full-disclosure mailing list - 2008/02

Messages by day:

February 1 (3 messages)

• [ MDVSA-2008:030 ] - Updated pcre packages fix vulnerability (security@...driva.com)
• Re: A friendly request on behalf of Bart Cilfone ("Fredrick Diggle" <fdiggle@...il.com>)
• Southwest Airlines Ticket Silliness (Adam Chesnutt <icetre@...italfreezer.net>)

• Re: Southwest Airlines Ticket Silliness (Adam Chesnutt <icetre@...italfreezer.net>)
• Re: A friendly request on behalf of Bart Cilfone (coderman <coderman@...il.com>)
• Re: A friendly request on behalf of Bart Cilfone (coderman <coderman@...il.com>)
• Re: Southwest Airlines Ticket Silliness (coderman <coderman@...il.com>)
• [ MDVSA-2008:031 ] - (security@...driva.com)
• Re: Southwest Airlines Ticket Silliness ("Warren Myers" <volcimaster@...il.com>)
• Re: Southwest Airlines Ticket Silliness (nate.mcfeters@...il.com)
• Re: Southwest Airlines Ticket Silliness ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: undersea cable cut and internet problem! (coderman <coderman@...il.com>)
• Re: undersea cable cut and internet problem! ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: Southwest Airlines Ticket Silliness ("Adam Chesnutt" <icetre@...italfreezer.net>)
• [ MDVSA-2008:033 ] - Updated ruby-gnome2 packages fix arbitrary code execution vulnerability (security@...driva.com)
• The Everything Development System - SQL Injection (sub <sub@...m641a.net>)
• [ MDVSA-2008:032 ] - Updated boost packages fix DoS vulnerabilities (security@...driva.com)
• Re: undersea cable cut and internet problem! (gmaggro <gmaggro@...ers.com>)
• Re: Southwest Airlines Ticket Silliness ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
• Re: undersea cable cut and internet problem! ("worried security" <worriedsecurity@...glemail.com>)
• Re: Southwest Airlines Ticket Silliness (Adam Chesnutt <icetre@...italfreezer.net>)
• Re: Southwest Airlines Ticket Silliness ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
• Re: Southwest Airlines Ticket Silliness ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: Southwest Airlines Ticket Silliness ("worried security" <worriedsecurity@...glemail.com>)

• Re: A friendly request on behalf of Bart Cilfone ("James Matthews" <nytrokiss@...il.com>)
• Re: undersea cable cut and internet problem! ("worried security" <worriedsecurity@...glemail.com>)
• FaceBook/Aurigma Image/PhotoUploader Buffer Overflow ("Elazar Broad" <elazar@...hmail.com>)
• Yahoo! JukeBox MediaGrid ActiveX Control AddBitmap() Buffer Overflow ("Elazar Broad" <elazar@...hmail.com>)

• Re: Southwest Airlines Ticket Silliness ("North, Quinn" <QNorth@....com>)
• Re: Southwest Airlines Ticket Silliness ("Derek Buelna" <derekb@...ex.com>)
• [OPENADS-SA-2008-001] Openads 2.4.2 vulnerability fixed (Matteo Beccati <php@...cati.com>)
• [USN-574-1] Linux kernel vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
• Immunity Debugger v1.4 Release (Nicolas Waisman <nicolas@...unityinc.com>)
• CORE-2008-0122: MPlayer arbitrary pointer dereference (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server SQLIDEBUG File Creation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server onedcu File Creation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities ("carl hardwick" <hardwick.carl@...il.com>)
• Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities ("Rob Thompson" <my.security.lists@...il.com>)
• Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities (steve menard <smenard@...et.nb.ca>)
• Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities (reepex <reepex@...il.com>)
• Socket termination in FTP Log Server 7.9.14.0 (Luigi Auriemma <aluigi@...istici.org>)
• Multiple vulnerabilities in WinCom LPD Total 3.0.2.623 (Luigi Auriemma <aluigi@...istici.org>)
• Multiple vulnerabilities in SAPlpd 6.28 (Luigi Auriemma <aluigi@...istici.org>)
• Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

• [USN-575-1] Apache vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
• Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities (Rob Thompson <my.security.lists@...il.com>)
• Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: Southwest Airlines Ticket Silliness ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities (scott <redhowlingwolves@...rr.com>)
• [ MDVSA-2008:034 ] - Updated emacs packages fix vulnerabilities (security@...driva.com)
• [SECURITY] [DSA 1486-1] New gnatsweb packages fix cross-site scripting (Steve Kemp <skx@...ian.org>)
• [SECURITY] [DSA 1480-1] New poppler packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1481-1] New python-cherrypy packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
• CYBSEC Security Advisory: Arbitrary file overwrite in Documentum Administrator / Documentum Webtop (CYBSEC Advisories <advisories@...sec.com>)
• [ MDVSA-2008:035 ] - Updated libcdio packages fix DoS vulnerability (security@...driva.com)
• [SECURITY] [DSA 1482-1] New squid packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)

