full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2008/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 19	² 5	³ 3
⁴ 12	⁵ 26	⁶ 35	⁷ 23	⁸ 74	⁹ 9	¹⁰ 11
¹¹ 21	¹² 39	¹³ 22	¹⁴ 28	¹⁵ 14	¹⁶ 10	¹⁷ 12
¹⁸ 12	¹⁹ 20	²⁰ 14	²¹ 12	²² 26	²³ 3	²⁴ 5
²⁵ 16	²⁶ 11	²⁷ 18	²⁸ 11	²⁹ 4	³⁰ 11	³¹ 31

Messages by day:

August 1 (19 messages)

Re DNS spoofing issue discussion (Mary and Glenn Everhart <Everhart@....com>)
Re: Re DNS spoofing issue discussion (don bailey <don.bailey@...il.com>)
Re: Re DNS spoofing issue discussion (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Re DNS spoofing issue discussion (don bailey <don.bailey@...il.com>)
Re: Re DNS spoofing issue discussion (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Re DNS spoofing issue discussion (don bailey <don.bailey@...il.com>)
CA ARCserve Backup for Laptops and Desktops Server LGServer Service Vulnerability ("Williams, James K" <James.Williams@...com>)
SUSE Security Announcement: net-snmp (SUSE-SA:2008:039) (Thomas Biege <thomas@...e.de>)
[USN-632-1] Python vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-633-1] libxslt vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-634-1] OpenLDAP vulnerability (Kees Cook <kees@...ntu.com>)
[SECURITY] [DSA 1625-1] New cupsys packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
[SECURITY] [DSA 1626-1] New httrack packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
Tool Release: ProcL - Detect Hidden Process (Pallav Khandhar <pallav.khandhar@...il.com>)
DNS Multiple Race Exploiting Tool ("AR" <ar@...urebits.org>)
n.runs-SA-2008.005 - Apple Inc. - CoreServices Framework’s CarbonCore Framework - Arbitrary Code Execution (remote) ("security@...ns.com" <security@...ns.com>)
iDefense Security Advisory 07.31.08: Apple Mac OS X CoreGraphics PDF Type1 Font Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Fwd: Black Hat talk on Apple encryption cancelled (n3td3v <xploitable@...il.com>)
[ MDVSA-2008:160 ] libxslt (security@...driva.com)

August 2 (5 messages)

iDefense Security Advisory 08.01.08: Ingres Database for Linux verifydb Insecure File Permissions Modification Vulnera… (iDefense Labs <labs-no-reply@...fense.c…)
iDefense Security Advisory 08.01.08: Ingres Database for Linux libbecompat Stack Based Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com…)
iDefense Security Advisory 08.01.08: Ingres Database for Linux ingvalidpw Untrusted Library Path Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Server termination in America's Army 2.8.3.1 (Luigi Auriemma <aluigi@...istici.org>)
ArpON detects and blocks Arp Poisoning/Spoofing attacks (Andrea Di Pasquale <spikey.it@...il.com>)

August 3 (3 messages)

Re: simple phishing fix ("lsi" <stuart@...erdelix.net>)
Re: how to request a cve id? ("William A. Rowe, Jr." <wrowe@...e-clan.net>)
Re: Media backlash begins against HD Moore and I)ruid (n3td3v <xploitable@...il.com>)

August 4 (12 messages)

Re: Media backlash begins against HD Moore and I)ruid (Valdis.Kletnieks@...edu)
[SECURITY] [DSA 1627-1] New opensc packages fix smart card vulnerability (thijs@...ian.org (Thijs Kinkhorst))
Alphanumeric Shellcode Encoding and Detection ("Avraham Moshe Schneider" <Avraham.Schneider@...ddin.com>)
ASCII Art shellcode ("Berend-Jan Wever" <berendjanwever@...il.com>)
[USN-626-2] Devhelp, Epiphany, Midbrowser and Yelp update (Jamie Strandboge <jamie@...onical.com>)
free static analysis tool for c/c++ (modversion <modversion@...il.com>)
Team SHATTER Security Advisory: SQL Injection in Oracle Application Server (WWEXP_API_ENGINE) (Team SHATTER <shatter@...secinc.com>)
Team SHATTER Security Advisory: Cross-site scripting in Oracle Enterprise Manager (REFRESHHOME Parameter) (Team SHATTER <shatter@...secinc.com>)
Team SHATTER Security Advisory: Cross-site scripting in Oracle Enterprise Manager (REFRESHCHOICE Parameter) (Team SHATTER <shatter@...secinc.com>)
Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN) (Team SHATTER <shatter@...secinc.com>)
Re: free static analysis tool for c/c++ (Dean Pierce <piercede@....edu>)
New info tool available at freewebtown.com/sombra6/info.php now (Kristo pher <kristo57@...l.ru>)

August 5 (26 messages)

Re: free static analysis tool for c/c++ (Fionnbharr <thouth@...il.com>)
phish war game ("lsi" <stuart@...erdelix.net>)
Re: free static analysis tool for c/c++ ("modversion" <modversion@...il.com>)
more rehashes of xss & 'evil gif' ("Robert Holgstad" <rholgstad@...il.com>)
Re: more rehashes of xss & 'evil gif' ("raining lulz" <spreadlulzandwar@...il.com>)
CORE-2008-0716 - Sun xVM VirtualBox Privilege Escalation Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Re: Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN) ("Memisyazici, Aras" <arasm@...edu>)
Re: free static analysis tool for c/c++ ("KJK::Hyperion" <hackbunny@...tpj.org>)
Re: phish war game ("Biz Marqee" <biz.marqee@...il.com>)
Re: free static analysis tool for c/c++ ("modversion" <modversion@...il.com>)
Re: free static analysis tool for c/c++ ("KJK::Hyperion" <hackbunny@...tpj.org>)
Re: free static analysis tool for c/c++ ("modversion" <modversion@...il.com>)
Re: Media backlash begins against HD Moore and I)ruid (n3td3v <xploitable@...il.com>)
Re: phish war game (blah <blah@...kogre.com>)
Fwd: Comment on: Microsoft to give partners heads-up on security vulnerabilities (n3td3v <xploitable@...il.com>)
Re: Alphanumeric Shellcode Encoding and Detection ("Avraham Moshe Schneider" <Avraham.Schneider@...ddin.com>)
Re: Media backlash begins against HD Moore and I)ruid (Valdis.Kletnieks@...edu)
Re: Media backlash begins against HD Moore and I)ruid (n3td3v <xploitable@...il.com>)
Re: Media backlash begins against HD Moore and I)ruid (Valdis.Kletnieks@...edu)
Re: Media backlash begins against HD Moore and I)ruid (n3td3v <xploitable@...il.com>)
Re: Alphanumeric Shellcode Encoding and Detection ("Avraham Schneider" <avri.schneider@...il.com>)
Re: Media backlash begins against HD Moore and I)ruid (Valdis.Kletnieks@...edu)
Interesting things at sec-consult.com, DNS-whitepaper available tomorrow (Bernhard Mueller <research@...-consult.com>)
(no subject) (Bernhard Mueller <research@...-consult.com>)
Re: Media backlash begins against HD Moore and I)ruid (scott <redhowlingwolves@...rr.com>)
Re: more rehashes of xss & 'evil gif' (n3td3v <xploitable@...il.com>)

