full-disclosure mailing list - 2009/08

Messages by day:

August 1 (7 messages)

• [ MDVSA-2009:186 ] firebird (security@...driva.com)
• [ MDVSA-2009:187 ] nagios (security@...driva.com)
• [ MDVSA-2009:188 ] php4-eaccelerator (security@...driva.com)
• [ GLSA 200908-01 ] OpenSC: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
• Re: THISISNOTMYEXPLOIT (yersinia <yersinia.spiros@...il.com>)
• [ MDVSA-2009:189 ] apache-mod_auth_mysql (security@...driva.com)
• [ GLSA 200908-02 ] BIND: Denial of Service (Alex Legler <a3li@...too.org>)

• Dumbest bug of this month - Wordpress 2.8 (omglol@...hmail.me)
• Just Asking (Ew0k <sekuritymatter@...il.com>)
• Advisory: Adobe Flash Player and AIR AVM2 intf_count Integer Overflow Remote Code Execution (CVE-2009-1869) (Roee Hay <roeehay@...il.com>)
• [SECURITY] [DSA 1848-1] New znc packages fix remote code execution (Florian Weimer <fw@...eb.enyo.de>)
• [SECURITY] [DSA 1849-1] New xml-security-c packages fix signature forgery (Florian Weimer <fw@...eb.enyo.de>)
• Re: Just Asking (Paul Schmehl <pschmehl_lists@...rr.com>)
• [ MDVSA-2009:190 ] OpenEXR (security@...driva.com)
• [ MDVSA-2009:191 ] OpenEXR (security@...driva.com)

• Re: Just Asking (ghost <ghosts@...il.com>)
• Re: Just Asking (Paul Schmehl <pschmehl_lists@...rr.com>)
• Re: Just Asking ("Tomas L. Byrnes" <tomb@...neit.net>)
• AST-2009-004: Remote Crash Vulnerability in RTP stack ("Asterisk Security Team" <security@...erisk.org>)
• Re: (no subject) (Robert H <havensr3577@...dent.faytechcc.edu>)
• Re: Just Asking (Leandro Malaquias <lm.net.security@...il.com>)
• Re: Just Asking (Ew0k <sekuritymatter@...il.com>)
• Re: Just Asking (Dagio Dino <dagiod44@...il.com>)
• Re: THISISNOTMYEXPLOIT (taha <tahacalypse@...il.com>)
• Re: THISISNOTMYEXPLOIT (yersinia <yersinia.spiros@...il.com>)
• PHP Fuzzer Framework Insecure File Creation/Execution Vulnerability (elliot_mb@...hmail.com)
• Team SHATTER Security Advisory: Multiple SQL Injection vulnerabilities in Oracle Enterprise Manager (Shatter <shatter@...secinc.com>)

• PHP Fuzzer Framework Insecure File Creation/Execution Vulnerability (elliot_mb@...hmail.com)
• [SECURITY] [DSA 1850-1] New libmodplug packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
• Re: PHP Fuzzer Framework Insecure File Creation/Execution Vulnerability (Valdis.Kletnieks@...edu)
• [USN-810-1] NSS vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• [USN-810-2] NSPR update (Jamie Strandboge <jamie@...onical.com>)

• [USN-811-1] Firefox and Xulrunner vulnerability (Jamie Strandboge <jamie@...onical.com>)
• IE8 crashes with simple HTML (schnuddelbuddel@...e.ms)
• Re: IE8 crashes with simple HTML (Thierry Zoller <Thierry@...ler.lu>)
• SUSE Security Announcement: flash-player (SUSE-SA:2009:041) (Thomas Biege <thomas@...e.de>)
• SUSE Security Announcement: flash-player (resent) (SUSE-SA:2009:041) (Thomas Biege <thomas@...e.de>)
• [ MDVSA-2009:192 ] phpmyadmin (security@...driva.com)
• BART Card Advisory (noisebridge@...hmail.com)
• [ MDVSA-2009:193 ] ruby (security@...driva.com)

