full-disclosure mailing list - 2009/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2009/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 5	² 21	³ 15	⁴ 7	⁵ 12	⁶ 5	⁷ 3
⁸ 9	⁹ 20	¹⁰ 26	¹¹ 13	¹² 6	¹³ 4	¹⁴ 10
¹⁵ 10	¹⁶ 26	¹⁷ 4	¹⁸ 17	¹⁹ 6	²⁰ 4	²¹ 4
²² 11	²³ 11	²⁴ 8	²⁵ 8	²⁶ 16	²⁷ 1	²⁸ 4
²⁹ 8	³⁰ 5

Messages by day:

June 1 (5 messages)

[SECURITY] [DSA 1807-1] New cyrus-sasl2/cyrus-sasl2-heimdal packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
Re: Is FFSpy a hoax? (Valdis.Kletnieks@...edu)
[USN-778-1] cron vulnerability (Jamie Strandboge <jamie@...onical.com>)
The father of all bombs - another webdav fiasco (Kingcope <kcope2@...glemail.com>)
[ MDVSA-2009:126 ] eggdrop (security@...driva.com)

June 2 (21 messages)

Re: Is FFSpy a hoax? (T Biehn <tbiehn@...il.com>)
Re: Is FFSpy a hoax? (Valdis.Kletnieks@...edu)
Re: Is FFSpy a hoax? (Mario Alejandro Vilas Jerez <mvilas@...il.com>)
Re: The father of all bombs - another webdav fiasco (Mario Alejandro Vilas Jerez <mvilas@...il.com>)
Re: Is FFSpy a hoax? (Mario Alejandro Vilas Jerez <mvilas@...il.com>)
Re: Is FFSpy a hoax? (T Biehn <tbiehn@...il.com>)
[SECURITY] [DSA 1808-1] New drupal6 packages fix insufficient input sanitising (white@...ian.org (Steffen Joeris))
ZDI-09-024: Safenet SoftRemote IKE Service Remote Stack Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 1809-1] New Linux 2.6.26 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
Apple QuickTime Image Description Atom Sign Extension Memory Corruption (CVE-2009-0955) (Roee Hay <roeehay@...il.com>)
Secunia Research: Apple QuickTime MS ADPCM Encoding Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: QuickTime Sorenson Video 3 Content Parsing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
ZDI-09-025: Apple Quicktime Picture Viewer FLC Delta-Encoded Frame Decompression Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-026: Apple QuickTime Packed-bit Decoding Heap Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-027: Apple Quicktime PICT Opcode 0x8201 Heap Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-028: Apple QuickTime CRGN Atom Parsing Heap Buffer Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-029: Apple QuickTime Jpeg2000 Marker Size Heap Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-030: Apple Quicktime PICT Opcode 0x71 Heap Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Cross Site Scripting in PHP Nuke 8.0 Version (Schap Security <schap.security@...il.com>)
CORE-2009-0420 - Apple CUPS IPP_TAG_UNSUPPORTED Handling null pointer Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
BitDefender | World Wide Pay - SQL Injection / LFI / XSS (Schap Security <schap.security@...il.com>)

June 3 (15 messages)

