@....org>)
Re: Vista's been hacked ("Aaron Gray" <angray@...b.net>)
Re: pcap flow extraction ("Richard Bejtlich" <taosecurity@...il.com>)
Re: Vista's been hacked (dripping <dripping@....org>)
Re: Vista's been hacked (dripping <dripping@....org>)
Re: pcap flow extraction (reepex <reepex@...il.com>)
Re: TCP Port randomization paper (reepex <reepex@...il.com>)
Re: Vista's been hacked ("Aaron Gray" <angray@...b.net>)
Re: (no subject) (reepex <reepex@...il.com>)
Re: (no subject) (dripping <dripping@....org>)
Re: Vista's been hacked ("Aaron Gray" <angray@...b.net>)
Re: Vista's been hacked ("Aaron Gray" <angray@...b.net>)
Re: (no subject) (reepex <reepex@...il.com>)
Re: Compromise of Tor, anonymizing networks/utilities (Peter Besenbruch <prb@...a.net>)
Re: (no subject) (Simon Smith <simon@...soft.com>)
Re: (no subject) (dripping <dripping@....org>)
Re: (no subject) (Simon Smith <simon@...soft.com>)
Re: (no subject) (dripping <dripping@....org>)
Re: (no subject) (reepex <reepex@...il.com>)
Re: (no subject) (dripping <dripping@....org>)
Re: (no subject) (Simon Smith <simon@...soft.com>)
Re: (no subject) (Simon Smith <simon@...soft.com>)
Re: (no subject) (dripping <dripping@....org>)
[ GLSA 200712-04 ] Cairo: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
Re: Flash that simulates virus scan (reepex <reepex@...il.com>)
Re: Flash that simulates virus scan (reepex <reepex@...il.com>)
Re: Flash that simulates virus scan (reepex <reepex@...il.com>)
Re: Flash that simulates virus scan (reepex <reepex@...il.com>)
Re: on xss and its technical merit (reepex <reepex@...il.com>)
[ GLSA 200712-03 ] GNU Emacs: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Re: (no subject) (Simon Smith <simon@...soft.com>)
Re: (no subject) (reepex <reepex@...il.com>)
Re: Flash that simulates virus scan (Simon Smith <simon@...soft.com>)
Re: Flash that simulates virus scan (reepex <reepex@...il.com>)
Re: (no subject) (dripping <dripping@....org>)
Re: Flash that simulates virus scan ("Dude VanWinkle" <dudevanwinkle@...il.com>)
[ GLSA 200712-05 ] PEAR::MDB2: Information disclosure (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200712-06 ] Firebird: Multiple buffer overflows (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200712-07 ] Lookup: Insecure temporary file creation (Pierre-Yves Rofes <py@...too.org>)
Re: Flash that simulates virus scan (jf <jf@...glingpointers.net>)
Re: Flash that simulates virus scan (Simon Smith <simon@...soft.com>)
[ GLSA 200712-08 ] AMD64 x86 emulation Qt library: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200712-09 ] Ruby-GNOME2: Format string error (Pierre-Yves Rofes <py@...too.org>)

December 10 (22 messages)

Re: pcap flow extraction ("Ivan ." <ivanhec@...il.com>)
Re: pcap flow extraction (Bill Weiss <houdini+full-disclosure@...nspum.net>)
The Cookie Tools v0.3 -- first public release ("michele dallachiesa" <michele.dallachiesa@...il.com>)
Advisory: Websense XSS Vulnerability ("Liquidmatrix Security Digest" <disclosure@...uidmatrix.org>)
WordPress Charset SQL injection vulnerability ("Abel Cheung" <abelcheung@...il.com>)
Captive Portal bypassing (gmaggro <gmaggro@...ers.com>)
Re: Captive Portal bypassing ("T Biehn" <tbiehn@...il.com>)
Re: Captive Portal bypassing ("Steven Adair" <steven@...urityzone.org>)
WordPress Charset SQL injection vulnerability (resend) ("Abel Cheung" <abelcheung@...il.com>)
Secunia Research: Samba "send_mailslot()" Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
rPSA-2007-0261-1 samba samba-swat (rPath Update Announcements <announce-noreply@...th.com>)
CVE-2007-6205 ("Hanno Böck" <hanno@...eck.de>)
Multiple vulnerabilities in BarracudaDrive 3.7.2 (Luigi Auriemma <aluigi@...istici.org>)
Filesystem access in DOSBox 0.72 (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in BadBlue 2.72b (Luigi Auriemma <aluigi@...istici.org>)
[ GLSA 200712-10 ] Samba: Execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[USN-550-2] Cairo regression (Kees Cook <kees@...ntu.com>)
[SECURITY] [DSA 1427-1] New samba packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Captive Portal bypassing (gmaggro <gmaggro@...ers.com>)
ZDI-07-072: Novell Netmail AntiVirus Agent Multiple Overflow Vulnerabilities (zdi-disclosures@...m.com)
[ MDKSA-2007:241 ] - Updated tomcat5 packages fix multiple vulnerabilities (security@...driva.com)
Re: Captive Portal bypassing (Peter Besenbruch <prb@...a.net>)

