full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2008/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 19	² 27	³ 9	⁴ 18
⁵ 25	⁶ 43	⁷ 56	⁸ 47	⁹ 37	¹⁰ 17	¹¹ 30
¹² 25	¹³ 17	¹⁴ 41	¹⁵ 19	¹⁶ 15	¹⁷ 7	¹⁸ 12
¹⁹ 21	²⁰ 37	²¹ 37	²² 18	²³ 17	²⁴ 9	²⁵ 8
²⁶ 6	²⁷ 21	²⁸ 20	²⁹ 10	³⁰ 11	³¹ 6

Messages by day:

May 1 (19 messages)

Did n3td3v infulence Google Security Team (magickal1 <magickal1@...il.com>)
Re: Microsoft device helps police pluck evidencefrom cyberscene of crime ("Ivan ." <ivanhec@...il.com>)
Re: Did n3td3v infulence Google Security Team (Pat <hermens.p@...il.com>)
Re: Did n3td3v infulence Google Security Team ("Maxime Ducharme" <mducharme@...ergeneration.com>)
iDefense Security Advisory 04.30.08: Akamai Download Manager Arbitrary Program Execution Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Team SHATTER Security Advisory: Oracle Database SQL Injection in SYS.DBMS_CDC_UTILITY.LOCK_CHANGE_SET (DB02) (Team SHATTER <shatter@...secinc.com>)
Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (DB11) (Team SHATTER <shatter@...secinc.com>)
Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.DBMS_AQJMS_INTERNAL (DB15) (Team SHATTER <shatter@...secinc.com>)
[SECURITY] [DSA 1564-1] New wordpress packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
[SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
Happy Valdis Kletnieks Day (n3td3v <xploitable@...il.com>)
Re: Happy Valdis Kletnieks Day ("Razi Shaban" <razishaban@...il.com>)
Re: Happy Valdis Kletnieks Day (n3td3v <xploitable@...il.com>)
Ureleet (n3td3v <xploitable@...il.com>)
HD Moore (n3td3v <xploitable@...il.com>)
Re: Could n3td3v win a Pwnie award? (n3td3v <xploitable@...il.com>)
Re: HD Moore ("Nate McFeters" <nate.mcfeters@...il.com>)
Re: HD Moore (infolookup@...il.com)
Re: Could n3td3v win a Pwnie award? (nnp <version5@...il.com>)

May 2 (27 messages)

Re: HD Moore ("Micheal Cottingham" <techie.micheal@...il.com>)
Re: Ureleet (Ureleet <ureleet@...il.com>)
Andrew Wallace ("hackers lounger" <hackers.lounger@...il.com>)
Re: HD Moore (Ureleet <ureleet@...il.com>)
Re: Ureleet (Pat <hermens.p@...il.com>)
Re: HD Moore (root <root_@...ertel.com.ar>)
calling n3td3v out... of the closet (limeybastard@...hmail.com)
Re: Ureleet (silky <michaelslists@...il.com>)
Re: Ureleet (n3td3v <xploitable@...il.com>)
Re: HD Moore (Peter Besenbruch <prb@...a.net>)
Re: HD Moore (n3td3v <xploitable@...il.com>)
Re: HD Moore ("Nate McFeters" <nate.mcfeters@...il.com>)
Microsoft Work ActiveX Insecure Method Exploit (lhoang8500 <lhoang8500@...il.com>)
Re: Ureleet ("Razi Shaban" <razishaban@...il.com>)
Re: Ureleet ("Razi Shaban" <razishaban@...il.com>)
Re: Ureleet (Ureleet <ureleet@...il.com>)
The latest in malicious code protection... ("un believer" <t3ch.c0nsp1racy@...il.com>)
Virus.VBS.Redlof.k( kaspersky ) infection in http://www.sgbau.ac.in/ ("Dr. Mark A. Baiter [Chief Scatological Consultant]" <mbaiter2@...il.com>)
[SECURITY] [DSA 1566-1] New cpio packages fix denial of service (Steve Kemp <skx@...ian.org>)
Re: HD Moore ("Rob Thompson" <my.security.lists@...il.com>)
Re: HD Moore ("Nate McFeters" <nate.mcfeters@...il.com>)
Re: HD Moore (Blaine Fleming <groups@...ital-z.com>)
Re: Ureleet (n3td3v <xploitable@...il.com>)
[ MDVSA-2008:095 ] - Updated OpenOffice.org packages fix vulnerabilities (security@...driva.com)
Denial of Service in Call of Duty 4 1.5 (Luigi Auriemma <aluigi@...istici.org>)
Re: defining 0day ("Douglas K. Fischer" <fischerdk@...oki.com>)
Re: defining 0day ("Exibar" <exibar@...lair.com>)

May 3 (9 messages)

lol you bitches ("Micheal Chatner" <mchatner@...il.com>)
Re: HD Moore ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)
Re: HD Moore (reepex <reepex@...il.com>)
Re: Virus.VBS.Redlof.k( kaspersky ) infection in http://www.sgbau.ac.in/ ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: [TOOL] SSL Capable NetCat (and more) ("Sofian Brabez" <sbrabez@...il.com>)
Photos and Presentation Materials from HITBSecConf2008 - Dubai Released (Praburaajan <prabu@...kinthebox.org>)
Web Application Security Awareness Day Deemed Complete Failure ("Howard Jurgenmeit" <websec2008@...il.com>)
Multiple vulnerabilities in WebMod 0.48 (Luigi Auriemma <aluigi@...istici.org>)
Re: Web Application Security Awareness Day Deemed Complete Failure (n3td3v <xploitable@...il.com>)

May 4 (18 messages)

Microsot DID DISCLOSE potential Backdoor ("J. Oquendo" <sil@...iltrated.net>)
rPSA-2008-0157-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
# a new bug in Olly (kris kaspersky <poldhiir@...il.com>)
Re: HD Moore (n3td3v <xploitable@...il.com>)
Re: HD Moore (n3td3v <xploitable@...il.com>)
Re: HD Moore ("Kurt Dillard" <kurtdillard@....com>)
Re: HD Moore (n3td3v <xploitable@...il.com>)
Re: Andrew Wallace ("hackers lounger" <hackers.lounger@...il.com>)
Re: HD Moore ("hackers lounger" <hackers.lounger@...il.com>)
Re: Web Application Security Awareness Day Deemed Complete Failure ("hackers lounger" <hackers.lounger@...il.com>)
Re: Andrew Wallace (n3td3v <xploitable@...il.com>)
Re: HD Moore (n3td3v <xploitable@...il.com>)
Re: HD Moore (Pat <hermens.p@...il.com>)
Re: Web Application Security Awareness Day Deemed Complete Failure (n3td3v <xploitable@...il.com>)
Re: Web Application Security Awareness Day Deemed Complete Failure ("hackers lounger" <hackers.lounger@...il.com>)
Re: Web Application Security Awareness Day Deemed Complete Failure (n3td3v <xploitable@...il.com>)
Re: HD Moore (n3td3v <xploitable@...il.com>)
Re: HD Moore (Pat <hermens.p@...il.com>)

May 5 (25 messages)