• Acroread 8.1.2: why? (Paul Szabo <psz@...hs.usyd.edu.au>)
• rPSA-2008-0040-1 mysql mysql-bench mysql-server (rPath Update Announcements <announce-noreply@...th.com>)
• JaPCrypt (Gerardo Di Giacomo <gerardo@...ux.it>)
• Re: JaPCrypt (coderman <coderman@...il.com>)
• Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities (coderman <coderman@...il.com>)
• Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities (coderman <coderman@...il.com>)
• What makes Yahoo! a good merger candidate? (Vincent van Scherpenseel <mailinglists@...-ack.org>)
• Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities (coderman <coderman@...il.com>)
• Re: JaPCrypt ("T Biehn" <tbiehn@...il.com>)
• Re: JaPCrypt ("T Biehn" <tbiehn@...il.com>)
• Re: JaPCrypt (Gerardo Di Giacomo <gerardo@...ux.it>)
• Re: JaPCrypt (coderman <coderman@...il.com>)
• Re: What makes Yahoo! a good merger candidate? (Ferdinand Klinzer <Klinzer@....de>)
• Re: Acroread 8.1.2: why? (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Re: JaPCrypt (Valdis.Kletnieks@...edu)
• Re: JaPCrypt (Epic <epic@...k3r.com>)
• Re: JaPCrypt (Valdis.Kletnieks@...edu)
• Re: What makes Yahoo! a good merger candidate? (Paul Schmehl <pauls@...allas.edu>)
• Re: JaPCrypt (Christoph Gruber <list@...u.at>)
• Re: What makes Yahoo! a good merger candidate? (Valdis.Kletnieks@...edu)
• Re: What makes Yahoo! a good merger candidate? (Paul Schmehl <pauls@...allas.edu>)
• Re: What makes Yahoo! a good merger candidate? (Harry Hoffman <hhoffman@...solutions.net>)
• Re: JaPCrypt (Gerardo Di Giacomo <gerardo@...ux.it>)
• rPSA-2008-0043-1 icu (rPath Update Announcements <announce-noreply@...th.com>)
• Re: What makes Yahoo! a good merger candidate? ("worried security" <worriedsecurity@...glemail.com>)
• MyNews 1.6.X HTML/JS Injection Vulnerability (SkyOut <skyout@....net>)
• iDefense Security Advisory 02.04.08: Hewlett-Packard Network Node Manager Topology Manager Service DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.co…)
• Re: What makes Yahoo! a good merger candidate? (Harry Hoffman <hhoffman@...solutions.net>)
• Chat vulnerabilities in TinTin++ 1.97.9 (Luigi Auriemma <aluigi@...istici.org>)
• Logs visualization in WS_FTP Server Manager 6.1.0.0 (Luigi Auriemma <aluigi@...istici.org>)
• ZDI-08-003: Symantec Backup Exec Remote File Upload Vulnerability (zdi-disclosures@...m.com)
• rPSA-2008-0046-1 gd (rPath Update Announcements <announce-noreply@...th.com>)
• [SECURITY] [DSA 1483-1] New net-snmp packages fix denial of service vulnerability (Noah Meyerhans <noahm@...ian.org>)
• [Professional IT Security Providers - Exposed] Layer 9 Corporation ( D ) (secreview <secreview@...hmail.com>)
• [ MDVSA-2008:036 ] - Updated CUPS packages fix SNMP vulnerability (security@...driva.com)
• Re: [Professional IT Security Providers - Exposed] Layer 9 Corporation ( D ) ("J. Oquendo" <sil@...iltrated.net>)
• [ GLSA 200802-01 ] SDL_image: Two buffer overflow vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200802-02 ] Doomsday: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)

• Re: MyNews 1.6.X HTML/JS Injection Vulnerability (reepex <reepex@...il.com>)
• Re: What makes Yahoo! a good merger candidate? (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• Indian Antivirus Website is infected with Virus...SmartCOP Antivirus ! ("Antivirus Taneja" <taneja.security@...il.com>)
• Re: What makes Yahoo! a good merger candidate? ("Christian Kujau" <lists@...dbynature.de>)
• Re: What makes Yahoo! a good merger candidate? (Paul Schmehl <pauls@...allas.edu>)
• Re: What makes Yahoo! a good merger candidate? (Chris 'Chipper' Chiapusio <chipper@...mas.net>)
• Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability ("Michael Neal Vasquez" <mnv@...mni.princeton.edu>)
• Re: Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
• Re: What makes Yahoo! a good merger candidate? (admin@...shcop.net)
• Re: What makes Yahoo! a good merger candidate? (Valdis.Kletnieks@...edu)
• [ MDVSA-2008:037 ] - Updated libcdio packages fix DoS vulnerability (security@...driva.com)
• Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1 (Luigi Auriemma <aluigi@...istici.org>)
• iDefense Security Advisory 02.07.08: IBM DB2 Universal Database db2pd Arbitrary Library Loading Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 02.07.08: IBM DB2 Universal Database Administration Server Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.co…)
• Worldnic DNS servers poisoned? (James Lay <jlay@...ve-tothe-box.net>)

• Re: MyNews 1.6.X HTML/JS Injection Vulnerability ("Fredrick Diggle" <fdiggle@...il.com>)
• Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability (cocoruder <cocoruder@...il.com>)
• [ MDVSA-2008:038 ] - Updated gd packages fix buffer overflow vulnerability (security@...driva.com)
• [ MDVSA-2008:039 ] - Updated netpbm packages fix buffer overflow vulnerability (security@...driva.com)
• [ MDVSA-2008:040 ] - Updated SDL_image packages fix vulnerabilities (security@...driva.com)
• [ MDVSA-2008:041 ] - Updated tk packages fix buffer overflow vulnerability (security@...driva.com)
• [USN-576-1] Firefox vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
• [ MDVSA-2008:042 ] - Updated Qt4 packages fix vulnerability in QSslSocket (security@...driva.com)
• [OSVDB] [USN-576-1] Firefox vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
• Re: Worldnic DNS servers poisoned? (Florian Weimer <fw@...eb.enyo.de>)
• ASUS Eee PC rooted out of the box (RISE Security <advisories@...esecurity.org>)
• [SECURITY] [DSA 1487-1] New libexif packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Serendipity Freetag-plugin XSS vulnerability (Research <bugtraq@...sploit.de>)
• Re: ASUS Eee PC rooted out of the box (reepex <reepex@...il.com>)
• cyber armageddon due feb 10 ("worried security" <worriedsecurity@...glemail.com>)
• Re: ASUS Eee PC rooted out of the box ("Stack Smasher" <stacksmasher@...il.com>)
• Re: ASUS Eee PC rooted out of the box ("Stack Smasher" <stacksmasher@...il.com>)
• Re: ASUS Eee PC rooted out of the box ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: ASUS Eee PC rooted out of the box (reepex <reepex@...il.com>)
• Re: ASUS Eee PC rooted out of the box (reepex <reepex@...il.com>)
• Re: ASUS Eee PC rooted out of the box (A.L.M.Buxey@...ro.ac.uk)
• Re: ASUS Eee PC rooted out of the box (keith@...uritynow.us)
• Re: cyber armageddon due feb 10 ("worried security" <worriedsecurity@...glemail.com>)
• Re: ASUS Eee PC rooted out of the box (Valdis.Kletnieks@...edu)
• Re: ASUS Eee PC rooted out of the box (reepex <reepex@...il.com>)
• Re: ASUS Eee PC rooted out of the box ("Erik Harrison" <eharrison@...il.com>)
• NULL byte writing in Emerald, RadiusNT/X and Air Marshal (Luigi Auriemma <aluigi@...istici.org>)
• Re: ASUS Eee PC rooted out of the box ("Erik Harrison" <eharrison@...il.com>)
• Re: ASUS Eee PC rooted out of the box (reepex <reepex@...il.com>)
• Re: ASUS Eee PC rooted out of the box (RISE Security <advisories@...esecurity.org>)
• rPSA-2008-0048-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
• Re: ASUS Eee PC rooted out of the box (Simon Smith <simon@...soft.com>)
• Re: cyber armageddon due feb 10 ("DUDE DUDERINO" <ihasshovel@...il.com>)
• Re: ASUS Eee PC rooted out of the box (Simon Smith <simon@...soft.com>)