December 11 (31 messages)

Re: Captive Portal bypassing (gmaggro <gmaggro@...ers.com>)
[ MDKSA-2007:242 ] - Updated e2fsprogs packages fix vulnerability (security@...driva.com)
[ MDKSA-2007:243 ] - Updated MySQL packages fix multiple vulnerabilities (security@...driva.com)
Re: The Cookie Tools v0.3 -- first public release (Andrew Farmer <andfarm@...il.com>)
Re: Captive Portal bypassing (coderman <coderman@...il.com>)
Re: The Cookie Tools v0.3 -- first public release (Jason <security@...enik.com>)
Re: The Cookie Tools v0.3 -- first public release (coderman <coderman@...il.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("Morning Wood" <se_cur_ity@...mail.com>)
0day to sell ("Juergen Marester" <marester.juergen@...il.com>)
TrendMicro AntiVirus UUE Processing Vulnerability (Sowhat <smaillist@...il.com>)
[SECURITY] [DSA 1481-1] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
httprecon project (Marc Ruef <marc.ruef@...putec.ch>)
Re: Captive Portal bypassing (gmaggro <gmaggro@...ers.com>)
PGMfuzz - a tool for testing Pragmatic General Multicast protocol implementations ("IRM Research" <research@...plc.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Re: Google / GMail bug, all accounts vulnerable ("Porco Graxa" <porco.graxa@...il.com>)
Black Hat Briefings Call for Papers ("jmoss" <jmoss@...ckhat.com>)
TOP 10 Vulnerability Trends for 2008 (Sowhat <smaillist@...il.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (reepex <reepex@...il.com>)
Re: TOP 10 Vulnerability Trends for 2008 (reepex <reepex@...il.com>)
Re: TOP 10 Vulnerability Trends for 2008 (Sowhat <smaillist@...il.com>)
[SECURITY] [DSA 1429-1] New htdig packages fix cross site scripting (Steve Kemp <skx@...ian.org>)
[SECURITY] [DSA 1430-1] New libnss-ldap packages fix denial of service (Steve Kemp <skx@...ian.org>)
ZDI-07-073: Microsoft Internet Explorer setExpression Vulnerability (zdi-disclosures@...m.com)
ZDI-07-074: Microsoft Internet Explorer Node Manipulation Memory Corruption (zdi-disclosures@...m.com)
ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-07-075: Microsoft Internet Explorer Element Tags Vulnerability (zdi-disclosures@...m.com)
[SECURITY] [DSA 1431-1] New ruby-gnome2 packages fix execution of arbitrary code (Steve Kemp <skx@...ian.org>)
Re: TCP Port randomization paper ("Fernando Gont" <fernando.gont@...il.com>)
Re: Google / GMail bug, all accounts vulnerable ("Aaron Katz" <atkatz@...il.com>)
[SECURITY] [DSA 1430-1] New libnss-ldap packages fix denial of service (Lebbeous Weekley <lebbeous@...ricanelabs.com>)

December 12 (45 messages)