Re: # a new bug in Olly ("Peter Ferrie" <peter.ferrie@...il.com>)
Re: HD Moore (n3td3v <xploitable@...il.com>)
bug in Process Explorer (a gift for malware) (kris kaspersky <poldhiir@...il.com>)
Information regarding n3td3v (n3td3v <xploitable@...il.com>)
Re: Information regarding n3td3v ("Nate McFeters" <nate.mcfeters@...il.com>)
Re: Andrew Wallace ("Klaus Zing" <klaus.zing@...glemail.com>)
(no subject) (root <root_@...ertel.com.ar>)
Re: Andrew Wallace ("N /A" <netdevexposed@...il.com>)
get a life ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: Andrew Wallace (n3td3v <xploitable@...il.com>)
Re: Information regarding n3td3v (n3td3v <xploitable@...il.com>)
Re: Information regarding n3td3v (mcwidget <mcwidget@...il.com>)
[USN-606-1] CUPS vulnerability (Jamie Strandboge <jamie@...onical.com>)
Re: Information regarding n3td3v (n3td3v <xploitable@...il.com>)
www.passwordsafe.com ("Thomas Pollet" <thomas.pollet@...il.com>)
Re: HD Moore (Valdis.Kletnieks@...edu)
Re: HD Moore (n3td3v <xploitable@...il.com>)
Re: HD Moore ("Nate McFeters" <nate.mcfeters@...il.com>)
Re: HD Moore ("Nate McFeters" <nate.mcfeters@...il.com>)
Re: HD Moore (M.B.Jr. <marcio.barbado@...il.com>)
CORE-2008-0326: NASA's Common Data Format buffer overflow (Core Security Technologies Advisories <advisories@...esecurity.com>)
Re: HD Moore (n3td3v <xploitable@...il.com>)
Re: HD Moore (Valdis.Kletnieks@...edu)
Re: HD Moore ("Nate McFeters" <nate.mcfeters@...il.com>)
Re: HD Moore ("DUDE DUDERINO" <ihasshovel@...il.com>)

May 6 (43 messages)

CORE-2008-0129 - Wonderware SuiteLink Denial of Service vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Re: HD Moore (n3td3v <xploitable@...il.com>)
Flames: off-topic (jerk <jerk@...erk.com>)
Re: HD Moore (n3td3v <xploitable@...il.com>)
Re: HD Moore ("Garrett M. Groff" <groffg@...design.com>)
Re: HD Moore (n3td3v <xploitable@...il.com>)
Don't fuck with n3td3v (n3td3v <xploitable@...il.com>)
Advisory SE-2008-02: PHP GENERATE_SEED() Weak Random Number Seed Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
Re: Andrew Wallace ("N /A" <netdevexposed@...il.com>)
[ GLSA 200805-01 ] Horde Application Framework: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200805-02 ] phpMyAdmin: Information disclosure (Pierre-Yves Rofes <py@...too.org>)
Advisory SE-2008-03: PHP Multibyte Shell Command Escaping Bypass Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
what's in a name, anyway? ("Steve Richman" <steve@...chman.net>)
Re: Andrew Wallace ("Phoor Luelz" <phoor.luelz@...il.com>)
Re: Andrew Wallace (poo <skodliv@...il.com>)
Re: get a life (poo <skodliv@...il.com>)
Virus Infection : URL http://www.sgbau.ac.in/ hosting Virus.VBS.Redlof.k ("Dr. Mark A. Baiter [Chief Scatological Consultant]" <mbaiter2@...il.com>)
[SECURITY] [DSA 1567-1] New blender packages fix arbitrary code execution (Devin Carraway <devin@...ian.org>)
[SECURITY] [DSA 1568-1] New b2evolution packages fix cross site scripting (thijs@...ian.org (Thijs Kinkhorst))
[SECURITY] [DSA 1569-1] New cacti packages fix multiple vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
Novell eDirectory DoS via HTTP headers (Nicob <nicob@...ob.net>)
Novell eDirectory unauthenticated access to SOAP interface (Nicob <nicob@...ob.net>)
Re: Microsot DID DISCLOSE potential Backdoor (Aaron Kempf <aaron_kempf@...mail.com>)
[SECURITY] [DSA 1569-2] New cacti packages fix regression (thijs@...ian.org (Thijs Kinkhorst))
HD Moore ("Elad Shapira" <eladexposed@...il.com>)
RE :OT - Don't fuck with n3td3v ("Rankin, James R" <kz20fl@...glemail.com>)
Re: HD Moore ("Elad Shapira" <eladexposed@...il.com>)
Yahoo! Assistant (3721) ActiveX Remote Code Execution Vulnerability (Sowhat <smaillist@...il.com>)
Re: HD Moore ("Nate McFeters" <nate.mcfeters@...il.com>)
[USN-607-1] Emacs vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-608-1] KDE vulnerability (Jamie Strandboge <jamie@...onical.com>)
Re: Microsot DID DISCLOSE potential Backdoor ("J. Oquendo" <sil@...iltrated.net>)
[SECURITY] [DSA 1570-1] New kazehakase packages fix execution of arbitrary code (Steve Kemp <skx@...ian.org>)
[USN-605-1] Thunderbird vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: get a life ("Jonathan Miles" <jonathan.miles90222@...il.com>)
Re: OT: get a life ("Garrett M. Groff" <groffg@...design.com>)
Re: OT: get a life ("Jonathan Miles" <jonathan.miles90222@...il.com>)
Re: HD Moore (steve menard <smenard@...et.nb.ca>)
Re: get a life ("Alexandre Aniceto" <alexandre.aniceto@...il.com>)
Re: get a life ("Professor Micheal Chatner" <mchatner@...il.com>)
[ MDVSA-2008:096 ] - Updated emacs packages fix vulnerability in vcdiff (security@...driva.com)
Re: get a life (infolookup@...il.com)
Re: get a life (n3td3v <xploitable@...il.com>)

May 7 (56 messages)

[ MDVSA-2008:097 ] - Updated kdelibs packages fix vulnerability in start_kdeinit (security@...driva.com)
[ MDVSA-2008:098 ] - Updated openssh packages fix vulnerability (security@...driva.com)
Adobe Acrobat Professional Javascript For PDF Security Feature Bypass and Memory Corruption Vulnerabilities (cocoruder <cocoruder@...il.com>)
[Advisory Update]Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability (cocoruder <cocoruder@...il.com>)
[USN-609-1] OpenOffice.org vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-610-1] LTSP vulnerability (Kees Cook <kees@...ntu.com>)
RE :OT - Don't fuck with n3td3v ("quispiam lepidus" <quispiam.lepidus@...il.com>)
Re: RE :OT - Don't fuck with n3td3v ("Michael Simpson" <mikie.simpson@...il.com>)
Re: RE :OT - Don't fuck with n3td3v (n3td3v <xploitable@...il.com>)
Re: RE :OT - Don't fuck with n3td3v (Valdis.Kletnieks@...edu)
Re: RE :OT - Don't fuck with n3td3v (n3td3v <xploitable@...il.com>)
[SECURITY] [DSA 1554-2] New roundup packages fix regression (thijs@...ian.org (Thijs Kinkhorst))
rPSA-2008-0162-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
Re: RE :OT - Don't fuck with n3td3v (G D Fuego <gdfuego@...il.com>)
RE :OT - Don't fuck with n3td3v ("N /A" <netdevexposed@...il.com>)
Re: RE :OT - Don't fuck with n3td3v (n3td3v <xploitable@...il.com>)
Re: RE :OT - Don't fuck with n3td3v (n3td3v <xploitable@...il.com>)
Re: RE :OT - Don't fuck with n3td3v ("Exibar" <exibar@...lair.com>)
RE :OT - Don't fuck with n3td3v ("N /A" <netdevexposed@...il.com>)
Re: RE :OT - Don't fuck with n3td3v (n3td3v <xploitable@...il.com>)
Re: RE :OT - Don't fuck with n3td3v (n3td3v <xploitable@...il.com>)
[ GLSA 200805-03 ] Multiple X11 terminals: Local privilege escalation (Tobias Heinlein <keytoaster@...too.org>)
Re: RE :OT - Don't fuck with n3td3v ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: RE :OT - Don't fuck with n3td3v (n3td3v <xploitable@...il.com>)
Re: RE :OT - Don't fuck with n3td3v (Valdis.Kletnieks@...edu)
Re: RE :OT - Don't fuck with n3td3v (Ureleet <ureleet@...il.com>)
Re: RE :OT - Don't fuck with n3td3v (Ureleet <ureleet@...il.com>)
Re: Don't fuck with n3td3v (Ureleet <ureleet@...il.com>)
Re: RE :OT - Don't fuck with n3td3v ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: Ureleet (Ureleet <ureleet@...il.com>)
Re: RE :OT - Don't fuck with n3td3v (n3td3v <xploitable@...il.com>)
Re: RE :OT - Don't fuck with n3td3v ("Nate McFeters" <nate.mcfeters@...il.com>)
Ganging up on n3td3v (n3td3v <xploitable@...il.com>)
Re: Ganging up on n3td3v (Ureleet <ureleet@...il.com>)
Re: Ganging up on n3td3v ("Anshuman G" <anshu.pg@...il.com>)
Re: Ganging up on n3td3v (n3td3v <xploitable@...il.com>)
Re: RE :OT - Don't fuck with n3td3v ("Exibar" <exibar@...lair.com>)
Re: Ganging up on n3td3v ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: Ganging up on n3td3v ("Nate McFeters" <nate.mcfeters@...il.com>)
Re: Ganging up on n3td3v ("Anshuman G" <anshu.pg@...il.com>)
Re: RE :OT - Don't fuck with n3td3v (Valdis.Kletnieks@...edu)
Re: RE :OT - Don't fuck with n3td3v (n3td3v <xploitable@...il.com>)
[ GLSA 200805-04 ] eGroupWare: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Re: Ganging up on n3td3v ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: Microsot DID DISCLOSE potential Backdoor (Paul Schmehl <pauls@...allas.edu>)
[ GLSA 200805-05 ] Wireshark: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
Re: Ganging up on n3td3v ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: Ganging up on n3td3v (n3td3v <xploitable@...il.com>)
Re: Ganging up on n3td3v ("Nate McFeters" <nate.mcfeters@...il.com>)
Re: Ganging up on n3td3v ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: Ganging up on n3td3v ("Nate McFeters" <nate.mcfeters@...il.com>)
Re: Ganging up on n3td3v ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: Ganging up on n3td3v ("Joey Mengele" <joey.mengele@...hmail.com>)
Re: Ganging up on n3td3v (n3td3v <xploitable@...il.com>)
n3td3v's agenda ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: Microsot DID DISCLOSE potential Backdoor ("J. Oquendo" <sil@...iltrated.net>)