August 6 (35 messages)

[ GLSA 200808-01 ] xine-lib: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
Re: Kaminsky's Law (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: Media backlash begins against HD Moore and I)ruid (Ureleet <ureleet@...il.com>)
Re: Fwd: Comment on: Microsoft to give partners heads-up on security vulnerabilities (Ureleet <ureleet@...il.com>)
Re: Fwd: Are Bug Disclosures Helping or Hurting? (Ureleet <ureleet@...il.com>)
Re: Re : CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit (Ureleet <ureleet@...il.com>)
Re: Nominate Dan Kaminsky for Most Overhyped Bug Pwnie Award (Ureleet <ureleet@...il.com>)
Re: Kaminsky's Law (Ureleet <ureleet@...il.com>)
Re: (no subject) (Ureleet <ureleet@...il.com>)
[ GLSA 200808-02 ] Net-SNMP: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
[ GLSA 200808-03 ] Mozilla products: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
[ GLSA 200808-04 ] Wireshark: Denial of Service (Robert Buchholz <rbu@...too.org>)
Re: (no subject) (Bernhard Mueller <research@...-consult.com>)
Re: Alphanumeric Shellcode Encoding and Detection ("Avraham Schneider" <avri.schneider@...il.com>)
McAfee + FUD ? ("r0tten c0re" <david.jonass@...glemail.com>)
Check this out ("Manu Chao" <manuchauuu@...glemail.com>)
Re: Alphanumeric Shellcode Encoding and Detection ("Avraham Schneider" <avri.schneider@...il.com>)
rPSA-2008-0245-1 cups (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0246-1 gaim (rPath Update Announcements <announce-noreply@...th.com>)
Re: Kaminsky's Law ("TJ" <trejrco@...il.com>)
Re: Media backlash begins against HD Moore and I)ruid (jf <jf@...glingpointers.net>)
Re: Media backlash begins against HD Moore and I)ruid (n3td3v <xploitable@...il.com>)
Google Notebook and Google Bookmarks Cross Site Scripting Vulnerabilities ("Alfredo Melloni" <alfredo.melloni@...il.com>)
CA Products That Embed Ingres Multiple Vulnerabilities ("Williams, James K" <James.Williams@...com>)
Webex atucfobj Module ActiveX Control Buffer Overflow Vulnerability ("Elazar Broad" <elazar@...hmail.com>)
Re: Media backlash begins against HD Moore and I)ruid ("TJ" <trejrco@...il.com>)
[USN-635-1] xine-lib vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
offering 0day ("Jeffrey Starck" <jeffrey.starck@...il.com>)
[ GLSA 200808-05 ] ISC DHCP: Denial of Service (Tobias Heinlein <keytoaster@...too.org>)
[ GLSA 200808-06 ] libxslt: Execution of arbitrary code (Tobias Heinlein <keytoaster@...too.org>)
Re: [funsec] facebook messages worm ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)
Endless loop and resources consumption in Halo 1.0.7.0615 (Luigi Auriemma <aluigi@...istici.org>)
Re: Media backlash begins against HD Moore and I)ruid (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Media backlash ... insane? ("TJ" <trejrco@...il.com>)
Re: Media backlash begins against HD Moore and I)ruid (Anders B Jansson <hdw@...listi.se>)

August 7 (23 messages)

[PLSA 2008-18] Pidgin: Spoofing Vulnerability (Pınar Yanardağ <pinar@...dus.org.tr>)
[PLSA 2008-19] Git: Multiple Buffer Overflows (Pınar Yanardağ <pinar@...dus.org.tr>)
Petko D. Petkov files unleashed, guilty by Internet council (internetsuperheros@...hmail.com)
Petko D. Petkov files unleashed, guilty by Internet council (internetsuperheros@...hmail.com)
GNUCITIZEN Stumbleupon account revised ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
More information on Petko D. Petkov ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Kaminsky Quittinq? Coffee Shop Inevitable? ("InfoSec DramaReport" <infosecdramareport@...il.com>)
Re: [funsec] facebook messages worm (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Kaminsky Quittinq? Coffee Shop Inevitable? (Paul Schmehl <pschmehl_lists@...rr.com>)
Whitepaper: DNS zone redelegation (Bernhard Mueller <research@...-consult.com>)
Apache HTTP Server mod_proxy_ftp Wildcard Characters Cross-Site Scripting (Marc Bevand <marc_bevand@...id7.com>)
infected file ( can someone please report and take it down ? ) ("Dr. Mark A. Baiter [Chief Scatological Consultant]" <mbaiter2@...il.com>)
Re: [funsec] facebook messages worm (Gadi Evron <ge@...uxbox.org>)
No subject (az-guy@...hmail.com)
Re: [funsec] facebook messages worm (Gadi Evron <ge@...uxbox.org>)
facebook messages worm (Gadi Evron <ge@...uxbox.org>)
Re: [funsec] facebook messages worm (Gadi Evron <ge@...uxbox.org>)
question (Dennis Yurichev <dennis@...us.info>)
When will they ever get it !?!?!?! (wilder_jeff Wilder <wilder_jeff@....com>)
Re: question (Valdis.Kletnieks@...edu)
question (Dennis Yurichev <dennis@...us.info>)
[ MDVSA-2008:161 ] rxvt (security@...driva.com)
[ MDVSA-2008:162 ] qemu (security@...driva.com)

August 8 (74 messages)