rPSA-2007-0262-1 e2fsprogs (rPath Update Announcements <announce-noreply@...th.com>)
Re: Google / GMail bug, all accounts vulnerable ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
[ MDKSA-2007:244 ] - Updated samba packages fix vulnerability (security@...driva.com)
Re: Google / GMail bug, all accounts vulnerable (coderman <coderman@...il.com>)
Re: Captive Portal bypassing (coderman <coderman@...il.com>)
Re: Captive Portal bypassing (coderman <coderman@...il.com>)
Re: Google / GMail bug, all accounts vulnerable ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Re: Google / GMail bug, all accounts vulnerable (coderman <coderman@...il.com>)
Re: Google / GMail bug, all accounts vulnerable (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Venustech reports of MIT krb5 vulns [CVE-2007-5894 CVE-2007-5901 CVE-2007-5902 CVE-2007-5971 CVE-2007-5972] (Tom Yu <tlyu@....EDU>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("Morning Wood" <se_cur_ity@...mail.com>)
Re: Vulnerability Difficulty, Finesse of Implementation, Moral Character (coderman <coderman@...il.com>)
Re: Google / GMail bug, all accounts vulnerable ("jipe foo" <foojipe@...il.com>)
Re: Google / GMail bug, all accounts vulnerable ("ad@...poverflow.com" <ad@...poverflow.com>)
Re: on xss and its technical merit (coderman <coderman@...il.com>)
Re: on xss and its technical merit (Byron Sonne <blsonne@...ers.com>)
Re: Google / GMail bug, all accounts vulnerable (coderman <coderman@...il.com>)
Re: Google / GMail bug, all accounts vulnerable (coderman <coderman@...il.com>)
Re: on xss and its technical merit ("Jay" <jay.tomas@...osecguru.com>)
[SECURITY] [DSA 1428-2] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
SUSE Security Announcement: samba (SUSE-SA:2007:068) (Thomas Biege <thomas@...e.de>)
Phishing Metamorphosis in 2007 - Trends and Developments ("Dancho Danchev" <dancho.danchev@...il.com>)
Re: Google / GMail bug, all accounts vulnerable ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Re: on xss and its technical merit (Byron Sonne <blsonne@...ers.com>)
Re: Google / GMail bug, all accounts vulnerable ("Steven Adair" <steven@...urityzone.org>)
Re: Google / GMail bug, all accounts vulnerable (coderman <coderman@...il.com>)
Re: Google / GMail bug, all accounts vulnerable (coderman <coderman@...il.com>)
Re: on xss and its technical merit ("Fredrick Diggle" <fdiggle@...il.com>)
Re: on xss and its technical merit ("Joao Inacio" <jcinacio@...il.com>)
Re: Google / GMail bug, all accounts vulnerable ("Christopher Abad" <aempirei@...il.com>)
Re: on xss and its technical merit ("Jay" <jay.tomas@...osecguru.com>)
Re: on xss and its technical merit ("Fredrick Diggle" <fdiggle@...il.com>)
Re: on xss and its technical merit ("Fredrick Diggle" <fdiggle@...il.com>)
iDefense Security Advisory 12.11.07: Microsoft Internet Explorer JavaScript setExpression Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.c…)
Re: on xss and its technical merit ("J. Oquendo" <sil@...iltrated.net>)
iDefense Security Advisory 12.11.07: Microsoft DirectX 7 and 8 DirectShow Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Google / GMail bug, all accounts vulnerable (Peter Besenbruch <prb@...a.net>)
Re: Google / GMail bug, all accounts vulnerable ("Andrew A" <gluttony@...il.com>)
Re: Google / GMail bug, all accounts vulnerable ("Andrew A" <gluttony@...il.com>)
Re: on xss and its technical merit (Byron Sonne <blsonne@...ers.com>)
Re: Google / GMail bug, all accounts vulnerable ("Andrew A" <gluttony@...il.com>)
Re: on xss and its technical merit (Valdis.Kletnieks@...edu)
Re: Google / GMail bug, all accounts vulnerable ("Steven Adair" <steven@...urityzone.org>)
Re: Google / GMail bug, all accounts vulnerable (Peter Besenbruch <prb@...a.net>)
Fwd: Websense 6.3.1 Filtering Bypass ("The Security Community" <thesecuritycommunity@...il.com>)

December 13 (34 messages)

rPSA-2007-0264-1 mod_dav_svn subversion (rPath Update Announcements <announce-noreply@...th.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("Fredrick Diggle" <fdiggle@...il.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("Dude VanWinkle" <dudevanwinkle@...il.com>)
[USN-550-3] Cairo regression (Kees Cook <kees@...ntu.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (reepex <reepex@...il.com>)
Re: Google / GMail bug, all accounts vulnerable (coderman <coderman@...il.com>)
Re: Google / GMail bug, all accounts vulnerable (coderman <coderman@...il.com>)
Re: Full-Disclosure Digest, Vol 34, Issue 31 ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Re: Full-Disclosure Digest, Vol 34, Issue 31 ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("Fredrick Diggle" <fdiggle@...il.com>)
Re: on xss and its technical merit ("Jay" <jay.tomas@...osecguru.com>)
Re: on xss and its technical merit (Byron Sonne <blsonne@...ers.com>)
Re: on xss and its technical merit ("Fredrick Diggle" <fdiggle@...il.com>)
Re: Fwd: Websense 6.3.1 Filtering Bypass ("Hubbard, Dan" <dhubbard@...sense.com>)
Re: on xss and its technical merit ("Fredrick Diggle" <fdiggle@...il.com>)
Re: on xss and its technical merit ("Morning Wood" <se_cur_ity@...mail.com>)
Re: Full-Disclosure Digest, Vol 34, Issue 31 ("Andrew A" <gluttony@...il.com>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("Morning Wood" <se_cur_ity@...mail.com>)
Checkpoint security email ("Michael Neal Vasquez" <mnv@...mni.princeton.edu>)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (reepex <reepex@...il.com>)
Re: Fwd: Websense 6.3.1 Filtering Bypass (reepex <reepex@...il.com>)
Re: on xss and its technical merit ("Fredrick Diggle" <fdiggle@...il.com>)
Small Design Bug in Postfix - REMOTE ("kcope" <kingcope@....net>)
[ GLSA 200712-11 ] Portage: Information disclosure (Pierre-Yves Rofes <py@...too.org>)
[Professional IT Security Providers - Exposed] Cyberklix ( F+ ) (secreview <secreview@...hmail.com>)
Re: Small Design Bug in Postfix - REMOTE ("Fredrick Diggle" <fdiggle@...il.com>)
Re: Fwd: Websense 6.3.1 Filtering Bypass ("Dude VanWinkle" <dudevanwinkle@...il.com>)
[ GLSA 200712-12 ] IRC Services: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
Re: Small Design Bug in Postfix - REMOTE ("kcope" <kingcope@....net>)
[ MDKSA-2007:245 ] - Updated wpa_supplicant package fixes remote denial of service (security@...driva.com)
Re: gimp sc, and evilness ("Christopher Abad" <aempirei@...il.com>)
Re: Fwd: Websense 6.3.1 Filtering Bypass ("Hubbard, Dan" <dhubbard@...sense.com>)