May 8 (47 messages)

iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop channel_process() Integer Signedness Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop iso_recv_msg() Integer Underflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop process_redirect_pdu() BSS Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Ganging up on n3td3v (Ureleet <ureleet@...il.com>)
Re: Ganging up on n3td3v (Ureleet <ureleet@...il.com>)
Re: Ganging up on n3td3v (Ureleet <ureleet@...il.com>)
Re: Ganging up on n3td3v (Ureleet <ureleet@...il.com>)
Re: n3td3v's agenda (Ureleet <ureleet@...il.com>)
Re: Microsot DID DISCLOSE potential Backdoor (Ureleet <ureleet@...il.com>)
Re: Ganging up on n3td3v ("Ken Stein" <kastein@....EDU>)
Re: Ganging up on n3td3v ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: Microsot DID DISCLOSE potential Backdoor (Paul Schmehl <pauls@...allas.edu>)
Re: Ganging up on n3td3v ("Sec urity" <security@...enik.com>)
Re: Microsot DID DISCLOSE potential Backdoor ("J. Oquendo" <sil@...iltrated.net>)
Vulnerability Note VU#12345 ("Security Group" <secgro@...il.com>)
BCS2008 CFP ("Jim Geovedi" <jim.geovedi@...il.com>)
Re: Vulnerability Note VU#12345 (Security Group) ("Sh@m@n Virtuel" <shamanvirtuel@...il.com>)
Advisory ("advisories" <advisories@...tcullis-security.com>)
Re: Microsot DID DISCLOSE potential Backdoor ("Darth Jedi" <darth.jedi@...ckformoney.com>)
Re: Vulnerability Note VU#12345 (Security Group) (Nick FitzGerald <nick@...us-l.demon.co.uk>)
The Matrix meets Bladerunner ("George Parr" <george.pargh@...glemail.com>)
Gangbanging N3t4rse (limeybastard@...hmail.com)
unsubscribing (n3td3v <xploitable@...il.com>)
Re: Vulnerability Note VU#12345 ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: n3td3v's agenda ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: unsubscribing (poo <skodliv@...il.com>)
unsubscribing ("N /A" <netdevxposed@...il.com>)
Re: unsubscribing ("Thomas Pollet" <thomas.pollet@...il.com>)
Happy Birthday Israel! ("avivra" <avivra@...il.com>)
Re: Microsot DID DISCLOSE potential Backdoor (Paul Schmehl <pauls@...allas.edu>)
ZYWALL Referer Header XSS Vulnerability ("Deniz Cevik" <Deniz.Cevik@...ellect.com.tr>)
SonicWall e-mail security Host Header XSS Vulnerability ("Deniz Cevik" <Deniz.Cevik@...ellect.com.tr>)
Re: Microsot DID DISCLOSE potential Backdoor (Paul Schmehl <pauls@...allas.edu>)
DNFTT ("Maxime Ducharme" <mducharme@...ergeneration.com>)
Re: Microsot DID DISCLOSE potential Backdoor ("J. Oquendo" <sil@...iltrated.net>)
Re: unsubscribing (news@...donald.net)
Re: Microsot DID DISCLOSE potential Backdoor (Paul Schmehl <pauls@...allas.edu>)
Re: Microsot DID DISCLOSE potential Backdoor ("J. Oquendo" <sil@...iltrated.net>)
Snort Signature to detect credit cards (wilder_jeff Wilder <wilder_jeff@....com>)
n3td3v is a ...? ("waveroad waveroad" <waveroad@...il.com>)
[USN-611-1] Speex vulnerability (Jamie Strandboge <jamie@...onical.com>)
FLEA-2008-0008-1 firefox (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
[USN-611-2] vorbis-tools vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-611-3] GStreamer Good Plugins vulnerability (Jamie Strandboge <jamie@...onical.com>)
Re: Happy Birthday Israel! ("Andrew A" <gluttony@...il.com>)
Re: Snort Signature to detect credit cards ("Ivan ." <ivanhec@...il.com>)
Re: Happy Birthday Israel! ("Mercury Vapour" <n3twar3z@...il.com>)

May 9 (37 messages)