[SECURITY] [DSA 1810-1] New libapache-mod-jk packages fix information disclosure (Stefan Fritsch <sf@...ian.org>)
TPTI-09-03: Apple iTunes Multiple Protocol Handler Buffer Overflow Vulnerabilities (dvlabs <dvlabs@...pingpoint.com>)
TPTI-09-04: Apple Terminal xterm Resize Escape Sequence Memory Corruption Vulnerability (dvlabs <dvlabs@...pingpoint.com>)
[SECURITY] [DSA 1810-1] New cups/cupsys packages fix denial of service (Nico Golde <nion@...ian.org>)
Re: TPTI-09-03: Apple iTunes Multiple Protocol Handler Buffer Overflow Vulnerabilities (Will Drewry <redpig@...aspill.org>)
Re: TPTI-09-03: Apple iTunes Multiple Protocol Handler Buffer Overflow Vulnerabilities (Thierry Zoller <Thierry@...ler.lu>)
Blue-Collar Productions iGallery 4.1 Plus Arbitrary File Download (Stefano Angaran <stefano.angaran@...ou.it>)
Re: TPTI-09-03: Apple iTunes Multiple Protocol Handler Buffer Overflow Vulnerabilities (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Hardening TCP/IP Stack (Ahmed Sheipani <sheipani@...il.com>)
[USN-780-1] CUPS vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-781-1] Pidgin vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-781-2] Gaim vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: TPTI-09-03: Apple iTunes Multiple Protocol Handler Buffer Overflow Vulnerabilities (Oliver <deepquest@...oo.com>)
[ MDVSA-2009:127 ] gaim (security@...driva.com)
Re: Hardening TCP/IP Stack (mrdkaaa <mrdkaaa@...eam.cz>)

June 4 (7 messages)

CYBSEC-Labs: New sapyto release - Windows support and more! (CYBSEC-Labs <cybseclabs@...sec.com>)
Re: [SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication (Christopher Schultz <chris@...istopherschultz.net>)
[ MDVSA-2009:128 ] libmodplug (security@...driva.com)
[SECURITY] [DSA 1812-1] New apr-util packages fix several vulnerabilities (Stefan Fritsch <sf@...ian.org>)
Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass? ("Arian J. Evans" <arian.evans@...chronic.com>)
Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass? (Prasad Shenoy <prasad.shenoy@...il.com>)
Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass? ("Arian J. Evans" <arian.evans@...chronic.com>)

June 5 (12 messages)

Astalavista.com Exposed (srshaxsir@...hmail.com)
Re: Soulseek * P2P Remote Distributed Search Code Execution (Pete Licoln <pete.licoln@...il.com>)
Re: Soulseek * P2P Remote Distributed Search Code Execution (laurent gaffie <laurent.gaffie@...il.com>)
Re: Cross Site Scripting in PHP Nuke 8.0 Version (Christian Kujau <lists@...dbynature.de>)
Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass? (Thierry Zoller <Thierry@...ler.lu>)
[ MDVSA-2009:129 ] file (security@...driva.com)
Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass? ("Chris Weber" <chris@...abasec.com>)
[ISecAuditors Security Advisories] Joomla! 1.5.10 JA_Purity Multiple Persistent XSS (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Reminder: DeepSec 2009 Call for Papers is open (DeepSec Conference <deepsec@...psec.net>)
Drupal Flag Module Multiple Vulnerabilities (Justin Klein Keane <justin@...irish.net>)
Re: [WEB SECURITY] Re[2]: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass? ("Chris Weber" <chris@...abasec.com>)
[ MDVSA-2009:130 ] gstreamer0.10-plugins-good (security@...driva.com)

June 6 (5 messages)

Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass? ("Arian J. Evans" <arian.evans@...chronic.com>)
Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass? ("Arian J. Evans" <arian.evans@...chronic.com>)
T-Mobile sources and data (pwnmobile@...e-mail.net)
[ MDVSA-2009:131 ] apr-util (security@...driva.com)
[ MDVSA-2009:131-1 ] apr-util (security@...driva.com)

June 7 (3 messages)

Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass? ("Arian J. Evans" <arian.evans@...chronic.com>)
Re: [WEB SECURITY] Unicode Left/Right Pointing Double Angel Quotation Mark bypass? ("Chris Weber" <chris@...abasec.com>)
[ MDVSA-2009:132 ] libsndfile (security@...driva.com)

June 8 (9 messages)

