full-disclosure mailing list - 2009/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2009/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 10	² 5	³ 9
⁴ 8	⁵ 11	⁶ 7	⁷ 16	⁸ 8	⁹ 8	¹⁰ 3
¹¹ 11	¹² 20	¹³ 11	¹⁴ 3	¹⁵ 16	¹⁶ 4	¹⁷
¹⁸ 12	¹⁹ 7	²⁰ 11	²¹ 2	²² 8	²³ 2	²⁴ 13
²⁵ 12	²⁶ 18	²⁷ 12	²⁸ 22	²⁹ 4	³⁰ 5	³¹ 6

Messages by day:

May 1 (10 messages)

[ MDVSA-2009:104 ] udev (security@...driva.com)
[ MDVSA-2009:103 ] udev (security@...driva.com)
Durzosploit v0.1 alpha (Benjilenoob <benjilenoob@...mail.com>)
[SECURITY] [DSA 1784-1] New freetype packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
multiple vendor - PF NULL pointer dereference (rembrandt <rembrandt@...ith.net>)
Re: Anti virus installations on Windows servers (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
[ MDVSA-2009:102 ] apache (security@...driva.com)
[SECURITY] [DSA 1785-1] New wireshark packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Anti virus installations on Windows servers (T Biehn <tbiehn@...il.com>)
PayPal donation form reveals beneficiary's email address (Eitan Caspi <eitancaspi@...oo.com>)

May 2 (5 messages)

Re: Full-Disclosure Digest, Vol 51, Issue 2 (Action Required) (postmaster@...be.com)
Re: PayPal donation form reveals beneficiary's email address (Frank Dietrich <bits_n_bytes@....de>)
[ GLSA 200905-01 ] Asterisk: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
Re: PayPal donation form reveals beneficiary's email address ("Eitan Caspi" <eitancaspi@...oo.com>)
Re: Anti virus installations on Windows servers (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)

May 3 (9 messages)

Re: PayPal donation form reveals beneficiary's email address (ghost <ghosts@...il.com>)
[SECURITY] [DSA 1787-1] New Linux 2.6.24 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
Possible DoS in TamperData Add-on v10.1.0 for FireFox 3.0.8 (Xia Shing Zee <xiashing@...il.com>)
[SECURITY] [DSA 1786-1] New acpid packages fix denial of service (white@...ian.org (Steffen Joeris))
“Cross-Site Scripting” vulnerability in MyBB 1.4.5 (Jacques Copeau <jacquescopeau@...glemail.com>)
Re: Possible DoS in TamperData Add-on v10.1.0 for FireFox 3.0.8 (Valdis.Kletnieks@...edu)
Re: “Cross-Site Scripting” vulnerability in MyBB 1.4.5 (Andrew Farmer <andfarm@...il.com>)
Grabit <= 1.7.2 beta 3 NZB file parsing stack overflow (Niels Teusink <my_first_name_here@...sink.net>)
Re: “Cross-Site Scripting” vulnerability in MyBB 1.4.5 (Micheal Cottingham <techie.micheal@...il.com>)

May 4 (8 messages)

Call for Papers Hack.lu 2009 ("hack.lu 2009 info" <hl2009@...k.lu>)
Re: “Cross-Site Scripting” vulnerability in MyBB 1.4.5 (Jacques Copeau <jacquescopeau@...glemail.com>)
Re: Full-disclosure Anti virus installations on Windows servers (mbs <mbs@...trealm.com>)
[ MDVSA-2009:105 ] memcached (security@...driva.com)
Secunia Research: IBM Tivoli Storage Manager Remote Agent Service Buffer Overflows (Secunia Research <remove-vuln@...unia.com>)
[USN-769-1] libwmf vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Big up to torpig authors (T Biehn <tbiehn@...il.com>)
[SECURITY] [DSA 1787-1] New quagga packages fix denial of service (Florian Weimer <fw@...eb.enyo.de>)

May 5 (11 messages)

