full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2009/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 2
² 4	³ 52	⁴ 42	⁵ 15	⁶ 28	⁷ 13	⁸ 4
⁹ 18	¹⁰ 12	¹¹ 12	¹² 5	¹³ 41	¹⁴ 14	¹⁵ 5
¹⁶ 18	¹⁷ 12	¹⁸ 8	¹⁹ 15	²⁰ 9	²¹ 5	²² 8
²³ 16	²⁴ 23	²⁵ 35	²⁶ 28	²⁷ 14	²⁸ 2	²⁹ 2
³⁰ 14	³¹ 12

Messages by day:

Re: Apple Safari ... DoS Vulnerability (nzerozero p <nzerozerop@...il.com>)
Re: Notice to all employees (Jonathan Leffler <jleffler@...ibm.com>)

March 2 (4 messages)

March 3 (52 messages)

March 4 (42 messages)

March 5 (15 messages)

March 6 (28 messages)

Drupal Admin Password Reset via XSS ("Justin C. Klein Keane" <justin@...irish.net>)
Re: Zabbix 1.6.2 Frontend Multiple Vulnerabilities (Roberto Muñoz Fernandez <robertomf@...itsu.es>)
[USN-728-3] Firefox vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-728-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-728-2] Firefox vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-730-1] libpng vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: List of Fuzzers (Pete Licoln <pete.licoln@...il.com>)
Re: List of Fuzzers (Jeremy Brown <0xjbrown41@...il.com>)
prezzie from rx2s.org and lamers (Kristo pher <kristo57@...l.ru>)
DEFCON CTF Submissions are in, DC-16 video online! ("The Dark Tangent" <dtangent@...con.org>)
Re: List of Fuzzers (Pete Licoln <pete.licoln@...il.com>)
[PT-2009-12] UMI.CMS Cross-Site Scripting Vulnerability ("Valery Marchuk" <tecklord@...uritylab.ru>)
Re: List of Fuzzers (Jeremy Brown <0xjbrown41@...il.com>)
[PT-2009-13] TinX CMS SQL Injection Vulnerability ("Valery Marchuk" <tecklord@...uritylab.ru>)
Re: List of Fuzzers (julio sanchez <pete.sanches@...il.com>)
Re: List of Fuzzers (Jeremy Brown <0xjbrown41@...il.com>)
Re: List of Fuzzers (Rubén Camarero <rjcamarero@...il.com>)
Re: List of Fuzzers (Pete Licoln <pete.licoln@...il.com>)
Re: List of Fuzzers (Pete Licoln <pete.licoln@...il.com>)
[ GLSA 200903-01 ] Vinagre: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200903-02 ] ZNC: Privilege escalation (Tobias Heinlein <keytoaster@...too.org>)
Re: List of Fuzzers (Jeremy Brown <0xjbrown41@...il.com>)
[ GLSA 200903-03 ] Audacity: User-assisted execution of arbitrary code (Tobias Heinlein <keytoaster@...too.org>)
[ GLSA 200903-04 ] DevIL: User-assisted execution of arbitrary code (Tobias Heinlein <keytoaster@...too.org>)
Re: List of Fuzzers (Pete Licoln <pete.licoln@...il.com>)
[ MDVSA-2009:068 ] poppler (security@...driva.com)
Re: List of Fuzzers (Jeremy Brown <0xjbrown41@...il.com>)
Re: List of Fuzzers (bobby.mugabe@...h.com)

March 7 (13 messages)

Re: List of Fuzzers (Pete Licoln <pete.licoln@...il.com>)
Re: List of Fuzzers (Rubén Camarero <rjcamarero@...il.com>)
Re: List of Fuzzers (anonymous pimp <anonymouspimp@...il.com>)
[ MDVSA-2009:069 ] curl (security@...driva.com)
Re: List of Fuzzers (Pete Licoln <pete.licoln@...il.com>)
Re: List of Fuzzers ("Valdis' Mustache" <security.mustache+fd@...il.com>)
[ MDVSA-2009:068-1 ] poppler (security@...driva.com)
[ GLSA 200903-08 ] gEDA: Insecure temporary file creation (Robert Buchholz <rbu@...too.org>)
[ GLSA 200903-06 ] nfs-utils: Access restriction bypass (Robert Buchholz <rbu@...too.org>)
[ GLSA 200903-07 ] Samba: Data disclosure (Robert Buchholz <rbu@...too.org>)
[ GLSA 200903-09 ] OpenTTD: Execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
Re: List of Fuzzers (George Parr <george.pargh@...glemail.com>)
[ GLSA 200903-10 ] Irrlicht: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)

March 8 (4 messages)

March 9 (18 messages)

March 10 (12 messages)

March 11 (12 messages)