Re: Snort Signature to detect credit cards (Christopher Jacob <chris@...ob-solutions.com>)
Re: Snort Signature to detect credit cards (Ray P <sixsigma98@...mail.com>)
[ MDVSA-2008:099 ] - Updated ImageMagick packages fix vulnerabilities (security@...driva.com)
Re: Snort Signature to detect credit cards (Simon Smith <simon@...soft.com>)
FInal EUSecWest 2008 Speakers London May 21/22 (Dragos Ruiu <dr@....net>)
browserrecon project (Marc Ruef <marc.ruef@...putec.ch>)
Vacation reply (<fewun@...mail.com>)
Re: Snort Signature to detect credit cards ("Randal T. Rioux" <randy@...cyonlabs.com>)
Re: Snort Signature to detect credit cards ("T Biehn" <tbiehn@...il.com>)
Re: Happy Birthday Israel! ("Andrew A" <gluttony@...il.com>)
Re: Snort Signature to detect credit cards (poo <skodliv@...il.com>)
Re: Out of Office AutoReply: Snort Signature to det ect credit cards ("Randal T. Rioux" <randy@...cyonlabs.com>)
Re: Snort Signature to detect credit cards (Siim Põder <siim@...rad-teel.net>)
Re: Out of Office AutoReply: Snort Signature to det ect credit cards (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Free IT Security Training (scott <scott@...eitsecuritytraining.com>)
Oracle Application Server 10G ORA_DAV Basic Authentication Bypass Vulnerability ("Deniz Cevik" <Deniz.Cevik@...ellect.com.tr>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Re: Happy Birthday Israel! (Skratz0r <roryflyguy@...glemail.com>)
[ GLSA 200805-06 ] Firebird: Data disclosure (Robert Buchholz <rbu@...too.org>)
[ GLSA 200805-07 ] Linux Terminal Server Project: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
[ GLSA 200805-08 ] InspIRCd: Denial of Service (Robert Buchholz <rbu@...too.org>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Jesse Bacon" <dread.roberts@...il.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Joey Mengele" <joey.mengele@...hmail.com>)
Download Vulnerability in Internet Explorer 6 & 7 ("Jediah" <jediah@...iodice.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Garrett M. Groff" <groffg@...design.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Joey Mengele" <joey.mengele@...hmail.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Garrett M. Groff" <groffg@...design.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Erik Harrison" <eharrison@...il.com>)
XSS and CSRF vulnerability on cPanel 11 (Matteo Carli <matteo@...teocarli.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Joey Mengele" <joey.mengele@...hmail.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 (Valdis.Kletnieks@...edu)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Joey Mengele" <joey.mengele@...hmail.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Andrew A" <gluttony@...il.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Joey Mengele" <joey.mengele@...hmail.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 (Valdis.Kletnieks@...edu)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Joey Mengele" <joey.mengele@...hmail.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Joey Mengele" <joey.mengele@...hmail.com>)

May 10 (17 messages)

ZF04 has been released! (robert.lemos@....hush.com)
ZF04 has been released! (robert.lemos@....hush.com)
Re: Happy Birthday Israel! ("Andrew A" <gluttony@...il.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 (scott <redhowlingwolves@...rr.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 (coderman <coderman@...il.com>)
Re: ZF04 has been released! ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 ("Joey Mengele" <joey.mengele@...hmail.com>)
Re: Joey, joey, joey... ("Joey Mengele" <joey.mengele@...hmail.com>)
Re: Joey, joey, joey... ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: Joey, joey, joey... ("Jonathan Miles" <jonathan.miles90222@...il.com>)
Re: Joey, joey, joey... ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 20 (very OT) ("Garrett M. Groff" <groffg@...design.com>)
Joey, joey, joey... (limeybastard@...hmail.com)
Nipper Update (Fizz <fizz@...ania.co.uk>)
Re: Joey, joey, joey... (Paul Schmehl <pauls@...allas.edu>)
fear mongering and utter BS from secnap (reepex <reepex@...il.com>)
NetWorker impersonator (coderman <coderman@...il.com>)

May 11 (30 messages)

Fwd: coderman (n3td3v <xploitable@...il.com>)
Fwd: threats of physical violence towards Joey and (me) n3td3v. (n3td3v <xploitable@...il.com>)
Fwd: NOTICE: Site compromised (n3td3v <xploitable@...il.com>)
Jews, n3td3v and all the like (ph1atka5t <ph1atka5t@...log.org>)
Re: Fwd: NOTICE: Site compromised ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: ZF04 has been released! (n3td3v <xploitable@...il.com>)
Re: Fwd: NOTICE: Site compromised (n3td3v <xploitable@...il.com>)
Re: fear mongering and utter BS from secnap (reepex <reepex@...il.com>)
Re: Fwd: threats of physical violence towards Joey and (me) n3td3v. (coderman <coderman@...il.com>)
Re: Fwd: threats of physical violence towards Joey and (me) n3td3v. (don bailey <don.bailey@...il.com>)
Re: fear mongering and utter BS from secnap (coderman <coderman@...il.com>)
First case of Cyber Rolling? (n3td3v <xploitable@...il.com>)
Re: fear mongering and utter BS from secnap (reepex <reepex@...il.com>)
Re: fear mongering and utter BS from secnap (reepex <reepex@...il.com>)
Re: Joey, joey, joey... (reepex <reepex@...il.com>)
Re: ZF04 has been released! (reepex <reepex@...il.com>)
Fredrick Diggle Security Unfortunate News ("Fredrick Diggle" <fdiggle@...il.com>)
Re: fear mongering and utter BS from secnap ("Fredrick Diggle" <fdiggle@...il.com>)
[ MDVSA-2008:100 ] - Updated perl packages fix denial of service vulnerability (security@...driva.com)
Re: Fwd: NOTICE: Site compromised ("Dr. J Swift" <fdiscsplat@...il.com>)
Gate (Aycan iRiCAN <aycan.irican@...e.gen.tr>)
[ GLSA 200805-09 ] MoinMoin: Privilege escalation (Pierre-Yves Rofes <py@...too.org>)
Re: Joey, joey, joey... (limeybastard@...hmail.com)
Re: Out of Office AutoReply: Snort Signature to det ect credit cards ("Fredrick Diggle" <fdiggle@...il.com>)
Re: Fwd: NOTICE: Site compromised (n3td3v <xploitable@...il.com>)
[SECURITY] [DSA 1572-1] New php5 packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
[SECURITY] [DSA 1573-1] New php5 packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
Re: Fwd: NOTICE: Site compromised ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: First case of Cyber Rolling? ("Dr. J Swift" <fdiscsplat@...il.com>)
[ GLSA 200805-10 ] Pngcrush: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)

May 12 (25 messages)

Re: ZF04 has been released! (coderman <coderman@...il.com>)
exchange server spam problem ("shadow floating" <nadengine@...glemail.com>)
[SECURITY] [DSA 1573-1] New rdesktop packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
The VMware house of cards ("Ivan ." <ivanhec@...il.com>)
Re: Full-Disclosure Digest, Vol 39, Issue 25 ("Jesse Bacon" <dread.roberts@...il.com>)
Re: Vacation reply ("M. Shirk" <shirkdog_list@...mail.com>)
Re: Vacation reply (wac <waldoalvarez00@...il.com>)
Re: Vacation reply (Ureleet <ureleet@...il.com>)
Re: unsubscribing (Ureleet <ureleet@...il.com>)
Re: First case of Cyber Rolling? (Ureleet <ureleet@...il.com>)
Re: Fwd: NOTICE: Site compromised (Ureleet <ureleet@...il.com>)
Re: Fwd: threats of physical violence towards Joey and (me) n3td3v. (Ureleet <ureleet@...il.com>)
Re: Snort Signature to detect credit cards (Ureleet <ureleet@...il.com>)
Re: Ganging up on n3td3v (Ureleet <ureleet@...il.com>)
Re: Fwd: NOTICE: Site compromised (Valdis.Kletnieks@...edu)
Major career web sites hit by spammers attack ("Dancho Danchev" <dancho.danchev@...il.com>)
Re: Fwd: NOTICE: Site compromised ("Fredrick Diggle" <fdiggle@...il.com>)
[SECURITY] [DSA 1574-1] New icedove packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SkyOut/Wired Security] SQL Injection in IDB Micro CMS 3.5 (Login Bypass) (<skyout.fd@...ed-security.net>)
[ GLSA 200805-11 ] Chicken: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200805-12 ] Blender: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200805-13 ] PTeX: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
iDefense Security Advisory 05.12.08: Microsoft Windows I2O Filter Utility Driver (i2omgmt.sys) Local Privilege Escalati… (iDefense Labs <labs-no-reply@...fense.c…)
XSS flaws in Omerta script (SmOk3 <smok3f00@...il.com>)
[SECURITY] [DSA 1575-1] New Linux 2.6.18 packages fix denial of service (dann frazier <dannf@...ian.org>)

May 13 (17 messages)