[USN-770-1] ClamAV vulnerability (Jamie Strandboge <jamie@...onical.com>)
Re: Full-disclosure Anti virus installations on Windows servers (T Biehn <tbiehn@...il.com>)
Re: [SECURITY] [DSA 1787-1] New quagga packages fixdenial of service ("Nicolas Lidzborski" <nlidzborski@...lys.com>)
Re: Big up to torpig authors (John Lamb <full-disclosure@...njam.com>)
[SECURITY] [DSA 1789-1] New php5 packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
[RT-SA-2009-003] IceWarp WebMail Server: SQL Injection in Groupware Component (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2009-002] IceWarp WebMail Server: User-assisted Cross Site Scripting in RSS Feed Reader (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2009-004] IceWarp WebMail Server: Client-Side Specification of "Forgot Password" eMail Content (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2009-001] IceWarp WebMail Server: Cross Site Scripting in Email View (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
New Browser Security Paper: Why Silent Updates Boost Security (Stefan Frei <stefan.frei@...hzoom.net>)
[ MDVSA-2009:106 ] libwmf (security@...driva.com)

May 6 (7 messages)

[SECURITY] [DSA 1790-1] New xpdf packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
[SECURITY] [DSA 1791-1] New moin packages fix cross-site scripting (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA 1792-1] New drupal6 packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
[SECURITY] [DSA 1793-1] New kdegraphics packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
EUSecWest 2009 (May27/28) London Agenda and PacSec 2009 (Nov 4/5) Tokyo CFP deadline: June 1 2009 (Dragos Ruiu <dr@....net>)
Howto Simulate a BotNet ? (Mark Sec <mark.sec@...il.com>)
[ MDVSA-2009:107 ] acpid (security@...driva.com)

May 7 (16 messages)

[NETRAGARD SECURITY ADVISORY] [AirCell GoGo Inflight Internet -- No Encryption ][NETRAGARD-2009042] (Netragard Advisories <advisories@...ragard.com>)
Re: Howto Simulate a BotNet ? (Valdis.Kletnieks@...edu)
Re: Howto Simulate a BotNet ? (Aadil Noorkhan <a.noorkhan@...kbynet.com>)
Update: [TZO-15-2009] Aladdin eSafe generic bypass - Forced release (Thierry Zoller <Thierry@...ler.lu>)
Re: [NETRAGARD SECURITY ADVISORY] [AirCell GoGo Inflight Internet -- No Encryption ][NETRAGARD-2009042] (Cedric Blancher <blancher@...tel-securite.fr>)
[SECURITY] [DSA 1794-1] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
[SECURITY] [DSA 1795-1] New ldns packages fix arbitrary code execution (Devin Carraway <devin@...ian.org>)
Secunia Research: Garmin Communicator Plug-In Domain Locking Security Bypass (Secunia Research <remove-vuln@...unia.com>)
[ MDVSA-2009:108 ] zsh (security@...driva.com)
Re: Howto Simulate a BotNet ? (Mark Sec <mark.sec@...il.com>)
Re: Howto Simulate a BotNet ? ("Jan G.B." <ro0ot.w00t@...glemail.com>)
mb_ereg(i)_replace() evaluate replacement string vulnerability (IEhrepus <5up3rh3i@...il.com>)
[USN-773-1] Pango vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-771-1] libmodplug vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-772-1] MPFR vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Howto Simulate a BotNet ? (T Biehn <tbiehn@...il.com>)

May 8 (8 messages)

Re: Howto Simulate a BotNet ? ("M.B.Jr." <marcio.barbado@...il.com>)
Re: Howto Simulate a BotNet ? (Shyaam <shyaam@...il.com>)
[TOOL] moth - vulnerable web application vmware (Andres Riancho <andres.riancho@...il.com>)
Is javascript-analytics.com related to mebroot ? (exploit dev <extraexploit@...il.com>)
[SECURITY] [DSA 1796-1] New libwmf packages fix denial of service (Nico Golde <nion@...ian.org>)
MagpieRSS Multiple XSS Vulnerabilities ("Justin C. Klein Keane" <justin@...irish.net>)
Drupal 5.17 Taxonomy Module XSS Vulnerability ("Justin C. Klein Keane" <justin@...irish.net>)
Team SHATTER Security Advisory: Oracle Database SQL Injection vulnerability in LT.ROLLBACKWORKSPACE (Shatter <shatter@...secinc.com>)

May 9 (8 messages)