March 12 (5 messages)

March 13 (41 messages)

[USN-731-1] Apache vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-726-1] curl vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-724-1] Squid vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-728-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-732-1] dash vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-727-2] NetworkManager vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-729-1] Python Crypto vulnerability (Kees Cook <kees@...ntu.com>)
[USN-728-2] Firefox vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-730-1] libpng vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-726-2] curl regression (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-728-3] Firefox vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-727-1] network-manager-applet vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-724-1] Squid vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-727-1] network-manager-applet vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-726-2] curl regression (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-730-1] libpng vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-728-3] Firefox vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-728-2] Firefox vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: List of Fuzzers (Josh Dukes <josh.dukes@...rovu.com>)
rPSA-2009-0046-1 libpng (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0045-1 glib (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0040-1 tshark wireshark (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0041-1 dhclient dhcp libdhcp4client (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0042-1 curl (rPath Update Announcements <announce-noreply@...th.com>)
[USN-725-1] KMail vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-727-1] network-manager-applet vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-725-1] KMail vulnerability (Jamie Strandboge <jamie@...onical.com>)
BBC cybercrime probe backfires ("Ivan ." <ivanhec@...il.com>)
Apple iTunes DAAP Messages Handling Denial of Service Vulnerability ("secresearch@...tinet.com"<secresearch@...tinet.com>)
Re: BBC cybercrime probe backfires (James Matthews <nytrokiss@...il.com>)
Re: BBC cybercrime probe backfires ("Castigliola, Angelo" <ACastigliola@...M.COM>)
Re: BBC cybercrime probe backfires (T Biehn <tbiehn@...il.com>)
[Positive Technologies SA: 2009-14] BLOG:CMS Cross-Site Scripting Vulnerability ("Valery Marchuk" <tecklord@...uritylab.ru>)
[Positive Technologies SA: 2009-20] A.CMS Multiple Vulnerabilities ("Valery Marchuk" <tecklord@...uritylab.ru>)
Re: List of Fuzzers (ArcSighter Elite <arcsighter@...il.com>)
Re: List of Fuzzers (Jeremy Brown <0xjbrown41@...il.com>)
[Positive Technologies SA: 2009-15] Living CMS Cross-Site Scripting Vulnerability ("Valery Marchuk" <tecklord@...uritylab.ru>)
[SECURITY] [DSA 1739-1] New mldonkey packages fix information disclosure (Florian Weimer <fw@...eb.enyo.de>)
Re: BBC cybercrime probe backfires (T Biehn <tbiehn@...il.com>)
[ MDVSA-2009:075 ] firefox (security@...driva.com)
Re: BBC cybercrime probe backfires ("Elazar Broad" <elazar@...hmail.com>)

March 14 (14 messages)

March 15 (5 messages)

March 16 (18 messages)

[SECURITY] [DSA 1742-1] New libsnd packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
[Bkis-04-2009] GOM Encoder Heap-based Buffer Overflow ("Bkis" <svrt@...v.com.vn>)
NGENUITY-2009-005 OpenCart Order By Blind SQL Injection (Adam Baldwin <adam_baldwin@...nuity-is.com>)
Re: The BBC acquired a botnet, but was it legal? - Update (James Matthews <nytrokiss@...il.com>)
SSL MiTM on Windows (Mohammad Hosein <mhtajik@...il.com>)
Re: SSL MiTM on Windows (BlackHawk <hawkgotyou@...il.com>)
Google to base ads on surfing behaviour (Bipin Gautam <bipin.gautam@...il.com>)
YSTS 3.0 - Call for Papers ("Luiz Eduardo" <le@...lophobia.net>)
Re: SSL MiTM on Windows (Francisco J. Gómez Rodríguez <fran.net@...il.com>)
w32 SEH omelet shellcode stage (Berend-Jan Wever <berendjanwever@...il.com>)
[USN-735-1] GStreamer Base Plugins vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-733-1] evolution-data-server vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-737-1] libsoup vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ GLSA 200903-29 ] BlueZ: Arbitrary code execution (Pierre-Yves Rofes <py@...too.org>)
[USN-736-1] GStreamer Good Plugins vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Google to base ads on surfing behaviour (Nick FitzGerald <nick@...us-l.demon.co.uk>)
[USN-738-1] GLib vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-734-1] FFmpeg vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

March 17 (12 messages)

March 18 (8 messages)

March 19 (15 messages)

March 20 (9 messages)

March 21 (5 messages)

March 22 (8 messages)

March 23 (16 messages)

March 24 (23 messages)

March 25 (35 messages)

March 26 (28 messages)

March 27 (14 messages)

March 28 (2 messages)

March 29 (2 messages)

March 30 (14 messages)

March 31 (12 messages)

488 messages