Remember that time ("Professor Micheal Chatner" <mchatner@...il.com>)
[SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator (Florian Weimer <fw@...eb.enyo.de>)
[USN-612-1] OpenSSL vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-612-2] OpenSSH vulnerability (Jamie Strandboge <jamie@...onical.com>)
Re: Remember that time (Ureleet <ureleet@...il.com>)
Fwd: n3td3v's agenda ("DUDE DUDERINO" <ihasshovel@...il.com>)
[USN-612-3] OpenVPN vulnerability (Jamie Strandboge <jamie@...andboge.com>)
TPTI-08-04: Microsoft Office Jet Database Engine Column Parsing Stack Overflow Vulnerability (DVLabs <dvlabs@...pingpoint.com>)
ZDI-08-023: Microsoft Office RTF Parsing Engine Memory Corruption Vulnerability (zdi-disclosures@...m.com)
iDefense Security Advisory 05.13.08: Microsoft Word CSS Processing Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Remember that time ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: Fwd: n3td3v's agenda (n3td3v <xploitable@...il.com>)
[ GLSA 200805-14 ] Common Data Format library: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
Re: Remember that time ("Jonathan Miles" <jonathan.miles90222@...il.com>)
Re: Remember that time (n3td3v <xploitable@...il.com>)
Re: Remember that time ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: Remember that time (n3td3v <xploitable@...il.com>)

May 14 (41 messages)

Microsoft Office Publisher PUB File Parsing Remote Memory Corruption Vulnerability (cocoruder <cocoruder@...il.com>)
Geeks ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: Geeks (Paul Schmehl <pauls@...allas.edu>)
Microsoft Malware Protection Engine TWO DoS Vulnerabilities (Sowhat <smaillist@...il.com>)
SECNAP IS CRAP (reepex <reepex@...il.com>)
Re: Geeks (n3td3v <xploitable@...il.com>)
Hey Dudes ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: SECNAP IS CRAP (Micheal Turner <wh1t3h4t3@...oo.co.uk>)
[SECURITY] [DSA 1576-1] New openssh packages fix predictable randomness (Florian Weimer <fw@...eb.enyo.de>)
[USN-612-4] ssl-cert vulnerability (Kees Cook <kees@...ntu.com>)
Re: Remember that time (limeybastard@...hmail.com)
Re: Remember that time ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: Fwd: NOTICE: Site compromised ("Dr. J Swift" <fdiscsplat@...il.com>)
[ GLSA 200805-15 ] libid3tag: Denial of Service (Tobias Heinlein <keytoaster@...too.org>)
Re: Geeks ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)
Cisco Security Advisory: Cisco Content Switching Module Memory Leak Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[SECURITY] [DSA 1577-1] New gforge packages fix insecure temporary files (thijs@...ian.org (Thijs Kinkhorst))
How do you guys do it? (Skratz0r <roryflyguy@...glemail.com>)
[Wired Security/EOF] Disable Windows Defender (Vista) PoC code (<skyout.fd@...ed-security.net>)
Re: How do you guys do it? (Rik Bobbaers <rik.bobbaers@...kuleuven.be>)
Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@c…)
Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@c…)
[USN-612-5] OpenSSH update (Jamie Strandboge <jamie@...onical.com>)
[ GLSA 200805-16 ] OpenOffice.org: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
Re: Geeks (n3td3v <xploitable@...il.com>)
Re: Geeks (Valdis.Kletnieks@...edu)
[USN-612-6] OpenVPN regression (Jamie Strandboge <jamie@...onical.com>)
Deiban OpenSSL Fun (H D Moore <fdlist@...italoffense.net>)
Re: [Wired Security/EOF] Disable Windows Defender (Vista) PoC code ("Peter Ferrie" <peter.ferrie@...il.com>)
Re: Geeks (n3td3v <xploitable@...il.com>)
the agenda ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: the agenda (Valdis.Kletnieks@...edu)
Hacking Google ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: the agenda (n3td3v <xploitable@...il.com>)
Re: Hacking Google (n3td3v <xploitable@...il.com>)
Re: Hacking Google ("T Biehn" <tbiehn@...il.com>)
Re: Geeks ("T Biehn" <tbiehn@...il.com>)
Dr. J Swift (n3td3v <xploitable@...il.com>)
rPSA-2008-0169-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
Re: Geeks (Adam Chesnutt <icetre@...aristocrats.org>)

May 15 (19 messages)

Hacker writes rootkit for Cisco's routers ("Ivan ." <ivanhec@...il.com>)
Re: [Wired Security/EOF] Disable Windows Defender (Vista) PoC code ("Fredrick Diggle" <fdiggle@...il.com>)
Hey ISS/X-Force Dudez!!!! ("Professor Micheal Chatner" <mchatner@...il.com>)
Working exploit for Debian generated SSH Keys (Markus Müller <mm@...dbeef.de>)
Re: Geeks ("Professor Micheal Chatner" <mchatner@...il.com>)
Send Full-Disclosure mailing list ("Last-Blitz-Transporte@...nline.de" <Last-Blitz-Transporte@...nline.de>)
Debian OpenSSL vulnerability - major CAs unaffected (Alexander Klink <a.klink@...ops.de>)
Request for Information on Exploit 'CA Brightstor ARCserve Backup dbasvr.exe memory corruption vulnerability' (M P Sairam <msairam@...oto.com>)
pwning AOL via Amazon (Kristo pher <kristo57@...l.ru>)
Re: Geeks ("Morning Wood" <se_cur_ity@...mail.com>)
Re: Geeks ("Charles Morris" <cmorris@...odu.edu>)
Re: Geeks (Valdis.Kletnieks@...edu)
ZDI-08-024: Symantec Altiris Deployment Solution SQL Injection Vulnerability (zdi-disclosures@...m.com)
ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability (zdi-disclosures@...m.com)
Re: Geeks (n3td3v <xploitable@...il.com>)
Re: [Wired Security/EOF] Disable Windows Defender(Vista) PoC code (<skyout.fd@...ed-security.net>)
Re: Geeks ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability ("Professor Micheal Chatner" <mchatner@...il.com>)
Forwarding message vulnerability on Google Groups (n3td3v <xploitable@...il.com>)

May 16 (15 messages)

Re: Hey ISS/X-Force Dudez!!!! (mutiny <mutiny@...inbeardsucks.com>)
Re: Hey ISS/X-Force Dudez!!!! (jf <jf@...glingpointers.net>)
Re: [Wired Security/EOF] Disable Windows Defender(Vista) PoC code ("Fredrick Diggle" <fdiggle@...il.com>)
Re: the agenda ("Fredrick Diggle" <fdiggle@...il.com>)
Re: Geeks ("Fredrick Diggle" <fdiggle@...il.com>)
Announcement: New Certification Offered ("Fredrick Diggle" <fdiggle@...il.com>)
Re: the agenda (Valdis.Kletnieks@...edu)
[SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness (Noah Meyerhans <noahm@...ian.org>)
Re: the agenda ("Fredrick Diggle" <fdiggle@...il.com>)
Re: the agenda (Valdis.Kletnieks@...edu)
[ MDVSA-2008:102 ] - Updated libvorbis packages fix vulnerabilities (security@...driva.com)
security offering services - code audit / 0day / pentesting ("Jean Duboscs" <jean.duboscs@...il.com>)
[ MDVSA-2008:101 ] - Updated rdesktop packages fix vulnerabilities (security@...driva.com)
Re: the agenda ("Fredrick Diggle" <fdiggle@...il.com>)
Thank you n3td3v (m4rlb0r0m4n@...h.com)

May 17 (7 messages)