[SECURITY] [DSA 1813-1] New evolution-data-server packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
Re: Soulseek * P2P Remote Distributed Search CodeExecution ("Anders Klixbull" <akl@...erian.dk>)
Re: Astalavista.com Exposed (Charles Majola <charles.lists@...il.com>)
Re: Astalavista.com Exposed ("Anders Klixbull" <akl@...erian.dk>)
Drupal 6 Email Field XSS Vulnerability (Justin Klein Keane <justin@...irish.net>)
Re: Astalavista.com Exposed (James Matthews <nytrokiss@...il.com>)
[USN-783-1] eCryptfs vulnerability (Kees Cook <kees@...ntu.com>)
[USN-784-1] ImageMagick vulnerability (Jamie Strandboge <jamie@...onical.com>)
*REMINDER* OWASP AppSec DC 2009 CALL FOR PAPERS (Mark Bristow <mark.bristow@...sp.org>)

June 9 (20 messages)

ZDI-09-031: libpurple MSN Protocol SLP Message Heap Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-032: Apple WebKit attr() Invalid Attribute Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-033: Apple WebKit dir Attribute Freeing Dangling Object Pointer Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-034: Apple Safari SVG Set.targetElement() Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Apple Safari local file theft vulnerability (Chris Evans <scarybeasts@...il.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
anti-sec strikes again (srshaxsir@...hmail.com)
Re: anti-sec strikes again (Trace <bugtrace@...il.com>)
Re: anti-sec strikes again (Trace <bugtrace@...il.com>)
Re: anti-sec strikes again ("luciano.x" <luciano.cassemiro@...il.com>)
[USN-785-1] ipsec-tools vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
TELUS Security Labs VR - Microsoft Office Excel Malformed Records Stack Buffer Overflow (TELUS Security Labs - Vulnerability Research <noreply@...us.com>)
Apple Safari cross-domain XML theft vulnerability (Chris Evans <scarybeasts@...il.com>)
CORE-2009-0521 - DX Studio Player Firefox plug-in command injection (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2008-0826 - Internet Explorer Security Zone restrictions bypass (CORE Security Technologies Advisories <advisories@...esecurity.com>)
vulnerability cause of suicide (James Matthews <nytrokiss@...il.com>)
catching up on several recently fixed bugs of note (Michal Zalewski <lcamtuf@...edump.cx>)
Secunia Research: Microsoft Excel Record Parsing Array Indexing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Microsoft Excel String Parsing Integer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Blog Security Research - Taking almost 2k blogs to a security test (dd@...uri.net)

June 10 (26 messages)

[USN-775-2] Quagga regression (Kees Cook <kees@...ntu.com>)
Re: Blog Security Research - Taking almost 2k blogs to a security test (Valdis.Kletnieks@...edu)
[BMSA 2009-05] Cross Site Request Forgery in Yahoo! 360plus (Nam Nguyen <namn@...emoon.com.vn>)
FortiGuard Advisory: Microsoft Internet Explorer DHTML Handling Remote Memory Corruption Vulnerability ("noreply-secresearch@...tinet.com" <noreply-secresearch…)
FortiGuard Advisory: Apple Safari Remote Memory Corruption Vulnerability ("noreply-secresearch@...tinet.com" <noreply-secresearch@...tinet.com>)
Secunia Research: Microsoft PowerPoint Freelance Layout Parsing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Adobe Reader JBIG2 Text Region Segment Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
PAPER: Evading network-level emulation ("Piotr Bania" <bania.piotr@...il.com>)
ZDI-09-036: Microsoft Internet Explorer setCapture Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-035: Microsoft Word Document Stack Based Buffer Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-037: Microsoft Internet Explorer Concurrent Ajax Request Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-038: Microsoft Internet Explorer Event Handler Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-039: Microsoft Internet Explorer onreadystatechange Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-040: Microsoft Office Excel QSIR Record Pointer Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-041: Microsoft Internet Explorer 8 Rows Property Dangling Pointer Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-09-042: Adobe Reader U3D RHAdobeMeta Stack Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Drupal Taxonomy Manager Module XSS Vulnerability (Justin Klein Keane <justin@...irish.net>)
[USN-786-1] apr-util vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: CORE-2009-0521 - DX Studio Player Firefox plug-in (Pete Licoln <pete.licoln@...il.com>)
CORE-2009-0521 - DX Studio Player Firefox plug-in (Jah wont_pay_the_bills <stopthesesdude@...il.com>)
[SA-GOOGLE-420] Leslie Hawthorn - Geek herder, druggy, pervert. Not so cool. ("Hewbert Hoffram" <whistleyn3td3v@...e-mail.net>)
Fwd: [SA-GOOGLE-420] Leslie Hawthorn - Geek herder, druggy, pervert. Not so cool. (Pete Licoln <pete.licoln@...il.com>)
Re: [SA-GOOGLE-420] Leslie Hawthorn - Geek herder, druggy, pervert. Not so cool. ("Hewbert Hoffram" <whistleyn3td3v@...e-mail.net>)
Re: [SA-GOOGLE-420] Leslie Hawthorn - Geek herder, druggy, pervert. Not so cool. (Pete Licoln <pete.licoln@...il.com>)
Drupal 6 Views Module XSS Vulnerability (Justin Klein Keane <justin@...irish.net>)
is static. 202.88.46.78.clients.your-server.de a logs collector for RBN ? (exploit dev <extraexploit@...il.com>)

