full-disclosure mailing list - 2009/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2009/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 11	² 19	³ 7	⁴ 7	⁵ 4
⁶ 9	⁷ 13	⁸ 12	⁹ 15	¹⁰ 15	¹¹ 4	¹² 3
¹³ 10	¹⁴ 5	¹⁵ 20	¹⁶ 15	¹⁷ 24	¹⁸ 8	¹⁹ 8
²⁰ 7	²¹ 11	²² 11	²³ 6	²⁴ 10	²⁵	²⁶
²⁷ 16	²⁸ 15	²⁹ 26	³⁰ 7

Messages by day:

April 1 (11 messages)

VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim (VMware Security team <security@...are.com>)
Introducing RMBSS - "Risk Metrics Budgetary Scoring System" ("J. Oquendo" <sil@...iltrated.net>)
[ MDVSA-2009:083 ] mozilla-thunderbird (security@...driva.com)
[ MDVSA-2009:084 ] firefox (security@...driva.com)
OpenX 2.6.4 multiple vulnerabilities (Sandro Gauci <publists@...blesecurity.com>)
Conficker tool for end users (v3nd3rs5uck <ntpeck@...oo.com>)
Secunia Research: UltraISO Image Name Parsing Format String Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: UltraISO Image Parsing Buffer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Re: Conficker tool for end users (Paul Schmehl <pschmehl_lists@...rr.com>)
EUSecWest 2009 CFP (May 27/28, Deadline April 7 2009) (Dragos Ruiu <dr@....net>)
[OPENX-SA-2009-002] OpenX 2.4.11, 2.6.5, 2.8.0 fix multiple vulnerabilities (Matteo Beccati <php@...cati.com>)

April 2 (19 messages)

h0no is back (Rubén Camarero <rjcamarero@...il.com>)
Re: EUSecWest 2009 CFP (May 27/28, Deadline April 7 2009) (Sumit Siddharth <sumit.siddharth@...il.com>)
SAP BusinessObjects Crystal Reports viewreport.asp Multiple Parameter XSS (Bugs NotHugs <bugsnothugs@...il.com>)
Layered Defense Research Advisory: Format String Vulnerability: FortiClient Version 3 (Deral Heiland <dh@...ereddefense.com>)
IBM DB2 two PoCs (Dennis Yurichev <dennis@...us.info>)
[TZO-05-2009] Clamav 0.94 and below - Evasion /bypass (Thierry Zoller <Thierry@...ler.lu>)
[TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details) (Thierry Zoller <Thierry@...ler.lu>)
[TZO-07-2009] F-PROT ZIP Method evasion (Thierry Zoller <Thierry@...ler.lu>)
[ MDVSA-2009:085 ] gstreamer0.10-plugins-base (security@...driva.com)
AST-2009-003: SIP responses expose valid usernames ("Asterisk Security Team" <security@...erisk.org>)
Autodesk IDrop ActiveX Control Heap Corruption Vulnerability ("Elazar Broad" <elazar@...hmail.com>)
Re: Black Hat USA Videos available to D/L ("Randal T. Rioux" <randy@...cyonlabs.com>)
[ GLSA 200904-01 ] Openfire: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
JRE Update 11/12 Pack 200 reliable WinXP exploit (John Smith <0day.service@...il.com>)
Security Research Suggests Security Researchers Owned (Robert Lemos <rlemos53@...il.com>)
Re: Security Research Suggests Security Researchers Owned (Robert Lemos <rlemos53@...il.com>)
Re: Security Research Suggests Security Researchers Owned (Razi Shaban <razishaban@...il.com>)
[SECURITY] [DSA 1762-1] New icu packages fix cross site scripting (white@...ian.org (Steffen Joeris))
Re: Random HTTP-Requests (Tonu Samuel <tonu@....ee>)

April 3 (7 messages)

rPSA-2009-0057-1 m2crypto openssl openssl-scripts (rPath Update Announcements <announce-noreply@...th.com>)
[ GLSA 200904-03 ] Gnumeric: Untrusted search path (Robert Buchholz <rbu@...too.org>)
[ GLSA 200904-02 ] GLib: Execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
Re: Black Hat USA Videos available to D/L (Line Noise <300baud@...il.com>)
Re: [TZO-05-2009] Clamav 0.94 and below - Evasion /bypass ("Jan G.B." <ro0ot.w00t@...glemail.com>)
Re: [TZO-05-2009] Clamav 0.94 and below - Evasion /bypass (Thierry Zoller <Thierry@...ler.lu>)
[ MDVSA-2009:087 ] openssl (security@...driva.com)