• Break Captcha to send sms at Movistar Colombia, Movistar Ecuador and Comcel Colombia (Camilo <camilo.uribe@...il.com>)
• [ NNSquad ] Verizon's access via their provided Actiontec MoCa router (fwd) (Jay Sulzberger <jays@...ix.com>)
• Re: [ NNSquad ] Verizon's access via their provided Actiontec MoCa router (fwd) (coderman <coderman@...il.com>)
• Some Hashes ("Open Phugu" <openphugu@...il.com>)
• Re: Some Hashes (Maxim <fulldisc@...ll.org>)
• Re: Some Hashes ("Joey Mengele" <joey.mengele@...hmail.com>)
• iDefense Security Advisory 02.08.08: Adobe Reader and Acrobat JavaScript Insecure Method Exposure Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 02.08.08: Adobe Reader Security Provider Unsafe Libary Path Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Some Hashes (scott <redhowlingwolves@...rr.com>)
• [SECURITY] [DSA 1488-1] New phpbb2 packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
• rPSA-2008-0051-1 firefox (rPath Update Announcements <announce-noreply@...th.com>)
• iDefense Security Advisory 02.08.08: Adobe Reader and Acrobat Multiple Stack-based Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• Firefox 2.0.0.12 information leak vulnerability ("carl hardwick" <hardwick.carl@...il.com>)
• Re: ASUS Eee PC rooted out of the box ("SilentRunner" <silentrunner@...hmail.com>)
• Re: ASUS Eee PC rooted out of the box ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: ASUS Eee PC rooted out of the box (reepex <reepex@...il.com>)
• Re: ASUS Eee PC rooted out of the box (Simon Smith <simon@...soft.com>)
• Re: ASUS Eee PC rooted out of the box ("Static Rez" <staticrez@...il.com>)
• Re: ASUS Eee PC rooted out of the box ("worried security" <worriedsecurity@...glemail.com>)
• Re: ASUS Eee PC rooted out of the box (keith@...uritynow.us)

• Re: back to high value targets (coderman <coderman@...il.com>)
• scientology-- (Josh Gorbin <bugmenever@...ox.com>)
• Firefox URI Spoofing Revisited ("carl hardwick" <hardwick.carl@...il.com>)
• [SECURITY] [DSA 1484-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1485-1] New icedove packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1489-1] New iceweasel packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1490-1] New tk8.3 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1491-1] New tk8.4 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1492-1] New wml packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1493-1] New sdl-image1.2 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)

• List Charter (John Cartwright <johnc@...k.org.uk>)
• uk needs dedicated e-crime unit and lolz for web trolls ("worried security" <worriedsecurity@...glemail.com>)
• [SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation (Florian Weimer <fw@...eb.enyo.de>)
• Dude VanWinkle's Death ("Jonathan Glass" <jonathan.glass@...il.com>)
• Re: ASUS Eee PC rooted out of the box (Valdis.Kletnieks@...edu)
• Re: Dude VanWinkle's Death ("Joey Mengele" <joey.mengele@...hmail.com>)
• Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15 (Luigi Auriemma <aluigi@...istici.org>)
• Format string and DoS in Opium OPI and cyanPrintIP servers 4.10.x (Luigi Auriemma <aluigi@...istici.org>)
• Format string and buffer-overflow in Lst Network Print Server 9.4.2 build 105 (Luigi Auriemma <aluigi@...istici.org>)
• Re: Dude VanWinkle's Death (Paul Schmehl <pauls@...allas.edu>)
• Re: Dude VanWinkle's Death (Simon Smith <simon@...soft.com>)
• Re: Dude VanWinkle's Death (Simon Smith <simon@...soft.com>)
• Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Luigi Auriemma <aluigi@...istici.org>)
• Re: Dude VanWinkle's Death (Keith Kilroy <keith@...uritynow.us>)
• Re: Dude VanWinkle's Death ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: Dude VanWinkle's Death (Simon Smith <simon@...soft.com>)
• Re: Dude VanWinkle's Death ("Ronald MacDonald" <ronald@...cd.com>)
• DEATH OF AN INTERNET ROCKSTAR (<dudevanwinkle@...h.ai>)
• Re: Dude VanWinkle's Death ("Geoffrey Gowey" <gjgowey@...il.com>)
• Re: Dude VanWinkle's Death ("worried security" <worriedsecurity@...glemail.com>)
• Re: Dude VanWinkle's Death (<dudevanwinkle@...h.ai>)
• Re: Dude VanWinkle's Death ("worried security" <worriedsecurity@...glemail.com>)
• Re: Dude VanWinkle's Death ("Abilash Praveen" <contactme@...lashpraveen.com>)
• Re: Dude VanWinkle's Death (<dudevanwinkle@...h.ai>)
• in Memory of Dude VanWinkle / Justin Plazzo (Gadi Evron <ge@...uxbox.org>)
• Re: Dude VanWinkle's Death ("Randal T. Rioux" <randy@...cyonlabs.com>)
• Brute force attack - need your advice ("Abilash Praveen" <contactme@...lashpraveen.com>)
• Re: Brute force attack - need your advice (<dudevanwinkle@...h.ai>)
• Re: Brute force attack - need your advice (Paul Schmehl <pauls@...allas.edu>)
• Re: Brute force attack - need your advice ("Peter Dawson" <slash.pd@...il.com>)
• Re: in Memory of Dude VanWinkle / Justin Plazzo ("Abilash Praveen" <contactme@...lashpraveen.com>)
• Re: Brute force attack - need your advice (Valdis.Kletnieks@...edu)
• Re: Brute force attack - need your advice (<dudevanwinkle@...h.ai>)
• Re: Brute force attack - need your advice ("Peter Dawson" <slash.pd@...il.com>)
• [ GLSA 200802-03 ] Horde IMP: Security bypass (Pierre-Yves Rofes <py@...too.org>)
• Re: Dude VanWinkle's Death ("Geoffrey Gowey" <gjgowey@...il.com>)
• ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability (zdi-disclosures@...m.com)
• ZDI-08-004: Adobe AcrobatReader Javascript for PDF Integer Overflow Vulnerability (zdi-disclosures@...m.com)
• [ GLSA 200802-04 ] Gallery: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• Re: RIP Dude VanWinkle ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)