Re: Geeks ("Garrett M. Groff" <groffg@...design.com>)
Re: Geeks (Valdis.Kletnieks@...edu)
[SECURITY] [DSA 1578-1] New php4 packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
Redmond Magazine SQL Injected by Chinese Hacktivists ("Dancho Danchev" <dancho.danchev@...il.com>)
Pangolin is updated(1.2.5.604) ("Vincent Chao" <zwell.nosec@...il.com>)
Fwd: [NANOG] IOS rootkits (n3td3v <xploitable@...il.com>)
Re: [NANOG] IOS rootkits (n3td3v <xploitable@...il.com>)

May 18 (12 messages)

[SECURITY] [DSA 1579-1] New netpbm-free packages fix arbitrary code execution (Devin Carraway <devin@...ian.org>)
IOS rootkits (fwd) (Gadi Evron <ge@...uxbox.org>)
Re: Redmond Magazine SQL Injected by Chinese Hacktivists ("Stuart Dunkeld" <stuartd@...il.com>)
Re: Thank you n3td3v (Skratz0r <roryflyguy@...glemail.com>)
Re: [NANOG] IOS rootkits (n3td3v <xploitable@...il.com>)
Re: Working exploit for Debian generated SSH Keys ("bob harley" <bobb.harley@...il.com>)
Re: [NANOG] IOS rootkits ("Kurt Dillard" <kurtdillard@....com>)
Re: [NANOG] IOS rootkits (n3td3v <xploitable@...il.com>)
Boycott EUSecWest 2008 (n3td3v <xploitable@...il.com>)
Re: [NANOG] IOS rootkits ("Kurt Dillard" <kurtdillard@....com>)
Re: [NANOG] IOS rootkits ("Elazar Broad" <elazar@...hmail.com>)
Re: [NANOG] IOS rootkits (n3td3v <xploitable@...il.com>)

May 19 (21 messages)

Re: Redmond Magazine SQL Injected by Chinese Hacktivists ("Nate McFeters" <nate.mcfeters@...il.com>)
Insomnia : ISVA-080516.1 - Altiris Deployment Solution - SQL Injection ("Brett Moore" <brett.moore@...omniasec.com>)
Insomnia : ISVA-080516.2 - Altiris Deployment Solution - Domain Account Disclosure ("Brett Moore" <brett.moore@...omniasec.com>)
Re: [NANOG] [OT] IOS rootkits ("php0t" <php0t@...ro.hu>)
Re: Working exploit for Debian generated SSH Keys ("Fredrick Diggle" <fdiggle@...il.com>)
Re: Working exploit for Debian generated SSH Keys (reepex <reepex@...il.com>)
Re: Working exploit for Debian generated SSH Keys (reepex <reepex@...il.com>)
Re: [NANOG] IOS rootkits (I M <raydenxy@...oo.com>)
CfP hack.lu 2008 ("Ron Bidule" <rbidule@...il.com>)
Re: Working exploit for Debian generated SSH Keys ("Ronald van der Westen" <rvdwesten@...il.com>)
Re: Working exploit for Debian generated SSH Keys (nicolas vigier <boklm@...s-attacks.org>)
DoS attacks using SQL Wildcards ("Ferruh Mavituna" <ferruh@...ituna.com>)
Re: Geeks (wilder_jeff Wilder <wilder_jeff@....com>)
DoS attacks using SQL Wildcards ("Ferruh Mavituna" <ferruh@...ituna.com>)
Re: Working exploit for Debian generated SSH Keys (Skratz0r <roryflyguy@...glemail.com>)
Re: Geeks (Soldi <soldidude@...oo.com>)
Re: Geeks ("Elazar Broad" <elazar@...hmail.com>)
CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities ("Williams, James K" <James.Williams@...com>)
[ MDVSA-2008:103 ] - Updated libid3tag packages fix denial of service vulnerability (security@...driva.com)
ZDI-08-027: CA BrightStor ARCserve Backup Arbitrary File Writing Vulnerability (zdi-disclosures@...m.com)
ZDI-08-026: CA BrightStor ARCserve Backup Remote Buffer Overflow (zdi-disclosures@...m.com)

May 20 (37 messages)

fwd: Is anyone's elses spam filter broke? ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: Geeks (Paul Schmehl <pauls@...allas.edu>)
Re: Geeks ("Daniel Marsh" <jahilliya@...il.com>)
Re: Geeks ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)
Re: Working exploit for Debian generated SSH Keys ("Garrett M. Groff" <groffg@...design.com>)
Re: Working exploit for Debian generated SSH Keys (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
CfP hack.lu 2008 ("hack.lu 2008" <2008@...k.lu>)
Mtr - remote and local stack overflow - uncomment situation in libresolv. (pi3@...ec.pl (Adam Zabrocki))
Secunia Research: Foxit Reader "util.printf()" Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
[SECURITY] [DSA 1580-1] New phpgedview packages fix privilege escalation (thijs@...ian.org (Thijs Kinkhorst))
[USN-612-7] OpenSSH update (Kees Cook <kees@...ntu.com>)
Re: Working exploit for Debian generated SSH Keys (Valdis.Kletnieks@...edu)
Tool for SSL Proxy mitm ("fG" <fractalg@...hspeedweb.net>)
Mantis Bug Tracker 1.1.1 Multiple Vulnerabilities (ascii <ascii@...amail.com>)
[SECURITY] [DSA 1581-1] New gnutls13 packages fix potential code execution (Florian Weimer <fw@...eb.enyo.de>)
Re: Tool for SSL Proxy mitm ("M. Shirk" <shirkdog_list@...mail.com>)
Re: Working exploit for Debian generated SSH Keys (Michael Holstein <michael.holstein@...ohio.edu>)
[ GLSA 200805-17 ] Perl: Execution of arbitrary code (Tobias Heinlein <keytoaster@...too.org>)
An account of the Estonian Internet War (Gadi Evron <ge@...uxbox.org>)
[SECURITY] [DSA 1582-1] New peercast packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
[SECURITY] [DSA 1583-1] New gnome-peercast packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
Re: An account of the Estonian Internet War (n3td3v <xploitable@...il.com>)
Re: An account of the Estonian Internet War ("Dr. J Swift" <fdiscsplat@...il.com>)
CORE-2008-0415: Borland Interbase 2007 Integer Overflow (CORE Security Technologies <advisories@...esecurity.com>)
[ GLSA 200805-18 ] Mozilla products: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
[ GLSA 200805-19 ] ClamAV: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
Re: [NANOG] IOS rootkits (n3td3v <xploitable@...il.com>)
Re: [NANOG] IOS rootkits (Valdis.Kletnieks@...edu)
Re: [NANOG] IOS rootkits (n3td3v <xploitable@...il.com>)
Re: [NANOG] IOS rootkits ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: [NANOG] IOS rootkits (n3td3v <xploitable@...il.com>)
Re: [NANOG] IOS rootkits (Valdis.Kletnieks@...edu)
Re: [NANOG] IOS rootkits (n3td3v <xploitable@...il.com>)
Re: [NANOG] IOS rootkits ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: [NANOG] IOS rootkits (n3td3v <xploitable@...il.com>)
Re: [NANOG] IOS rootkits ("Dr. J Swift" <fdiscsplat@...il.com>)
Re: [NANOG] IOS rootkits (n3td3v <xploitable@...il.com>)