December 14 (22 messages)

Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability ("Morning Wood" <se_cur_ity@...mail.com>)
Re: on xss and its technical merit ("Fredrick Diggle" <fdiggle@...il.com>)
Re: Small Design Bug in Postfix - REMOTE ("Just1n T1mberlake" <hotpackets@...lokitty.com>)
Sendmail/Postfix FORWARD Remote Exploit ("kcope" <kingcope@....net>)
Re: Small Design Bug in Postfix - REMOTE (Jim Popovitch <yahoo@...pop.com>)
Re: Sendmail/Postfix FORWARD Remote Exploit ("Fredrick Diggle" <fdiggle@...il.com>)
Re: Sendmail/Postfix FORWARD Remote Exploit ("Fredrick Diggle" <fdiggle@...il.com>)
[ MDKSA-2007:246 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
Re: Sendmail/Postfix FORWARD Remote Exploit ("Joey Mengele" <joey.mengele@...hmail.com>)
[FDSA] Multiple Vulnerabilities in Fred Diggle Software Foundation Execve Exploit ("Fredrick Diggle" <fdiggle@...il.com>)
Re: [FDSA] Multiple Vulnerabilities in Fred Diggle Software Foundation Execve Exploit (Tim <tim-security@...tinelchicken.org>)
XSS in YouTube.com ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
[ISR] - Novell Groupwise client remote stack overflow silently patched. ("ISR-noreply" <noreply@...obyte.com.ar>)
more gobbles .. ("Gobbles is back" <isbackgobbles@...glemail.com>)
Re: Small Design Bug in Postfix - REMOTE ("Adam N" <interfect@...il.com>)
Re: Small Design Bug in Postfix - REMOTE (Epic <epic@...k3r.com>)
Re: Small Design Bug in Postfix - REMOTE (Valdis.Kletnieks@...edu)
[Professional IT Security Providers - Exposed] Denim Group ( A - ) (secreview <secreview@...hmail.com>)
Re: [Professional IT Security Providers - Exposed] Denim Group ( A - ) ("Peter Dawson" <slash.pd@...il.com>)
Re: [Professional IT Security Providers - Exposed] Denim Group ( A - ) ("SecReview" <secreview@...hmail.com>)
BackTrack 3 Beta Released ("Mati Aharoni" <muts@...ote-exploit.org>)
[FDSA] The Internet - Version 4 - Multiple Remotely Exploitable Critical Security Vulnerabilities ("Fredrick Diggle" <fdiggle@...il.com>)

December 15 (10 messages)

BackTrack 3 Beta Released ("Mati Aharoni" <muts@...ote-exploit.org>)
Sendmail/Postfix Storybook ("kcope" <kingcope@....net>)
Re: Sendmail/Postfix Storybook ("ad@...poverflow.com" <ad@...poverflow.com>)
Re: Sendmail/Postfix Storybook (fabio <ctrlaltca@...ero.it>)
Re: Sendmail/Postfix Storybook (reepex <reepex@...il.com>)
Re: Small Design Bug in Postfix - REMOTE (reepex <reepex@...il.com>)
Re: [Professional IT Security Providers - Exposed] Cyberklix ( F+ ) (reepex <reepex@...il.com>)
Re: [Professional IT Security Providers - Exposed] Cyberklix ( F+ ) ("SecReview" <secreview@...hmail.com>)
Thomas Ptacek and Wikipedia ("Gobbles is back" <isbackgobbles@...glemail.com>)
Re: Thomas Ptacek and Wikipedia (coderman <coderman@...il.com>)

December 16 (6 messages)

Re: Thomas Ptacek and Wikipedia (coderman <coderman@...il.com>)
[SECURITY] [DSA 1432-1] New link-grammar packages fix execution of code (Steve Kemp <skx@...ian.org>)
BackTrack3 beta (gmaggro <gmaggro@...ers.com>)
Round up of messages by n3td3v for winter season 2007 ("worried security" <worriedsecurity@...glemail.com>)
[SECURITY] [DSA 1433-1] New centericq packages fix execution of code (Steve Kemp <skx@...ian.org>)
Re: XSS in YouTube.com (<pons.alt@...l.ru>)

December 17 (8 messages)

Re: [Professional IT Security Providers - Exposed] Denim Group ( A - ) ("Paul Melson" <pmelson@...il.com>)
[SECURITY] [DSA 1434-1] New mydns packages fix denial of service (Thijs Kinkhorst <thijs@...ian.org>)
Release uhooker v1.3 ("Hernan Ochoa" <hernan@...il.com>)
Re: XSS in YouTube.com ("Michal Majchrowicz" <m.majchrowicz@...il.com>)
OSVDB 2.0 RELEASED (jkouns <jkouns@...nsecurityfoundation.org>)
Heap overflow in PeerCast 0.1217 (Luigi Auriemma <aluigi@...istici.org>)
[Professional IT Security Providers - Exposed] Audit Serve, Inc. ( F- ) (secreview <secreview@...hmail.com>)
ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability (zdi-disclosures@...m.com)