April 4 (7 messages)

[ MDVSA-2009:086 ] gstreamer-plugins (security@...driva.com)
VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues (VMware Security Team <security@...are.com>)
Firefox 3.0.8 remote DoS: 0-day exploit (carl hardwick <hardwick.carl@...il.com>)
Re: Firefox 3.0.8 remote DoS: 0-day exploit (Berend-Jan Wever <berendjanwever@...il.com>)
Re: Firefox 3.0.8 remote DoS: 0-day exploit (Mike Bann <mbann@...s.umn.edu>)
[ GLSA 200904-04 ] WeeChat: Denial of Service (Tobias Heinlein <keytoaster@...too.org>)
Re: Firefox 3.0.8 remote DoS: 0-day exploit (Paul Schmehl <pschmehl_lists@...rr.com>)

April 5 (4 messages)

[SECURITY] [DSA 1761-1] New moodle packages fix file disclosure (Nico Golde <nion@...ian.org>)
Firefox 3.0.8 remote DoS: 0-day exploit (Nick <nick58@...il.com>)
conficker.c - ccTLD strange attractor (exploit dev <extraexploit@...il.com>)
[ GLSA 200904-05 ] ntp: Certificate validation error (Pierre-Yves Rofes <py@...too.org>)

April 6 (9 messages)

[tool] sqlsus 0.3 released ! (sativouf <sativouf@...il.com>)
News paper article > who is the greatest Hacker? (Answer <flame@...hmail.com>)
[Positive Technologies SA 2008-05] VMware Multiple Products vmci.sys Privilege Escalation Vulnerability ("Valery Marchuk" <tecklord@...uritylab.ru>)
[Positive Technologies SA 2008-07] VMware Multiple Products hcmon.sys Denial of Service Vulnerability ("Valery Marchuk" <tecklord@...uritylab.ru>)
[SECURITY] [DSA 1763-1] New openssl packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
[ GLSA 200904-06 ] Eye of GNOME: Untrusted search path (Pierre-Yves Rofes <py@...too.org>)
ZDI-09-016: Novell Client/NetIdentity Agent Remote Arbitrary Pointer Dereference Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.co…)
TPTI-09-01: VMWare VMnc Codec Invalid RFB Message Type Heap Overflow (dvlabs <dvlabs@...pingpoint.com>)
TPTI-09-02: VMWare VMnc Codec Open-DML Standard Index dwSize Heap Overflow (dvlabs <dvlabs@...pingpoint.com>)

April 7 (13 messages)

[ GLSA 200904-07 ] Xpdf: Untrusted search path (Robert Buchholz <rbu@...too.org>)
[ GLSA 200904-08 ] OpenSSL: Denial of Service (Robert Buchholz <rbu@...too.org>)
POC - Sun Java System Acccess Manager & Identity Manager Users Enumeration (Marco Mella <marco.mella@...utsecurity.net>)
[USN-753-1] PostgreSQL vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-752-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-751-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
Secunia Research: IrfanView Formats Plug-in XPM Parsing Integer Overflow (Secunia Research <remove-vuln@...unia.com>)
.NET Framework Rootkits (Erez Metula <erezmetula@...ecure.co.il>)
Re: Firefox 3.0.8 remote DoS: 0-day exploit (Ron <ron@...llsecurity.com>)
[USN-754-1] ClamAV vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Opening Intranets to attack by using Internet Explorer [paper] (Cesar <cesarc56@...oo.com>)
[SECURITY] [DSA 1764-1] New tunapie packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[USN-755-1] Kerberos vulnerabilities (Kees Cook <kees@...ntu.com>)

April 8 (12 messages)