May 21 (37 messages)

n3td3v says don't let EUSecWest Cisco IOS presentation go ahead (n3td3v <xploitable@...il.com>)
Re: [NANOG] IOS rootkits (Valdis.Kletnieks@...edu)
Re: n3td3v says don't let EUSecWest Cisco IOS presentation go ahead (Valdis.Kletnieks@...edu)
Re: n3td3v says don't let EUSecWest Cisco IOS presentation go ahead (silky <michaelslists@...il.com>)
Re: n3td3v says don't let EUSecWest Cisco IOS presentation go ahead (n3td3v <xploitable@...il.com>)
Dear full disclosure ("Charles Morris" <cmorris@...odu.edu>)
Pointless Post (infolookup@...il.com)
Re: Pointless Post ("M. Shirk" <shirkdog_list@...mail.com>)
n3td3v says don't let EUSecWest Cisco IOS presentation go ahead ... (TJ Evans <trejrco@...il.com>)
Re: An account of the Estonian Internet War (reepex <reepex@...il.com>)
Re: Pointless Post (infolookup@...il.com)
Re: n3td3v says don't let EUSecWest Cisco IOS presentation go ahead (root <root_@...ertel.com.ar>)
Re: Working exploit for Debian generated SSH Keys ("Garrett M. Groff" <groffg@...design.com>)
pentagon botnet (S/U/N <s.u.n@...e.Fr>)
Re: [NANOG] IOS rootkits (A.L.M.Buxey@...ro.ac.uk)
Re: [NANOG] IOS rootkits (A.L.M.Buxey@...ro.ac.uk)
Re: pentagon botnet (n3td3v <xploitable@...il.com>)
Re: pentagon botnet ("T Biehn" <tbiehn@...il.com>)
Re: Tool for SSL Proxy mitm (Yann <yann_eads@...oo.fr>)
Re: [NANOG] IOS rootkits (M.B.Jr. <marcio.barbado@...il.com>)
[ MDVSA-2008:105 ] - Updated kernel packages fix vulnerabilities (security@...driva.com)
[USN-613-1] GnuTLS vulnerabilities (Kees Cook <kees@...ntu.com>)
Cisco Security Advisory: Cisco Voice Portal Privilege Escalation Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[USN-612-8] openssl-blacklist update (Jamie Strandboge <jamie@...onical.com>)
Cisco Security Advisory: Cisco IOS Secure Shell Denial of Service (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco Service Control Engine Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
[SECURITY] [DSA 1584-1] New libfissound packages fix execution of arbitrary code (Steve Kemp <skx@...ian.org>)
[SECURITY] [DSA 1585-1] New speex packages fix execution of arbitrary code (Steve Kemp <skx@...ian.org>)
Re: [NANOG] IOS rootkits (n3td3v <xploitable@...il.com>)
CORE-2008-0126: Multiple vulnerabilities in iCal (Core Security Technologies Advisories <advisories@...esecurity.com>)
Re: [NANOG] IOS rootkits (Anders B Jansson <hdw@...listi.se>)
iDefense Security Advisory 05.21.08: Multiple Vendor Snort IP Fragment TTL Evasion Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ GLSA 200805-20 ] GnuTLS: Execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
ZDI-08-028: IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-08-031: Trillian MSN MIME Header Stack-Based Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-08-029: Trillian AIM.DLL Long HTML Font Parameter Stack Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-08-030: Trillian Multiple Protocol XML Parsing Memory Corruption Vulnerability (zdi-disclosures@...m.com)

May 22 (18 messages)

Re: An account of the Estonian Internet War (Gadi Evron <ge@...uxbox.org>)
[ MDVSA-2008:104 ] - Updated kernel packages fix vulnerabilities (security@...driva.com)
Re: n3td3v says don't let EUSecWest Cisco IOS presentation go ahead (poo <skodliv@...il.com>)
Re: [USN-612-8] openssl-blacklist update ("Ganeshram Iyer" <ganeshramiyer@...il.com>)
Re: An account of the Estonian Internet War ("Viktor Larionov" <viktor.larionov@...va.ee>)
Re: [NANOG] IOS rootkits (mutiny <mutiny@...inbeardsucks.com>)
Re: [NANOG] IOS rootkits (mutiny <mutiny@...inbeardsucks.com>)
IBM Lotus Sametime 7.5 - Community Services Multiplexer Stack Overflow Exploit (FistFuXXer <FistFuXXer@....de>)
/home/putnopvut/asa/AST-2008-007/AST-2008-007: AST-2008-007 Cryptographic keys generated by OpenSSL on Debian-based sy… ("Asterisk Security Team" <security@...e…)
IRM Security Advisory : Barracuda Networks Spam Firewall Cross-Site Scripting Vulnerability ("Mark Crowther" <mark.crowther@...plc.com>)
Need some help with management ("Daniel Sichel" <daniels@...derosatel.com>)
Re: Need some help with management (Valdis.Kletnieks@...edu)
Re: Need some help with management (Hoss Cartwright <lists@...spolina.org>)
Re: Need some help with management (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Need some help with management ("Kurt Dillard" <kurtdillard@....com>)
[SECURITY] [DSA 1586-1] New xine-lib packages fix several vulnerabilities (Devin Carraway <devin@...ian.org>)
rPSA-2008-0175-1 mtr mtr-gtk (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0174-1 gnutls (rPath Update Announcements <announce-noreply@...th.com>)

May 23 (17 messages)

Re: Need some help with management ("Garrett M. Groff" <groffg@...design.com>)
Re: Need some help with management (coderman <coderman@...il.com>)
Re: Need some help with management (Tremaine Lea <tremaine@...il.com>)
MoocherHunter Tool helps hunt down Wireless Moochers in Real Time (security@...merjammer.net)
Re: Working exploit for Debian generated SSH Keys (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
Re: Need some help with management ("Jesse Bacon" <dread.roberts@...il.com>)
Re: Need some help with management (Izaac <izaac@...ec.org>)
Re: Need some help with management ("Castigliola, Angelo" <ACastigliola@...M.COM>)
Re: Need some help with management (Marcus Graf <m.graf@...plogistics.de>)
Re: Need some help with management (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Need some help with management ("Elazar Broad" <elazar@...hmail.com>)
Re: Need some help with management (Paul Schmehl <pschmehl_lists@...rr.com>)
Thank you for help with management. ("Daniel Sichel" <daniels@...derosatel.com>)
Re: Thank you for help with management. (Valdis.Kletnieks@...edu)
Re: Thank you for help with management. ("Michael Krymson" <krymson@...il.com>)
A cyber human shield? (n3td3v <xploitable@...il.com>)
Re: A cyber human shield? (n3td3v <xploitable@...il.com>)

May 24 (9 messages)

Re: Thank you for help with management. ("Micheal Cottingham" <techie.micheal@...il.com>)
[ MDVSA-2008:106 ] - Updated gnutls packages fix denial of service vulnerabilities (security@...driva.com)
Identify weak Debian OpenSSL clients in SSH DH key exchange (Alexander Klink <a.klink@...ops.de>)
AppScan and IDS evasion ("Pen Testing" <quick.pentesting@...il.com>)
Re: AppScan and IDS evasion (Roman Medina-Heigl Hernandez <roman@...labs.com>)
rPSA-2008-0176-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-ima… (rPath Update Announcements <announce-no…)
Statistics web pages ("Renato E. Gioielli Andalik" <andalik@...il.com>)
Media blackout on Cisco IOS rootkit presentation? (n3td3v <xploitable@...il.com>)
Re: Media blackout on Cisco IOS rootkit presentation? (n3td3v <xploitable@...il.com>)

May 25 (8 messages)

Re: Media blackout on Cisco IOS rootkit presentation? (n3td3v <xploitable@...il.com>)
Re: AppScan and IDS evasion ("Elazar Broad" <elazar@...hmail.com>)
Re: IOS rootkits (fwd) (Gadi Evron <ge@...uxbox.org>)
Re: Need some help with management ("Elazar Broad" <elazar@...hmail.com>)
Pangolin v1.3.0.624 is out ("Vincent Chao" <zwell.nosec@...il.com>)
SECOBJADV-2008-01: Lenovo SystemUpdate SSL Certificate Issuer Spoofing Vulnerability ("Security Objectives, Inc." <advisories@...urity-objectives.com>)
Re: IOS rootkits (fwd) (n3td3v <xploitable@...il.com>)
OpenSSL-Bug still allows MITM, Browser(s) set up badly - Re: Identify weak Debian OpenSSL clients in SSH DH key exchange (niclas <lists@...enritter.de>)