• [ MDVSA-2009:194 ] wireshark (security@...driva.com)
• [ MDVSA-2009:195 ] apr (security@...driva.com)
• ZDI-09-047: Microsoft Internet Explorer getElementsByTagName Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-09-049: Sun Java Pack200 Decoding Inner Class Count Integer Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-09-050: Sun Java Web Start JPEG Header Parsing Integer Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: BART Card Advisory ("Michal" <michal@...rescope.co.uk>)
• [SECURITY] [DSA 1851-1] New gst-plugins-bad0.10 packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
• Re: BART Card Advisory ("Thor (Hammer of God)" <thor@...merofgod.com>)
• iDefense Security Advisory 08.06.09: Sun Java Runtime Environment (JRE) Pack200 Decompression Integer Overflow Vulnera… (iDefense Labs <labs-no-reply@...fense.c…)
• [ MDVSA-2009:195-1 ] apr (security@...driva.com)
• iDefense Security Advisory 08.06.09: IBM AIX libC _LIB_INIT_DBG Arbitrary File Creation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• BART Card Advisory (Martin Bogomolni <martinbogo@...il.com>)
• iDefense Security Advisory 08.06.09: Adobe Flash Player URL Parsing Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 08.06.09: Microsoft Internet Explorer HTML TIME 'ondatasetcomplete' Use After Free Vulnerab… (iDefense Labs <labs-no-reply@...fense.c…)

• [ GLSA 200908-03 ] libTIFF: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
• [ GLSA 200908-04 ] Adobe products: Multiple vulnerabilities (Robert Buchholz <rbu@...too.org>)
• [ MDVSA-2009:196 ] samba (security@...driva.com)
• iDefense Security Advisory 08.07.09: Adobe Flash Player Invalid Loader Object Reference Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [ MDVSA-2009:197 ] nss (security@...driva.com)
• [ MDVSA-2009:198 ] firefox (security@...driva.com)

• Re: BART (Jacob Appelbaum <jacob@...elbaum.net>)
• [USN-812-1] Subversion vulnerability (Jamie Strandboge <jamie@...onical.com>)
• [USN-813-1] apr vulnerability (Jamie Strandboge <jamie@...onical.com>)
• [USN-813-2] Apache vulnerability (Jamie Strandboge <jamie@...onical.com>)
• [USN-813-3] apr-util vulnerability (Jamie Strandboge <jamie@...onical.com>)
• CA20090806-01: Security Notice for Data Transport Services ("Kotas, Kevin J" <Kevin.Kotas@...com>)
• CA20090806-02: Security Notice for Unicenter Asset Portfolio Management, Unicenter Desktop and Server Management, Unicen… ("Kotas, Kevin J" <Kevin.Kotas@...com>)
• PHP 5.3.0 (main.c) open_basedir bypass (Maksymilian Arciemowicz <cxib@...urityreason.com>)
• SECURITYREASON: PHP 5.2.10/5.3.0 (zend_ini.c) Memory Disclosure (Maksymilian Arciemowicz <cxib@...urityreason.com>)
• Subversion heap overflow (Matt Lewis <mattlewis@...gle.com>)
• [SECURITY] [DSA 1852-1] New fetchmail packages fix SSL certificate verification weakness (Nico Golde <nion@...ian.org>)
• ASUS Eee PC and other series: BIOS SMM privilege escalation vulnerabilities ("core collapse" <core_collapse@...h.com>)
• ZDI-09-051: EMC Replication Manager Client Control Service Remove Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-09-052: CA Unicenter Software Delivery dtscore.dll Stack Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• [ANNOUNCE] Apache ODE 1.3.3 (Matthieu Riou <mriou@...che.org>)
• [SECURITY] [DSA 1853-1] New memcached packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
• [ MDVSA-2009:161-1 ] squid (security@...driva.com)
• [NGENUITY] - Ticket Subject Persistent XSS in Kayako SupportSuite (Adam Baldwin <adam_baldwin@...nuity-is.com>)
• [SECURITY] [DSA 1854-1] New APR packages fix arbitrary code execution (Florian Weimer <fw@...eb.enyo.de>)
• [SECURITY] [DSA 1855-1] New subversion packages fix arbitrary code execution (Florian Weimer <fw@...eb.enyo.de>)
• [NGENUITY] - Spiceworks Multiple Vulnerabilities (XSS & CSRF) (Adam Baldwin <adam_baldwin@...nuity-is.com>)
• AntiSec Owns Microsoft (antisec@...hmail.com)
• [ MDVSA-2009:199 ] subversion (security@...driva.com)
• Ureleet is the Anti-Sec ("someone lawyer" <someone@...yer.com>)