Re: .NET Framework Rootkits (Peter Besenbruch <prb@...a.net>)
Summer Camp Garrotxa 2009 event (Gerardo García Peña <gerardo@...g-foo.dhs.org>)
[Bkis-06-2009] GOM Player Subtitle Buffer Overflow Vulnerability (Bkis <svrt@...v.com.vn>)
PeterConnects Web Server Traversal Arbitrary File Access (Bugs NotHugs <bugsnothugs@...il.com>)
rPSA-2009-0058-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (rPath Update Announcements <announce-noreply@...th.com>)
SQL Injection in Rogue Anti-Malware Group's Control Panel (Xia Shing Zee <xiashing@...il.com>)
SUSE Security Announcement: krb5 (SUSE-SA:2009:019) (Thomas Biege <thomas@...e.de>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appl… (Cisco Systems Product Security Incident…)
Pre-announcement! New venue for DC4420 - Thursday 30th April (Major Malfunction <majormal@...ate-radio.org>)
[ GLSA 200904-09 ] MIT Kerberos 5: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
[ GLSA 200904-10 ] Avahi: Denial of Service (Robert Buchholz <rbu@...too.org>)
[ GLSA 200904-11 ] Tor: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)

April 9 (15 messages)

Linux Kernel CIFS Vulnerability (Andreas Bogk <andreas@...reas.org>)
Re: Linux Kernel CIFS Vulnerability (Thierry Zoller <Thierry@...ler.lu>)
Re: Linux Kernel CIFS Vulnerability (Thierry Zoller <Thierry@...ler.lu>)
Re: Linux Kernel CIFS Vulnerability (Thierry Zoller <Thierry@...ler.lu>)
OpenVAS now beyond 10000 Network Vulnerability Tests (Michael Wiegand <michael.wiegand@...evation.de>)
Re: Linux Kernel CIFS Vulnerability (Andreas Bogk <andreas@...reas.org>)
[SECURITY] [DSA 1766-1] New krb5 packages fix several vulnerabilities (Nico Golde <nion@...ian.org>)
FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability ("noreply-secresearch@...tinet.com"<noreply-secresearch@...tinet.com>)
[SECURITY] [DSA 1767-1] New multipath-tools packages fix denial of service (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 1765-1] New horde3 packages fix several vulnerabilities (Steffen Joeris <white@...ian.org>)
Secunia Research: Ghostscript jbig2dec JBIG2 Processing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Re: Linux Kernel CIFS Vulnerability (Raj Mathur <raju@...ux-delhi.org>)
[ MDVSA-2009:088 ] wireshark (security@...driva.com)
http://confickerworkinggroup.org/ (Georgi Guninski <guninski@...inski.com>)
[SECURITY] [DSA 1754-1] New roundup packages fix privilege escalation (Florian Weimer <fw@...eb.enyo.de>)

April 10 (15 messages)

[ MDVSA-2009:089 ] opensc (security@...driva.com)
Re: Linux Kernel CIFS Vulnerability (Nick Boyce <nick.boyce@...il.com>)
Re: Linux Kernel CIFS Vulnerability ("Valdis' Mustache" <security.mustachio@...il.com>)
Re: http://confickerworkinggroup.org/ (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Linux Kernel CIFS Vulnerability (Marcus Meissner <meissner@...e.de>)
Re: Linux Kernel CIFS Vulnerability (Thierry Zoller <Thierry@...ler.lu>)
Re: Linux Kernel CIFS Vulnerability (Marcus Meissner <meissner@...e.de>)
Re: Linux Kernel CIFS Vulnerability (Thierry Zoller <Thierry@...ler.lu>)
Re: Linux Kernel CIFS Vulnerability (Andreas Bogk <andreas@...reas.org>)
Re: Linux Kernel CIFS Vulnerability (Andreas Bogk <andreas@...reas.org>)
[ GLSA 200904-12 ] Wicd: Information disclosure (Tobias Heinlein <keytoaster@...too.org>)
[SECURITY] [DSA 1768-1] New openafs packages potential code execution (Florian Weimer <fw@...eb.enyo.de>)
VMSA-2009-0006 VMware Hosted products and patches for ESX and ESXi resolve a critical security vulnerability (VMware Security Team <security@...are.com>)
[ MDVSA-2009:090 ] php (security@...driva.com)
Re: http://confickerworkinggroup.org/ (Georgi Guninski <guninski@...inski.com>)

