full-disclosure mailing list - 2008/03

Messages by day:

March 1 (2 messages)

• Hammers and nails ("Dave Aitel" <davidaitel@...il.com>)
• Re: Hammers and nails ("worried security" <worriedsecurity@...glemail.com>)

• Re: Hammers and nails ("Andrew A" <gluttony@...il.com>)
• The Router Hacking Challenge is Over! ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• [ GLSA 200803-01 ] Adobe Acrobat Reader: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• [ GLSA 200803-02 ] Firebird: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• [ GLSA 200803-03 ] Audacity: Insecure temporary file creation (Pierre-Yves Rofes <py@...too.org>)

• [DailyDave] ants and rants ("Dave Aitel" <davidaitel@...il.com>)
• Re: [DailyDave] ants and rants ("Andrew A" <gluttony@...il.com>)
• Windows Command Processor Vulnerabilitie (saied hackeriran <saiedhackeriran@...oo.com>)
• us cyber command ("worried security" <worriedsecurity@...glemail.com>)
• Re: [DailyDave] ants and rants ("Michael Krymson" <krymson@...il.com>)
• Re: Hammers and nails (John Doe <mail@...ehstuecksfleisch.endofinternet.org>)
• IE/Windows blocking Firefox downloads? ("Joshua Russel" <joshua.russel@...il.com>)
• Re: IE/Windows blocking Firefox downloads? (Jan Clairmont <janclairmont@...oo.com>)
• Re: IE/Windows blocking Firefox downloads? ("Colin Copley" <colin.75@...nternet.com>)
• Re: IE/Windows blocking Firefox downloads? ("J. Oquendo" <sil@...iltrated.net>)
• Heap overflow in Borland VisiBroker Smart Agent 08.00.00.C1.03 (Luigi Auriemma <aluigi@...istici.org>)
• Multiple integer overflows in Borland StarTeam server 10.0.0.57 (Luigi Auriemma <aluigi@...istici.org>)
• Re: Hammers and nails (<mail@...ehstuecksfleisch.endofinternet.org>)
• Airscanner Mobile Security Advisory #07122001: Eye-Fi Multiple Vulnerabilities (Seth Fogie <seth@...scanner.com>)
• [ GLSA 200803-04 ] Mantis: Cross-Site Scripting (Pierre-Yves Rofes <py@...too.org>)
• [ GLSA 200803-05 ] SplitVT: Privilege escalation (Pierre-Yves Rofes <py@...too.org>)
• [ GLSA 200803-06 ] SWORD: Shell command injection (Pierre-Yves Rofes <py@...too.org>)
• [SECURITY] [DSA 1511-1] New libicu packages fix multiple problems (Steve Kemp <skx@...ian.org>)
• [ GLSA 200803-07 ] Paramiko: Information disclosure (Pierre-Yves Rofes <py@...too.org>)
• [ MDVSA-2008:057 ] - Updated wireshark packages fix denial of service vulnerabilities (security@...driva.com)
• VMSA-2008-0004 Low: Updated e2fsprogs service console package (VMware Security team <security@...are.com>)

• Exploring the UNKNOWN: Scanning the Internet via SNMP! ("Adrian P" <unknown.pentester@...il.com>)
• Re: Exploring the UNKNOWN: Scanning the Internet via SNMP! (Sebastian Krahmer <krahmer@...e.de>)
• Re: Exploring the UNKNOWN: Scanning the Internet via SNMP! ("Adrian P" <unknown.pentester@...il.com>)
• like goolag but online ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• CORE-2008-0124: Multiple vulnerabilities in Google's Android SDK (Core Security Technologies Advisories <advisories@...esecurity.com>)
• lets go vishing ("lsi" <stuart@...erdelix.net>)
• [DailyDave] I like to read ("Dave Aitel" <davidaitel@...il.com>)
• Arbitrary commands execution in Versant Object Database 7.0.1.3 (Luigi Auriemma <aluigi@...istici.org>)
• [ GLSA 200803-08 ] Win32 binary codecs: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• Hack into a Windows PC - no password needed ("Ivan ." <ivanhec@...il.com>)
• [ GLSA 200803-09 ] Opera: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• Re: Hack into a Windows PC - no password needed ("jipe foo" <foojipe@...il.com>)
• Re: Hack into a Windows PC - no password needed ("Steven Adair" <steven@...urityzone.org>)
• ZDNet Asia and TorrentReactor IFRAME-ed ("Dancho Danchev" <dancho.danchev@...il.com>)

• Re: Hack into a Windows PC - no password needed ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: us cyber command ("worried security" <worriedsecurity@...glemail.com>)
• Re: Hack into a Windows PC - no password needed ("Eric Rachner" <eric@...hner.us>)
• Re: Hack into a Windows PC - no password needed ("Eric Rachner" <eric@...hner.us>)
• Re: Hack into a Windows PC - no password needed (Valdis.Kletnieks@...edu)
• Vulnerability in Linux Kiss Server v1.2 (vashnukad <vashnukad@...hnukad.com>)
• Re: us cyber command ("Slythers Bro" <slythers@...il.com>)
• Re: us cyber command (scott <redhowlingwolves@...rr.com>)
• Re: lets go vishing ("Michael Simpson" <mikie.simpson@...il.com>)
• WebCT 4.x Javascript Session Stealer Exploits ("Benjamin 'balupton' Lupton" <balupton@...il.com>)
• Re: Exploring the UNKNOWN: Scanning the Internet via SNMP! ("Andrew A" <gluttony@...il.com>)
• Re: Exploring the UNKNOWN: Scanning the Internet via SNMP! (Dmitry <security.research.labs@...il.com>)
• Re: Exploring the UNKNOWN: Scanning the Internet via SNMP! (Sebastian Krahmer <krahmer@...e.de>)
• Re: Exploring the UNKNOWN: Scanning the Internet via SNMP! (Enno Rey <erey@...w.de>)
• Goolag Perk and Annoyance (Times Enemy <times@....org>)
• Re: Exploring the UNKNOWN: Scanning the Internet via SNMP! (sub <sub@...m641a.net>)
• Firewire Attack on Windows Vista (Bernhard Mueller <research@...-consult.com>)
• Re: Exploring the UNKNOWN: Scanning the Internet via SNMP! ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Re: Exploring the UNKNOWN: Scanning the Internet via SNMP! (sub <sub@...m641a.net>)
• [ MDVSA-2008:058 ] - Updated openldap packages fix multiple vulnerabilities (security@...driva.com)
• Re: Firewire Attack on Windows Vista (Thierry Zoller <Thierry@...ler.lu>)
• ERRATA: [ GLSA 200801-09 ] X.Org X server and Xfont library: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
• [ GLSA 200803-10 ] lighttpd: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• [USN-583-1] Evolution vulnerability (Kees Cook <kees@...ntu.com>)
• Multiple vulnerabilities in Perforce Server 2007.3/143793 (Luigi Auriemma <aluigi@...istici.org>)
• [ MDVSA-2008:059 ] - Updated tcl packages fix vulnerability (security@...driva.com)
• [ GLSA 200803-11 ] Vobcopy: Insecure temporary file creation (Pierre-Yves Rofes <py@...too.org>)
• [ GLSA 200803-12 ] Evolution: Format string vulnerability (Pierre-Yves Rofes <py@...too.org>)
• [ MDVSA-2008:060 ] - Updated Joomla! packages fix multiple vulnerabilities (security@...driva.com)
• Chinese backdoors "hidden in router firmware" ("Ivan ." <ivanhec@...il.com>)
• [USN-584-1] OpenLDAP vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• Re: Chinese backdoors "hidden in router firmware" (coderman <coderman@...il.com>)