Re: question ("James Matthews" <nytrokiss@...il.com>)
Re: No subject ("James Matthews" <nytrokiss@...il.com>)
Re: question ("James Matthews" <nytrokiss@...il.com>)
[ MDVSA-2008:163 ] python (security@...driva.com)
[ MDVSA-2008:164 ] python (security@...driva.com)
Re: [funsec] facebook messages worm (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
OpenID/Debian PRNG/DNS Cache poisoning advisory ("Ben Laurie" <benl@...gle.com>)
Re: [Suspected Junk Mail] Re: Petko D. Petkov files unleashed, guilty by Internet council ("Great Council of Internet Superheros" <internetsuperheros@...hmail.…)
Petko D. Petkov, Honeynet and Tom Ferris featured on an Internet Justice magazine ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Vim 7.2c.002 Fixes Arbitrary Command Execution when Handling Tar Archives ("Jan Minář" <rdancer@...ncer.org>)
Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory (Gerald Beuchelt <beuchelt@....COM>)
Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory ("Eddy Nigg (StartCom Ltd.)" <eddy_nigg@...rtcom.org>)
Vim: Unfixed Vulnerabilities in Tar Plugin Version 20 ("Jan Minář" <rdancer@...ncer.org>)
Squadron of Justice to the rescue ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory (Peter Williams <pwilliams@...attoni.com>)
Squadron of Justice to the rescue ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 1/7) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 1/7) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory ("Ben Laurie" <benl@...gle.com>)
Internet Justice #1 August 2008 (Part 7/7) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 2/7) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 1/7) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 3/7) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 4/7) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 5/7) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 1/10) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 6/7) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 2/10) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 3/10) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 4/10) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 5/10) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 6/10) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 7/10) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (Eric Rescorla <ekr@...workresonance.com>)
Internet Justice #1 August 2008 (Part 8/10) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 10/10) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Internet Justice #1 August 2008 (Part 9/10) ("Great Council of Internet Superheros" <internetsuperheros@...hmail.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Ben Laurie" <benl@...gle.com>)
[ GLSA 200808-07 ] ClamAV: Multiple Denials of Service (Raphael Marichez <falco@...too.org>)
[ GLSA 200808-08 ] stunnel: Security bypass (Raphael Marichez <falco@...too.org>)
[ GLSA 200808-09 ] OpenLDAP: Denial of Service vulnerability (Raphael Marichez <falco@...too.org>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Dave Korn" <dave.korn@...imi.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (Eric Rescorla <ekr@...workresonance.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Dave Korn" <dave.korn@...imi.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Dan Guido" <dguido@...il.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Perry E. Metzger" <perry@...rmont.com>)
Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory (Gerald Beuchelt <beuchelt@....com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Jin Sei" <jinseiu@...il.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Leichter, Jerry" <leichter_jerrold@....com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (Eric Rescorla <ekr@...workresonance.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (pgut001@...auckland.ac.nz (Peter Gutmann))
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (Dan Kaminsky <dan@...para.com>)
Great Council of Internet Superheros (n3td3v <xploitable@...il.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Ben Laurie" <benl@...gle.com>)
Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory ("Ben Laurie" <benl@...gle.com>)
Re: Great Council of Internet Superheros (n3td3v <xploitable@...il.com>)
c99 shell anyone? (Kristo pher <kristo57@...l.ru>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (Florian Weimer <fw@...eb.enyo.de>)
Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory (Dick Hardt <dick@...p.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Tim Dierks" <tim@...rks.org>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (Nicolas Williams <Nicolas.Williams@....com>)
Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory ("Eddy Nigg (StartCom Ltd.)" <eddy_nigg@...rtcom.org>)
Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory ("Eddy Nigg (StartCom Ltd.)" <eddy_nigg@...rtcom.org>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (Paul Hoffman <paul.hoffman@...c.org>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (Nicolas Williams <Nicolas.Williams@....com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Tim Dierks" <tim@...rks.org>)
key blacklisting & file size (was: OpenID/Debian PRNG/DNS Cache poisoning advisory) (Solar Designer <solar@...nwall.com>)
Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory ("Eddy Nigg (StartCom Ltd.)" <eddy_nigg@...rtcom.org>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (Eric Rescorla <ekr@...workresonance.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (Nicolas Williams <Nicolas.Williams@....com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Leichter, Jerry" <leichter_jerrold@....com>)
Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory (Peter Williams <pwilliams@...attoni.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Leichter, Jerry" <leichter_jerrold@....com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Stefan Kanthak" <stefan.kanthak@...go.de>)

August 9 (9 messages)

For great justice. new mirrors of PdP mailbox ("Squadron of Justice" <internetsuperheros@...hmail.com>)
Re: For great justice. new mirrors of PdP mailbox ("Squadron of Justice" <internetsuperheros@...hmail.com>)
Brazilian Bank (Caixa Economica Federal) Stupid Vuln #02 (Opera's Style) ("H2G-Labs Information Security" <h2glabs.infosec@...il.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (hal@...ney.org ("Hal Finney"))
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Forrest J. Cavalier III" <mibsoft@...software.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory (Ben Laurie <ben@...ks.org>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Emergency DNS Patch Still Vulnerable, Proves Russian Physicist (n3td3v <xploitable@...il.com>)
[ GLSA 200808-10 ] Adobe Reader: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)

August 10 (11 messages)

Re: Emergency DNS Patch Still Vulnerable, Proves Russian Physicist (Valdis.Kletnieks@...edu)
Latest judgement by Internet Justice Court: Still insecure, after all these years. ("Squadron of Justice" <internetsuperheros@...hmail.com>)
what happened to fd??.. even eff cant save it??. ("Joel Jose" <joeljose420@...il.com>)
I'm going to Internet Jail, framed by Squadron of Justice (alan shimel <ashimmy@...mail.com>)
Internet justice delivered, criminals panic and run in despair (alan shimel <alan_shimel@...oo.com>)
Re: Internet justice delivered, criminals panic and run in despair ("Night Ninja" <peanuter@...il.com>)
Re: Internet justice delivered, criminals panic and run in despair ("Squadron of Justice" <internetsuperheros@...hmail.com>)
Re: Internet justice delivered, criminals panic and run in despair (alan shimel <alan_shimel@...oo.com>)
Re: Internet justice delivered [UPDATE ON M. ROTHMAN AND ALAN] ("Squadron of Justice" <internetsuperheros@...hmail.com>)
Re: Emergency DNS Patch Still Vulnerable, Proves Russian Physicist (Paul Schmehl <pschmehl_lists@...rr.com>)
[SECURITY] [DSA 1627-1] New PowerDNS packages reduce DNS spoofing risk (Florian Weimer <fw@...eb.enyo.de>)

August 11 (21 messages)

Internet attacks against Georgian web sites (Gadi Evron <ge@...uxbox.org>)
Re: [funsec] Internet attacks against Georgian web sites ("Paul Ferguson" <fergdawg@...zero.net>)
Re: [funsec] Internet attacks against Georgian web sites ("Paul Ferguson" <fergdawg@...zero.net>)
Inguma version 0.0.9 released (Joxean Koret <joxeankoret@...oo.es>)
Re: Internet justice delivered, criminals panic and run in despair (Valdis.Kletnieks@...edu)
anyone developing a secure telephony application for GSM CSD? ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
Surf Jack - HTTPS will not save you ("Sandro Gauci" <sandro@...blesecurity.com>)
Re: Internet attacks against Georgian web sites (n3td3v <xploitable@...il.com>)
George Ledin virus material training Request. ("Jun..." <jun.junmail@...il.com>)
Re: [funsec] Internet attacks against Georgian web sites ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)
Re: [funsec] Internet attacks against Georgian web sites (n3td3v <xploitable@...il.com>)
Re: [funsec] Internet attacks against Georgian web sites (Valdis.Kletnieks@...edu)
[ GLSA 200808-11 ] UUDeview: Insecure temporary file creation (Pierre-Yves Rofes <py@...too.org>)
Re: [funsec] Internet attacks against Georgian web sites (Robert Marquardt <email@...ert-marquardt.com>)
[ MDVSA-2008:165 ] perl (security@...driva.com)
Re: [funsec] Internet attacks against Georgian web sites (n3td3v <xploitable@...il.com>)
rPSA-2008-0249-1 openldap openldap-clients openldap-servers (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0247-1 gvim vim vim-minimal (rPath Update Announcements <announce-noreply@...th.com>)
Re: Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN) (Team SHATTER <shatter@...secinc.com>)
Re: what happened to fd??.. even eff cant save it??. (coderman <coderman@...il.com>)
Re: Surf Jack - HTTPS will not save you (coderman <coderman@...il.com>)