April 11 (4 messages)

[BMSA 2009-04] Remote DoS in Internet Explorer (Nam Nguyen <namn@...emoon.com.vn>)
[SECURITY] [DSA 1769-1] New openjdk-6 packages fix arbitrary code execution (Florian Weimer <fw@...eb.enyo.de>)
PHP 5.2.9 curl safe_mode & open_basedir bypass (Maksymilian Arciemowicz <cxib@...urityreason.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)

April 12 (3 messages)

Re: Linux Kernel CIFS Vulnerability (Eugene Teo <eugeneteo@...nel.sg>)
Re: http://confickerworkinggroup.org/ (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[ MDVSA-2009:091 ] mod_perl (security@...driva.com)

April 13 (10 messages)

[tool] efipw (new OFPW tool) ("my.hndl" <my.hndl@...il.com>)
Hacker Space Fest 2009 CFP: Call For Paper (Philippe Mailinglist <philippe.mailinglist@...il.com>)
Re: Hacker Space Fest 2009 CFP: Call For Paper (T Biehn <tbiehn@...il.com>)
[Positive Technologies SA 2009-01] PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities ("Valery Marchuk" <tecklord@...uritylab.ru>)
OpenBSD 4.3 up to OpenBSD-current: PF null pointer dereference kernel panic (rembrandt <rembrandt@...ith.net>)
[SECURITY] [DSA 1770-1] New imp4 packages fix cross-site scripting (white@...ian.org (Steffen Joeris))
[USN-756-1] ClamAV vulnerability (Jamie Strandboge <jamie@...onical.com>)
Re: Linux Kernel CIFS Vulnerability (Andreas Bogk <andreas@...reas.org>)
[ MDVSA-2009:092 ] ntp (security@...driva.com)
NanoCMS Multiple Vulnerabilities ("Justin C. Klein Keane" <justin@...irish.net>)

April 14 (5 messages)

Re: Linux Kernel CIFS Vulnerability (Eugene Teo <eugeneteo@...nel.sg>)
Cae el ultimo de los dragones http://megabyte.lastdragon.net/ pwned (The Wonder Years DVD <mbytesecurity@...il.com>)
iDefense Security Advisory 04.14.09: Microsoft Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ GLSA 200904-13 ] Ventrilo: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200904-14 ] F-PROT Antivirus: Denial of Service (Pierre-Yves Rofes <py@...too.org>)

April 15 (20 messages)

ZDI-09-017: Oracle Applications Server 10g Format String Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Microsoft Office Excel Remote Memory Corruption Vulnerability ("noreply-secresearch@...tinet.com" <noreply-secresearch@...tinet.com>)
Pangolin is updated to 2.0.1.799 ("ZwelL" <zwell.nosec@...il.com>)
Re: Hacker Space Fest 2009 CFP: Call For Paper ("Valdis' Mustache" <security.mustachio@...il.com>)
SniffJoke 0.3 release and request for feedback (vecna <vecna@...tpj.org>)
Re: SniffJoke 0.3 release and request for feedback (Razi Shaban <razishaban@...il.com>)
Secunia Research: DivX Web Player Stream Format Chunk Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: SAP GUI KWEdit ActiveX Control "SaveDocumentAs()" Insecure Method (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Oracle BEA WebLogic Server Plug-ins Integer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Oracle BEA WebLogic Server Plug-ins Certificate Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
SEC Consult SA-20090415-0 :: Multiple Vulnerabilities in Novell Teaming (Bernhard Mueller <research@...-consult.com>)
[USN-757-1] Ghostscript vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Hacker Space Fest 2009 CFP: Call For Paper (T Biehn <tbiehn@...il.com>)
[USN-758-1] udev vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Hacker Space Fest 2009 CFP: Call For Paper (Valdis.Kletnieks@...edu)
Re: Hacker Space Fest 2009 CFP: Call For Paper (T Biehn <tbiehn@...il.com>)
iDefense Security Advisory 04.15.09: Microsoft WordPad Word97 Converter Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 04.15.09: IBM AIX muxatmd Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[SECURITY] [DSA 1771-1] New clamav packages fix several vulnerabilities (Florian Weimer <fw@...eb.enyo.de>)
Re: Hacker Space Fest 2009 CFP: Call For Paper ("Valdis' Mustache" <security.mustachio@...il.com>)