June 11 (13 messages)

Re: Fwd: [SA-GOOGLE-420] Leslie Hawthorn - Geek herder, druggy, pervert. Not so cool. ("Vince Shlomi" <vince.shlomi@....com>)
Re: Fwd: [SA-GOOGLE-420] Leslie Hawthorn - Geek herder, druggy, pervert. Not so cool. (Billy Mays <billy.mays74@...oo.de>)
Re: Fwd: [SA-GOOGLE-420] Leslie Hawthorn - Geek herder, druggy, pervert. Not so cool. ("Vince Shlomi" <vince.shlomi@....com>)
Re: Fwd: [SA-GOOGLE-420] Leslie Hawthorn - Geek herder, druggy, pervert. Not so cool. (Keith Watt <keithnyc@...il.com>)
Drupal Nodequeue Module XSS Vulnerability (Justin Klein Keane <justin@...irish.net>)
Avocent exploit for sale (Kristian Erik Hermansen <kristian.hermansen@...il.com>)
F5 FirePass Cross-Site Scripting vulnerability ("Sjoerd Resink" <resink@...-it.com>)
iDefense Security Advisory 06.11.09: Multiple Vendor WebKit Error Handling Use After Free Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.11.09: Microsoft Active Directory Hexdecimal DN AttributeValue Invalid Free Vulnerability (iDefense Labs <labs-no-reply@...fense.c…)
iDefense Security Advisory 06.11.09: Microsoft Excel SST Record Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.11.09: Microsoft Windows 2000 Print Spooler Remote Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com…)
iDefense Security Advisory 06.11.09: Adobe Reader and Acrobat FlateDecode Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
FortiGuard Advisory: Adobe Reader/Acrobat TrueType Font Processing Memory Corruption Vulnerability ("noreply-secresearch@...tinet.com" <noreply-secresearch@for…)

June 12 (6 messages)

[USN-787-1] Apache vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Alphanumeric ASCII SEH GetPC for XP up to sp3 (Berend-Jan Wever <berendjanwever@...il.com>)
Backdooring windows media files (once again) (Rosario Valotta <valotta.rosario@...il.com>)
Secunia Research: Mozilla Firefox Java Applet Loading Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Backdooring Windows Media Files (once again...) (Rosario Valotta <valotta.rosario@...il.com>)
[DDOS] Target:switzerland (Julien godin <julien.godin@...ssiris.com>)

June 13 (4 messages)

[USN-779-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[TZO-30-2009] Kaspersky and the silent patch that wasn't (PDF evasion, forced full disclosure) (Thierry Zoller <Thierry@...ler.lu>)
SugarCRM 5.2.0e Remote Code Execution (ascii <ascii@...amail.com>)
[TZO-31-2009] Ikarus multiple generic evasions (CAB, ZIP, RAR) (Thierry Zoller <Thierry@...ler.lu>)