• Re: Ureleet is the Anti-Sec (antisec@...hmail.com)
• AntiSec PHHEER #1 (antisec@...hmail.com)
• Re: AntiSec PHHEER #1 (antisec@...hmail.com) (Zloss <azask2@...il.com>)
• Re: AntiSec PHHEER #1 (antisec@...hmail.com) (Gichuki John Chuksjonia <chuksjonia@...il.com>)
• AntiSec Welcomes Milton! (antisec@...hmail.com)
• AntiSec PHHEER #2 (antisec@...hmail.com)
• Re: BART (comex <comexk@...il.com>)
• Re: AntiSec Owns Microsoft (sunjester <tripmonster@...il.com>)

• Salted passwords (T Biehn <tbiehn@...il.com>)
• ZDI-09-052: CA Unicenter Software Delivery dtscore.dll Stack Overflow Vulnerability ("Yanez, Ryan" <ryan.yanez@...com>)
• [SECURITY] [DSA 1856-1] New mantis packages fix information leak (Thijs Kinkhorst <thijs@...ian.org>)
• [SECURITY] [DSA 1843-2] New squid3 packages fix regression (Nico Golde <nion@...ian.org>)
• [SECURITY] [DSA 1857-1] New camlimages packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
• Hindustan Times epaper Server Hacked (Sky <whitematrix@...il.com>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• [RT-SA-2009-005] Papoo CMS: Authenticated Arbitrary Code Execution (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
• Re: Salted passwords (T Biehn <tbiehn@...il.com>)
• Re: Hindustan Times epaper Server Hacked (T Biehn <tbiehn@...il.com>)
• Re: Ureleet is the Anti-Sec (T Biehn <tbiehn@...il.com>)
• Re: Salted passwords (antisec@...hmail.com)
• Re: Salted passwords (T Biehn <tbiehn@...il.com>)
• Re: AntiSec Owns Microsoft (antisec@...hmail.com)
• AntiSec PHHEER #3 (antisec@...hmail.com)
• Re: Hindustan Times epaper Server Hacked (webDEViL <w3bd3vil@...il.com>)
• Re: Ureleet is the Anti-Sec (Valdis.Kletnieks@...edu)
• Re: Salted passwords (Valdis.Kletnieks@...edu)
• Re: Salted passwords (T Biehn <tbiehn@...il.com>)
• [SECURITY] [DSA 1858-1] New imagemagick packages fix several vulnerabilities (Luciano Bello <luciano@...ian.org>)
• [SECURITY] [DSA 1859-1] New libxml2 packages fix several issues (Nico Golde <nion@...ian.org>)
• Re: Salted passwords (raid@...hmail.com)
• Re: Salted passwords (T Biehn <tbiehn@...il.com>)