August 12 (39 messages)

[PLSA 2008-21] Ruby: Multiple Vulnerabilities (Pınar Yanardağ <pinar@...dus.org.tr>)
[PLSA 2008-22] Php: Multiple Overflows (Pınar Yanardağ <pinar@...dus.org.tr>)
Ukraine? ("Drop Drop" <drop669@...il.com>)
Re: Internet justice delivered, criminals panic and run in despair ("Squadron of Justice" <internetsuperheros@...hmail.com>)
ekoparty 2008 - [First Round of Selection] - [Argentina] (ekoparty <no-reply@...party.com.ar>)
Re: [Suspected Junk Mail] Re: Petko D. Petkov hacked? ("Squadron of Justice" <internetsuperheros@...hmail.com>)
Layered Defense Research Advisory: Alcatel-Lucent OmniSwitch products, Stack Buffer Overflow (Deral Heiland <dh@...ereddefense.com>)
Re: Surf Jack - HTTPS will not save you (Noam Rathaus <noamr@...ondsecurity.com>)
StumbleUpon XSS (fixed) ("Berend-Jan Wever" <berendjanwever@...il.com>)
Secret Plan To Kill Internet By 2012 Leaked? (energy@...dshack.com)
ISP's confirm '2012: The Year The Internet Ends' (energy@...dshack.com)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Ben Laurie" <benl@...gle.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Ben Laurie" <benl@...gle.com>)
children of the daycare of justice little league ("Tea Baggins" <tebaggins@...il.com>)
iDefense Security Advisory 08.04.08: Solaris snoop SMB Decoding Multiple Stack Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
Fwd: Comments on: Alleged NASA hacker gets temporary reprieve (n3td3v <xploitable@...il.com>)
iDefense Security Advisory 08.04.08: Solaris snoop SMB Decoding Multiple Format String Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
Thanks Maynor. (staff <staff@...-disclosure.net>)
VMSA-2008-0012 Updated VirtualCenter addresses User Account Disclosure Vulnerability (VMware Security Team <security@...are.com>)
Re: Thanks Maynor. ("Sandy Vagina" <bigsandyvagina@...il.com>)
VMSA-2008-0013 Updated ESX packages for OpenSSL, net-snmp, perl (VMware Security Team <security@...are.com>)
Re: Thanks Maynor. ("Robert Holgstad" <rholgstad@...il.com>)
Re: StumbleUpon XSS (fixed) ("Robert Holgstad" <rholgstad@...il.com>)
Re: George Ledin virus material training Request. ("Robert Holgstad" <rholgstad@...il.com>)
CA Host-Based Intrusion Prevention System SDK kmxfw.sys Multiple Vulnerabilities ("Williams, James K" <James.Williams@...com>)
selling ("jeremie travis" <jeremie.travis@...il.com>)
selling 0-day ("jeremie travis" <jeremie.travis@...il.com>)
Re: Petko D. Petkov hacked? ("Squadron of Justice" <internetsuperheros@...hmail.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Clausen, Martin (DK - Copenhagen)" <mclausen@...oitte.dk>)
rPSA-2008-0253-1 git gitweb (rPath Update Announcements <announce-noreply@...th.com>)
[TKADV2008-006] CA HIPS KmxFw.sys Kernel Memory Corruption (Tobias Klein <tk@...pkit.de>)
Re: Internet attacks against Georgian web sites (Gadi Evron <ge@...uxbox.org>)
Step-by-step instructions for debugging Cisco IOS using gdb ("Andy Davis" <iosftpexploit@...glemail.com>)
ZDI-08-048: Microsoft Excel COUNTRY Record Memory Corruption Vulnerability (zdi-disclosures@...m.com)
ZDI-08-049: Microsoft Windows Graphics Rendering Engine PICT Heap Corruption (zdi-disclosures@...m.com)
ZDI-08-050: Microsoft Internet Explorer XHTML Rendering Memory Corruption Vulnerability (zdi-disclosures@...m.com)
ZDI-08-051: Microsoft Internet Explorer Table Layout Memory Corruption Vulnerability (zdi-disclosures@...M.COM)
Vim: Netrw: FTP User Name and Password Disclosure ("Jan Minář" <rdancer@...ncer.org>)
iDefense Security Advisory 08.12.08: Microsoft Office BMP Input Filter Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

August 13 (22 messages)

[ MDVSA-2008:167 ] kernel (security@...driva.com)
[ MDVSA-2008:166 ] clamav (security@...driva.com)
iDefense Security Advisory 08.12.08: Microsoft Office WPG Image File Heap Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 08.12.08: Microsoft PowerPoint Viewer 2003 Out of Bounds Array Index Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 08.12.08: Microsoft PowerPoint Viewer 2003 Cstring Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 08.12.08: Microsoft Excel Chart AxesSet Invalid Array Index Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 08.12.08: Microsoft Excel FORMAT Record Invalid Array Index Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 08.12.08: Microsoft Windows Color Management Module Heap Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Storesonline, Ecommerce hosting solution - how to avoid mistakes that put your business at risk ("Mister Nice Guy" <misterniceguy0@...il.com>)
Re: OpenID/Debian PRNG/DNS Cache poisoning advisory ("Seth Breidbart" <sethb@...ix.com>)
Re: [funsec] Internet attacks against Georgian web sites (Gadi Evron <ge@...uxbox.org>)
Re: [funsec] Internet attacks against Georgian web sites ("Paul Ferguson" <fergdawg@...zero.net>)
Re: [funsec] Internet attacks against Georgian web sites (Gadi Evron <ge@...uxbox.org>)
Re: Internet attacks against Georgian web sites ("Viktor Larionov" <viktor.larionov@...va.ee>)
IntelliTamper v2.07/2.08 Beta 4 A HREF sploit (kralor@...omputer.net)
Re: Vim: Netrw: FTP User Name and Password Disclosure (Tony Mechelynck <antoine.mechelynck@...il.com>)
(no subject) (ff0000@...hmail.com)
OpenVAS Stable Release (Michael Wiegand <michael.wiegand@...evation.de>)
Re: Internet attacks against Georgian web sites (n3td3v <xploitable@...il.com>)
NULL pointer in Ventrilo 3.0.2 (Luigi Auriemma <aluigi@...istici.org>)
rPSA-2008-0243-1 idle python (rPath Update Announcements <announce-noreply@...th.com>)
Re: Internet attacks against Georgian web sites (n3td3v <xploitable@...il.com>)