May 26 (6 messages)

[SECURITY] [DSA 1587-1] New mtr packages fix execution of arbitrary code (Steve Kemp <skx@...ian.org>)
Re: OpenSSL-Bug still allows MITM, Browser(s) set up badly - Re: Identify weak Debian OpenSSL clients in SSH DH key exchan… (Alexander Klink <a.klink@...ops.de>)
Re: OpenSSL-Bug still allows MITM, Browser(s) set up badly - Re: Identify weak Debian OpenSSL clientsin SSH DH key exc… ("Larry Seltzer" <larry@...ryseltzer.com…)
Re: OpenSSL-Bug still allows MITM, Browser(s) set up badly - Re: Identify weak Debian OpenSSL clientsin SSH DH key exchang… (Alexander Klink <a.klink@...ops.de>)
sqlninja 0.2.3 released ("A. R." <r00t@...thernfortress.net>)
Advisory - Rsyncrypto maybe affected from Debian OpenSSL reduced entropy problem (Aviram Jenik <aviram@...ondsecurity.com>)

May 27 (21 messages)

Fwd: TJX staffer sacked after talking about security problems (n3td3v <xploitable@...il.com>)
Re: CORE-2008-0126: Multiple vulnerabilities in iCal (security curmudgeon <jericho@...rition.org>)
IOS Rookit: the sky isn't falling (yet) (Nicolas FISCHBACH <nicolist@...urite.org>)
Re: IOS Rookit: the sky isn't falling (yet) (Felix 'FX' Lindner <fx@...urity-labs.com>)
Security, Open Source Style (Josh Bressers <bressers@...hat.com>)
Ford Motors IT Contact (Simon Smith <simon@...soft.com>)
Re: Ford Motors IT Contact ("Stack Smasher" <stacksmasher@...il.com>)
Re: Ford Motors IT Contact (Valdis.Kletnieks@...edu)
Re: Ford Motors IT Contact ("Gary Wilson" <dragon@...gons.org.uk>)
[SECURITY] [DSA 1588-1] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
Re: Ford Motors IT Contact ("Nate McFeters" <nate.mcfeters@...il.com>)
Re: Ford Motors IT Contact (Simon Smith <simon@...soft.com>)
Re: Ford Motors IT Contact (Anders B Jansson <hdw@...listi.se>)
Re: Ford Motors IT Contact (Michael Holstein <michael.holstein@...ohio.edu>)
Re: Ford Motors IT Contact (Ray P <sixsigma98@...mail.com>)
Re: Ford Motors IT Contact (Simon Smith <simon@...soft.com>)
Re: Ford Motors IT Contact (Bruce Ediger <eballen1@...st.net>)
[ GLSA 200805-21 ] Roundup: Permission bypass (Tobias Heinlein <keytoaster@...too.org>)
iDefense Security Advisory 05.27.08: EMC AlphaStor Server Agent Multiple Stack Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 05.27.08: EMC AlphaStor Library Manager Arbitrary Command Execution Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
ZDI-08-033: Motorola RAZR JPG Processing Stack Overflow Vulnerability (zdi-disclosures@...m.com)

May 28 (20 messages)

rPSA-2008-0177-1 emacs emacs-leim (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0178-1 php php-mysql php-pgsql (rPath Update Announcements <announce-noreply@...th.com>)
Assessing the Flash Zero Day Malware Campaign ("Dancho Danchev" <dancho.danchev@...il.com>)
.NET security audit ("ding dong" <dingdongloop@...il.com>)
OpenSSL 0.9.8h released (Mark J Cox <mark@....com>)
Possible Google Account loophole (Cryptreaper <cryptreaper@...il.com>)
[SECURITY] [DSA 1589-1] New libxslt packages fix execution of arbitrary code (Steve Kemp <skx@...ian.org>)
Bypassing URL Authentication and Authorization with HTTP Verb Tampering ("Arshan Dabirsiaghi" <arshan.dabirsiaghi@...ectsecurity.com>)
Opera - heap based buffer overflow (CVE-2007-6521) (Alexander Klink <a.klink@...ops.de>)
The Holy Grail (k1ngc0pe@...hmail.com)
rPSA-2008-0105-1 evolution (rPath Update Announcements <announce-noreply@...th.com>)
Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.…)
Re: CORE-2008-0126: Multiple vulnerabilities in iCal ("Steven M. Christey" <coley@...us.mitre.org>)
[ MDVSA-2008:107 ] - Updated openssl package fixes denial of service vulnerabilities (security@...driva.com)
wow. ("Charles Morris" <cmorris@...odu.edu>)
Re: wow. (Simon Smith <simon@...soft.com>)
Re: wow. ("Arshan Dabirsiaghi" <arshan.dabirsiaghi@...ectsecurity.com>)
Re: wow. ("Arshan Dabirsiaghi" <arshan.dabirsiaghi@...ectsecurity.com>)
Re: wow. ("Marcin Wielgoszewski" <marcinw86@...il.com>)
[ MDVSA-2008:108 ] - Updated samba packages fix arbitrary code execution vulnerability (security@...driva.com)

May 29 (10 messages)

Repositories of CRLs? ("CaseArmour.net Security Administrator" <security@...earmour.net>)
Re: wow. (Simon Smith <simon@...soft.com>)
Re: wow. ("Marcin Wielgoszewski" <marcinw86@...il.com>)
Secunia Research: imlib2 PNM and XPM Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Samba "receive_smb_raw()" Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: Thank you for help with management. ("Claus Bitten" <Claus.Bitten@...mfab.de>)
[ GLSA 200805-22 ] MPlayer: User-assisted execution of arbitrary code (Tobias Heinlein <keytoaster@...too.org>)
[ GLSA 200805-23 ] Samba: Heap-based buffer overflow (Tobias Heinlein <keytoaster@...too.org>)
Re: Thank you for help with management. (Valdis.Kletnieks@...edu)
Greetz security community members (n3td3v <xploitable@...il.com>)

May 30 (11 messages)

Apple Mail Denial of Service Vulnerability (with bonus IBM Lotus Notes DoS!) (David Wharton <security@...idwharton.us>)
Request for Information on Exploit 'Novell eDirectory evtFilteredMonitorEventsRequest() function Buffer Overflow vulnerability… (M P Sairam <msairam@...oto.com>)
n3td3v.com (Sec Guy <secguy1978@...oo.com>)
IMF 2008 - Deadline Extension (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
Re: Greetz security community members (Micheal Turner <wh1t3h4t3@...oo.co.uk>)
Re: Greetz security community members (n3td3v <xploitable@...il.com>)
VMSA-2008-0008 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion resolve critical security issues (VMware Security team <security@...are.c…)
[SECURITY] [DSA 1590-1] New samba packages fix arbitrary code execution (Florian Weimer <fw@...eb.enyo.de>)
Re: Greetz security community members (n3td3v <xploitable@...il.com>)
Re: n3td3v.com (n3td3v <xploitable@...il.com>)
n3td3v franchise only worth $80 (n3td3v <xploitable@...il.com>)

May 31 (6 messages)

Re: Greetz security community members ("Garrett M. Groff" <groffg@...design.com>)
Re: Greetz security community members (n3td3v <xploitable@...il.com>)
[SECURITY] [DSA 1588-2] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
Re: n3td3v franchise only worth $80 (Jerome Benoit <jerome.benoit@...nouille.com>)
VisualSentinel 0.7 Cross Agent Scripting Vulnerability (Alfredo Panzera <panzera.alfredo@...mail.com>)
Write Software, Change Washington ("Peter Dawson" <slash.pd@...il.com>)

685 messages