• Re: Chinese backdoors "hidden in router firmware" ("Ivan ." <ivanhec@...il.com>)
• Re: Chinese backdoors "hidden in router firmware" (coderman <coderman@...il.com>)
• Re: Chinese backdoors "hidden in router firmware" ("worried security" <worriedsecurity@...glemail.com>)
• Re: Chinese backdoors "hidden in router firmware" ("quispiam lepidus" <quispiam.lepidus@...il.com>)
• Re: Chinese backdoors "hidden in router firmware" ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: Chinese backdoors "hidden in router firmware" (Times Enemy <times@....org>)
• Re: Chinese backdoors "hidden in router firmware" ("Ivan ." <ivanhec@...il.com>)
• Re: Chinese backdoors "hidden in router firmware" ("quispiam lepidus" <quispiam.lepidus@...il.com>)
• Re: Chinese backdoors "hidden in router firmware" ("Ivan ." <ivanhec@...il.com>)
• Re: Chinese backdoors "hidden in router firmware" ("Peter Dawson" <slash.pd@...il.com>)
• Re: Chinese backdoors "hidden in router firmware" (Times Enemy <times@....org>)
• Re: Firewire Attack on Windows Vista ("TheM ." <them.root@...il.com>)
• [SECURITY] [DSA 1512-1] New evolution packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
• Re: Chinese backdoors "hidden in router firmware" (Julio Cesar Fort <julio@...slabs.com.br>)
• Re: Chinese backdoors "hidden in router firmware" ("Jerome Jar" <iusr.jar@...il.com>)
• Re: Chinese backdoors "hidden in router firmware" (Valdis.Kletnieks@...edu)
• Re: Chinese backdoors "hidden in router firmware" ("J.A. Terranson" <measl@....org>)
• Re: Chinese backdoors "hidden in router firmware" ("Jerome Jar" <iusr.jar@...il.com>)
• Re: Firewire Attack on Windows Vista (Peter Watkins <peterw@....net>)
• Re: Vulnerability in Linux Kiss Server v1.2 ("David Judais" <david.judais@...glemail.com>)
• Re: Firewire Attack on Windows Vista ("Daniel O'Connor" <doconnor@...ft.com.au>)
• Re: Firewire Attack on Windows Vista (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
• Re: Goolag Perk and Annoyance (Vladimir Vitkov <v.vitkov@...ys.bg>)
• [SECURITY] [DSA 1503-2] New Linux kernel 2.4.27 packages fix several issues (dann frazier <dannf@...ian.org>)
• Re: Chinese backdoors "hidden in router firmware" (chedder1@...il.com)
• Re: Chinese backdoors "hidden in router firmware" ("Ivan ." <ivanhec@...il.com>)
• SUSE Security Announcement: cups (SUSE-SA:2008:012) (Thomas Biege <thomas@...e.de>)
• Re: Exploring the UNKNOWN: Scanning the Internet via SNMP! ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Re: Chinese backdoors "hidden in router firmware" ("Kurt Dillard" <kurtdillard@....com>)
• Re: Exploring the UNKNOWN: Scanning the Internet via SNMP! ("Static Rez" <staticrez@...il.com>)
• CarolinaCon-2008, March 28th-30th, full agenda posted (Vic Vandal <vvandal@...l.com>)
• More CNET Sites Under IFRAME Attack ("Dancho Danchev" <dancho.danchev@...il.com>)
• Re: Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Directory traversal in MicroWorld eScan Server 9.0.742.98 (Luigi Auriemma <aluigi@...istici.org>)
• [SECURITY] [DSA 1513-1] New lighttpd packages fix CGI source disclosure (Steve Kemp <skx@...ian.org>)
• Re: Exploring the UNKNOWN: Scanning the Internet via SNMP! (Valdis.Kletnieks@...edu)
• Re: Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)
• Re: Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)
• Re: Chinese backdoors "hidden in router firmware" (Leif Ericksen <lericksen@...global.net>)
• Re: Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)
• Re: Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)
• [ MDVSA-2008:061 ] - Updated mailman packages fix multiple XSS vulnerabilities (security@...driva.com)
• Re: Firewire Attack on Windows Vista ("Thor (Hammer of God)" <thor@...merofgod.com>)
• [USN-582-2] Thunderbird vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• Re: Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)
• Re: Firewire Attack on Windows Vista (<Glenn.Everhart@...se.com>)

• [ MDVSA-2008:062 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
• [ MDVSA-2008:063 ] - Updated Evolution packages fix critical vulnerability (security@...driva.com)
• Hackers are having a positive influence on the world (Jared DeMott <demottja@....edu>)
• Re: Vulnerability in Linux Kiss Server v1.2 ("David Judais" <david.judais@...glemail.com>)
• Re: Firewire Attack on Windows Vista ("Thor (Hammer of God)" <thor@...merofgod.com>)
• IE8 beta is available - Challenge ("Jay" <jay.tomas@...osecguru.com>)
• Re: IE8 beta is available - Challenge ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: IE8 beta is available - Challenge ("Kurt Dillard" <kurtdillard@....com>)
• Re: IE8 beta is available - Challenge (Oliver Starke <oliver.starke@...ermon.com>)
• Multiple vulnerabilities in MailEnable Professional/Enterprise 3.13 (Luigi Auriemma <aluigi@...istici.org>)
• Re: Firewire Attack on Windows Vista ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: Firewire Attack on Windows Vista ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Vulnerability in Linux Kiss Server v1.2 ("vashnukad vashnukad" <vashnukad1@...il.com>)
• [ MDVSA-2008:064 ] - Updated tomboy packages fix improper LD_LIBRARY_PATH handling (security@...driva.com)
• [ GLSA 200803-13 ] VLC: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• Re: Firewire Attack on Windows Vista (Bryon Roche <kain@...n.org>)

• Re: Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
• [TKADV2008-001] Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability ("Tobias Klein" <tk@...pkit.de>)
• [ GLSA 200803-14 ] Ghostscript: Buffer overflow (Pierre-Yves Rofes <py@...too.org>)
• Re: Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)
• Re: Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: Firewire Attack on Windows Vista (Tim <tim-security@...tinelchicken.org>)

• rPSA-2008-0099-1 dbus dbus-glib dbus-qt dbus-x11 (rPath Update Announcements <announce-noreply@...th.com>)
• [SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Firewire Attack on Windows Vista (echo6 <echo6_uk@...oo.com>)
• [ GLSA 200803-15 ] phpMyAdmin: SQL injection vulnerability (Pierre-Yves Rofes <py@...too.org>)
• [ MDVSA-2008:065 ] - Updated pulseaudio packages fix denial of service vulnerabilities (security@...driva.com)