April 16 (15 messages)

Re: Hacker Space Fest 2009 CFP: Call For Paper (Ralf-Philipp Weinmann <crypto.rpw@...il.com>)
Unprivileged DB users can see APEX password hashes [CVE-2009-0981] (Alexander Kornbrust <ak@...-database-security.com>)
SQL Injection in package DBMS_AQIN [CVE-2009-0992] (Alexander Kornbrust <ak@...-database-security.com>)
KON-BOOT for Windows and Linux (Password Bypassing Utility for Forgetting Heads) ("Piotr Bania" <bania.piotr@...il.com>)
SQL Injection in package DBMS_AQADM_SYS [CVE-2009-0977] (Alexander Kornbrust <ak@...-database-security.com>)
[SECURITY] [DSA 1772-1] New udev packages fix privilege escalation (Florian Weimer <fw@...eb.enyo.de>)
Re: Hacker Space Fest 2009 CFP: Call For Paper (Georgi Guninski <guninski@...inski.com>)
Some "old" advisories: MS09-011 and VMware detection/DoS ("Piotr Bania" <bania.piotr@...il.com>)
dev mem injection (Biz Marqee <biz.marqee@...il.com>)
Secunia Research: Danske Bank e-Sec Control Module Error Logging Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
razorCMS - Multiple Vulnerabilities ("Jeremi Gosney" <epixoip@...h.com>)
DDIVRT-2009-23 Apache ActiveMQ Numerous Cross Site Scripting Issues ("DDI_Vulnerability_Alert" <DDI.VulnerabilityAlert@...frontline.com>)
[USN-759-1] poppler vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-760-1] CUPS vulnerability (Jamie Strandboge <jamie@...onical.com>)
[ GLSA 200904-15 ] mpg123: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)

April 17 (24 messages)

[IMF 2009] 2nd Call for Papers - Submission Open (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
[/bin/sh] Tweet Tweet....hax hax.... (Mikeyy Mooney <iammikeyy@...il.com>)
ERNW Security Advisory 01-2009: XSS in Blackberries Mobile Data Service Connection Service (mozilla@...-guide.de)
[TZO-09-2009] Avast bypass / evasion (Limited details) (Thierry Zoller <Thierry@...ler.lu>)
[TZO-08-2009] Bitdefender generic bypass/evasion (Thierry Zoller <Thierry@...ler.lu>)
[TZO-09-2009] NOD32 (Eset) bypass / evasion (Limited details) (Thierry Zoller <Thierry@...ler.lu>)
[SECURITY] [DSA 1773-1] New cups packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
rPSA-2009-0062-1 tshark wireshark (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0063-1 udev (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0064-1 icu (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0060-1 ghostscript (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0059-1 poppler (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0061-1 cups (rPath Update Announcements <announce-noreply@...th.com>)
[SECURITY] [DSA 1774-1] New ejabberd packages fix cross-site scripting (white@...ian.org (Steffen Joeris))
Secunia Research: Xpdf JBIG2 Symbol Dictionary Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: CUPS pdftops JBIG2 Symbol Dictionary Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
[TZO-11-2009] Fortinet bypass / evasion (Limited details) (Thierry Zoller <Thierry@...ler.lu>)
[follow-up] razorCMS - Multiple Vulnerabilities ("Jeremi Gosney" <epixoip@...h.com>)
[/bin/sh] Tweet Tweet....hax hax.... (Mikeyy Mooney <iammikeyy@...il.com>)
Microsoft four infinity loop D.o.S vulnerabilities (Code Audit Labs <vulnhunt@...il.com>)
Re: dev mem injection ("Valdis' Mustache" <security.mustachio@...il.com>)
Virtual Machine Trojans: a new type of threat? (sergio@...osegura.net)
[ GLSA 200904-16 ] libsndfile: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
Re: Virtual Machine Trojans: a new type of threat? (Peter Ferrie <peter.ferrie@...il.com>)

April 18 (8 messages)