December 18 (20 messages)

ZDI-07-078: St. Bernard Open File Manager Heap Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
Appian Enterprise Business Suite 5.6 SP1 is vulnerable to a (guiness.stout <guinness.stout@...il.com>)
New TV show "Tiger Team": social engineering, wired/wireless hacking, physical break-in (<blackredyellow@...hmail.com>)
rPSA-2007-0266-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2007-0268-1 kdebase (rPath Update Announcements <announce-noreply@...th.com>)
Re: [Professional IT Security Providers - Exposed] Audit Serve, Inc. ( F- ) ("SilentRunner" <silentrunner@...hmail.com>)
Re: [Professional IT Security Providers - Exposed] Audit Serve, Inc. ( F- ) ("SecReview" <secreview@...hmail.com>)
iDefense Security Advisory 12.17.07: Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 12.18.07: ClamAV libclamav MEW PE File Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: [Professional IT Security Providers - Exposed] Audit Serve, Inc. ( F- ) ("Mike Vasquez" <mike.vasquez@...il.com>)
Request From People ("SecReview" <secreview@...hmail.com>)
Rosoft Media Player <= 4.1.7 .M3U Stack Overflow (dev code <devcode29@...mail.com>)
Re: New TV show "Tiger Team": social engineering, wired/wireless hacking, physical break-in (<blackredyellow@...hmail.com>)
Re: iDefense Security Advisory 12.17.07: Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Vulnerability (reepex <reepex@...il.com>)
[USN-556-1] Samba vulnerability (Kees Cook <kees@...ntu.com>)
AST-2007-027 - Database matching order permits host-based authentication to be ignored (Security Officer <security@...erisk.org>)
Google Toolbar Dialog Spoofing Vulnerability ("avivra" <avivra@...il.com>)
[ GLSA 200712-13 ] E2fsprogs: Multiple buffer overflows (Robert Buchholz <rbu@...too.org>)
[ GLSA 200712-14 ] CUPS: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)

December 19 (10 messages)

[USN-557-1] GD library vulnerability (Jamie Strandboge <jamie@...ntu.com>)
rPSA-2007-0269-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
[USN-558-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module (Cisco Systems Product Security Incident Response Team <psirt@c…)
[SECURITY] [DSA 1435-1] New clamav packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Array overflow in id3lib (devel CVS) (Luigi Auriemma <aluigi@...istici.org>)
Cisco awarded stupidist title in infosec ("worried security" <worriedsecurity@...glemail.com>)
IT Security Consulting Market Size ("SecReview" <secreview@...hmail.com>)
TPTI-07-21: Adobe Flash Player JPG Processing Heap Overflow Vulnerability (tsrt@...m.com)
For Christmas.. (gmaggro <gmaggro@...ers.com>)

December 20 (36 messages)

CVE-2007-6244: Adobe Flash Player ActiveX Control Universal Cross-Site Scripting Vulnerability ("Collin Jackson" <fulldisclosure@...linjackson.com>)
Yahoo Toolbar YShortcut.dll IsTaggedBM() Buffer Overflow (Elazar Broad <elazarb@...thlink.net>)
HP eSupportDiagnostics hpediags.dll Information Disclosure (Elazar Broad <elazarb@...thlink.net>)
Windows XP SP3 - DCERPC Changes (H D Moore <fdlist@...italoffense.net>)
[Professional IT Security Providers - Exposed] Cybertrust ( C + ) (secreview <secreview@...hmail.com>)
Windows XP SP2 - SP3 Compatible Return Addresses (H D Moore <fdlist@...italoffense.net>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) (guiness.stout <guinness.stout@...il.com>)
Re: [Professional IT Security Providers -Exposed] Cybertrust ( C + ) ("c0redump" <c0redump@...ers.org.uk>)
Re: [Professional IT Security Providers -Exposed] Cybertrust ( C + ) (Epic <epic@...k3r.com>)
Re: [Professional IT Security Providers -Exposed] Cybertrust ( C + ) ("Peter Dawson" <slash.pd@...il.com>)
Re: [Professional IT Security Providers -Exposed] Cybertrust ( C + ) ("Kurt Dillard" <kurtdillard@....com>)
Re: [Professional IT Security Providers -Exposed] Cybertrust ( C + ) ("Mike Vasquez" <mike.vasquez@...il.com>)
Re: [Professional IT Security Providers-Exposed] Cybertrust ( C + ) ("c0redump" <c0redump@...ers.org.uk>)
Re: [Professional IT Security Providers -Exposed] Cybertrust ( C + ) (guiness.stout <guinness.stout@...il.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) (trains <trains@...torunix.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) (<elazar@...hmail.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) ("SecReview" <secreview@...hmail.com>)
Re: [Professional IT Security Providers -Exposed] Cybertrust ( C + ) ("SecReview" <secreview@...hmail.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) ("SecReview" <secreview@...hmail.com>)
Re: [Professional IT Security Providers -Exposed] Cybertrust ( C + ) ("SecReview" <secreview@...hmail.com>)
Re: For Christmas.. (reepex <reepex@...il.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) ("SecReview" <secreview@...hmail.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) (don bailey <don.bailey@...il.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) ("SecReview" <secreview@...hmail.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) (Epic <epic@...k3r.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) (<elazar@...hmail.com>)
Re: For Christmas.. ("Guasconi Vincent" <tyoptyop@...il.com>)
Re: For Christmas.. ("Andrew A" <gluttony@...il.com>)
Re: For Christmas.. (Valdis.Kletnieks@...edu)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) (reepex <reepex@...il.com>)
IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption (Elazar Broad <elazarb@...thlink.net>)
[Professional IT Security Reviewers - Exposed] SecReview ( F - ) ("Sec Review Sucks" <secreview.exposed@...il.com>)
[SECURITY] [DSA 1436-1] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
Re: [Professional IT Security Reviewers - Exposed] SecReview ( F - ) ("Mike Vasquez" <mike.vasquez@...il.com>)
Re: Design flaw in AS3 socket handling allows port probing (fukami <fukami@...tioneins.de>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) (don bailey <don.bailey@...il.com>)