August 14 (28 messages)

[ MDVSA-2008:169 ] hplip (security@...driva.com)
Microsoft Windows Messenger Remote Illegal Access Vulnerability (cocoruder <cocoruder@...il.com>)
[ MDVSA-2008:168 ] stunnel (security@...driva.com)
[ MDVSA-2008:170 ] cups (security@...driva.com)
Funniest thing at DefCon this year... ("Exibar" <exibar@...lair.com>)
[funsec] Estonia similarities begin to manifest (fwd) (Gadi Evron <ge@...uxbox.org>)
CORE-2008-0103: Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass (CORE Security Technologies Advisories <advisories@c…)
Coordinated Russia vs Georgia cyber attack in progress ("Dancho Danchev" <dancho.danchev@...il.com>)
ISOI 5 (Tallinn) agenda is now online (Gadi Evron <ge@...uxbox.org>)
SECOBJADV-2008-03: PartyGaming PartyPoker Malicious Update Vulnerability (advisories@...t.security-objectives.com)
SUSE Security Announcement: postfix (SUSE-SA:2008:040) (Thomas Biege <thomas@...e.de>)
Re: Internet attacks against Georgian web sites (Pavel Labushev <p.labushev@...il.com>)
Re: DNS forward only: why does it help? (Florian Weimer <fw@...eb.enyo.de>)
Re: Internet attacks against Georgian web sites (n3td3v <xploitable@...il.com>)
Re: Funniest thing at DefCon this year... ("North, Quinn" <QNorth@....com>)
Re: Internet attacks against Georgian web sites (Ureleet <ureleet@...il.com>)
Re: Funniest thing at DefCon this year... (Ureleet <ureleet@...il.com>)
Re: (no subject) (Ureleet <ureleet@...il.com>)
Re: Great Council of Internet Superheros (Ureleet <ureleet@...il.com>)
Re: Internet justice delivered [UPDATE ON M. ROTHMAN AND ALAN] (Ureleet <ureleet@...il.com>)
Cisco IOS Shellcodes ("Gyan Chawdhary" <gyan.chawdhary@...plc.com>)
Re: (no subject) (Valdis.Kletnieks@...edu)
SUSE Security Announcement: openwsman (SUSE-SA:2008:041) (Thomas Biege <thomas@...e.de>)
Re: Funniest thing at DefCon this year... (ff0000@...hmail.com)
ZDI-08-052: OpenLDAP BER Decoding Remote DoS Vulnerability (zdi-disclosures@...m.com)
Security Assessment of the Internet Protocol (Fernando Gont <fernando.gont@...il.com>)
ZDI-08-053: Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability (zdi-disclosures@...m.com)
[ GLSA 200808-12 ] Postfix: Local privilege escalation vulnerability (Raphael Marichez <falco@...too.org>)

August 15 (14 messages)

[PLSA 2008-24] Amarok: Privilege escalation (Pınar Yanardağ <pinar@...dus.org.tr>)
Cisco Security Advisory: Vulnerability in Cisco WebEx Meeting Manager ActiveX Control (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
UPDATE!! Funniest thing at DefCon this year... ("Exibar" <exibar@...lair.com>)
weev, baby ("Tea Baggins" <tebaggins@...il.com>)
rPSA-2008-0255-1 freetype (rPath Update Announcements <announce-noreply@...th.com>)
Call for Papers CFS ("Frank Manley" <fmanley@...puterforensicshow.com>)
weev, baby (Gadi Evron <ge@...uxbox.org>)
Re: Security Assessment of the Internet Protocol ("Mark Brunner" <mark_brunner@...mail.com>)
Re: weev, baby (hERB <herbster@...il.com>)
Re: weev, baby (coderman <coderman@...il.com>)
Health website vulnerable to hacking, no response from admins after multiple attempts ("Kristian Erik Hermansen" <kristian.hermansen@...il.com>)
Re: weev, baby (n3td3v <xploitable@...il.com>)
[ MDVSA-2008:171 ] postfix (security@...driva.com)
[ MDVSA-2008:172 ] amarok (security@...driva.com)

August 16 (10 messages)

[PLSA 2008-25] Postfix: Local privilege escalation (Pınar Yanardağ <pinar@...dus.org.tr>)
Step-by-step instructions for debugging Cisco IOS using gdb ("Smiler S" <smiler808@...glemail.com>)
Tool: PorkBind v1.3 Nameserver Security Scanner (New Version) (Derek Callaway <super@...u.org>)
Re: [funsec] Internet attacks against Georgian web sites (Radoslav Dejanović <radoslav.dejanovic@...us.hr>)
Beware the firefox ZERO DAYZZZZ ("T Biehn" <tbiehn@...il.com>)
Linus summarizes state of the "security industry" with precision and accuracy. (coderman <coderman@...il.com>)
Re: Linus summarizes state of the "security industry" with precision and accuracy. (silky <michaelslists@...il.com>)
Re: Beware the firefox ZERO DAYZZZZ (Thierry Zoller <Thierry@...ler.lu>)
Nokia 6131 NFC URI/URL Spoofing and DoS Advisory ("Collin R. Mulliner" <collin@...aversion.net>)
Re: Step-by-step instructions for debugging Cisco IOS using gdb (Andrew Farmer <andfarm@...il.com>)

August 17 (12 messages)

Re: Step-by-step instructions for debugging Cisco IOS using gdb ("Andy Davis" <iosftpexploit@...glemail.com>)
Re: Full-Disclosure Digest, Vol 42, Issue 42 (badr muhyeddin <gigiyousef@...mail.com>)
Re: selling 0-day ("jeremie travis" <jeremie.travis@...il.com>)
Re: Full-Disclosure Digest, Vol 42, Issue 42 (William McAfee <sec-community@...goodhacker.com>)
Re: 0day offer ("Jeffrey Starck" <jeffrey.starck@...il.com>)
Re: Beware the firefox ZERO DAYZZZZ ("Memisyazici, Aras" <arasm@...edu>)
Re: [funsec] Internet attacks against Georgian web sites ("Static Rez" <staticrez@...il.com>)
Re: [funsec] Internet attacks against Georgian web sites (William McAfee <sec-community@...goodhacker.com>)
Klueless Klowns Team PHP shell (Kristo pher <kristo57@...l.ru>)
Re: [funsec] Internet attacks against Georgian web sites (William McAfee <sec-community@...goodhacker.com>)
Re: Klueless Klowns Team PHP shell (William McAfee <sec-community@...goodhacker.com>)
Re: [funsec] Internet attacks against Georgian web s ites ("Paul Ferguson" <fergdawg@...zero.net>)