Re: Virtual Machine Trojans: a new type of threat? (Julio César García Vizcaíno <fuego216@...il.com>)
[ GLSA 200904-17 ] Adobe Reader: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
LinkedIn DB dump (Joshua Russel <joshua.russel@...il.com>)
Re: Virtual Machine Trojans: a new type of threat? (sergio@...osegura.net)
Re: Virtual Machine Trojans: a new type of threat? (sergio@...osegura.net)
Re: [inbox] Re: Virtual Machine Trojans: a new type of threat? ("Exibar" <exibar@...lair.com>)
[ GLSA 200904-18 ] udev: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
udev exploit (Kingcope Kingcope <kcope2@...glemail.com>)

April 19 (8 messages)

udev exploit - SECURITYFOCUS.COM edits your exploits (Kingcope Kingcope <kcope2@...glemail.com>)
Re: udev exploit - SECURITYFOCUS.COM edits your exploits (don bailey <don.bailey@...il.com>)
Advanced Oracle SQL Injection ("ZwelL" <zwell.nosec@...il.com>)
Advanced Oracle Sql Injection ("ZwelL" <zwell.nosec@...il.com>)
Re: Virtual Machine Trojans: a new type of threat? (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: Virtual Machine Trojans: a new type of threat? (<Eduardo_Godinho@...ndmicro.com>)
MS09-014: MSIE EMBED element race condition memory corruption (Berend-Jan Wever <berendjanwever@...il.com>)
[ GLSA 200904-19 ] LittleCMS: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)

April 20 (7 messages)

Re: [USN-758-1] udev vulnerabilities (Kay Nettle <pkn@...utexas.edu>)
[SECURITY] [DSA 1775-1] New php-json-ext packages fix denial of service (white@...ian.org (Steffen Joeris))
Addendum :[TZO-09-2009] Avast bypass / evasion (Limited details) (Thierry Zoller <Thierry@...ler.lu>)
[USN-761-1] PHP vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-763-1] xine-lib vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-762-1] APT vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
CVE-2009-0991 PoC (Dennis Yurichev <dennis@...us.info>)

April 21 (11 messages)

Bkis Conficker Scanner (Bkis <svrt@...v.com.vn>)
Obfuscated patches (Dennis Yurichev <dennis@...us.info>)
Re: Obfuscated patches (Pedro <fractalg@...hspeedweb.net>)
Re: Obfuscated patches (Valdis.Kletnieks@...edu)
Windows Update (re-)installs outdated Flash ActiveX on Windows XP ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[SECURITY] [DSA 1777-1] New git-core packages fix privilege escalation (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 1776-1] New slurm-llnl packages fix privilege escalation (Thijs Kinkhorst <thijs@...ian.org>)
Re: Obfuscated patches (Pedro Hugo <phugo@...hspeedweb.net>)
Python winappdbg module v1.0 is out! (Mario Alejandro Vilas Jerez <mvilas@...il.com>)
Re: THC releases video and tool to create fakeePassports ("M.B.Jr." <marcio.barbado@...il.com>)
CORE-2009-0114 - HTTP Response Splitting vulnerability in Sun Delegated Administrator (CORE Security Technologies Advisories <advisories@...esecurity.com>)

April 22 (11 messages)

[Bkis-07-2009] 010 Editor Multiple Buffer Overflow Vulnerabilities (Bkis <svrt@...v.com.vn>)
Re: CORE-2009-0114 - HTTP Response Splitting vulnerability in Sun Delegated Administrator (Sergio 'shadown' Alvarez <shadown@...il.com>)
DirectAdmin < 1.33.4 Local file overwrite & Local root escalation (anony mous <137215c1224fde443096afa70f319f@...il.com>)
[ MDVSA-2009:093 ] mpg123 (security@...driva.com)
Re: [Bkis-07-2009] 010 Editor Multiple Buffer Overflow Vulnerabilities (Tavis Ormandy <taviso@....lonestar.org>)
SUSE Security Announcement: cups (SUSE-SA:2009:024) (Thomas Biege <thomas@...e.de>)
[TZO-12-2009] SUN / Oracle JVM Remote code execution (Thierry Zoller <Thierry@...ler.lu>)
Re: THC releases video and tool to create fakeePassports (Michael Holstein <michael.holstein@...ohio.edu>)
[ MDVSA-2009:094 ] mysql (security@...driva.com)
Re: Windows Update (re-)installs outdated Flash ActiveX on Windows XP (Vladimir '3APA3A' Dubrovin <3APA3A@...URITY.NNOV.RU>)
Re: [Advisories] CORE-2009-0114 - HTTP Response Splitting vulnerability in Sun Delegated Administrator (Core Security Technologies advisories <advisories@...es…)