December 21 (35 messages)

Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) ("Fredrick Diggle" <fdiggle@...il.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Re: [Professional IT Security Reviewers - Exposed] SecReview ( F - ) ("Kurt Dillard" <kurtdillard@....com>)
Re: [Professional IT Security Reviewers - Exposed] SecReview ( F - ) ("SecReview" <secreview@...hmail.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) (coderman <coderman@...il.com>)
Re: [Professional IT Security Reviewers - Exposed] SecReview ( F - ) (coderman <coderman@...il.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) ("Fredrick Diggle" <fdiggle@...il.com>)
Re: For Christmas.. (gmaggro <gmaggro@...ers.com>)
Security of online casinos ("Matteo G\." <rebonzo@...ero.it>)
Re: Security of online casinos (coderman <coderman@...il.com>)
Re: here ("onion ring" <yum.onion.ring@...il.com>)
here ("onion ring" <yum.onion.ring@...il.com>)
Re: [Professional IT Security Providers - Exposed] Cybertrust ( C + ) (<elazar@...hmail.com>)
Re: here (Andrew Farmer <andfarm@...il.com>)
Watching You ("kcope" <kingcope@....net>)
Watching You Well - - ("kcope" <kingcope@....net>)
Re: For Christmas.. (Matthew Hall <matt@...c.co.uk>)
Re: [Professional IT Security Reviewers - Exposed] SecReview ( F - ) ("Sec Review Sucks" <secreview.exposed@...il.com>)
Re: [Professional IT Security Reviewers - Exposed] SecReview ( F - ) ("Sec Review Sucks" <secreview.exposed@...il.com>)
[USN-559-1] MySQL vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
Fwd: Chat with Dude VanWinkle ("worried security" <worriedsecurity@...glemail.com>)
Re: [Professional IT Security Reviewers - Exposed] SecReview ( F - ) ("Paul Melson" <pmelson@...il.com>)
Re: [Professional IT Security Providers - Exposed] Audit Serve, Inc. ( F- ) ("SilentRunner" <silentrunner@...hmail.com>)
Re: Fwd: Chat with Dude VanWinkle ("worried security" <worriedsecurity@...glemail.com>)
Re: Fwd: Chat with Dude VanWinkle ("php0t" <php0t@...ro.hu>)
Re: [Professional IT Security Reviewers - Exposed] SecReview ( A + ) ("SecReview" <secreview@...hmail.com>)
Re: For Christmas.. (<elazar@...hmail.com>)
Re: [Professional IT Security Reviewers - Exposed] SecReview ( A + ) ("Nate McFeters" <nate.mcfeters@...il.com>)
[Professional IT Security Reviewers - Exposed] SecReview ( A + ) (damncon <damncon@...il.com>)
Re: [Professional IT Security Reviewers - Exposed] SecReview ( A + ) ("Kurt Dillard" <kurtdillard@....com>)
Re: Security of online casinos ("Kevin Pawloski" <kpawloski@...il.com>)
Re: Fwd: Chat with Dude VanWinkle ("worried security" <worriedsecurity@...glemail.com>)
Buffer-overflow in WinUAE 1.4.4 (Luigi Auriemma <aluigi@...istici.org>)
[CAID 35970]: CA Products That Embed Ingres Authentication Vulnerability ("Williams, James K" <James.Williams@...com>)
AOL Instant Messenger AIM 6.0 or 6.5 Beta or higher local zone XSS ("Michael Evanchik" <evanchik@...il.com>)

December 22 (8 messages)