• Re: in Memory of Dude VanWinkle / Justin Plazzo (scott <redhowlingwolves@...rr.com>)
• Re: in Memory of Dude VanWinkle / Justin Plazzo (Jared DeMott <demottja@....edu>)
• Re: [inbox] in Memory of Dude VanWinkle / Justin Plazzo ("Exibar" <exibar@...lair.com>)
• Re: [inbox] in Memory of Dude VanWinkle / JustinPlazzo ("Richard Golodner" <rgolodner@...ratection.com>)
• Re: Dude VanWinkle's Death ("Andrew A" <gluttony@...il.com>)
• Re: Dude VanWinkle's Death (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• [ MDVSA-2008:043 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
• Re: in Memory of Dude VanWinkle / Justin Plazzo ("Andrew A" <gluttony@...il.com>)
• FLEA-2008-0001-1 firefox (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: Brute force attack - need your advice (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference (Wojciech Purczynski <cliph@...c.pl>)
• FLEA-2008-0002-1 python (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• "Andrew A" -> Benjamin Trott, Six Apart/Live Journal hacker, and belligerent anti-gay remarks? ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
• Re: Brute force attack - need your advice (Keith Kilroy <keith@...uritynow.us>)
• FLEA-2008-0004-1 rsync (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• FLEA-2008-0003-1 nss_ldap (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: "Andrew A" -> Benjamin Trott, Six Apart/Live Journal hacker, and belligerent anti-gay remarks? ("T Biehn" <tbiehn@...il.com>)
• FLEA-2008-0005-1 e2fsprogs (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: Brute force attack - need your advice ("Abilash Praveen" <contactme@...lashpraveen.com>)
• FLEA-2008-0007-1 gd (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: Brute force attack - need your advice (A.L.M.Buxey@...ro.ac.uk)
• Re: Brute force attack - need your advice (Keith Kilroy <keith@...uritynow.us>)
• Re: Brute force attack - need your advice ("T Biehn" <tbiehn@...il.com>)
• [ MDVSA-2008:044 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
• death of "Dude" brings out the "Rude" ("Randy Mueller" <randallm@...mail.com>)
• Re: Brute force attack - need your advice ("Abilash Praveen" <contactme@...lashpraveen.com>)
• Re: Brute force attack - need your advice (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• Re: Brute force attack - need your advice ("Michael Simpson" <mikie.simpson@...il.com>)
• Re: [inbox] in Memory of Dude VanWinkle / Justin Plazzo ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: Brute force attack - need your advice (keith@...uritynow.us)
• Re: in Memory of Dude VanWinkle / Justin Plazzo (Prohest <prohest@...il.com>)
• Re: [funsec] in Memory of Dude VanWinkle / Justin Plazzo (Chris Blask <chris@...sk.org>)
• Re: Brute force attack - need your advice (Keith Kilroy <keith@...uritynow.us>)
• Re: [funsec] RIP Dude VanWinkle (Blanchard_Michael@....com)
• Article: FaceBook ImageUploader4.1.OCX Stack Buffer Overflow Vulnerability ("Dror" <dror@...grp.com>)
• i tried but the whitehouse were having none of it ("worried security" <worriedsecurity@...glemail.com>)
• Re: Brute force attack - need your advice (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• Re: Brute force attack - need your advice (Keith Kilroy <keith@...uritynow.us>)
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (jfvanmeter@...cast.net)
• Re: [funsec] in Memory of Dude VanWinkle / Justin Plazzo (<dudevanwinkle@...h.ai>)
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Luigi Auriemma <aluigi@...istici.org>)
• Re: in Memory of Dude VanWinkle / Justin Plazzo (<dudevanwinkle@...h.ai>)
• rPSA-2008-0052-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Brute force attack - need your advice (<dudevanwinkle@...h.ai>)
• FaceBook ImageUploader4.1.OCX Stack Buffer Overflow Vulnerability ("Dror" <dror@...grp.com>)
• Re: in Memory of Dude VanWinkle / Justin Plazzo (Valdis.Kletnieks@...edu)
• Re: Brute force attack - need your advice (Valdis.Kletnieks@...edu)
• Re: Brute force attack - need your advice (Valdis.Kletnieks@...edu)
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (jfvanmeter@...cast.net)
• iDefense Security Advisory 02.12.08: ClamAV libclamav PE File Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Brute force attack - need your advice (Simon Smith <simon@...soft.com>)
• Re: [funsec] in Memory of Dude VanWinkle / Justin Plazzo (Simon Smith <simon@...soft.com>)
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Luigi Auriemma <aluigi@...istici.org>)
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (jfvanmeter@...cast.net)
• [USN-577-1] Linux kernel vulnerability (Jamie Strandboge <jamie@...ntu.com>)
• Unicode buffer-overflow in RPM Remote Print Manager 4.5.1.11 (Luigi Auriemma <aluigi@...istici.org>)
• Directory traversal and DoS in WinIPDS G52-33-021 (Luigi Auriemma <aluigi@...istici.org>)
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (jfvanmeter@...cast.net)
• Re: in Memory of Dude VanWinkle / Justin Plazzo ("Andrew A" <gluttony@...il.com>)
• Re: in Memory of Dude VanWinkle / Justin Plazzo (evilrabbi <evilrabbi@...il.com>)
• Re: in Memory of Dude VanWinkle / Justin Plazzo ("Fredrick Diggle" <fdiggle@...il.com>)
• Re: in Memory of Dude VanWinkle / Justin Plazzo ("Geoffrey Gowey" <gjgowey@...il.com>)
• Re: ASUS Eee PC rooted out of the box ("Fredrick Diggle" <fdiggle@...il.com>)
• Disrespecting the respectable Dude VanWinkle / Justin Plazzo, illegal? (Simon Smith <simon@...soft.com>)
• Re: Brute force attack - need your advice (Simon Smith <simon@...soft.com>)
• Re: [inbox] in Memory of Dude VanWinkle / Justin Plazzo (Paul Schmehl <pauls@...allas.edu>)
• Re: [funsec] in Memory of Dude VanWinkle / Justin Plazzo ("Ag. System Administrator" <sysadmin@...nt.co.il>)
• Re: Disrespecting the respectable Dude VanWinkle / Justin Plazzo, illegal? (Paul Schmehl <pauls@...allas.edu>)
• Re: Disrespecting the respectable Dude VanWinkle / Justin Plazzo, illegal? ("J. Oquendo" <sil@...iltrated.net>)
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Luigi Auriemma <aluigi@...istici.org>)
• [ GLSA 200802-05 ] Gnumeric: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
• Cacti 0.8.7a Multiple Vulnerabilities (s4tan <s4tan@....it>)
• [ GLSA 200802-06 ] scponly: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• Re: Disrespecting the respectable Dude VanWinkle / Justin Plazzo, illegal? (Simon Smith <simon@...soft.com>)
• Re: Disrespecting the respectable Dude VanWinkle / Justin Plazzo, illegal? ("J. Oquendo" <sil@...iltrated.net>)
• Re: [funsec] death of "Dude" brings out the "Rude" (Blue Boar <BlueBoar@...evco.com>)
• Re: Disrespecting the respectable Dude VanWinkle / Justin Plazzo, illegal? (Simon Smith <simon@...soft.com>)
• [SECURITY] [DSA 1495-1] New nagios-plugins packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1496-1] New mplayer packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• TROLLS WITH NOT RESPECT ("Randy Mueller" <randallm@...mail.com>)
• Re: TROLLS WITH NOT RESPECT (Valdis.Kletnieks@...edu)
• Re: TROLLS WITH NOT RESPECT ("Andrew A" <gluttony@...il.com>)
• iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

• iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Stack-based Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability (zdi-disclosures@...m.com)
• iDefense Security Advisory 02.12.08: Microsoft Internet Explorer Property Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 02.12.08: Adobe Flash Media Server 2 Multiple Integer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 02.12.08: Adobe Flash Media Server 2 Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: "Andrew A" -> Benjamin Trott, Six Apart/Live Journal hacker, and belligerent anti-gay remarks? ("Andrew A" <gluttony@...il.com>)
• Re: TROLLS WITH NOT RESPECT ("Fredrick Diggle" <fdiggle@...il.com>)
• rPSA-2008-0054-1 tk (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2008-0059-1 openldap openldap-clients openldap-servers (rPath Update Announcements <announce-noreply@...th.com>)
• QuickTime <= 7.4.1 QTPlugin.ocx Multiple Remote Stack Overflow ("laurent gaffie" <laurent.gaffie@...il.com>)
• MS08-011/CVE-2008-0108 exploit. ("chujwamwdupe chujwamwdupe" <chujwamwdupelol@...glemail.com>)
• [SECURITY] [DSA 1494-2] New linux-2.6 packages fix privilege escalation (dann frazier <dannf@...ian.org>)
• Re: rPSA-2008-0052-1 kernel (gregory <gregory@....be>)
• OpenCA XSRF (CVE-2008-0556) (Alexander Klink <a.klink@...ops.de>)
• Re: in Memory of Dude VanWinkle / Justin Plazzo (- o s g o - <osgo@...pam.hotmail.com>)
• Cisco Security Advisory: SQL injection in Cisco Unified Communications Manager (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@ci…)
• rPSA-2008-0061-1 SDL_image (rPath Update Announcements <announce-noreply@...th.com>)
• Pouring one out for my homie the Dude ("Captain McShanks" <simon.j.phoenix@...il.com>)
• rPSA-2008-0063-1 boost (rPath Update Announcements <announce-noreply@...th.com>)
• JSPWiki Multiple Vulnerabilities (Trancer <mtrancer@...il.com>)
• [ GLSA 200802-07 ] Pulseaudio: Privilege escalation (Pierre-Yves Rofes <py@...too.org>)

• [USN-578-1] Linux kernel vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
• Re: rPSA-2008-0052-1 kernel (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• Digitalarmaments a fake orginazation? ("Arjun srivastav" <arjuncsrivastav@...il.com>)
• Re: ASUS Eee PC rooted out of the box (Tonu Samuel <tonu@....ee>)
• Analysis of MS08-006 / Demo of MS08-007 (H D Moore <fdlist@...italoffense.net>)
• DOINGSOFT-2008-02-11 - IPDiva VPN SSL Brute force attack (eagle <eagle@...ckers.fr>)
• DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks (eagle <eagle@...ckers.fr>)
• [ GLSA 200802-08 ] Boost: Denial of Service (Raphael Marichez <falco@...too.org>)
• [ MDVSA-2008:045 ] - Updated MPlayer packages fix a few vulnerabilities (security@...driva.com)