April 23 (6 messages)

[USN-764-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: [Advisories] CORE-2009-0114 - HTTP Response Splitting vulnerability in Sun Delegated Administrator (Sergio 'shadown' Alvarez <shadown@...il.com>)
[Tool] sqlmap 0.7rc1 released ("Bernardo Damele A. G." <bernardo.damele@...il.com>)
[SECURITY] [DSA 1778-1] New mahara packages fix cross-site scripting (Nico Golde <nion@...ian.org>)
[ GLSA 200904-20 ] CUPS: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
CFP for ekoparty 0x09 is now open! [ Buenos Aires, Argentina ] (ekoparty security <no-reply@...party.com.ar>)

April 24 (10 messages)

MSL-2009-001 - Samsung Missing Provisioning Authentication (Mobile Security Lab <research@...clab.com>)
CVE-2009-1190: Spring Framework Remote Denial of Service Vulnerability (Mark Thomas <Mark.Thomas@...ingsource.com>)
SUSE Security Announcement: glib2 (SUSE-SA:2009:025) (Thomas Biege <thomas@...e.de>)
SUSE Security Announcement: glib2 (SUSE-SA:2009:026) (Thomas Biege <thomas@...e.de>)
Re: Cisco ASA5520 Web VPN Host Header XSS ("Mark-David McLaughlin (marmclau)" <marmclau@...co.com>)
dissecting conficker.e (exploit dev <extraexploit@...il.com>)
[ MDVSA-2009:095 ] ghostscript (security@...driva.com)
[ MDVSA-2009:096 ] printer-drivers (security@...driva.com)
[ MDVSA-2009:097 ] clamav (security@...driva.com)
[ MDVSA-2009:097 ] clamav (security@...driva.com)

April 27 (16 messages)

Krakow Labs Development - Hzzp (Krakow Labs <krakowlabs@...il.com>)
[TZO-13-2009] Avira Antivir generic CAB evasion / bypass (Thierry Zoller <Thierry@...ler.lu>)
[TZO-14-2009] Comodo Antivirus RAR evasion (Thierry Zoller <Thierry@...ler.lu>)
[TZO-15-2009] Aladdin eSafe generic bypass - Forced release (Thierry Zoller <Thierry@...ler.lu>)
DEFCON London DC4420 meet this Thursday - 30th April 2009 (Major Malfunction <majormal@...ate-radio.org>)
SumatraPDF <= 0.9.3 Heap Overflow PoC (c <c@...c>)
[SECURITY] [DSA 1779-1] New apt packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
T2'09: Call for Papers 2009 (Helsinki / Finland) (Tomi Tuominen <tomi.tuominen@...fi>)
[ MDVSA-2009:098 ] krb5 (security@...driva.com)
[ MDVSA-2009:096-1 ] printer-drivers (security@...driva.com)
About HSM ("Thiago Musa" <klawiq@...il.com>)
Re: About HSM (T Biehn <tbiehn@...il.com>)
[USN-761-2] PHP vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-766-1] acpid vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-767-1] FreeType vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ MDVSA-2009:099 ] openafs (security@...driva.com)

April 28 (15 messages)