• WordPress <= 2.8.3 Remote admin reset password (laurent gaffie <laurent.gaffie@...il.com>)
• Re: Ureleet is the Anti-Sec ("someone lawyer" <someone@...yer.com>)
• Re: WordPress <= 2.8.3 Remote admin reset password (laurent gaffie <laurent.gaffie@...il.com>)
• Re: Ureleet is the Anti-Sec (antisec@...hmail.com)
• Re: Ureleet is the Anti-Sec (anti-scared- sheep <securyourbrain@...il.com>)
• Re: WordPress <= 2.8.3 Remote admin reset password (laurent gaffie <laurent.gaffie@...il.com>)
• Re: Ureleet is the Anti-Sec (antisec@...hmail.com)
• Re: WordPress <= 2.8.3 Remote admin reset password (laurent gaffie <laurent.gaffie@...il.com>)
• Re: WordPress <= 2.8.3 Remote admin reset password (Jeremy Brown <0xjbrown41@...il.com>)
• Re: WordPress <= 2.8.3 Remote admin reset password (ehmo <diskusie@...il.com>)
• Re: WordPress <= 2.8.3 Remote admin reset password (laurent gaffie <laurent.gaffie@...il.com>)
• Re: WordPress <= 2.8.3 Remote admin reset password (Nicolas Valcárcel Scerpella <nicolas.valcarcel@...onical.com>)
• Re: Ureleet is the Anti-Sec ("someone lawyer" <someone@...yer.com>)
• Re: WordPress <= 2.8.3 Remote admin reset password (laurent gaffie <laurent.gaffie@...il.com>)
• Re: WordPress <= 2.8.3 Remote admin reset password (laurent gaffie <laurent.gaffie@...il.com>)
• Re: WordPress <= 2.8.3 Remote admin reset password (laurent gaffie <laurent.gaffie@...il.com>)
• Re: WordPress <= 2.8.3 Remote admin reset password (laurent gaffie <laurent.gaffie@...il.com>)
• Re: WordPress <= 2.8.3 Remote admin reset password (g30rg3_x <g30rg3x@...il.com>)
• [USN-814-1] openjdk-6 vulnerabilities (Kees Cook <kees@...ntu.com>)
• Slander of security researcher n3td3v ("someone lawyer" <someone@...yer.com>)
• Re: Slander of security researcher n3td3v (quispiam lepidus <quispiam.lepidus@...il.com>)
• Re: Slander of security researcher n3td3v (Valdis.Kletnieks@...edu)
• Re: Slander of security researcher n3td3v ("someone lawyer" <someone@...yer.com>)
• Re: Slander of security researcher n3td3v (Michael Simpson <mikie.simpson@...il.com>)
• Re: Slander of security researcher n3td3v (Valdis.Kletnieks@...edu)
• Re: Hindustan Times epaper Server Hacked (Harry Behrens <harry@...rens.com>)
• Re: Slander of security researcher n3td3v (John Dietz <www.whitewolf@...il.com>)
• AST-2009-005: Remote Crash Vulnerability in SIP channel driver ("Asterisk Security Team" <security@...erisk.org>)
• Fwd: Re[2]: [Dailydave] Security people are leaches. [sic] (Thierry Zoller <Thierry@...ler.lu>)
• Re: Slander of security researcher n3td3v ("John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>)
• Sql injection in OCS Inventory NG Server 1.2.1 (gmcbr0 gmcbr0 <gmcbr0@...il.com>)
• Re: Ureleet is the Anti-Sec ("Exibar" <exibar@...lair.com>)
• [USN-815-1] libxml2 vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Re: Alleged Slander of an assumed security researcher ("Lincoln Anderson" <ayblinkin@...il.com>)
• Slander of security researcher n3td3v ("someone lawyer" <someone@...yer.com>)
• Re: Slander of security researcher n3td3v (antisec@...hmail.com)
• Re: Slander of security researcher n3td3v (T Biehn <tbiehn@...il.com>)
• Re: Alleged Slander of an assumed security researcher ("Thor (Hammer of God)" <thor@...merofgod.com>)

• Hijacking Safari 4 Top Sites with Phish Bombs ("Inferno" <inferno@...urethoughts.com>)
• Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006 ("Lists" <lists@...seofsecurity.com.au>)
• [PT-2008-09] Microsoft Windows MSMQ Privilege Escalation Vulnerability ("Valery Marchuk" <tecklord@...uritylab.ru>)
• [Professional IT Security Providers - Exposed] Redspin, Inc. (C+) (secreview <secreview@...hmail.com>)
• Multiple sscanf vulnerabilities in Asterisk [MU-200908-01] (Mu Dynamics Research Team <security@...ynamics.com>)
• Re: Salted passwords ("Lyal Collins" <lyalc@....net.au>)
• TPTI-09-06: Microsoft Windows Workstation Service NetrGetJoinInformation Heap Corruption Vulnerability (dvlabs <dvlabs@...pingpoint.com>)
• ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-09-054: Microsoft Office OWC10.Spreadsheet ActiveX msDataSourceObject() Heap Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-09-055: Microsoft Office OWC10 ActiveX Control Loading and Unloading Heap Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-09-056: Microsoft Office OWC10.Spreadsheet ActiveX BorderAround() Heap Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-09-057: Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• [ MDVSA-2009:200 ] libxml (security@...driva.com)
• [SECURITY] [DSA 1860-1] New Ruby packages fix several issues (Florian Weimer <fw@...eb.enyo.de>)
• Jean-Francois MOLARO is on training (Jean-Francois MOLARO <jean-francois.molaro@...ib.com>)
• [ MDVSA-2009:201 ] fetchmail (security@...driva.com)
• [USN-816-1] fetchmail vulnerability (Kees Cook <kees@...ntu.com>)

• KIWICON ]|[ 2009 - Call For Papers ("Kiwicon <3" <kiwicon@...icon.org>)
• Windows 7 Firewire Attacks - and Defense Techniques (Security Research Publications <publications@...urityresearch.at>)
• Re: [Professional IT Security Providers - Exposed] Redspin, Inc. (C+) (Gichuki John Chuksjonia <chuksjonia@...il.com>)
• [IMF 2009] Call for Participation (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
• Drupal Print Module Multiple Vulnerabilities (Justin Klein Keane <justin@...irish.net>)
• Linux NULL pointer dereference due to incorrect proto_ops initializations (Tavis Ormandy <taviso@....lonestar.org>)
• BART disclosure by Jacob Appelbaum (auto793094@...hmail.com)