Re: Howto Simulate a BotNet ? ("Tomas L. Byrnes" <tomb@...neit.net>)
Re: Howto Simulate a BotNet ? (Shyaam <shyaam@...il.com>)
Request : Microsoft Forefront (all) anybody? (Thierry Zoller <Thierry@...ler.lu>)
Changes : [TZO-17-2009]Trendmicro multiple bypass/evasions (Thierry Zoller <Thierry@...ler.lu>)
[TZO-20-2009] AVG ZIP evasion / bypass (Thierry Zoller <Thierry@...ler.lu>)
[TZO-21-2009] Fprot CAB bypass / evasion (Thierry Zoller <Thierry@...ler.lu>)
[SECURITY] [DSA 1797-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: [SECURITY] [DSA 1792-1] New drupal6 packages fix multiple vulnerabilities (Kennith Greenwood <nitroduckracer@...global.net>)

May 10 (3 messages)

[ MDVSA-2009:109 ] quagga (security@...driva.com)
Major Greek bank sites with SSL vulnerable to XSS and open redirects ("xssed" <security@...ed.com>)
Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects (James Matthews <nytrokiss@...il.com>)

May 11 (11 messages)

[Bkis-08-2009] Microchip MPLAB IDE Buffer Overflow Vulnerability (Bkis <svrt@...v.com.vn>)
Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects (silky <michaelslists@...il.com>)
Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects (Valdis.Kletnieks@...edu)
Re: [SECURITY] [DSA 1792-1] New drupal6 packages fix multiple vulnerabilities (Michael Simpson <mikie.simpson@...il.com>)
Re: Major Greek bank sites with SSL vulnerable toXSS and open redirects ("Mike N." <niceman@....net>)
[SECURITY] [DSA 1798-1] New pango1.0 packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
List Charter (John Cartwright <johnc@...k.org.uk>)
[USN-774-1] MoinMoin vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[SECURITY] [DSA 1799-1] New qemu packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Major Greek bank sites with SSL vulnerable to XSS and open redirects (silky <michaelslists@...il.com>)

May 12 (20 messages)

Syhunt: A-A-S (Application Access Server) Multiple Security Vulnerabilities ("Felipe M. Aragon" <felipe@...unt.com>)
Exploit sweatshop open for business! (Exploit Sweatshop <exploitsweatshop@...il.com>)
Re: Universal XSS in all Google Services (Nam Nguyen <namn@...emoon.com.vn>)
FormMail 1.92 Multiple Vulnerabilities (ascii <ascii@...amail.com>)
Security Advisory: Banks in Australia (militan c7 <militan.c7@...il.com>)
CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities [Updated] ("Williams, James K" <James.Williams@...com>)
Re: [SECURITY] [DSA 1792-1] New drupal6 packages fix multiple vulnerabilities (Valdis.Kletnieks@...edu)
iDefense Security Advisory 05.12.09: Microsoft PowerPoint 4.2 Conversion Filter Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 05.12.09: Microsoft PowerPoint 4.2 Conversion Filter Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 05.12.09: Microsoft PowerPoint 4.2 Conversion Filter Stack Overflow (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT 4.0 Importer Multiple Stack Buffer Overflow Vulnerabiliti… (iDefense Labs <labs-no-reply@...fense.c…)
LAMPSecurity.org Capture the Flag Exercise ("Justin C. Klein Keane" <justin@...irish.net>)
iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT95 Import Multiple Stack Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.co…)
iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT95 Import Multiple Stack Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.co…)
[USN-775-1] Quagga vulnerability (Kees Cook <kees@...ntu.com>)
[USN-776-1] KVM vulnerabilities (Kees Cook <kees@...ntu.com>)
iDefense Security Advisory 05.12.09: Microsoft PowerPoint Build List Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 05.12.09: Microsoft PowerPoint Notes Container Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 05.12.09: Microsoft PowerPoint Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ MDVSA-2009:110 ] squirrelmail (security@...driva.com)

May 13 (11 messages)