full disclosure? (sunjester <tripmonster@...il.com>)
OWASP AppSec DC 2009 CALL FOR PAPERS (Mark Bristow <mark.bristow@...sp.org>)
Anand A has sent you a private message ("Anand A" <noreply@...faniq.com>)
Re: full disclosure? (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Anand A has sent you a private message (James Matthews <nytrokiss@...il.com>)
DDIVRT-2009-24 Precidia Ether232 Memory Corruption ("DDI_Vulnerability_Alert" <DDI.VulnerabilityAlert@...frontline.com>)
Secunia Research: HP OpenView Network Node Manager "ovalarmsrv" Integer Overflow (Secunia Research <remove-vuln@...unia.com>)
Errata: [TZO-13-2009] Avira Antivir generic CAB evasion / bypass (Thierry Zoller <Thierry@...ler.lu>)
one shot remote root for linux? (Gadi Evron <ge@...uxbox.org>)
Re: one shot remote root for linux? (cardiac_arrest@...hmail.com)
[SECURITY] [DSA 1780-1] New libdbd-pg-perl packages fix potential code execution (Florian Weimer <fw@...eb.enyo.de>)
[USN-765-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
iDefense Security Advisory 04.28.09: TIBCO SmartSockets Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Positron Security Advisory #2009-001: Memcached and MemcacheDB ASLR Bypass Weakness (Positron Security <advisories@...itronsecurity.com>)
[ MDVSA-2009:101 ] xpdf (security@...driva.com)

April 29 (26 messages)

[ MDVA-2009:057 ] usermode (security@...driva.com)
Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 (SEC Consult Research <research@...-consult.com>)
Anti virus installations on Windows servers (mbs <mbs@...trealm.com>)
ZDI-09-018: Symantec Client Security Alert Originator Service Stack Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 1781-1] New ffmpeg-debian packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA 1782-1] New mplayer packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA 1783-1] New mysql-dfsg-5.0 packages fix multiple vulnerabilities (Devin Carraway <devin@...ian.org>)
[TZO-16-2009] Nod32 CAB bypass/evasion (Thierry Zoller <Thierry@...ler.lu>)
iAWACS 2009 CFP (Anthony Desnos <desnos@...ea.fr>)
[TZO-17-2009]Trendmicro multiple bypass/evasions (Thierry Zoller <Thierry@...ler.lu>)
Addendum: [TZO-17-2009]Trendmicro multiple bypass/evasions (Thierry Zoller <Thierry@...ler.lu>)
Re: Anti virus installations on Windows servers (Valdis.Kletnieks@...edu)
Re: Anti virus installations on Windows servers (T Biehn <tbiehn@...il.com>)
iDefense Security Advisory 04.29.09: Symantec System Center Alert Management System Console Arbitrary Program Execution… (iDefense Labs <labs-no-reply@...fense.c…)
Re: Anti virus installations on Windows servers (Valdis.Kletnieks@...edu)
Re: Anti virus installations on Windows servers (don bailey <don.bailey@...il.com>)
Re: Anti virus installations on Windows servers (Valdis.Kletnieks@...edu)
Re: Anti virus installations on Windows servers (Julien Maladrie <Julien.Maladrie@...ension.com>)
Re: Anti virus installations on Windows servers (don bailey <don.bailey@...il.com>)
Re: Anti virus installations on Windows servers (Valdis.Kletnieks@...edu)
Re: Anti virus installations on Windows servers (don bailey <don.bailey@...il.com>)
Re: Anti virus installations on Windows servers (Kurt Buff <kurt.buff@...il.com>)
Re: Anti virus installations on Windows servers ("M.B.Jr." <marcio.barbado@...il.com>)
Re: Anti virus installations on Windows servers (T Biehn <tbiehn@...il.com>)
Re: Anti virus installations on Windows servers (Valdis.Kletnieks@...edu)
[USN-768-1] Apport vulnerability (Jamie Strandboge <jamie@...onical.com>)

April 30 (7 messages)

[TZO-18-2009] Mcafee multiple evasions/bypasses (RAR, ZIP) (Thierry Zoller <Thierry@...ler.lu>)
Re: Anti virus installations on Windows servers (Adam Chesnutt <icetre@...aristocrats.org>)
Call for Papers Hack.lu 2009 ("hack.lu 2009 info" <hl2009@...k.lu>)
Re: Anti virus installations on Windows servers (T Biehn <tbiehn@...il.com>)
Re: Anti virus installations on Windows servers (Valdis.Kletnieks@...edu)
CA20090429-01: CA ARCserve Backup Apache HTTP Server Multiple Vulnerabilities ("Williams, James K" <James.Williams@...com>)
BH USA CFP closing next Tuesday ("jmoss" <jmoss@...ckhat.com>)

318 messages

Powered by blists - more mailing lists