• SUSE Security Announcement: subversion (SUSE-SA:2009:044) (Thomas Biege <thomas@...e.de>)
• Authentication Bypass of Snom Phone Web Interface ("Walter Sprenger" <walter.sprenger@...c.ch>)
• http://secreview.blogspot.com -- end of life (secreview@...hmail.me)
• [SECURITY] [DSA 1861-1] New libxml packages fix several issues (Nico Golde <nion@...ian.org>)
• ICQ 6.5 HTML-injection vulnerability (Shine Shadow <ss_contacts@...mail.com>)
• Re: Linux NULL pointer dereference due to incorrect proto_ops initializations (Przemyslaw Frasunek <przemyslaw@...sunek.com>)
• Re: http://secreview.blogspot.com -- end of life (Gichuki John Chuksjonia <chuksjonia@...il.com>)
• ByPass a BlueCoat Proxy 8100 Serie authentification ("antoine@...to.fr" <antoine@...to.fr>)
• Re: ByPass a BlueCoat Proxy 8100 Serie authentification (Sebastien gioria <seb@...ria.org>)
• Re: ByPass a BlueCoat Proxy 8100 Serie authentification (Guy <full-disclosure@...lamatix.com>)
• nullpointer fix question (maxigas <maxigas@...rgeek.net>)
• Re: nullpointer fix question (Tavis Ormandy <taviso@....lonestar.org>)
• Re: ByPass a BlueCoat Proxy 8100 Serie authentification ("antoine@...to.fr" <antoine@...to.fr>)
• [ MDVSA-2009:202 ] memcached (security@...driva.com)
• Re: ByPass a BlueCoat Proxy 8100 Serie authentification (Guy <full-disclosure@...lamatix.com>)
• Mr. Magorium's Wunderbar Emporium (spender@...ecurity.net (Brad Spengler))
• Re: Linux NULL pointer dereference due to incorrect proto_ops initializations (Soo-Hyun Choi <s.choi@...kers.org.uk>)
• Re: Mr. Magorium's Wunderbar Emporium (Valdis.Kletnieks@...edu)
• Re: BART (Jacob Appelbaum <jacob@...elbaum.net>)
• Re: ByPass a BlueCoat Proxy 8100 Serie authentification (Alan Buxey <A.L.M.Buxey@...ro.ac.uk>)
• Re: ByPass a BlueCoat Proxy 8100 Serie authentification (Guy <full-disclosure@...lamatix.com>)

• (USA) Fighting the tyranny of fusion centers / JTTF harassment and profiling (ask.fd@...hmail.com)
• Re: Mr. Magorium's Wunderbar Emporium (security curmudgeon <jericho@...rition.org>)
• Might want to add this to your blocked list (Kerry Hatcher <khatcher@...epointsecurity.com>)
• FW: http://secreview.blogspot.com -- end of life ("Michal" <michal@...rescope.co.uk>)
• [Professional IT Security Providers - Exposed] For our readers (secreview <secreview@...hmail.com>)
• [SECURITY] [DSA 1862-1] New Linux 2.6.26 packages fix privilege escalation (dann frazier <dannf@...ian.org>)
• Re: Mr. Magorium's Wunderbar Emporium (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• Re: (USA) Fighting the tyranny of fusion centers / JTTF harassment and profiling (Rohit Patnaik <quanticle@...il.com>)
• Re: http://secreview.blogspot.com -- end of life (Soo-Hyun Choi <s.choi@...kers.org.uk>)
• [ MDVSA-2009:203 ] curl (security@...driva.com)

• Re: Contents of Full-Disclosure digest... (postmaster <postmaster8@...il.com>)
• You Deleted Your Cookies? Think Again ("Ivan ." <ivanhec@...il.com>)
• Re: Mr. Magorium's Wunderbar Emporium (Valdis.Kletnieks@...edu)
• Re: Mr. Magorium's Wunderbar Emporium ("Valdis' Mustache" <securitas.mustata@...il.com>)
• [SECURITY] [DSA 1863-1] New zope2.10/zope2.9 packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
• DeepSec 2009 - Preliminary Schedule is online (DeepSec Conference <deepsec@...psec.net>)
• Re: Full-Disclosure Digest, Vol 54, Issue 24 (Robert James <robertjamesmb@...il.com>)