[ MDVSA-2009:111 ] firefox (security@...driva.com)
Re: FormMail 1.92 Multiple Vulnerabilities (ascii <ascii@...amail.com>)
[ MDVSA-2009:111-1 ] firefox (security@...driva.com)
[USN-776-2] KVM regression (Marc Deslauriers <marc.deslauriers@...onical.com>)
SUPPORT exploitcritics.blogspot.com :) (Exploit Critics <exploitcritics@...il.com>)
Re: FormMail 1.92 Multiple Vulnerabilities (David Cantrell <d.cantrell@...cometechnologies.com>)
Secunia Research: Microsoft PowerPoint Atom Parsing Buffer Overflows (Secunia Research <remove-vuln@...unia.com>)
ZDI-09-020: Microsoft Office PowerPoint Notes Container Heap Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-019: Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: SUPPORT exploitcritics.blogspot.com :) (Exploit Sweatshop <exploitsweatshop@...il.com>)
[ MDVSA-2009:112 ] ipsec-tools (security@...driva.com)

May 14 (3 messages)

Re: SUPPORT exploitcritics.blogspot.com :) (Pete Licoln <pete.licoln@...il.com>)
iDefense Security Advisory 05.14.09: Apple Mac OS X xnu Kernel workqueue_additem/workqueue_removeitem Index Validation … (iDefense Labs <labs-no-reply@...fense.c…)
Troj/Qbot-B (Robert Hudock <rhudock@...il.com>)

May 15 (16 messages)

eggdrop/windrop remote crash vulnerability (Thomas Sader <thommey@...il.com>)
n.runs-SA-2009.001 - OS X CFNetwork advisory (<security@...ns.com>)
Re: eggdrop/windrop remote crash vulnerability (Nico Golde <fd@...lde.de>)
Snort Sigs for ISC Twitter/Google Diary Annoucements (John Jacobs <flamdugen@...mail.com>)
ISC Twitter/Google Snort Signatures (John Jacobs <flamdugen@...mail.com>)
Re: Howto Simulate a BotNet ? (Mark Sec <mark.sec@...il.com>)
IIS6 + webdav and unicode rides again in 2009 (Kingcope <kcope2@...glemail.com>)
Re: IIS6 + webdav and unicode rides again in 2009 (Giany <giany007@...oo.com>)
Re: IIS6 + webdav and unicode rides again in 2009 (Jeremy Brown <0xjbrown41@...il.com>)
iDefense Security Advisory 05.14.09: Multiple Vendor Outside In Multiple Integer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
Re: IIS6 + webdav and unicode rides again in 2009 (Thierry Zoller <Thierry@...ler.lu>)
Re: Howto Simulate a BotNet ? ("M.B.Jr." <marcio.barbado@...il.com>)
iDefense Security Advisory 05.14.09: Multiple Vendor Outside In Spreadsheet Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 05.14.09: Multiple Vendor Outside In Spreadsheet Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 05.14.09: Multiple Vendor Outside In Multiple Spreadsheet Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com…)
Re: IIS6 + webdav and unicode rides again in 2009 (Thierry Zoller <Thierry@...ler.lu>)

May 16 (4 messages)

WinAppDbg module v1.1 is out! (Mario Alejandro Vilas Jerez <mvilas@...il.com>)
[SECURITY] [DSA 1800-1] New Linux 2.6.26 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
rPSA-2009-0084-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
Re: [SPAM] eggdrop/windrop remote crash vulnerability ("Matthew S. Hallacy" <poptix@...tix.net>)

May 18 (12 messages)

Who is destroying our internet? (James Matthews <nytrokiss@...il.com>)
Re: Who is destroying our internet? (A.L.M.Buxey@...ro.ac.uk)
[ MDVSA-2009:113 ] cyrus-sasl (security@...driva.com)
PAPER: Dynamic Data Flow Analysis via Virtual Code Integration (aka The SpiderPig case) ("Piotr Bania" <bania.piotr@...il.com>)
Re: Who is destroying our internet? (Michael Holstein <michael.holstein@...ohio.edu>)
[ MDVSA-2009:114 ] ipsec-tools (security@...driva.com)
[ MDVSA-2009:115 ] phpMyAdmin (security@...driva.com)
[ MDVSA-2009:116 ] gnutls (security@...driva.com)
[TZO-23-2009] Avira antivir generic evasion of heuristics (for PDF) (Thierry Zoller <Thierry@...ler.lu>)
[TZO-22-2009] Bitdefender generic evasion of heuristics (for PDF) (Thierry Zoller <Thierry@...ler.lu>)
DEFCON London - DC4420 - this Thursday 21st May 2009 (Major Malfunction <majormal@...ate-radio.org>)
Drupal 6 CCK Module XSS Vulnerability ("Justin C. Klein Keane" <justin@...irish.net>)