June 14 (10 messages)

[SECURITY] [DSA 1814-1] New libsndfile packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
Fwd: Iphone (RandallM <randallm@...mail.com>)
Windows Live profile spam ("Larry Seltzer" <larry@...ryseltzer.com>)
Re: Windows Live profile spam (Ed Carp <erc@...ox.com>)
Re: Fwd: Iphone (T Biehn <tbiehn@...il.com>)
[TZO-32-2009] Norman generic bypass (RAR) (Thierry Zoller <Thierry@...ler.lu>)
[TZO-33-2009] Frisk F-prot evasion (TAR) (Thierry Zoller <Thierry@...ler.lu>)
[TZO-36-2009] Apple Safari & Quicktime Denial of Service (Thierry Zoller <Thierry@...ler.lu>)
[SECURITY] [DSA 1815-1] New libtorrent-rasterbar packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
[TZO-37-2009] Apple Safari <v4 Remote code execution (Thierry Zoller <Thierry@...ler.lu>)

June 15 (10 messages)

Sniffing Browser History Without Javascript ("Ivan ." <ivanhec@...il.com>)
[USN-788-1] Tomcat vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Things to do before vulnerability disclosure (Giuseppe Fuggiano <giuseppe.fuggiano@...il.com>)
Apple QuickTime 0day (webDEViL <w3bd3vil@...il.com>)
Netgear DG632 Router Authentication Bypass Vulnerability ("Tom Neaves" <tom@...neaves.co.uk>)
Netgear DG632 Router Remote DoS Vulnerability ("Tom Neaves" <tom@...neaves.co.uk>)
Re: Things to do before vulnerability disclosure (Shawn Merdinger <shawnmer@...il.com>)
Re: Apple QuickTime 0day (Jared DeMott <jdemott@...cialsecurity.com>)
Re: Netgear DG632 Router Remote DoS Vulnerability ("Tom Neaves" <tom@...neaves.co.uk>)
Re: Netgear DG632 Router Remote DoS Vulnerability ("Tom Neaves" <tom@...neaves.co.uk>)

June 16 (26 messages)

Re: Apple QuickTime 0day (laurent gaffie <laurent.gaffie@...il.com>)
Re: Netgear DG632 Router Remote DoS Vulnerability (Alaa El yazghi <m.elyazghi@...il.com>)
Re: Netgear DG632 Router Remote DoS Vulnerability (Alaa El yazghi <m.elyazghi@...il.com>)
[TZO-33-2009] Fprot generic bypass (TAR) (Thierry Zoller <Thierry@...ler.lu>)
Re: Netgear DG632 Router Remote DoS Vulnerability (Hanno Böck <hanno@...eck.de>)
Re: Netgear DG632 Router Remote DoS Vulnerability (Vladimir '3APA3A' Dubrovin <3APA3A@...URITY.NNOV.RU>)
[TZO-40-2009] Clamav generic bypass (RAR, CAB, ZIP) (Thierry Zoller <Thierry@...ler.lu>)
[IVIZ-09-003] CA ARCserve Denial of Service (iViZ Security Advisories <advisories@...zsecurity.com>)
[IVIZ-09-004] CA ARCserve Denial of Service (iViZ Security Advisories <advisories@...zsecurity.com>)
CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities ("Williams, James K" <James.Williams@...com>)
CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities ("Williams, James K" <James.Williams@...com>)
CA20090615-02: CA Service Desk Tomcat Cross Site Scripting Vulnerability ("Williams, James K" <James.Williams@...com>)
Official release of "Keykeriki" open source wireless keyboard sniffer (Max Moser <max.moser@...il.com>)
[ MDVSA-2009:133 ] irssi (security@...driva.com)
Re: Netgear DG632 Router Remote DoS Vulnerability ("sr." <staticrez@...il.com>)
Re: Netgear DG632 Router Remote DoS Vulnerability ("Jeremi Gosney" <Jeremi.Gosney@...ricity.com>)
WinAppDbg version 1.2 is out! (Mario Alejandro Vilas Jerez <mvilas@...il.com>)
Re: WinAppDbg version 1.2 is out! (Jared DeMott <jdemott@...cialsecurity.com>)
Re: WinAppDbg version 1.2 is out! (Mario Alejandro Vilas Jerez <mvilas@...il.com>)
Re: Netgear DG632 Router Remote DoS Vulnerability (Vladimir Dubrovin <vlad@...dy.ru>)
ZDI-09-043: Apple Java CColorUIResource Pointer Derference Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[DSF-02-2009] - Zoki Catalog SQL Injection (SmOk3 <smok3f00@...il.com>)
Re: Things to do before vulnerability disclosure ("epixoip" <epixoip@...h.com>)
[SECURITY] [DSA 1816-1] New apache2 packages fix privilege escalation (Stefan Fritsch <sf@...ian.org>)
Re: Netgear DG632 Router Remote DoS Vulnerability ("Jeremi Gosney" <Jeremi.Gosney@...ricity.com>)
Re: Netgear DG632 Router Remote DoS Vulnerability (Adrian P <unknown.pentester@...il.com>)