Hikaru (Ben <comsatcat@...thlink.net>)
Re: Hikaru (Ben <comsatcat@...thlink.net>)
Re: Hikaru (coderman <coderman@...il.com>)
Re: Fwd: Chat with Dude VanWinkle (Valdis.Kletnieks@...edu)
trolls and procmail Re: [Professional IT Security Reviewers - Exposed] SecReview ( A + ) (gwen hastings <gwenhastings@...glemail.com>)
hey irmplc (reepex <reepex@...il.com>)
Uber Lamer Ass of the Year. Vote! ("Secniche Bogus" <secnichebogus@...il.com>)
Re: Fwd: Chat with Dude VanWinkle ("worried security" <worriedsecurity@...glemail.com>)

December 23 (4 messages)

Re: Fwd: Chat with Dude VanWinkle (coderman <coderman@...il.com>)
Re: hey irmplc ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
(no subject) (Eyüp Aydin <aydin.eyup@...oo.de>)
Re: Hikaru (twiz <twiz@...il.it>)

December 24 (8 messages)

beyond security sucks at coding (reepex <reepex@...il.com>)
Re: Uber Lamer Ass of the Year. Vote! (damncon <damncon@...il.com>)
Installshield Update Service isusweb.dll Buffer Overflow (Elazar Broad <elazarb@...thlink.net>)
Unicode buffer-overflow in Zoom Player 6.00b2 (Luigi Auriemma <aluigi@...istici.org>)
Double directory traversal in ImgSvr 0.6.21 (Luigi Auriemma <aluigi@...istici.org>)
Buffer-overflow and format string in VideoLAN VLC 0.8.6d (Luigi Auriemma <aluigi@...istici.org>)
XSS @ DHL ("Static Rez" <staticrez@...il.com>)
Webwasher SSL scanner (coderman <coderman@...il.com>)

December 25 (2 messages)

Re: Webwasher SSL scanner (coderman <coderman@...il.com>)
Ho Ho H0-Day - ZyXEL P-330W multiple XSS and XSRF vulnerabilities ("Santa Clause" <santa_clause@...h.com>)

December 26 (8 messages)

Persits Software XUpload.ocx Buffer Overflow (Elazar Broad <elazarb@...thlink.net>)
AOL YGP Picture Editor YGPPicEdit.dll Multiple Buffer Overflows (Elazar Broad <elazarb@...thlink.net>)
Re: AOL YGP Picture Editor YGPPicEdit.dll Multiple Buffer Overflows (reepex <reepex@...il.com>)
Re: AOL YGP Picture Editor YGPPicEdit.dll Multiple Buffer Overflows (Valdis.Kletnieks@...edu)
[SECURITY] [DSA 1437-1] New cupsys packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: AOL YGP Picture Editor YGPPicEdit.dll Multiple Buffer Overflows (Elazar Broad <elazarb@...thlink.net>)
Re: AOL YGP Picture Editor YGPPicEdit.dll Multiple Buffer Overflows (Elazar Broad <elazarb@...thlink.net>)
Professional IT Security Service Providers Exposed -- Revised Grades ("SecReview" <secreview@...hmail.com>)

December 27 (12 messages)

Re: New TV show "Tiger Team": social engineering, wired/wireless hacking, physical break-in (<blackredyellow@...hmail.com>)
usb shorting to ground (Todd Troxell <ttroxell@...ian.org>)
XSS with UTF-7 in Google ("HASEGAWA Yosuke" <yosuke.hasegawa@...il.com>)
Re: New TV show "Tiger Team": social engineering, wired/wireless hacking, physical break-in ("Jay" <jay.tomas@...osecguru.com>)
Re: New TV show "Tiger Team": social engineering, wired/wireless hacking, physical break-in ("James Matthews" <nytrokiss@...il.com>)
rIP BETA - reverse IP tool (disfigure <disfigure@...il.com>)
Re: AOL YGP Picture Editor YGPPicEdit.dll Multiple Buffer Overflows (Elazar Broad <elazarb@...thlink.net>)
Buffer-overflow in Extended Module Player 2.5.1 (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in Feng 0.1.15 (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in libnemesi 0.6.4-rc1 (Luigi Auriemma <aluigi@...istici.org>)
Re: AOL YGP Picture Editor YGPPicEdit.dll Multiple Buffer Overflows (Valdis.Kletnieks@...edu)
Re: AOL YGP Picture Editor YGPPicEdit.dll Multiple Buffer Overflows (reepex <reepex@...il.com>)

December 28 (26 messages)