• Re: Firewire Attack on Windows Vista (Erik Trulsson <ertr1013@...dent.uu.se>)
• Re: Firewire Attack on Windows Vista ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• Re: Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: Firewire Attack on Windows Vista ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: Firewire Attack on Windows Vista ("Jardel Weyrich" <w.jardel@...il.com>)
• Real Networks RealPlayer ActiveX Control Heap Corruption ("Elazar Broad" <elazar@...hmail.com>)
• Re: Firewire Attack on Windows Vista (Kern <timetrap@...il.com>)
• Wireless keyboard insecurity - any secure one available? ("Markus Jansson" <markus.jansson@...il.com>)
• SecurityFocus Article ("" <full-disclosure@...ts.grok.org.uk>)
• Re: Firewire Attack on Windows Vista ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• Re: Wireless keyboard insecurity - any secure one available? (Dmitry <security.research.labs@...il.com>)
• Re: Wireless keyboard insecurity - any secure one available? (don bailey <don.bailey@...il.com>)
• [ GLSA 200803-16 ] MPlayer: Multiple buffer overflows (Pierre-Yves Rofes <py@...too.org>)
• [ GLSA 200803-17 ] PDFlib: Multiple buffer overflows (Pierre-Yves Rofes <py@...too.org>)
• [ GLSA 200803-18 ] Cacti: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• iDefense Security Advisory 03.10.08: SAP MaxDB Signedness Error Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 03.10.08: SAP MaxDB sdbstarter Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Directory traversal in Argon Client Management Services 1.31 (Luigi Auriemma <aluigi@...istici.org>)
• NULL pointer in Acronis True Image Windows Agent 1.0.0.54 (Luigi Auriemma <aluigi@...istici.org>)
• Directory traversal and NULL pointer in Acronis PXE Server 2.0.0.1076 (Luigi Auriemma <aluigi@...istici.org>)
• Multiple vulnerabilities in ASG-Sentry 7.0.0 (Luigi Auriemma <aluigi@...istici.org>)
• Invalid memory access in Acronis True Image Group Server 1.5.19.191 (Luigi Auriemma <aluigi@...istici.org>)
• NULL pointer in Remotely Anywhere 8.0.668 (Luigi Auriemma <aluigi@...istici.org>)
• Vulnerabilities in Timbuktu Pro 8.6.5 (Luigi Auriemma <aluigi@...istici.org>)
• Denial of Service in PacketTrap TFTP server 2.0.3901.0 (Luigi Auriemma <aluigi@...istici.org>)
• Re: Invalid memory access in Acronis True Image Group Server 1.5.19.191 (Dmitry <security.research.labs@...il.com>)

• [USN-585-1] Python vulnerabilities (Kees Cook <kees@...ntu.com>)
• Wired.com and History.com Getting RBN-ed ("Dancho Danchev" <dancho.danchev@...il.com>)
• Advisory: SQL-Injections in Mapbender (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
• Advisory: Remote Command Execution in Mapbender (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
• Re: Vulnerabilities in Timbuktu Pro 8.6.5 (<titon@...tardlabs.com>)
• Re: Vulnerabilities in Timbuktu Pro 8.6.5 (Luigi Auriemma <aluigi@...istici.org>)
• [DailyDave] cheese ("Dave Aitel" <davidaitel@...il.com>)
• Rapid7 Advisory R7-0032: Microsoft Internet Explorer FTP Command Injection Vulnerability (advisory@...id7.com)
• Advisory Adobe LiveCycle Workflow XSS Vulnerability ("Liquidmatrix Security Digest" <disclosure@...uidmatrix.org>)
• CORE-2008-0204: Timbuktu Pro Remote Path Traversal and Log Injection (Core Security Technologies Advisories <advisories@...esecurity.com>)
• Offensive Security Backtrack Training (<8ch@...hmail.com>)
• ZDI-08-008: Microsoft Excel BIFF File Format Cell Record Parsing Memory Corruption Vulnerability (zdi-disclosures@...m.com)
• [ GLSA 200803-19 ] Apache: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• [ GLSA 200803-20 ] International Components for Unicode: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• [SECURITY] [DSA 1515-1] New libnet-dns-perl packages fix several vulnerabilities (Florian Weimer <fw@...eb.enyo.de>)
• iDefense Security Advisory 03.11.08: Microsoft Excel DVAL Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 03.11.08: Microsoft Excel 2003 Malformed Formula Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 03.11.08: Microsoft Outlook mailto Command Line Switch Injection (iDefense Labs <labs-no-reply@...fense.com>)

• Re: Offensive Security Backtrack Training ("Luther D. Anderson" <ld0x41@...glemail.com>)
• Cisco Security Advisory: Cisco Secure Access Control Server for Windows User-Changeable Password Vulnerabilities (Cisco Systems Product Security Incident Respo…)
• securls.com ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Inguma version 0.0.7.2 released (Joxean Koret <joxeankoret@...oo.es>)
• ZDI-08-009: Java Web Start tempbuff Stack Buffer Overflow (zdi-disclosures@...m.com)
• ZDI-08-010: Java Web Start encoding Stack Buffer Overflow (zdi-disclosures@...m.com)
• TPTI-08-03: Microsoft Excel Rich Text Memory Corruption Vulnerability (DVLabs <dvlabs@...pingpoint.com>)
• More High Profile Sites IFRAME Injected ("Dancho Danchev" <dancho.danchev@...il.com>)
• Cisco ACS UCP Remote Pre-Authentication Buffer Overflows (Felix 'FX' Lindner <fx@...urity-labs.com>)
• rPSA-2008-0106-1 lighttpd (rPath Update Announcements <announce-noreply@...th.com>)
• [ GLSA 200803-21 ] Sarg: Remote execution of arbitrary code (Raphael Marichez <falco@...too.org>)
• Diceware method adoption - brute force me if you dare (M.B.Jr. <marcio.barbado@...il.com>)
• Re: Diceware method adoption - brute force me if you dare (jf <jf@...glingpointers.net>)
• Re: Diceware method adoption - brute force me if you dare (M.B.Jr. <marcio.barbado@...il.com>)
• Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0) (Luigi Auriemma <aluigi@...istici.org>)
• SCOSA-2008.2 (Henry Miller <security@....com>)
• Re: Diceware method adoption - brute force me if you dare (blah <blah@...kogre.com>)

• Re: Firewire Attack on Windows Vista (FD <fd@....ac>)
• rPSA-2008-0108-1 dovecot (rPath Update Announcements <announce-noreply@...th.com>)
• hacking a pacemaker (Gadi Evron <ge@...uxbox.org>)
• Re: Firewire Attack on Windows Vista ("Eric Rachner" <eric@...hner.us>)
• Re: Offensive Security Backtrack Training ("worried security" <worriedsecurity@...glemail.com>)
• Re: Offensive Security Backtrack Training (atlas <atlas@...80y.com>)
• Re: Offensive Security Backtrack Training (Kern <timetrap@...il.com>)
• [ MDVSA-2008:066 ] - Updated gcc packages fix directory traversal vulnerability in fastjar (security@...driva.com)
• Re: Offensive Security Backtrack Training ("worried security" <worriedsecurity@...glemail.com>)
• [DailyDave] L Word ("Dave Aitel" <davidaitel@...il.com>)
• Re: Offensive Security Backtrack Training (infolookup@...il.com)
• ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
• ZDI-08-012: IBM Informix Dynamic Server Authentication Password Stack Overflow Vulnerability (zdi-disclosures@...m.com)
• Re: Offensive Security Backtrack Training (Paul Schmehl <pauls@...allas.edu>)
• [ GLSA 200803-22 ] LIVE555 Media Server: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
• Cisco Security Advisory: CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability (Cisco Systems Product Security Incident Response T…)