August 18 (12 messages)

Re: [funsec] Internet attacks against Georgian web s ites (n3td3v <xploitable@...il.com>)
Re: Klueless Klowns Team PHP shell (Andrew Farmer <andfarm@...il.com>)
Re: [funsec] Internet attacks against Georgian web s ites (William McAfee <sec-community@...goodhacker.com>)
Re: [funsec] Internet attacks against Georgian web s ites (ff0000@...hmail.com)
Re: [funsec] Internet attacks against Georgian web s ites ("Peter Dawson" <slash.pd@...il.com>)
Re: [funsec] Internet attacks against Georgian web s ites (Valdis.Kletnieks@...edu)
Re: [funsec] Internet attacks against Georgian web s ites (coderman <coderman@...il.com>)
Re: [funsec] Internet attacks against Georgian web s ites (William McAfee <sec-community@...goodhacker.com>)
Re: [funsec] Internet attacks against Georgian web s ites (Dave <dave@...d.net>)
Re: [funsec] Internet attacks against Georgian web s ites (William McAfee <sec-community@...goodhacker.com>)
Re: Linus summarizes state of the "security industry" with precision and accuracy. (Simon Valiquette <v.simon@...e.org>)
Re: Linus summarizes state of the "security industry" with precision and accuracy. ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)

August 19 (20 messages)

Re: Linus summarizes state of the "security industry" with precision and accuracy. (Simon Valiquette <v.simon@...e.org>)
Re: Linus summarizes state of the "security industry" with precision and accuracy. (don bailey <don.bailey@...il.com>)
Re: Linus summarizes state of the "security industry" with precision and accuracy. (don bailey <don.bailey@...il.com>)
Re: Linus summarizes state of the "security industry" with precision and accuracy. ("Erik Harrison" <eharrison@...il.com>)
Re: Linus summarizes state of the "security industry" with precision and accuracy. (William McAfee <sec-community@...goodhacker.com>)
Re: Step-by-step instructions for debugging Cisco IOS using gdb ("Smiler D" <smiler909@...glemail.com>)
The Hacksaw Conspiracies ("Phillip Tanner" <philtanners@...glemail.com>)
[SECURITY] [DSA 1629-1] New postfix packages fix privilege escalation (thijs@...ian.org (Thijs Kinkhorst))
[SECURITY] [DSA 1629-2] New postfix packages fix installability problem on i386 (thijs@...ian.org (Thijs Kinkhorst))
Introducing the Android Security Team (richc@...gle.com)
Re: The Hacksaw Conspiracies ("T Biehn" <tbiehn@...il.com>)
Re: The Hacksaw Conspiracies (William McAfee <sec-community@...goodhacker.com>)
Deep Blind SQL Injection Whitepaper ("Ferruh Mavituna" <ferruh@...ituna.com>)
Re: 0day offer (jeroen <nowhereman@...nen.org>)
Re: Deep Blind SQL Injection Whitepaper ("David Litchfield" <davidl@...software.com>)
Denial of Service Survey ("Tyler Reguly" <ht@...puterdefense.org>)
Re: Deep Blind SQL Injection Whitepaper ("Ferruh Mavituna" <ferruh@...ituna.com>)
IMF 2008 - Call for Participation (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
[ MDVSA-2008:173 ] kdegraphics (security@...driva.com)
[USN-636-1] Postfix vulnerability (Kees Cook <kees@...ntu.com>)

August 20 (14 messages)

[ MDVSA-2008:174 ] kernel (security@...driva.com)
BSQL Hacker 0.9.0.7 - Advanced SQL Injection Framework / Tool ("Ferruh Mavituna" <ferruh@...ituna.com>)
Re: Deep Blind SQL Injection Whitepaper (Sir Mordred <sir.mordred.lists@...il.com>)
OWASP DirBuster 0.11.1 Released (James Fisher <dirbuster@...tinglittleduck.com>)
Re: OWASP DirBuster 0.11.1 Released ("Robert Holgstad" <rholgstad@...il.com>)
Re: OWASP DirBuster 0.11.1 Released (William McAfee <sec-community@...goodhacker.com>)
[ MDVSA-2008:175 ] yelp (security@...driva.com)
Re: OWASP DirBuster 0.11.1 Released ("Michael Krymson" <krymson@...il.com>)
[ MDVSA-2008:176 ] mtr (security@...driva.com)
CORE-2008-0624: Anzio Web Print Object Buffer Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2008-0813 - vBulletin Cross Site Scripting Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Re: CORE-2008-0624: Anzio Web Print Object Buffer Overflow ("James Matthews" <nytrokiss@...il.com>)
Re: OWASP DirBuster 0.11.1 Released ("Tom Brennan" <tomb@...sp.org>)
Re: Deep Blind SQL Injection Whitepaper (Marco Slaviero <marco@...sepost.com>)

August 21 (12 messages)

[ MDVSA-2008:177 ] xine-lib (security@...driva.com)
[ MDVSA-2008:178 ] xine-lib (security@...driva.com)
Re: OWASP DirBuster 0.11.1 Released ("James Matthews" <nytrokiss@...il.com>)
Hacking OSPF with MD5 authentication enabled (Francois Ropert <fropert@...ketfault.org>)
Re: Hacking OSPF with MD5 authentication enabled (GomoR <fd@...or.org>)
Version-independent IOS shellcode ("Andy Davis" <iosftpexploit@...glemail.com>)
Re: Hacking OSPF with MD5 authentication enabled (Francois Ropert <fropert@...ketfault.org>)
Re: Hacking OSPF with MD5 authentication enabled (Francois Ropert <fropert@...ketfault.org>)
Fujitsu Web-Based Admin View Directory Traversal Vulnerability ("Deniz Cevik" <Deniz.Cevik@...ellect.com.tr>)
UPDATE: [ GLSA 200804-22 ] PowerDNS Recursor: DNS Cache Poisoning (Robert Buchholz <rbu@...too.org>)
DXShopCart V4.30mc search.php XSS ("bug squash" <bugsquashr@...il.com>)
[ MDVSA-2008:179 ] metisse (security@...driva.com)

August 22 (26 messages)