• Re: in Memory of Dude VanWinkle / Justin Plazzo (Byron Sonne <blsonne@...ers.com>)
• Re: in Memory of Dude VanWinkle / Justin Plazzo ("Peter Dawson" <slash.pd@...il.com>)
• [MU-200802-01] Multiple Remote Arbitrary Execution Vulnerabilities in Mplayer (noreply@...ecurity.com)
• Firefox 2.0.0.12 IFrame overflow vulnerability ("carl hardwick" <hardwick.carl@...il.com>)
• Re: Firefox 2.0.0.12 IFrame overflow vulnerability ("Randal, Phil" <prandal@...efordshire.gov.uk>)
• [INFIGO-2008-02-13]: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability ("infocus" <infocus@...igo.hr>)
• let's name something after dude vanwinkle ("worried security" <worriedsecurity@...glemail.com>)
• Sami FTP Server 2.0.* Multiple Remote Vulnerabilities (lorenzo <securfrog@...il.com>)
• Re: Sami FTP Server 2.0.* Multiple Remote Vulnerabilities (lorenzo <securfrog@...il.com>)
• Rosoft Media Player 4.1.8 Remote Buffer Overflow ( .M3U) (lorenzo <securfrog@...il.com>)
• Re: Rosoft Media Player 4.1.8 Remote Buffer Overflow ( .M3U) (reepex <reepex@...il.com>)
• Re: Rosoft Media Player 4.1.8 Remote Buffer Overflow ( .M3U) ("Captain McShanks" <simon.j.phoenix@...il.com>)
• Re: Rosoft Media Player 4.1.8 Remote Buffer Overflow ( .M3U) (reepex <reepex@...il.com>)
• Re: let's name something after dude vanwinkle ("Andrew A" <gluttony@...il.com>)
• Re: Rosoft Media Player 4.1.8 Remote Buffer Overflow ( .M3U) ("Fredrick Diggle" <fdiggle@...il.com>)
• Re: let's name something after dude vanwinkle ("Fredrick Diggle" <fdiggle@...il.com>)
• [ MDVSA-2008:046 ] - Updated xine-lib package fixes arbitrary code execution vulnerability (security@...driva.com)
• Re: in Memory of Dude VanWinkle / Justin Plazzo ("Fredrick Diggle" <fdiggle@...il.com>)
• Re: let's name something after dude vanwinkle (reepex <reepex@...il.com>)
• Re: Firefox 2.0.0.12 IFrame overflow vulnerability (Daniel Veditz <dveditz@...zio.com>)
• Re: let's name something after dude vanwinkle ("Joey Mengele" <joey.mengele@...hmail.com>)

• Re: Rosoft Media Player 4.1.8 Remote Buffer Overflow ( .M3U) (securfrog <securfrog@...il.com>)
• rPSA-2008-0056-1 mailman (rPath Update Announcements <announce-noreply@...th.com>)
• Finnish thought police censors site about censorship! ("Markus Jansson" <markus.jansson@...il.com>)
• [SECURITY] [DSA 1497-1] New clamav packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: let's name something after dude vanwinkle ("Andrew A" <gluttony@...il.com>)
• Re: let's name something after dude vanwinkle ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: let's name something after dude vanwinkle (Shyaam <shyaam@...il.com>)
• Re: let's name something after dude vanwinkle ("worried security" <worriedsecurity@...glemail.com>)

• [SECURITY] [DSA 1495-2] New nagios-plugins packages fix regression (Moritz Muehlenhoff <jmm@...ian.org>)
• SCADA Security Corruption ("Ghost Rider" <gh0str1d3r84@...il.com>)
• Re: SCADA Security Corruption ("Peter Dawson" <slash.pd@...il.com>)
• Re: SCADA Security Corruption ("Ghost Rider" <gh0str1d3r84@...il.com>)
• Re: SCADA Security Corruption (<beenthere@...h.com>)
• Re: SCADA Security Corruption ("worried security" <worriedsecurity@...glemail.com>)

• About the Hybrid Rainbow. New overpowered method combining hybrid attack and popular precalculation technique. (Odley Mike <bluetooth-pentest@...dex.ru>)
• Re: SCADA Security Corruption ("Bryan L. Singer" <bsinger_74@...oo.com>)
• Re: SCADA Security Corruption ("Fredrick Diggle" <fdiggle@...il.com>)
• Re: let's name something after dude vanwinkle (Darkie Duck <the_dark_hunter@...mail.com>)
• RUXCON 2008 CALL FOR PAPERS (cfp@...con.org.au)
• Apple iPhoto v4.0.3 DPAP Server Denial of Service Exploit (David Wharton <security@...idwharton.us>)

• Call for Papers: First IEEE International Workitorial on Steganography - "Vision of the Unseen" (wjs3@...tex.eas.uccs.edu)
• Re: let's name something after dude vanwinkle (infolookup@...il.com)
• Re: let's name something after dude vanwinkle (Darkie Duck <the_dark_hunter@...mail.com>)
• Re: let's name something after dude vanwinkle ("Fredrick Diggle" <fdiggle@...il.com>)
• network management ("shadow floating" <nadengine@...glemail.com>)
• Re: network management (Valdis.Kletnieks@...edu)
• [SECURITY] [DSA 1498-1] New libimager-perl packages fix arbitrary code execution (Steve Kemp <skx@...ian.org>)
• Anyone else seeing this? ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: Anyone else seeing this? (Simon Smith <simon@...soft.com>)
• [ MDVSA-2007:047 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
• [SECURITY] [DSA 1499-1] New pcre3 packages fix arbitrary code execution (Florian Weimer <fw@...eb.enyo.de>)
• NULL pointer crash in freeSSHd 1.20 (Luigi Auriemma <aluigi@...istici.org>)
• Two heap overflow in Foxit WAC Server 2.0 Build 3503 (Luigi Auriemma <aluigi@...istici.org>)
• Access violation and limited informations disclosure in webcamXP 3.72.440.0 (Luigi Auriemma <aluigi@...istici.org>)
• Multiple buffer-overflow in NowSMS v2007.06.27 (Luigi Auriemma <aluigi@...istici.org>)
• ZyXEL Gateways Vulnerability Research: http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf (ProCheckUp Research <research@...checkup.com>)