June 17 (4 messages)

Re: Netgear DG632 Router Remote DoS Vulnerability (Vladimir '3APA3A' Dubrovin <3APA3A@...URITY.NNOV.RU>)
Re: Netgear DG632 Router Remote DoS Vulnerability (Adrian P <unknown.pentester@...il.com>)
[ MDVSA-2009:134 ] firefox (security@...driva.com)
[ MDVSA-2009:135 ] kernel (security@...driva.com)

June 18 (17 messages)

Regarding RSnake FD (Jah wont_pay_the_bills <stopthesesdude@...il.com>)
Edraw PDF Viewer Component ActiveX Remote code execution vulnerability ("Jambalaya ." <jambalaya.maillist@...il.com>)
iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008) (Collin Mulliner <collin@...aversion.net>)
Nokia 6212 classic URI spoofing and DoS advisory (original date: Dec. 2008) (Collin Mulliner <collin@...aversion.net>)
[SECURITY] [DSA 1817-1] New ctorrent packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 1818-1] New gforge packages fix insufficient input sanitising (white@...ian.org (Steffen Joeris))
Regarding RSnake FD ("sl@...r" <sl@...rs.org>)
Re: Regarding RSnake FD (Jah wont_pay_the_bills <stopthesesdude@...il.com>)
Re: Regarding RSnake FD (RoMeO <romeo.haxxor@...il.com>)
[TZO-34-2009] Frisk FPROT generic evasion (RAR, ARJ, LHA) (Thierry Zoller <Thierry@...ler.lu>)
[TZO-43-2009] - Clamav generic evasion (CAB) (Thierry Zoller <Thierry@...ler.lu>)
[SECURITY] [DSA 1819-1] New vlc packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA 1820-1] New xulrunner packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
Platypus Starbucks DoS (Fredrick Diggle <fdiggle@...il.com>)
Re: iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008) (Collin Mulliner <collin@...aversion.net>)
Re: iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008) (Mike Ely <me@...pehat.com>)
Re: iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008) (James Matthews <nytrokiss@...il.com>)

June 19 (6 messages)

[PHP safe_mode bypass with exec/system/passthru] Once again (IEhrepus <5up3rh3i@...il.com>)
[PHP safe_mode bypass with exec/system/passthru] Once again (IEhrepus <5up3rh3i@...il.com>)
Re: iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008) (jf <jf@...co.net>)
Re: iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008) (Mike Ely <me@...pehat.com>)
apache and squid dos (evilrabbi <evilrabbi@...il.com>)
[ MDVSA-2009:137 ] java-1.6.0-openjdk (security@...driva.com)

June 20 (4 messages)