[ MDVSA-2008:180 ] libxml2 (security@...driva.com)
0day services offer ("Stephen Flaw" <steph_flaw@...uxmail.org>)
rPSA-2008-0259-1 postfix (rPath Update Announcements <announce-noreply@...th.com>)
[SECURITY] [DSA 1630-1] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
DXShopCart v4.30mc product search.php xss ("bug squash" <bugsquashr@...il.com>)
Announcement/OT: Ethical Hacking book release (Spanish) ("Security Lists" <etropos@...il.com>)
Secunia Research: Trend Micro Products Web Management Authentication Bypass (Secunia Research <remove-vuln@...unia.com>)
Contest: Best Advances for OpenVAS Network Vulnerability Tests (Michael Wiegand <michael.wiegand@...evation.de>)
Re: 0day services offer (Valdis.Kletnieks@...edu)
Re: 0day services offer (John Lamb <full-disclosure@...njam.com>)
Re: 0day services offer (Darkie Duck <the_dark_hunter@...mail.com>)
Vim: Arbitrary Code Execution in Commands: K, Control-], g] ("Jan Minář" <rdancer@...ncer.org>)
Re: 0day services offer (n3td3v <xploitable@...il.com>)
Fedora confirms: Our servers were breached (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
ACG-PTP 1.0.6 index.php persistent XSS ("bug squash" <bugsquashr@...il.com>)
Re: Vim: Arbitrary Code Execution in Commands: K, Control-], g] (staff <staff@...-disclosure.net>)
Arbitrary Command Execution in Windows and Unix Shells. (Bob Beck <beck@...berta.ca>)
Re: Fedora confirms: Our servers were breached (coderman <coderman@...il.com>)
Re: Fedora confirms: Our servers were breached ("James Matthews" <nytrokiss@...il.com>)
Re: Fedora confirms: Our servers were breached (Jerome Benoit <jerome.benoit@...nouille.com>)
[SECURITY] [DSA 1631-1] New libxml2 packages fix denial of service (Steve Kemp <skx@...ian.org>)
Re: Fedora confirms: Our servers were breached (Dragos Ruiu <dr@....net>)
Photo Cart 3.9 index.php "search" XSS ("bug squash" <bugsquashr@...il.com>)
Fwd: Hacker calls buddies overseas on U.S. government dime (n3td3v <xploitable@...il.com>)
Re: Fwd: Hacker calls buddies overseas on U.S. government dime ("James Matthews" <nytrokiss@...il.com>)
Re: Fwd: Hacker calls buddies overseas on U.S. government dime (n3td3v <xploitable@...il.com>)

August 23 (3 messages)

Re: Fedora confirms: Our servers were breached (William McAfee <sec-community@...goodhacker.com>)
libc/net inet_net_pton() integer overflow ("Maksymilian Arciemowicz" <cxib@...urityreason.com>)
Multiple XSS Vulnerabilities in Self Generate CMS (Kærast <kaerast@...gbound.com>)

August 24 (5 messages)

Re: Fwd: Hacker calls buddies overseas on U.S. government dime (Ureleet <ureleet@...il.com>)
Re: Fwd: Comments on: Alleged NASA hacker gets temporary reprieve (Ureleet <ureleet@...il.com>)
Re: Fwd: Hacker calls buddies overseas on U.S. government dime ("Razi Shaban" <razishaban@...il.com>)
Call For Papers - Hackers 2 Hackers Conference 5th Edition - Brazil ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
Re: Multiple XSS Vulnerabilities in Self Generate CMS (K?rast) (devildeath1988@....de)

August 25 (16 messages)

[PLSA 2008-28] Libxml2: Denial of Service (Pınar Yanardağ <pinar@...dus.org.tr>)
[PLSA 2008-29] Vlc: Multiple Vulnerabilities (Pınar Yanardağ <pinar@...dus.org.tr>)
[PLSA 2008-30] Vim: Arbitrary code execution (Pınar Yanardağ <pinar@...dus.org.tr>)
[IVIZ-08-004] Intel BIOS Plain Text Password Disclosure ("iViZ Security Advisories" <advisories@...ztechnosolutions.com>)
[IVIZ-08-005] IBM Lenovo BIOS Plain Text Password Disclosure ("iViZ Security Advisories" <advisories@...ztechnosolutions.com>)
[IVIZ-08-006] DiskCryptor Security Model bypass exploiting wrong BIOS API usage ("iViZ Security Advisories" <advisories@...ztechnosolutions.com>)
[IVIZ-08-002] Hewlett-Packard BIOS Plain Text Password Disclosure ("iViZ Security Advisories" <advisories@...ztechnosolutions.com>)
[IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage ("iViZ Security Advisories" <advisories@...ztechnosolutions.com>)
[IVIZ-08-003] TrueCrypt Security Model bypass exploiting wrong BIOS API usage ("iViZ Security Advisories" <advisories@...ztechnosolutions.com>)
[IVIZ-08-007] DriveCrypt Security Model bypass exploiting wrong BIOS API usage ("iViZ Security Advisories" <advisories@...ztechnosolutions.com>)
Secunia Research: Novell iPrint Client ActiveX Control Multiple Buffer Overflows (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Novell iPrint Client ActiveX Control "GetFileList()" Information Disclosure (Secunia Research <remove-vuln@...unia.com>)
[IVIZ-08-008] LILO Security Model bypass exploiting wrong BIOS API usage ("iViZ Security Advisories" <advisories@...ztechnosolutions.com>)
SQL Injection Vulnerability in BtiTracker and xbtit ("Valery Marchuk" <tecklord@...uritylab.ru>)
[IVIZ-08-001] Microsoft Bitlocker Plain Text Password Disclosure ("iViZ Security Advisories" <advisories@...ztechnosolutions.com>)
Re: [IVIZ-08-001] Microsoft Bitlocker Plain Text Password Disclosure ("KJK::Hyperion" <hackbunny@...tpj.org>)

August 26 (11 messages)

Secunia Research: Calendarix Basic Two SQL Injection Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Re: Arbitrary Code Execution in Commands: K, Control-], g] ("Michael Wojcik" <Michael.Wojcik@...rofocus.com>)
[USN-637-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
ISO Standards ("Basha, Arif" <abasha@....org>)
news from Network Security Research ("John Wane" <networksecurityresearch@...il.com>)
Re: ISO Standards ("Line Noise" <300baud@...il.com>)
Re: ISO Standards] ("Carlos Sahuquillo" <csahuquillo@...er.shacknet.nu>)
[SECURITY] [DSA 1631-1] New libxml2 packages fix denial of service (Steve Kemp <skx@...ian.org>)
PacSec 2008 CFP (Deadline Sept. 1, Conference Nov. 12/13) and BA-Con 2008 Speakers (Sept. 30/ Oct. 1)PacSec 2008 CFP (Deadline Se… (Dragos Ruiu <dr@....net>)
[ MDVSA-2008:180-1 ] libxml2 (security@...driva.com)
Re: [IVIZ-08-001] Microsoft Bitlocker Plain Text Password Disclosure (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