• Wordpress more secure than SSH ("Abel Cheung" <abelcheung@...il.com>)
• Re: Anyone else seeing this? ("Fredrick Diggle" <fdiggle@...il.com>)
• Re: Tarot (Guillaume Sicard <guitch21@...il.com>)
• DO NOT USE logsurfer configuration recommended by DFN CERT ("kcope" <kingcope@....net>)
• Re: Tarot ("Slythers Bro" <slythers@...il.com>)
• Re: Tarot (S/U/N <s.u.n@...e.Fr>)
• Advisory SE-2008-01: PunBB Blind Password Recovery Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
• Heap overflow in Sybase MobiLink 10.0.1.3629 (Luigi Auriemma <aluigi@...istici.org>)
• two (not critical) bugs in libnids 1.22 ("michele dallachiesa" <michele.dallachiesa@...il.com>)
• iDefense Security Advisory 02.19.08: EMC RepliStor Multiple Heap Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• Re: iDefense Security Advisory 02.19.08: EMC RepliStor Multiple Heap Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability (zdi-disclosures@...m.com)

• Re: *** OFF LIST *** Re: in Memory of Dude VanWinkle / Justin Plazzo (Byron Sonne <blsonne@...ers.com>)
• iDefense Security Advisory 02.20.08: Symantec Veritas Storage Foundation Scheduler Service DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [ MDVSA-2008:046-1 ] - Updated xine-lib package fixes arbitrary code execution vulnerability (security@...driva.com)
• Re: *** OFF LIST *** Re: in Memory of Dude VanWinkle / Justin Plazzo ("Andrew A" <gluttony@...il.com>)
• Announce: RFIDIOt credit card sub-module: ChAP.py (Adam Laurie <adam@...roup.co.uk>)
• Tool release: extract Windows credentials from registry hives (Brendan Dolan-Gavitt <bdolangavitt@...leyan.edu>)
• Advisory ("advisories" <advisories@...tcullis-security.com>)
• Cisco and Vocera wireless LAN VoIP devices don't check certificates ("George Ou" <george.ou@...hrepublic.com>)
• [USN-579-1] Qt vulnerability (Jamie Strandboge <jamie@...onical.com>)
• [USN-580-1] libcdio vulnerability (Jamie Strandboge <jamie@...onical.com>)
• Re: Cisco and Vocera wireless LAN VoIP devices don't check certificates (JxT <jxt.lists@...il.com>)
• VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates (VMware Security team <security@...are.com>)
• [SECURITY] [DSA 1500-1] New splitvt packages fix privilege escalation (Steve Kemp <skx@...ian.org>)
• round and round they go ("Elazar Broad" <elazar@...hmail.com>)
• Re: round and round they go, keys in ram are ripe for picking... (coderman <coderman@...il.com>)
• [ GLSA 200802-09 ] ClamAV: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)

• Malicious Advertisements Serving Domains ("Dancho Danchev" <dancho.danchev@...il.com>)
• Re: Cisco and Vocera wireless LAN VoIP devices don't check certificates ("George Ou" <george.ou@...hrepublic.com>)
• [SECURITY] [DSA 1501-1] New dspam packages fix information disclosure (thijs@...ian.org (Thijs Kinkhorst))
• [USN-581-1] PCRE vulnerability (Kees Cook <kees@...ntu.com>)
• CanSecWest 2008 Mar 26-28 (Dragos Ruiu <dr@....net>)
• Re: Tool release: extract Windows credentials from registry hives (wac <waldoalvarez00@...il.com>)
• Re: round and round they go (niclas <lists@...enritter.de>)
• Re: round and round they go ("matthew wollenweber" <mwollenweber@...il.com>)
• [SECURITY] [DSA 1502-1] New wordpress packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
• On Topic Off Topic: How To Behave On An Internet Forum (Gadi Evron <ge@...uxbox.org>)
• Citrix MetaFrame web manager remote XSS (Handrix <handrix@...il.com>)
• Re: On Topic Off Topic: How To Behave On An Internet Forum (Peter Besenbruch <prb@...a.net>)
• Re: On Topic Off Topic: How To Behave On An Internet Forum ("Peter Dawson" <slash.pd@...il.com>)
• Re: round and round they go, keys in ram are ripe for picking... (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: round and round they go ("Jay" <jay.tomas@...osecguru.com>)
• Re: round and round they go, keys in ram are ripe for picking... (coderman <coderman@...il.com>)
• Re: On Topic Off Topic: How To Behave On An Internet Forum ("worried security" <worriedsecurity@...glemail.com>)
• Multiple vulnerabilities in Double-Take 5.0.0.2865 (Luigi Auriemma <aluigi@...istici.org>)
• [ MDVSA-2008:048 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
• Re: let's name something after dude vanwinkle ("worried security" <worriedsecurity@...glemail.com>)

• Re: let's name something after dude vanwinkle ("Erik Harrison" <eharrison@...il.com>)
• Re: let's name something after dude vanwinkle (guiness.stout <guinness.stout@...il.com>)
• Re: round and round they go (niclas <lists@...enritter.de>)
• Re: let's name something after dude vanwinkle (scott <redhowlingwolves@...rr.com>)
• Re: round and round they go ("Jay" <jay.tomas@...osecguru.com>)
• [SECURITY] [DSA 1503-1] New Linux kernel 2.4.27 packages fix several issues (dann frazier <dannf@...ian.org>)
• [SECURITY] [DSA 1504-1] New Linux kernel 2.6.8 packages fix several issues (dann frazier <dannf@...ian.org>)
• [SECURITY] [DSA 1505-1] New alsa-driver packages fix kernel memory leak (dann frazier <dannf@...ian.org>)
• Re: round and round they go (niclas <lists@...enritter.de>)
• Re: [ MDVSA-2008:048 ] - Updated Firefox packages fix multiple vulnerabilities (Scott <geekboy@...rykeyboarder.com>)
• [ GLSA 200802-10 ] Python: PCRE Integer overflow (Robert Buchholz <rbu@...too.org>)
• Re: let's name something after dude vanwinkle ("worried security" <worriedsecurity@...glemail.com>)