May 19 (7 messages)

[ MDVSA-2009:117 ] ntp (security@...driva.com)
[ MDVSA-2009:118 ] kernel (security@...driva.com)
[ MDVSA-2009:119 ] kernel (security@...driva.com)
[USN-777-1] Ntp vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Drupal 6.12 (core) User Module XSS Vulnerability (Justin Klein Keane <justin@...irish.net>)
STEAM (Valve) - Phishing and Cross-site Scripting in internal browser (Gabriel Lima <gabriel@...andodeseguranca.com>)
STEAM (Valve) - Phishing and Cross-site Scripting in internal browser (Gabriel Lima <gabriel@...andodeseguranca.com>)

May 20 (11 messages)

FFSpy, a firefox malware PoC (saphex <saphex@...il.com>)
[SECURITY] [DSA 1801-1] New ntp packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 1802-1] New squirrelmail packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
rPSA-2009-0086-1 postgresql postgresql-contrib postgresql-server (rPath Update Announcements <announce-noreply@...th.com>)
ZDI-09-022: Apple Safari Malformed SVGList Parsing Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-023: Apple OS X ATSServer Compact Font Format Parsing Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[SECURITY] [DSA 1804-1] New ipsec-tools packages fix denial of service (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 1803-1] New nsd packages fix denial of service (Thijs Kinkhorst <thijs@...ian.org>)
iDefense Security Advisory 05.20.09: IBM AIX libc MALLOCDEBUG File Overwrite Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
CORE-2009-0109 - Multiple XSS in Sun Communications Express (CORE Security Technologies Advisories <advisories@...esecurity.com>)

May 21 (2 messages)

[ MDVSA-2009:120 ] openssl (security@...driva.com)
[ MDVSA-2009:121 ] lcms (security@...driva.com)

May 22 (8 messages)

DDIVRT-2009-25 IPsession SQL Injection Vulnerability ("DDI_Vulnerability_Alert" <DDI.VulnerabilityAlert@...frontline.com>)
OWASP LiveCD Vulnerabilities ("Brigette DéFaveur" <blosoft@...sultant.com>)
[SECURITY] [DSA 1802-2] New squirrelmail packages correct incomplete fix (Thijs Kinkhorst <thijs@...ian.org>)
[TZO-24-2009] Panda generic evasion (CAB) (Thierry Zoller <Thierry@...ler.lu>)
[TZO-25-2009] Panda generic evasion (TAR) (Thierry Zoller <Thierry@...ler.lu>)
IPFilter (ippool) 4.1.31 lib/load_http.c buffer overflow (Maksymilian Arciemowicz <cxib@...urityreason.com>)
Re: OWASP LiveCD Vulnerabilities (Fionnbharr <thouth@...il.com>)
[SECURITY] [DSA 1805-1] New pidgin packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)

May 23 (2 messages)

[ MDVSA-2009:122 ] squirrelmail (security@...driva.com)
[ MDVSA-2009:122 ] squirrelmail (security@...driva.com)

May 24 (13 messages)

Re: OWASP LiveCD Vulnerabilities ("Tomas L. Byrnes" <tomb@...neit.net>)
Re: OWASP LiveCD Vulnerabilities ("Herman A. Junge" <herman.junge@...il.com>)
BASE - Persistent and Reflective XSS (J <jasbro7@...il.com>)
[SECURITY] [DSA 1806-1] New cscope packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Vulnerability Assessment (mamo <mamo74@...il.com>)
[ GLSA 200905-02 ] Cscope: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200905-03 ] IPSec Tools: Denial of Service (Alex Legler <a3li@...too.org>)
[ GLSA 200905-04 ] GnuTLS: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
Secunia Research: Sun Solaris "sadmind" Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Sun Solaris "sadmind" Integer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[ GLSA 200905-05 ] FreeType: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
[ GLSA 200905-06 ] acpid: Denial of Service (Pierre-Yves Rofes <py@...too.org>)
Re: Vulnerability Assessment ("Tomas L. Byrnes" <tomb@...neit.net>)