August 27 (18 messages)

test post ("Jason Josno" <jason.kimmer2008@...il.com>)
Re: DIE IN A FIRE post ("M. Shirk" <shirkdog_list@...mail.com>)
[PLSA 2008-31] Tiff: Denial of Service (Pınar Yanardağ <pinar@...dus.org.tr>)
Re: [IVIZ-08-001] Microsoft Bitlocker Plain Text Password Disclosure ("James Matthews" <nytrokiss@...il.com>)
Re: test post ("James Matthews" <nytrokiss@...il.com>)
Re: ISO Standards (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
Re: Funniest thing at DefCon this year... (baldr <baldr.theinnocent@...il.com>)
Re: DIE IN A FIRE post (Simon Smith <simon@...soft.com>)
Re: DIE IN A FIRE post (Franck <nexact@...il.com>)
Re: DIE IN A FIRE post (Shirk Dog <shirkdog_list@...mail.com>)
White Wolf Labs #080826-1: Kyocera Mita Scanner File Utility (Multiple) (Seth Fogie <seth@...tewolfsecurity.com>)
[SECURITY] [DSA 1632-1] New tiff packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
Re: DIE IN A FIRE post ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)
Re: DIE IN A FIRE post ("Randal T. Rioux" <randy@...cyonlabs.com>)
Re: DIE IN A FIRE post (Simon Smith <simon@...soft.com>)
Re: TCP Port randomization paper (Fernando Gont <fernando.gont@...il.com>)
Re: DIE IN A FIRE post ("James Matthews" <nytrokiss@...il.com>)
[USN-638-1] Yelp vulnerability (Kees Cook <kees@...ntu.com>)

August 28 (11 messages)

[PLSA 2008-28] [Update] Libxml2: Denial of Service (Pınar Yanardağ <pinar@...dus.org.tr>)
Re: DIE IN A FIRE post (mrdkaaa <mrdkaaa@...eam.cz>)
reviving the botnets@ mailing list: a new statregy in fighting cyber crime (Gadi Evron <ge@...uxbox.org>)
Re: reviving the botnets@ mailing list: a new statregy in fighting cyber crime (n3td3v <xploitable@...il.com>)
Re: ISO Standards (M.B.Jr. <marcio.barbado@...il.com>)
Re: ISO Standards ("James Matthews" <nytrokiss@...il.com>)
Re: Deep Blind SQL Injection Whitepaper (nummish <nummish@...0.org>)
Re: Deep Blind SQL Injection Whitepaper (Haroon Meer <haroon@...sepost.com>)
Re: [funsec] Internet attacks against Georgian web s ites (n3td3v <xploitable@...il.com>)
Re: [funsec] Internet attacks against Georgian web s ites (n3td3v <xploitable@...il.com>)
ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability (zdi-disclosures@...m.com)

August 29 (4 messages)

[ MDVSA-2008:181 ] ipsec-tools (security@...driva.com)
[scip_Advisory 3807] Dreambox DM500 webserver long URL request denial of service (Marc Ruef <maru@...p.ch>)
[tool announce] KisGearth - optimized release... ("Richard Sammet" <richard.sammet@...glemail.com>)
kings' tools (Kristo pher <kristo57@...l.ru>)

August 30 (11 messages)

VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information… (VMware Security team <security@...are.c…)
Inside India’s CAPTCHA Solving Economy ("Dancho Danchev" <dancho.danchev@...il.com>)
hackmeeting: call for participation (bomboclat@...asystem.com)
Honeypot? (James Lay <jlay@...ve-tothe-box.net>)
x0x0x ? its a joke! a vendetta history.. ("bussinessinbox box" <bussinessinbox@...il.com>)
Re: [inbox] Honeypot? ("Exibar" <exibar@...lair.com>)
Re: [inbox] Honeypot? (James Lay <jlay@...ve-tothe-box.net>)
Re: Inside India’s CAPTCHA Solving Economy (coderman <coderman@...il.com>)
Re: Inside India’s CAPTCHA Solving Economy (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Inside India’s CAPTCHA Solving Economy ("Razi Shaban" <razishaban@...il.com>)
Re: Inside India’s CAPTCHA Solving Economy (n3td3v <xploitable@...il.com>)

August 31 (31 messages)

Re: Inside India’s CAPTCHA Solving Economy (n3td3v <xploitable@...il.com>)
[PLSA 2008-32] Mono: Cross Site Scripting (Pınar Yanardağ <pinar@...dus.org.tr>)
[PLSA 2008-33] [UPDATED] Opensc: Security Bypass (Pınar Yanardağ <pinar@...dus.org.tr>)
Gustav, domain name reportage (n3td3v <xploitable@...il.com>)
Re: Gustav, domain name reportage (n3td3v <xploitable@...il.com>)
Re: Inside India’s CAPTCHA Solving Economy (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Gustav, domain name reportage (n3td3v <xploitable@...il.com>)
Re: Inside India’s CAPTCHA Solving Economy (Valdis.Kletnieks@...edu)
Re: Gustav, domain name reportage (n3td3v <xploitable@...il.com>)
Re: Gustav, domain name reportage (Valdis.Kletnieks@...edu)
Re: Gustav, domain name reportage (n3td3v <xploitable@...il.com>)
Re: Gustav, domain name reportage (Valdis.Kletnieks@...edu)
Re: Inside India’s CAPTCHA Solving Economy (Raj Mathur <raju@...ux-delhi.org>)
Re: Gustav, domain name reportage (n3td3v <xploitable@...il.com>)
Re: Gustav, domain name reportage (Valdis.Kletnieks@...edu)
Re: Gustav, domain name reportage (n3td3v <xploitable@...il.com>)
PoCfix (PoC for Postfix local root vuln - CVE-2008-2936) (Roman Medina-Heigl Hernandez <roman@...labs.com>)
Port Randomization: New revision of our IETF Internet-Draft (Fernando Gont <fernando.gont@...il.com>)
[SECURITY] [DSA-1597-2] New mt-daapd package fix regression (Devin Carraway <devin@...ian.org>)
[SECURITY] [DSA 1627-2] New opensc package fix incomplete check (thijs@...ian.org (Thijs Kinkhorst))
rPSA-2008-0264-1 ruby (rPath Update Announcements <announce-noreply@...th.com>)
x0x0x? its a joke! ("bussinessinbox box" <bussinessinbox@...il.com>)
Re: Inside India’s CAPTCHA Solving Economy (Raj Mathur <raju@...dalaya.org>)
Re: Inside India’s CAPTCHA Solving Economy ("Razi Shaban" <razishaban@...il.com>)
Re: Gustav, domain name reportage (Wesley McGrew <wesley@...rewsecurity.com>)
Re: Inside India's CAPTCHA Solving Economy (Thedjatclubrock <tdjacr.wiki@...il.com>)
Re: x0x0x? its a joke! ("Robert Holgstad" <rholgstad@...il.com>)
Re: x0x0x? its a joke! (Thedjatclubrock <tdjacr.wiki@...il.com>)
Monthly Hands-On Meetups ("Professor Micheal Chatner" <mchatner@...il.com>)
Re: Monthly Hands-On Meetups ("Eliah Kagan" <degeneracypressure@...il.com>)
Re: Monthly Hands-On Meetups (Arturo 'Buanzo' Busleiman <buanzo@...nzo.com.ar>)

557 messages