Re: Ho Ho H0-Day - ZyXEL P-330W multiple XSS and XSRF vulnerabilities ("Santa Clause" <santa_clause@...h.com>)
OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities ("Juan Galiana" <jgaliana@...il.com>)
FAQMasterFlexPlus multiple vulnerabilities ("Juan Galiana" <jgaliana@...il.com>)
Hellsing (Ben <comsatcat@...thlink.net>)
Troy Riser (Clifton Bennett <draconis121@...oo.com>)
Re: Troy Riser ("Mo.Ron Hubbard" <securentology@...il.com>)
HP Photosmart vulnerabilities (<uncleron@...hmail.com>)
Re: HP Photosmart vulnerabilities (Joshua Levitsky <jlevitsk@...hie.com>)
[SECURITY] [DSA 1440-1] New inotify-tools packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: HP Photosmart vulnerabilities ("Mo.Ron Hubbard" <securentology@...il.com>)
Re: HP Photosmart vulnerabilities (<uncleron@...hmail.com>)
Re: HP Photosmart vulnerabilities (Joshua Levitsky <jlevitsk@...hie.com>)
Re: HP Photosmart vulnerabilities (3APA3A <3APA3A@...URITY.NNOV.RU>)
Buffer-overflow in CoolPlayer 217 (Luigi Auriemma <aluigi@...istici.org>)
THE BIG ONE ("Andrew A" <gluttony@...il.com>)
Re: THE BIG ONE ("Micheal Espinola Jr" <michealespinola@...il.com>)
Persits Software XUpload Control Buffer Overflow Exploit (<elazar@...hmail.com>)
Re: THE BIG ONE ("Mo.Ron Hubbard" <securentology@...il.com>)
Persits Software XUpload Control AddFolder() Buffer Overflow Exploit (Elazar Broad <elazarb@...thlink.net>)
[SECURITY] [DSA 1405-3] New zope-cmfplone packages fix regression (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 1439-1] New typo3-src packages fix SQL injection (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 1438-1] New tar packages fix several vulnerabilities (Florian Weimer <fw@...ian.org>)
[SECURITY] [DSA 1441-1] New peercast packages fix arbitrary code execution (Thijs Kinkhorst <thijs@...ian.org>)
NoseRub Login SQL Injection Vulnerability ("Narf Dude" <foobert@....de>)
iFriends free video chat exploit ("Ifriends Exploit" <ifriendsexploit@...il.com>)
Re: iFriends free video chat exploit (Valdis.Kletnieks@...edu)

December 29 (15 messages)

Re: iFriends free video chat exploit (damncon <damncon@...il.com>)
Re: iFriends free video chat exploit ("worried security" <worriedsecurity@...glemail.com>)
Re: iFriends free video chat exploit (damncon <damncon@...il.com>)
[SECURITY] [DSA 1442-2] New libsndfile packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: iFriends free video chat exploit (reepex <reepex@...il.com>)
Fwd: beyond security sucks at coding (reepex <reepex@...il.com>)
Re: New TV show "Tiger Team": social engineering, wired/wireless hacking, physical break-in ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
[ GLSA 200712-15 ] libexif: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200712-16 ] Exiv2: Integer overflow (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200712-17 ] exiftags: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200712-18 ] Multi-Threaded DAAP Daemon: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
[ GLSA 200712-19 ] Syslog-ng: Denial of Service (Robert Buchholz <rbu@...too.org>)
[ GLSA 200712-20 ] ClamAV: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
[ GLSA 200712-21 ] Mozilla Firefox, SeaMonkey: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
Re: iFriends free video chat exploit (damncon <damncon@...il.com>)

December 30 (8 messages)

TK53 Advisory #2: Multiple vulnerabilities in ClamAV ("Lolek of TK53" <lolek1337@...glemail.com>)
[ GLSA 200712-22 ] Opera: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
DIMVA 2008 - Call For Papers (Tadek Pietraszek <tadek@...traszek.org>)
TK53 Advisory #2: Multiple vulnerabilities in ClamAV ("Lolek of TK53" <lolek1337@...glemail.com>)
TK53 Advisory #2: Multiple vulnerabilities in ClamAV ("Lolek of TK53" <lolek1337@...glemail.com>)
[ GLSA 200712-23 ] Wireshark: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
[ GLSA 200712-24 ] AMD64 x86 emulation GTK+ library: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
[ GLSA 200712-25 ] OpenOffice.org: User-assisted arbitrary code execution (Pierre-Yves Rofes <py@...too.org>)

December 31 (11 messages)

IBM Domino Web Access inotes6.dll SEH Overwrite Exploit (<elazar@...hmail.com>)
Re: usb shorting to ground ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
Installshield isusweb.dll Buffer Overflow Exploit (<elazar@...hmail.com>)
IBM Domino Web Access Upload Module dwa7w.dll SEH Overwrite Exploit (<elazar@...hmail.com>)
Blog Entry of Interest (Ben <comsatcat@...thlink.net>)
IBM Domino Web Access Upload Module inotes6w.dll SEH Overwrite Exploit (<elazar@...hmail.com>)
Re: IBM Domino Web Access Upload Module inotes6w.dll SEH Overwrite Exploit (reepex <reepex@...il.com>)
Re: Blog Entry of Interest ("James Matthews" <nytrokiss@...il.com>)
[Professional IT Security Providers - Exposed] QuietMove ( D - ) (secreview <secreview@...hmail.com>)
Re: [Professional IT Security Providers - Exposed] QuietMove ( D - ) (Bob Bruen <bruen@...drain.net>)
Re: [Professional IT Security Providers - Exposed]QuietMove ( D - ) ("Randal T. Rioux" <randy@...cyonlabs.com>)

644 messages

Powered by blists - more mailing lists