May 25 (12 messages)

Re: FFSpy, a firefox malware PoC (FUDder Guy <fudderguy@...il.com>)
PAPER: Generic Unpacking of Self-modifying, Aggressive, Packed Binary Programs ("Piotr Bania" <bania.piotr@...il.com>)
Re: PAPER: Generic Unpacking of Self-modifying, Aggressive, Packed Binary Programs (Thierry Zoller <Thierry@...ler.lu>)
Re: PAPER: Generic Unpacking of Self-modifying, Aggressive, Packed Binary Programs ("Piotr Bania" <bania.piotr@...il.com>)
Re: PAPER: Generic Unpacking of Self-modifying, Aggressive, Packed Binary Programs (Thierry Zoller <Thierry@...ler.lu>)
Re: FFSpy, a firefox malware PoC (FUDder Guy <fudderguy@...il.com>)
Soulseek * P2P Remote Distributed Search Code Execution (laurent gaffie <laurent.gaffie@...il.com>)
[ GLSA 200905-07 ] Pidgin: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
AusCERT 2009 conference - audio recordings (Mike Dee <snarpha@...il.com>)
Arcade Trade Script XSS (SmOk3 <smok3f00@...il.com>)
Web App Version detection using fingerprinting (dd@...uri.net)
Re: FFSpy, a firefox malware PoC (Fosforo <fosforo@...il.com>)

May 26 (18 messages)

Re: Soulseek * P2P Remote Distributed Search Code Execution (Pete Licoln <pete.licoln@...il.com>)
Re: FFSpy, a firefox malware PoC (Shell Code <technobuster@...il.com>)
Re: FFSpy, a firefox malware PoC (James Matthews <nytrokiss@...il.com>)
[TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Thierry Zoller <Thierry@...ler.lu>)
Re: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Thierry Zoller <Thierry@...ler.lu>)
SEC Consult SA-20090525-4 :: SonicOS Format String Vulnerability (Bernhard Mueller <research@...-consult.com>)
SEC Consult SA-20090525-0 :: Nortel Contact Center Manager Server Authentication Bypass Vulnerability (Bernhard Mueller <research@...-consult.com>)
SEC Consult SA-20090525-3 :: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability (Bernhard Mueller <research@...-consult.com>)
SEC Consult SA-20090525-2 :: SonicWALL Global Security Client Local Privilege Escalation Vulnerability (Bernhard Mueller <research@...-consult.com>)
SEC Consult SA-20090525-1 :: Nortel Contact Center Manager Server Password Disclosure Vulnerability (Bernhard Mueller <research@...-consult.com>)
Re: FFSpy, a firefox malware PoC (Shell Code <technobuster@...il.com>)
Re: FFSpy, a firefox malware PoC (David Blanc <davidblanc1975@...il.com>)
[ GLSA 200905-08 ] NTP: Remote execution of arbitrary code (Alex Legler <a3li@...too.org>)
Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Thierry Zoller <Thierry@...ler.lu>)
Re: FFSpy, a firefox malware PoC (saphex <saphex@...il.com>)
Re: FFSpy, a firefox malware PoC (saphex <saphex@...il.com>)
[IMF 2009] 3rd Call - Deadline Extended (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
Drupal 6 Content Access Module XSS (Justin Klein Keane <justin@...irish.net>)

May 27 (12 messages)

W3af ninja training class in NYC (Michelangelo Sidagni <msidagni@...sec.com>)
iKAT - The Interactive Kiosk Attack Tool v2.0 Released - http://ikat.ha.cked.net (Paul Craig <paul.craig@...urity-assessment.com>)
Re: iKAT - The Interactive Kiosk Attack Tool v2.0 Released - http://ikat.ha.cked.net (Sebastian Krahmer <krahmer@...e.de>)
Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) ("Jim Parkhurst" <JPARKHUR@....state.tx.us>)
Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Thierry Zoller <Thierry@...ler.lu>)
[ GLSA 200905-09 ] libsndfile: User-assisted execution of arbitrary code (Alex Legler <a3li@...too.org>)
Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Stuart Dunkeld <burningcows@...il.com>)
Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Vladimir '3APA3A' Dubrovin <3APA3A@...URITY.NNOV.RU>)
Re: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Thierry Zoller <Thierry@...ler.lu>)
[ MDVSA-2009:123 ] opensc (security@...driva.com)
Re: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) ("Jim Parkhurst" <JPARKHUR@....state.tx.us>)