BackTrack 4 Pre Release Available for Download (Mati Aharoni <muts@...ensive-security.com>)
Re: apache and squid dos (Lolek of TK53 <lolek1337@...glemail.com>)
[RISE-2009001] ToolTalk rpc.ttdbserverd _tt_internal_realpath Buffer Overflow Vulnerability (RISE Security <advisories@...esecurity.org>)
lostzero has invited you to Spokeo (lostzero@...il.com)

June 21 (4 messages)

Re: lostzero has invited you to Spokeo (James Matthews <nytrokiss@...il.com>)
Re: lostzero has invited you to Spokeo (lostzero@...il.com)
Multiple Exploiting IE8/IE7 XSS Vulnerability (IEhrepus <5up3rh3i@...il.com>)
preimage attack on step reduced md5 - reduced to 16 of 64 steps - <=19.43mins (Georgi Guninski <guninski@...inski.com>)

June 22 (11 messages)

RV: Welcome to the "Full-Disclosure" mailing list (Digest mode) ("Florencio Merchan" <florencio.merchan@...mbleaex.es>)
[NETRAGARD SECURITY ADVISORY] [< Safari 3.2.3 Arbitrary Code Execution + PoC ][NETRAGARD-20090622] (Netragard Advisories <advisories@...ragard.com>)
[USN-789-1] GStreamer Good Plugins vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[NUTREGARD SECURITY ADVISORY] [ WINDOWS GETS PWND + HACKERS ARE MAD ][NUTREGARD-20090622] ("Gaydriel Desautels" <nutregard@....scientist.com>)
Re: apache and squid dos (Mark Sec <mark.sec@...il.com>)
Re: apache and squid dos (Mario Alejandro Vilas Jerez <mvilas@...il.com>)
Re: apache and squid dos (Fredrick Diggle <fdiggle@...il.com>)
Re: apache and squid dos (Mario Alejandro Vilas Jerez <mvilas@...il.com>)
Re: apache and squid dos (Fredrick Diggle <fdiggle@...il.com>)
Re: apache and squid dos (Kevin Wilcox <kevin@....appstate.edu>)
[ MDVSA-2009:136 ] tomcat5 (security@...driva.com)

June 23 (11 messages)

[ MDVSA-2009:138 ] tomcat5 (security@...driva.com)
[ MDVSA-2009:138 ] tomcat5 (security@...driva.com)
[ MDVSA-2009:138 ] tomcat5 (security@...driva.com)
SNOsoft - GLOsoft - BLOsoft - Awesome! ("Adriel T. Desautels" <ad_lists@...ragard.com>)
n.runs-SA-2009.005 - Apple Safari - Information disclosure (<security@...ns.com>)
n.runs-SA-2009.006 - Apple Safari - Null pointer dereference (<security@...ns.com>)
[SECURITY] [DSA 1821-1] New amule packages fix insufficient input sanitising (white@...ian.org (Steffen Joeris))
CFP: ISOI 7 - Sept 17, 18 - San Diego (Gadi Evron <ge@...uxbox.org>)
[SECURITY] [DSA 1822-1] New mahara packages fix cross-site scripting (Nico Golde <nion@...ian.org>)
Re: SNOsoft - GLOsoft - BLOsoft - Awesome! ("Jan G.B." <ro0ot.w00t@...glemail.com>)
Re: SNOsoft - GLOsoft - BLOsoft - Awesome! (T Biehn <tbiehn@...il.com>)

June 24 (8 messages)

[ MDVSA-2009:139 ] libtorrent-rasterbar (security@...driva.com)
Trustwave's SpiderLabs Security Advisory TWSL2009-002 (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Cisco Security Advisory: Cisco Physical Access Gateway Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Vulnerabilities in Cisco Video Surveillance Products (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[USN-790-1] Cyrus SASL vulnerability (Kees Cook <kees@...ntu.com>)
[USN-791-1] Moodle vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-791-3] Smarty vulnerability (Kees Cook <kees@...ntu.com>)
[USN-791-2] Moodle vulnerability (Kees Cook <kees@...ntu.com>)

June 25 (8 messages)