• Re: Offensive Security Backtrack Training ("Been There" <beenthere@...h.com>)
• Re: [ GLSA 200803-17 ] PDFlib: Multiple buffer overflows ("Philip Thiessen" <prthiessen@...il.com>)
• SUSE Security Announcement: evolution (SUSE-SA:2008:014) (Thomas Biege <thomas@...e.de>)
• Re: hacking a pacemaker ("Randal T. Rioux" <randy@...cyonlabs.com>)
• Local persistent DoS in Windows XP SP2 Taskmanager (SkyOut <skyout@....net>)
• Re: Local persistent DoS in Windows XP SP2 Taskmanager (reepex <reepex@...il.com>)
• Re: Diceware method adoption - brute force me if you dare ("Razi Shaban" <razishaban@...il.com>)
• Black Hat Announcements: New CFP system and Japan '08 confirmed ("jmoss" <jmoss@...ckhat.com>)
• [SECURITY] [DSA 1516-1] New dovecot packages fix privilege escalation (Florian Weimer <fw@...eb.enyo.de>)

• Re: More High Profile Sites IFRAME Injected ("worried security" <worriedsecurity@...glemail.com>)
• Re: More High Profile Sites IFRAME Injected ("Razi Shaban" <razishaban@...il.com>)
• Re: More High Profile Sites IFRAME Injected (taneja.security@...il.com)
• Re: Local persistent DoS in Windows XP SP2 Taskmanager (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Firewire Attack on Windows Vista (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• New penetration testing tool for wifi ("Valery Marchuk" <tecklord@...uritylab.ru>)
• [USN-586-1] mailman vulnerability (Kees Cook <kees@...ntu.com>)
• Troopers08 Security Conference, 23/24 April (Munich/Germany) (Enno Rey <erey@...w.de>)
• [ GLSA 200803-23 ] Website META Language: Insecure temporary file usage (Pierre-Yves Rofes <py@...too.org>)

• [gentoo-announce] [ GLSA 200803-23 ] Website META Language: Insecure temporary file usage (Pierre-Yves Rofes <py@...too.org>)
• remember password manager.. ("Kevin Fernandez" <security@...ed.com>)
• eeye diffing suite? ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• raidsonic nas-4220 crypt disk key leak (stored in plain on unencrypted partition) ("Collin R. Mulliner" <collin@...aversion.net>)
• [SECURITY] [DSA 1521-1] New lighttpd packages fix arbitrary file disclosure (Steve Kemp <skx@...ian.org>)
• We've shut down the Exploit Acquisition Program (Simon Smith <simon@...soft.com>)
• Re: We've shut down the Exploit Acquisition Program (Jared DeMott <demottja@....edu>)
• [SECURITY] [DSA 1517-1] New ldapscripts packages fix information disclosure (thijs@...ian.org (Thijs Kinkhorst))
• [SECURITY] [DSA 1518-1] New backup-manager packages fix information disclosure (thijs@...ian.org (Thijs Kinkhorst))
• [SECURITY] [DSA 1519-1] New horde3 packages fix information disclosure (thijs@...ian.org (Thijs Kinkhorst))
• [SECURITY] [DSA 1520-1] New smarty packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
• [SECURITY] [DSA 1493-2] New sdl-image1.2 packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))

• VLC highlander bug (Luigi Auriemma <aluigi@...istici.org>)
• Buffer-overflow in BootManage TFTPD 1.99 (Luigi Auriemma <aluigi@...istici.org>)
• Multiple vulnerabilities in Net Inspector 6.5.0.828 (Luigi Auriemma <aluigi@...istici.org>)
• Re: More High Profile Sites IFRAME Injected (Valdis.Kletnieks@...edu)
• Remove duplicate chains in Rainbow Tables : "rm_duplicate_chains" released (lab <lab@...ecurite.fr>)
• Cross Site Scripting (XSS) in phpstats 0.1_alpha, CVE-2008-0125 (Hanno Böck <hanno@...eck.de>)
• [SECURITY] [DSA 1485-2] New icedove packages fix regression (Moritz Muehlenhoff <jmm@...ian.org>)

• [SECURITY] [DSA 1522-1] New unzip packages fix potential code execution (Florian Weimer <fw@...eb.enyo.de>)
• Is yahoo.com serving malware? [Was: More High Profile Sites IFRAME Injected] ("Blatant Lier" <blatantlier@...il.com>)
• [SECURITY] [DSA 1523-1] New ikiwiki packages fix cross-site scripting (Florian Weimer <fw@...eb.enyo.de>)
• Re: More High Profile Sites IFRAME Injected (Valdis.Kletnieks@...edu)
• [ GLSA 200803-24 ] PCRE: Buffer overflow (Tobias Heinlein <keytoaster@...too.org>)
• Re: Is yahoo.com serving malware? [Was: More High Profile Sites IFRAME Injected] ("Blatant Lier" <blatantlier@...il.com>)
• Re: Is yahoo.com serving malware? [Was: More High Profile Sites IFRAME Injected] (Pat <hermens.p@...il.com>)
• VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critica… (VMware Security team <security@...are.c…)
• Airscanner Mobile Security Advisory #08031201: FlexiSPY Multiple Issues (Seth Fogie <seth@...scanner.com>)
• Re: agile hacking? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• [ GLSA 200803-25 ] Dovecot: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
• Re: agile hacking? ("T Biehn" <tbiehn@...il.com>)
• Re: More High Profile Sites IFRAME Injected ("worried security" <worriedsecurity@...glemail.com>)
• [ GLSA 200803-26 ] Adobe Acrobat Reader: Insecure temporary file creation (Robert Buchholz <rbu@...too.org>)
• Re: agile hacking? (reepex <reepex@...il.com>)
• Agile Hacking ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• [gentoo-announce] [ GLSA 200803-25 ] Dovecot: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
• CORE-2008-0123: Leopard Server Remote Path Traversal (Core Security Technologies Advisories <advisories@...esecurity.com>)
• [ MDVSA-2008:067 ] - Updated nagios packages fix multiple vulnerabilities (security@...driva.com)
• Re: More High Profile Sites IFRAME Injected ("worried security" <worriedsecurity@...glemail.com>)
• iDefense Security Advisory 03.18.08: Multiple Vendor CUPS CGI Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: agile hacking? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• [ GLSA 200803-27 ] MoinMoin: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• AST-2008-004: Format String Vulnerability in Logger and Manager (Asterisk Security Team <security@...erisk.org>)
• AST-2008-005: HTTP Manager ID is predictable (Asterisk Security Team <security@...erisk.org>)
• AST-2008-003: Unauthenticated calls allowed from SIP channel driver (Asterisk Security Team <security@...erisk.org>)
• AST-2008-002: Two buffer overflows in RTP Codec Payload Handling (Asterisk Security Team <security@...erisk.org>)