May 28 (22 messages)

Re: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Chris Evans <scarybeasts@...il.com>)
[TZO-27-2009] Firefox Denial of Service (Keygen) (Thierry Zoller <Thierry@...ler.lu>)
Re: [TZO-27-2009] Firefox Denial of Service (Keygen) (Jeremy Brown <0xjbrown41@...il.com>)
Re: [TZO-27-2009] Firefox Denial of Service (Keygen) (Pete Licoln <pete.licoln@...il.com>)
[Bkis-09-2009] XSS vulnerability in 'Monitor_Bandwidth' - PRTG Traffic Grapher (Bkis <svrt@...v.com.vn>)
rPSA-2009-0091-1 cyrus-sasl cyrus-sasl-server (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0092-1 ntp ntp-utils (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0095-1 tshark wireshark (rPath Update Announcements <announce-noreply@...th.com>)
ZDI-09-021: Apple QuickTime PICT Unspecified Tag Heap Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (OTB <ownthebox@...herpunx.org>)
Survey: "MIME/Content-Type-Sniffing" Issues in Image Uploads in Forum Scripts (Jacques Copeau <jacquescopeau@...glemail.com>)
Re: [TZO-27-2009] Firefox Denial of Service (Keygen) (Tavis Ormandy <taviso@....lonestar.org>)
Drupal Embedded Media Field Module Multiple XSS ("Justin C. Klein Keane" <justin@...irish.net>)
Re: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Chris Evans <scarybeasts@...il.com>)
HackersBlog: WhiteHat Scum (whitehatscum@...h.ai)
Re: [TZO-27-2009] Firefox Denial of Service (Keygen) (Tavis Ormandy <taviso@....lonestar.org>)
CORE-2009-0401 - StoneTrip S3DPlayers remote command injection (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Re: [TZO-27-2009] Firefox Denial of Service (Keygen) (Thierry Zoller <Thierry@...ler.lu>)
Re: [TZO-27-2009] Firefox Denial of Service (Keygen) (Tavis Ormandy <taviso@....lonestar.org>)
Re: HackersBlog: WhiteHat Scum (RoMeO <romeo.haxxor@...il.com>)
Re: [TZO-27-2009] Firefox Denial of Service (Keygen) (Nico Golde <fd@...lde.de>)
Whitepaper (Jared DeMott <jdemott@...cialsecurity.com>)

May 29 (4 messages)

Re: HackersBlog: WhiteHat Scum (Jeremy Brown <0xjbrown41@...il.com>)
Re: HackersBlog: WhiteHat Scum ("Nelson Brito" <nbrito@...ure.org>)
VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issues (VMware Security team <security@...are.com>)
FFSpy Buster : Duarte Silva announces that the security of most software allowing plugins such as vim, emacs, gnome, ec… (David Blanc <davidblanc1975@...il.com>)

May 30 (5 messages)

Is FFSpy a hoax? (FFSpy Buster <ffspybuster@...il.com>)
Re: Is FFSpy a hoax? (Thierry Zoller <Thierry@...ler.lu>)
Re: Whitepaper (Jeffrey Walton <noloader@...il.com>)
[Low-Hanging Fruit] Craigsphone Transcoder Open URL Redirection ("Jeremi Gosney" <epixoip@...h.com>)
Re: Whitepaper (Ahmed Sheipani <sheipani@...il.com>)

May 31 (6 messages)

Re: Whitepaper (Jared DeMott <jdemott@...cialsecurity.com>)
Re: Is FFSpy a hoax? (saphex <saphex@...il.com>)
BASE - 3 Persistent Cross Site Scripting Vulnerabilities (Jabra <jasbro7@...il.com>)
CFP 26C3 / 26th Chaos Communication Congress (fukami <lists@....io>)
[ MDVSA-2009:124 ] apache (security@...driva.com)
[ MDVSA-2009:125 ] wireshark (security@...driva.com)

284 messages

Powered by blists - more mailing lists