ZDI-09-044: Adobe Shockwave Player Director File Parsing Pointer Overwrite Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2009:140 ] gaim (security@...driva.com)
[ MDVSA-2009:140 ] gaim (security@...driva.com)
[ MDVSA-2009:140 ] gaim (security@...driva.com)
Make the Web Faster, PHP Tips from Google (T Biehn <tbiehn@...il.com>)
iDefense Security Advisory 06.25.09: Unisys Business Information Server Stack Buffer Overflow (iDefense Labs <labs-no-reply@...fense.com>)
[USN-792-1] OpenSSL vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
iDefense Security Advisory 06.25.09: Motorola Timbuktu Pro PlughNTCommand Stack Based Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

June 26 (16 messages)

TomaHawk IPS testing tool + [files] (Mark Sec <mark.sec@...il.com>)
[USN-782-1] Thunderbird vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Security Assessment of TCP at the IETF (Fernando Gont <fernando.gont@...il.com>)
[SECURITY] [DSA 1823-1] New samba packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 1824-1] New phpmyadmin packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
Query on Adobe Pagemaker Long Fontname Handling Stack Overflow Vuln (Sujit Ghosal <thesujit@...il.com>)
SecurityReason: Multiple Vendors libc/gdtoa printf(3) Array Overrun (Maksymilian Arciemowicz <cxib@...urityreason.com>)
[ MDVSA-2009:141 ] mozilla-thunderbird (security@...driva.com)
Re: TomaHawk IPS testing tool + [files] (Aaron Turner <synfinatic@...il.com>)
[ MDVSA-2009:141 ] mozilla-thunderbird (security@...driva.com)
Re: Security Assessment of TCP at the IETF (Fernando Gont <fernando.gont@...il.com>)
iDefense Security Advisory 06.26.09: HP Network Node Manager rping Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: Security Assessment of TCP at the IETF (Hal Wigoda <hwigoda@...dspring.com>)
CoffeeWars X: Call for Beans (foofus@...fus.net)
[ MDVSA-2009:142 ] jasper (security@...driva.com)
[ MDVSA-2009:143 ] netpbm (security@...driva.com)

June 27 (1 message)

[ MDVSA-2009:144 ] ghostscript (security@...driva.com)

June 28 (4 messages)

[ GLSA 200906-01 ] libpng: Information disclosure (Tobias Heinlein <keytoaster@...too.org>)
Shakacon III - Presentations Posted to site ("Shakacon" <info@...kacon.org>)
[ MDVSA-2009:145 ] php (security@...driva.com)
[ GLSA 200906-02 ] Ruby: Denial of Service (Alex Legler <a3li@...too.org>)

June 29 (8 messages)

Baofeng Media Player playlist stack overflow vulnerability ("Jambalaya ." <jambalaya.maillist@...il.com>)
fgsfds (Gary Wolchesky <garywolchesky@...oo.com>)
Kevin Mitnick the security professional extraordinaire got mantrained (dildobangings@...h.com)
Re: Kevin Mitnick the security professional extraordinaire got mantrained (Ed Carp <erc@...ox.com>)
Re: Baofeng Media Player playlist stack overflow vulnerability ("Jambalaya ." <jambalaya.maillist@...il.com>)
[ MDVSA-2009:146 ] imap (security@...driva.com)
[ GLSA 200906-03 ] phpMyAdmin: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
[ GLSA 200906-04 ] Apache Tomcat JK Connector: Information disclosure (Alex Legler <a3li@...too.org>)

June 30 (5 messages)

(no subject) (mitch nash <mtchnash@...oo.com>)
Re: Kevin Mitnick the security professional extraordinaire got mantrained (Michael Simpson <mikie.simpson@...il.com>)
[ GLSA 200906-05 ] Wireshark: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
[ MDVSA-2009:147 ] pidgin (security@...driva.com)
(no subject) (mitch nash <mtchnash@...oo.com>)

299 messages

Powered by blists - more mailing lists