• [ MDVSA-2008:068 ] - Updated unzip packages vulnerability (security@...driva.com)
• Re: agile hacking? (reepex <reepex@...il.com>)
• Re: agile hacking? ("Nate McFeters" <nate.mcfeters@...il.com>)
• Re: agile hacking? (reepex <reepex@...il.com>)
• Re: agile hacking? ("Nate McFeters" <nate.mcfeters@...il.com>)
• [USN-587-1] Kerberos vulnerabilities (Kees Cook <kees@...ntu.com>)
• Re: agile hacking? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• [SECURITY] [DSA 1524-1] New krb5 packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
• SUSE Security Announcement: krb5 (SUSE-SA:2008:016) (Thomas Biege <thomas@...e.de>)
• Its time to get serious about Storm Worm / RBN ("worried security" <worriedsecurity@...glemail.com>)
• Re: Its time to get serious about Storm Worm / RBN (coderman <coderman@...il.com>)
• Re: agile hacking? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: Its time to get serious about Storm Worm / RBN (n3td3v <xploitable@...il.com>)
• Re: Its time to get serious about Storm Worm / RBN ("Rankin, James R" <kz20fl@...glemail.com>)
• Re: Its time to get serious about Storm Worm / RBN ("Michael Simpson" <mikie.simpson@...il.com>)
• Re: Its time to get serious about Storm Worm / RBN (Vladimir Vitkov <v.vitkov@...ys.bg>)
• Re: Its time to get serious about Storm Worm / RBN (mcwidget <mcwidget@...il.com>)
• Re: agile hacking? ("Jay" <jay.tomas@...osecguru.com>)
• Hacker Space Fest - Call For Participation (CFP) - June 2008 (Philippe Langlois <philippelanglois@...e.fr>)
• Re: [full disclosure] agile hacking? ("Michael Krymson" <krymson@...il.com>)
• Re: [full disclosure] agile hacking? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: [full disclosure] agile hacking? (don bailey <don.bailey@...il.com>)
• Re: [full disclosure] agile hacking? (don bailey <don.bailey@...il.com>)
• Re: [full disclosure] agile hacking? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: Its time to get serious about Storm Worm / RBN (n3td3v <xploitable@...il.com>)
• Re: [full disclosure] agile hacking? (Valdis.Kletnieks@...edu)
• Re: [full disclosure] agile hacking? (reepex <reepex@...il.com>)
• Re: agile hacking? (reepex <reepex@...il.com>)
• Re: agile hacking? (reepex <reepex@...il.com>)
• Re: [full disclosure] agile hacking? (Valdis.Kletnieks@...edu)
• Re: Its time to get serious about Storm Worm / RBN (coderman <coderman@...il.com>)
• Re: [full disclosure] agile hacking? (reepex <reepex@...il.com>)
• Re: Its time to get serious about Storm Worm / RBN (coderman <coderman@...il.com>)
• Re: [full disclosure] agile hacking? (coderman <coderman@...il.com>)
• Re: [full disclosure] agile hacking? ("Michael Krymson" <krymson@...il.com>)
• [MU-200803-01] Multiple buffer overflows in Asterisk (noreply@...ecurity.com)
• [ GLSA 200803-28 ] OpenLDAP: Denial of Service vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
• [ MDVSA-2008:069 ] - Updated Kerberos packages fix multiple vulnerabilities (security@...driva.com)
• [ MDVSA-2008:070 ] - Updated Kerberos packages fix multiple vulnerabilities (security@...driva.com)
• [ MDVSA-2008:071 ] - Updated Kerberos packages fix multiple vulnerabilities (security@...driva.com)
• Re: agile hacking? (Fionnbharr <thouth@...il.com>)
• [ GLSA 200803-29 ] ViewVC: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
• Insecure by design: Cisco product shipped with backdoor ("Ivan ." <ivanhec@...il.com>)

• Re: volatile hacking? (Antani Tapioco <antani.tapioco@...amail.com>)
• [ GLSA 200803-30 ] ssl-cert eclass: Certificate disclosure (Robert Buchholz <rbu@...too.org>)
• [SECURITY] [DSA 1506-2] New iceape packages fix regression (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Its time to get serious about Storm Worm / RBN ("Philip Fagan" <pfagan@...italglobe.com>)
• rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (rPath Update Announcements <announce-noreply@...th.com>)
• Adobe Flash CS3 Professional FLA File Parsing Multiple Local Code Execute Vulnerabilities (cocoruder <cocoruder@...il.com>)
• Release of webshag 1.00! (webshag@...t.ch)
• [SECURITY] [DSA 1525-1] New asterisk packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [USN-588-1] MySQL vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• Re: agile hacking? (nnp <version5@...il.com>)
• Vonage denial of service through noise packet injection. (Jan Clairmont <janclairmont@...oo.com>)
• Re: agile hacking? (Kern <timetrap@...il.com>)
• Re: Vonage denial of service through noise packet injection. (Kern <timetrap@...il.com>)
• Re: volatile hacking? ("Michael Krymson" <krymson@...il.com>)
• When standards attack... (H D Moore <fdlist@...italoffense.net>)
• Re: volatile hacking? (Antani Tapioco <antani.tapioco@...amail.com>)
• Note about recently publicized CA BrightStor ActiveX exploit code ("Williams, James K" <James.Williams@...com>)
• Re: agile hacking? ("Garrett M. Groff" <groffg@...design.com>)
• Re: When standards attack... ("KJK::Hyperion" <hackbunny@...tpj.org>)
• [ MDVSA-2008:072 ] - Updated kernel packages fix vulnerability (security@...driva.com)
• [SECURITY] [DSA 1522-1] New xwine packages fix several vulnerabilities (Steve Kemp <skx@...ian.org>)
• (no subject) (andrius.vysnia@...il.com)
• Multiple heap overflows in xine-lib 1.1.11 (Luigi Auriemma <aluigi@...istici.org>)
• [USN-589-1] unzip vulnerability (Kees Cook <kees@...ntu.com>)
• [ MDVSA-2008:073 ] - Updated perl-Net-DNS packages fix DoS vulnerability (security@...driva.com)
• [ MDVSA-2008:074 ] - Updated audacity package fixes insecure temporary directory creation (security@...driva.com)

• CanSecWest 2008 PWN2OWN - Mar 26-28 (Dragos Ruiu <dr@....net>)
• [INFIGO-2008-03-07]: Surgemail 38k4 IMAP server remote stack overflow ("infocus" <infocus@...igo.hr>)
• [MSA01240108] IE7 Transfer-Encoding: chunked allows Request Splitting/Smuggling. (Minded Security Research Labs <research@...dedsecurity.com>)
• [MSA02240108] IE7 allows overwriting of several headers leading to Http request Splitting and smuggling. (Minded Security Research Labs <research@...dedsecurit…)
• Re: When standards attack... (Florian Weimer <fw@...eb.enyo.de>)
• sans handler gives out n3td3v e-mail to public (n3td3v <xploitable@...il.com>)
• Re: sans handler gives out n3td3v e-mail to public (Paul Schmehl <pauls@...allas.edu>)
• Re: sans handler gives out n3td3v e-mail to public ("Kurt Dillard" <kurtdillard@....com>)
• Re: sans handler gives out n3td3v e-mail to public (Kern <timetrap@...il.com>)
• Re: sans handler gives out n3td3v e-mail to public (n3td3v <xploitable@...il.com>)
• {securityreason.com}PHP 5 *printf() - Integer Overflow ("Maksymilian Arciemowicz" <cxib@...urityreason.com>)
• Re: sans handler gives out n3td3v e-mail to public ("DUDE DUDERINO" <ihasshovel@...il.com>)
• (no subject) ("Mister Swole" <swolen@...dless.com>)
• worried exposed on IRC again ("Mister Swole" <swolen@...dless.com>)
• Buffer-overflow in ASUS Remote Console 2.0.0.24 (Luigi Auriemma <aluigi@...istici.org>)