• [SECURITY] [DSA 1506-1] New iceape packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1507-1] New turba2 packages fix permission testing (Steve Kemp <skx@...ian.org>)
• Security contact at Safeway US (Sebastian Wolfgarten <sebastian@...fgarten.com>)
• Re: Security contact at Safeway US ("Been There" <beenthere@...h.com>)

• Re: Security contact at Safeway US ("Static Rez" <staticrez@...il.com>)
• Re: Security contact at Safeway US ("Fredrick Diggle" <fdiggle@...il.com>)
• Cisco confirms vulnerability in 7921 Wi-Fi IP phone ("George Ou" <george.ou@...hrepublic.com>)
• S21SEC-040-en: Infinite invalid authentication attempts possible in BEA WebLogic Server ("S21sec labs" <s21seclabs@...sec.com>)
• [ MDVSA-2008:049 ] - Updated nss_ldap package fixes race condition allowing user data theft (security@...driva.com)
• CORE-2007-0930 Path Traversal vulnerability in VMware's shared folders implementation (Core Security Technologies Advisories <advisories@...esecurity.com>)
• CORE-2007-0930 Path Traversal vulnerability in VMware's shared folders implementation (Core Security Technologies Advisories <advisories@...esecurity.com>)
• Format string and buffer-overflow in SurgeMail 38k4 (Luigi Auriemma <aluigi@...istici.org>)
• NULL pointer in SurgeFTP 2.3a2 (Luigi Auriemma <aluigi@...istici.org>)

• Move Networks Quantum Streaming Player UploadLogs() Buffer Overflow ("Elazar Broad" <elazar@...hmail.com>)
• Backend Cross Site Scripting (XSS) in Serendipity (S9Y) 1.2.1, CVE-2008-0124 ("Hanno Böck" <hanno@...eck.de>)
• clustering question ("shadow floating" <nadengine@...glemail.com>)
• Re: clustering question (Michael Holstein <michael.holstein@...ohio.edu>)
• Good afternoon lemmings! (lulz <lulz@...psbox.com>)
• [SECURITY] [DSA 1508-1] New diatheke packages fix arbirary shell command execution (thijs@...ian.org (Thijs Kinkhorst))
• [SECURITY] [DSA 1509-1] New koffice packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
• Re: clustering question (Bill Stout <billbrietstout@...oo.com>)
• [ MDVSA-2008:050 ] - Updated cups packages fix multiple vulnerabilities (security@...driva.com)
• [ MDVSA-2008:051 ] - Updated cups packages fix vulnerabilities (security@...driva.com)
• [ GLSA 200802-12 ] xine-lib: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
• [ GLSA 200802-11 ] Asterisk: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• iDefense Security Advisory 02.26.08: Symantec Scan Engine 5.1.2 RAR File Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 02.26.08: Symantec Scan Engine 5.1.2 RAR File Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

• iDefense Security Advisory 02.26.08: Mozilla Thunderbird MIME External-Body Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Symark PowerBroker: Local Privilege Escalation vulnerability ("Greg Sinclair" <gssincla@...software.com>)
• XSS Vulnerability in AuthentiX (Chris Castaldo <chris.castaldo@...il.com>)
• rtpbreak 1.3 is out! ("michele dallachiesa" <michele.dallachiesa@...il.com>)
• CFP - ekoparty 4th edition (ekoparty <no-reply@...party.com.ar>)
• [SECURITY] [DSA 1510-1] New ghostscript packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
• Buffer-overflow in the passwords handling of Trend Micro OfficeScan 8.0 and possibly other products (Luigi Auriemma <aluigi@...istici.org>)
• CORE-2008-0130: VLC media player chunk context validation error (Core Security Technologies Advisories <advisories@...esecurity.com>)
• [ MDVSA-2008:052 ] - Updated cacti packages fix multiple vulnerabilities (security@...driva.com)
• [ MDVSA-2008:053 ] - Updated pcre packages fix vulnerability (security@...driva.com)
• Fwd: Home Office Laptop 'Bought On Ebay' ("worried security" <worriedsecurity@...glemail.com>)

• Re: Home Office Laptop 'Bought On Ebay' ("worried security" <worriedsecurity@...glemail.com>)
• Re: Buffer-overflow in the passwords handling of Trend Micro OfficeScan 8.0 and possibly other products (<Raymond_Villafania@...port.trendmicro.com>)
• Urulu 2.1 Blind SQL Injection Vulnerability (CVE-2008-0385) (Daniel Roethlisberger <daniel.roethlisberger@...c.ch>)
• new crimeware package ("Peter Dawson" <slash.pd@...il.com>)
• [ MDVSA-2008:054 ] - Updated dbus packages fix vulnerability (security@...driva.com)
• rPSA-2008-0086-1 pcre (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2008-0084-1 lighttpd (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2008-0082-1 espgs (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2008-0088-1 am-utils (rPath Update Announcements <announce-noreply@...th.com>)

• [ MDVSA-2008:055 ] - Updated ghostscript packages fix arbitrary code execution vulnerability (security@...driva.com)
• Canon Multi Function Devices vulnerable to FTP bounce attack (Nate Johnson <natejohn@...edu>)
• Release: Pass-The-Hash toolkit v1.3 ("Hernan Ochoa" <hernan@...il.com>)
• rPSA-2008-0091-1 cups (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2008-0092-1 tshark wireshark (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2008-0093-1 thunderbird (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2008-0094-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
• [USN-582-1] Thunderbird vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• [ MDVSA-2008:056 ] - Updated gnumeric packages fix vulnerability (security@...driva.com)

503 messages

Powered by blists - more mailing lists