• Re: sans handler gives out n3td3v e-mail to public (scott <redhowlingwolves@...rr.com>)
• Fwd: FW: *** SPAM [7.2] *** donates ("Philip Fagan" <philfagan@...il.com>)
• rPSA-2008-0116-1 unzip (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2008-0118-1 bzip2 (rPath Update Announcements <announce-noreply@...th.com>)
• Re: sans handler gives out n3td3v e-mail to public (atlas <atlas@...80y.com>)
• Re: sans handler gives out n3td3v e-mail to public (<phunkbrother@...hmail.com>)
• Google SoC 2008: Security Projects (jkouns <jkouns@...nsecurityfoundation.org>)
• Re: sans handler gives out n3td3v e-mail to public (n3td3v <xploitable@...il.com>)
• perl underground and tssci security (reepex <reepex@...il.com>)

• Re: sans handler gives out n3td3v e-mail to public (taneja.security@...il.com)
• OpenID. The future of authentication on the web? (Steven Rakick <stevenrakick@...oo.com>)
• Re: OpenID. The future of authentication on the web? (Paul Schmehl <pauls@...allas.edu>)
• Re: OpenID. The future of authentication on the web? (fabio <ctrlaltca@...ero.it>)
• Re: OpenID. The future of authentication on the web? (Kern <timetrap@...il.com>)
• [ MDVSA-2008:075 ] - Updated bzip2 packages fix denial of service vulnerability (security@...driva.com)
• Re: OpenID. The future of authentication on the web? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: OpenID. The future of authentication on the web? (reepex <reepex@...il.com>)
• Re: OpenID. The future of authentication on the web? (Paul Schmehl <pauls@...allas.edu>)
• Re: OpenID. The future of authentication on the web? ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: OpenID. The future of authentication on the web? (Steven Rakick <stevenrakick@...oo.com>)
• Re: OpenID. The future of authentication on the web? (Paul Schmehl <pauls@...allas.edu>)

• Re: OpenID. The future of authentication on the web? (Paul Schmehl <pauls@...allas.edu>)
• Re: OpenID. The future of authentication on the web? ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: OpenID. The future of authentication on the web? (Paul Schmehl <pauls@...allas.edu>)
• Re: OpenID. The future of authentication on the web? ("Kurt Buff" <kurt.buff@...il.com>)
• Re: OpenID. The future of authentication on the web? ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: OpenID. The future of authentication on the web? (Steven Rakick <stevenrakick@...oo.com>)
• ircu/snircd remote crash vulnerability (Chris Porter <cdp34@....ac.uk>)
• Re: OpenID. The future of authentication on the web? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: OpenID. The future of authentication on the web? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: OpenID. The future of authentication on the web? (Gorn <gorn@...all.nl>)
• Re: OpenID. The future of authentication on the web? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: OpenID. The future of authentication on the web? (Gorn <gorn@...all.nl>)
• Re: OpenID. The future of authentication on the web? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: OpenID. The future of authentication on the web? ("Pedro Hugo" <fractalg@...hspeedweb.net>)
• Re: OpenID. The future of authentication on the web? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: OpenID. The future of authentication on the web? (Steven Rakick <stevenrakick@...oo.com>)
• Re: OpenID. The future of authentication on the web? ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)
• Re: OpenID. The future of authentication on the web? (Valdis.Kletnieks@...edu)
• Re: OpenID. The future of authentication on the web? ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: OpenID. The future of authentication on the web? ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)
• Re: OpenID. The future of authentication on the web? (Paul Schmehl <pauls@...allas.edu>)
• Re: OpenID. The future of authentication on the web? (Paul Schmehl <pauls@...allas.edu>)
• Re: OpenID. The future of authentication on the web? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: OpenID. The future of authentication on the web? ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)
• Re: OpenID. The future of authentication on the web? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: OpenID. The future of authentication on the web? ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)
• Fwd: Offensive Security Backtrack Training (n3td3v <xploitable@...il.com>)
• Re: OpenID. The future of authentication on the web? ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)
• Re: OpenID. The future of authentication on the web? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: OpenID. The future of authentication on the web? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: OpenID. The future of authentication on the web? ("Petko D. Petkov" <pdp.gnucitizen@...glemail.com>)
• Re: OpenID. The future of authentication on the web? (Abe Getchell <me@...getchell.com>)
• [USN-591-1] libicu vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• [ GLSA 200803-31 ] MIT Kerberos 5: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
• [USN-590-1] bzip2 vulnerability (Kees Cook <kees@...ntu.com>)
• [ GLSA 200803-32 ] Wireshark: Denial of Service (Pierre-Yves Rofes <py@...too.org>)

• Free Tibet.. (Gerald Maggro <gmaggro@...ers.com>)
• Re: Free Tibet.. ("Jerome Jar" <iusr.jar@...il.com>)
• [SECURITY] [DSA 1527-1] New debian-goodies packages fix privilege escalation (thijs@...ian.org (Thijs Kinkhorst))
• [SECURITY] [DSA 1528-1] New serendipity packages fix cross site scripting (thijs@...ian.org (Thijs Kinkhorst))
• Re: Fwd: Offensive Security Backtrack Training (Tonu Samuel <tonu@....ee>)
• sellings ("Stephen Flaw" <steph_flaw@...uxmail.org>)
• Re: sellings ("Ozan Ozkara" <ozan@...ptos.net>)
• Re: Free Tibet.. (Bob Bruen <bruen@...drain.net>)
• Re: Free Tibet.. (Tremaine Lea <tremaine@...il.com>)
• Re: Free Tibet.. (Kern <timetrap@...il.com>)
• Re: Free Tibet.. (Tremaine Lea <tremaine@...il.com>)
• Re: Free Tibet.. (Dmitry <security.research.labs@...il.com>)
• Re: Free Tibet.. (Tremaine Lea <tremaine@...il.com>)
• Static Injection into Commercial Lines - DoS on Vonage - Current Status (Jan Clairmont <janclairmont@...oo.com>)
• [SECURITY] [DSA 1530-1] New cupsys packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
• Re: Static Injection into Commercial Lines - DoS on Vonage - Current Status (Kern <timetrap@...il.com>)
• CVE-2008-0073 - MPlayer and VLC "sdpplin_parse()" Array Indexing Vulnerability (Guido Landi <lists@...mera.org>)
• Re: Free Tibet.. ("Garrett M. Groff" <groffg@...design.com>)
• CORE-2007-1212: SILC pkcs_decode buffer overflow (Core Security Technologies Advisories <advisories@...esecurity.com>)
• Re: Free Tibet.. (Byron Sonne <blsonne@...ers.com>)
• Re: Free Tibet.. (Anders B Jansson <hdw@...listi.se>)
• Re: Free Tibet.. (Gautam <g@...am>)
• Re: Free Tibet.. (Gautam <g@...am>)
• Re: Free Tibet.. ("Peter Dawson" <slash.pd@...il.com>)

• Re: Free Tibet.. (Sowhat <smaillist@...il.com>)
• Re: Free Tibet.. ("Jun Zhao" <mr.rain0@...il.com>)
• Re: Free Tibet.. (www417 <www417@...il.com>)
• Re: Free Tibet.. (Adam Hunt <adam@...trecruiting.com>)
• Re: Free Tibet.. (Mr.Rain <mr.rain0@...il.com>)
• Native American Indians Reassert Control Over Tribal Lands -- Re: Free Tibet.. ("Jon O." <jono@...workcommand.com>)
• Jan Kruska (Guy Fawkes <guy_fawkes_you_good@...oo.com>)
• rPSA-2008-0123-1 ruby (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2008-0120-1 gnome-ssh-askpass openssh openssh-client openssh-server (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Static Injection into Commercial Lines - DoSon Vonage - Current Status ("Philip Fagan" <pfagan@...italglobe.com>)
• Re: Static Injection into Commercial Lines - DoS on Vonage - Current Status (Anja Hofmann <anja.hofmann@...uni-tuebingen.de>)
• Re: Native American Indians Reassert Control Over Tribal Lands (Anja Hofmann <anja.hofmann@...uni-tuebingen.de>)
• Re: Free Tibet.. ("Throwaway1@...umbus.rr.com" <Throwaway1@...umbus.rr.com>)
• Re: Jan Kruska ("KJK::Hyperion" <hackbunny@...tpj.org>)
• Re: Free Tibet.. (Adam Hunt <adam@...trecruiting.com>)
• Re: Free Tibet.. ("Razi Shaban" <razishaban@...il.com>)
• Re: Free Tibet.. (Robert Smits <bob@...its.ca>)
• Free Iraq.. (n3td3v <xploitable@...il.com>)
• [USN-592-1] Firefox vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• Pangolin v1.2.590 - The best SQL injector you've ever seen (<zwell@...u.com>)
• Cisco Security Advisory: Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route S… (Cisco Systems Product Security Incident…)
• Cisco Security Advisory: Cisco IOS Virtual Private Dial-up Network Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psir…)
• Cisco Security Advisory: Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Cisco IOS User Datagram Protocol Delivery Issue For IPv4/IPv6 Dual-stack Routers (Cisco Systems Product Security Incident Response Tea…)
• Cisco Security Advisory: Multiple DLSw Denial of Service Vulnerabilities in Cisco IOS (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Re: Pangolin v1.2.590 - The best SQL injector you've ever seen ("A. Ramos" <aramosf@...ec.net>)
• Re: Pangolin v1.2.590 - The best SQL injector you've ever seen ("Razi Shaban" <razishaban@...il.com>)
• ZDI-08-013: Novell eDirectory for Linux Stack Overflow (zdi-disclosures@...m.com)
• Re: Pangolin v1.2.590 - The best SQL injector you've ever seen (davidrook <david.rook@...lexpayments.com>)
• Re: Pangolin v1.2.590 - The best SQLinjector you've ever seen ("josh" <mastahflank@...il.com>)
• Re: Pangolin v1.2.590 - The best SQLinjector you've ever seen ("Micheal Cottingham" <techie.micheal@...il.com>)
• Re: Pangolin v1.2.590 - The best SQLinjector you've ever seen ("Ricardo Giorgi" <skydiver@...ldata.com.br>)
• Re: Pangolin v1.2.590 - The best SQLinjector you've ever seen (Tim Kunschke <tim@...mey.homelinux.com>)
• Re: Pangolin v1.2.590 - The best SQL injector you've ever seen (Tim Kunschke <tim@...mey.homelinux.com>)
• Re: Pangolin v1.2.590 - The best SQLinjector you've ever seen ("Micheal Cottingham" <techie.micheal@...il.com>)
• Re: Pangolin v1.2.590 - The best SQLinjector you've ever seen (Tim Kunschke <tim@...mey.homelinux.com>)
• Multiple vulnerabilities in solidDB 06.00.1018 (Luigi Auriemma <aluigi@...istici.org>)
• Re: Pangolin v1.2.590 - The best SQLinjector you've ever seen ("Russ McRee" <holisticinfosec@...il.com>)
• [ MDVSA-2008:076 ] - Updated wml packages fix symlink vulnerabilities (security@...driva.com)
• [USN-593-1] Dovecot vulnerabilities (Kees Cook <kees@...ntu.com>)
• [USN-594-1] libnet-dns-perl vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-595-1] SDL_image vulnerabilities (Kees Cook <kees@...ntu.com>)
• [USN-596-1] Ruby vulnerabilities (Kees Cook <kees@...ntu.com>)
• Re: Pangolin v1.2.590 - The best SQLinjector you've ever seen ("Micheal Cottingham" <techie.micheal@...il.com>)

• [ MDVSA-2008:077 ] - Updated perl-Tk packages fix GIF processing vulnerability (security@...driva.com)
• Re: Free Iraq ("Throwaway1@...umbus.rr.com" <Throwaway1@...umbus.rr.com>)
• [ MDVSA-2008:078 ] - Updated openssh packages fix X connection hijacking (security@...driva.com)
• Re: Free Tibet.. ("Eduardo Tongson" <propolice@...il.com>)
• Re: Free Iraq ("josh" <mastahflank@...il.com>)
• Re: Free Iraq.. ("Rankin, James R" <kz20fl@...glemail.com>)
• [SECURITY] [DSA 1529-1] New Firebird packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• The reason why "Pangolin is backdoor" ("zwell.nosec" <zwell.nosec@...il.com>)
• Re: The reason why "Pangolin is backdoor" ("Razi Shaban" <razishaban@...il.com>)
• 答复: The reason why "Pangolin is backdoor" ("zwell.nosec" <zwell.nosec@...il.com>)
• Re: 答复: The reason why "Pangolin is backdoor" ("Russ McRee" <holisticinfosec@...il.com>)
• Re: The reason why "Pangolin is backdoor" ("zwell.nosec" <zwell.nosec@...il.com>)
• Re: 答复: The reason why "Pangolin is backdoor" ("Razi Shaban" <razishaban@...il.com>)
• 答复: 答复: The reason why "Pangolin is backdoor" ("zwell.nosec" <zwell.nosec@...il.com>)
• Re: Free Iraq ("Garrett M. Groff" <groffg@...design.com>)
• Re: Free Iraq.. ("Garrett M. Groff" <groffg@...design.com>)
• Re: Free Iraq (Handrix <handrix@...il.com>)
• the hysteria on pangolin.exe ("LIUDIEYU dot COM" <liudieyu.com@...il.com>)
• Re: Free Iraq ("I. D." <soufre@...il.com>)
• Re: Free Iraq ("Razi Shaban" <razishaban@...il.com>)
• Re: Free Iraq ("josh" <mastahflank@...il.com>)
• Re: Free Iraq.. ("Rankin, James R" <kz20fl@...glemail.com>)
• Re: Free Iraq ("Razi Shaban" <razishaban@...il.com>)
• Re: Free Iraq.. ("Razi Shaban" <razishaban@...il.com>)
• Re: Free Iraq ("Peter Dawson" <slash.pd@...il.com>)
• Re: Free Iraq ("Razi Shaban" <razishaban@...il.com>)
• Re: Free Iraq ("Garrett M. Groff" <groffg@...design.com>)
• Re: Free Iraq (Paul Schmehl <pauls@...allas.edu>)
• Re: Free Iraq (news@...donald.net)
• Re: Free Iraq ("Garrett M. Groff" <groffg@...design.com>)
• Re: Free Iraq (davidrook <david.rook@...lexpayments.com>)
• Re: Free Iraq (infolookup@...il.com)
• Re: Free Iraq ("Garrett M. Groff" <groffg@...design.com>)
• Re: Free Iraq ("Razi Shaban" <razishaban@...il.com>)
• Re: Free Iraq ("Garrett M. Groff" <groffg@...design.com>)
• Re: Free Iraq (Valdis.Kletnieks@...edu)
• Re: Free Iraq (M.B.Jr. <marcio.barbado@...il.com>)
• Re: Free Tibet, free Iraq, free whatever ... ("security concern" <securitized@...il.com>)
• Re: Free Tibet, free Iraq, free whatever ... ("josh" <mastahflank@...il.com>)
• [SECURITY] [DSA 1532-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Free Iraq (n3td3v <xploitable@...il.com>)
• [ MDVSA-2008:079 ] - Updated sarg packages fix multiple vulnerabilities (security@...driva.com)
• Re: Free Iraq ("Razi Shaban" <razishaban@...il.com>)

• Re: Free Iraq ("Dennis Henderson" <hendo@...dohome.com>)
• Re: Free Iraq (Bill Stout <billbrietstout@...oo.com>)
• Free Beer ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: Free Iraq ("Throwaway1@...umbus.rr.com" <Throwaway1@...umbus.rr.com>)
• Re: 答复: 答复: The reason why "Pangolin is backdoor" (taneja.security@...il.com)
• Re: Pangolin v1.2.590 - The best SQLinjector you've ever seen ("Luther D. Anderson" <ld0x41@...glemail.com>)
• What's going on about Pangolin (<zwell@...u.com>)
• The result why "pangolin is backdoor" (<zwell@...u.com>)
• [securityreason] *BSD libc (strfmon) Multiple vulnerabilities ("Maksymilian Arciemowicz" <cxib@...urityreason.com>)
• [SECURITY] [DSA 1531-1] New policyd-weight packages fix insecure temporary files (thijs@...ian.org (Thijs Kinkhorst))
• rPSA-2008-0128-1 firefox (rPath Update Announcements <announce-noreply@...th.com>)
• [SECURITY] [DSA 1533-1] New exiftags packages fix several vulnerabilities (Devin Carraway <devin@...ian.org>)
• Massive IFRAME SEO Poisoning Attack Continuing ("Dancho Danchev" <dancho.danchev@...il.com>)
• Re: Free Tibet, free Iraq, free whatever ... ("security concern" <securitized@...il.com>)
• Re: Free Iraq ("b." <datatank@...e.Fr>)
• Re: Free Tibet, free Iraq, free whatever ... ("security concern" <securitized@...il.com>)
• RE: Re: 答复: 答复: The reason why "Pangolin is backdoor" ("zwell.nosec" <zwell.nosec@...il.com>)
• Re: What's going on about Pangolin (xor_ <blu3sh3ll@...il.com>)
• Re: What's going on about Pangolin (cocoruder. <frankruder@...mail.com>)
• Re: What's going on about Pangolin ("zwell.nosec" <zwell.nosec@...il.com>)
• Re: Free Iraq (M.B.Jr. <marcio.barbado@...il.com>)
• CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability ("Williams, James K" <James.Williams@...com>)
• [SECURITY] [DSA 1534-1] New iceape packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: What's going on about Pangolin ("Andreas Selvicki" <drsynack@...il.com>)
• Re: What's going on about Pangolin ("josh" <mastahflank@...il.com>)
• Re: What's going on about Pangolin (Tremaine Lea <tremaine@...il.com>)
• Re: Free Beer ("Fetch, Brandon" <bfetch@....com>)
• Re: Free Beer (don bailey <don.bailey@...il.com>)
• Re: Free Beer (jeroen <nowhereman@...nen.org>)
• Re: Free Beer (sub <sub@...m641a.net>)
• Re: Free Beer (n3td3v <xploitable@...il.com>)
• Re: Free Beer ("Razi Shaban" <razishaban@...il.com>)

• [ MDVSA-2008:080 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
• Fwd: What's going on about Pangolin (Nemes <hyperion.nemes@...il.com>)
• VMSA-2008-0006 Updated libxml2 service console package (VMware Security team <security@...are.com>)
• Re: Fwd: What's going on about Pangolin ("zwell.nosec" <zwell.nosec@...il.com>)
• Re: Fwd: What's going on about Pangolin (Tim Kunschke <tim@...mey.homelinux.com>)
• Re: Fwd: What's going on about Pangolin (Tremaine Lea <tremaine@...il.com>)
• Re: Fwd: What's going on about Pangolin ("josh" <mastahflank@...il.com>)
• Re: sans handler gives out n3td3v e-mail to public (n3td3v <xploitable@...il.com>)

• Immunity Debugger v1.5 (Nicolas Waisman <nicolas@...unitysec.com>)
• [SECURITY] [DSA 1531-2] New policyd-weight packages fix insecure temporary files (thijs@...ian.org (Thijs Kinkhorst))
• Re: the hysteria on pangolin.exe (poo <skodliv@...il.com>)
• Re: What's going on about Pangolin (poo <skodliv@...il.com>)
• Re: sans handler gives out n3td3v e-mail to public (Ureleet <ureleet@...il.com>)
• [SECURITY] [DSA 1535-1] New iceweasel packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [TKADV2008-002] avast! 4.7 aavmker4.sys Kernel Memory Corruption ("Tobias Klein" <tk@...pkit.de>)
• Kiss Server v1.2 ("vashnukad vashnukad" <vashnukad1@...il.com>)
• Re: Free Iraq ("vashnukad vashnukad" <vashnukad1@...il.com>)
• Re: Free Iraq ("Jim Popovitch" <yahoo@...pop.com>)

• Re: sans handler gives out n3td3v e-mail to public (Valdis.Kletnieks@...edu)
• London DEFCON meet - DC4420 - New Venue - Wednesday 2nd April, 2008 (Major Malfunction <majormal@...ate-radio.org>)
• Re: London DEFCON meet - DC4420 - New Venue - Wednesday 2nd April, 2008 (n3td3v <xploitable@...il.com>)
• Re: London DEFCON meet - DC4420 - New Venue - Wednesday 2nd April, 2008 (Valdis.Kletnieks@...edu)
• Re: sans handler gives out n3td3v e-mail to public (Jason <security@...enik.com>)
• Directory traversal in 2X ThinClientServer v5.0_sp1-r3497 (Luigi Auriemma <aluigi@...istici.org>)
• ProxyStrike - Active Web Application Proxy (Christian Martorella <laramies2k@...oo.com.ar>)
• iDefense Security Advisory 03.31.08: Macrovision InstallShield InstallScript One-Click Install Untrusted Library Loadin… (iDefense Labs <labs-no-reply@...fense.c…)

603 messages

Powered by blists - more mailing lists