• [ MDVSA-2009:204 ] wxgtk (security@...driva.com)
• A Closer Look at the Twitter-Controlled Botnet ("my.hndl" <my.hndl@...il.com>)
• Piwigo SQL Injection Vulnerability - Security Advisory - SOS-09-007 ("Lists" <lists@...seofsecurity.com.au>)
• ekoparty Security Conference 2009 Announcements (ekoparty staff <no-reply@...party.com.ar>)
• [SECURITY] [DSA 1864-1] New Linux 2.6.24 packages fix privilege escalation (dann frazier <dannf@...ian.org>)
• [SECURITY] [DSA 1865-1] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
• Academic research about computer forenisc guidelines ("08100845@...m.ac.uk" <alexueng@...d.net.tw>)
• [USN-818-1] curl vulnerability (Kees Cook <kees@...ntu.com>)

• [ MDVSA-2009:205 ] kernel (security@...driva.com)
• TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local (evil fingers <contact.fingers@...il.com>)
• Vtiger CRM 5.0.4 Multiple Vulnerabilities (ascii <ascii@...amail.com>)
• Re: (USA) Fighting the tyranny of fusion centers / JTTF harassment and profiling ("someone lawyer" <someone@...yer.com>)
• Safari buffer overflow ("Leon Juranic" <leon.juranic@...igo.hr>)
• Drupal flag module xss vulnerability (Justin Klein Keane <justin@...irish.net>)
• Cisco Security Advisory: Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerability (Cisco Systems Product Security Incident Response…)
• Information disclosure on Netgear WNR2000 (Jean Trolleur <sigtstp@...il.com>)
• False statements made about security researcher n3td3v ("someone lawyer" <someone@...yer.com>)
• Re: False statements made about security researcher n3td3v (Andrew Kuriger <a.kuriger@...uidphlux.com>)
• Re: False statements made about security researcher n3td3v (Sub <fd@....de>)
• CA20090818-02: Security Notice for CA Internet Security Suite ("Kotas, Kevin J" <Kevin.Kotas@...com>)
• CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System ("Kotas, Kevin J" <Kevin.Kotas@...com>)
• Re: False statements made about security researcher n3td3v ("someone lawyer" <someone@...yer.com>)
• [ GLSA 200908-05 ] Subversion: Remote execution of arbitrary code (Alex Legler <a3li@...too.org>)
• [ GLSA 200908-06 ] CDF: User-assisted execution of arbitrary code (Alex Legler <a3li@...too.org>)
• [ GLSA 200908-07 ] Perl Compress::Raw modules: Denial of Service (Alex Legler <a3li@...too.org>)
• [ GLSA 200908-08 ] ISC DHCP: dhcpd Denial of Service (Alex Legler <a3li@...too.org>)
• [ GLSA 200908-09 ] DokuWiki: Local file inclusion (Alex Legler <a3li@...too.org>)
• [ GLSA 200908-10 ] Dillo: User-assisted execution of arbitrary code (Alex Legler <a3li@...too.org>)
• CORE-2009-0727: Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• Re: False statements made about security researcher n3td3v (Valdis.Kletnieks@...edu)
• [ MDVSA-2009:206 ] wget (security@...driva.com)

• Re: False statements made about security researcher n3td3v ("someone lawyer" <someone@...yer.com>)
• Re: False statements made about security researcher n3td3v (Sub <fd@....de>)
• rPSA-2009-0118-1 mod_dav_svn subversion (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2009-0119-1 apr apr-util (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2009-0121-1 kernel open-vm-tools (rPath Update Announcements <announce-noreply@...th.com>)
• ZDI-09-058: Oracle Secure Backup Administration Server Authentication Bypass Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-09-059: Oracle Secure Backup Administration Server Multiple Command Injection Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Kaspersky AV/IS 2010 (avp.exe) Denial-of-Service (Maksymilian Arciemowicz <cxib@...urityreason.com>)
• [USN-819-1] Linux kernel vulnerability (Kees Cook <kees@...ntu.com>)
• [SECURITY] [DSA 1867-1] New kdelibs packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
• [SECURITY] [DSA 1866-1] New kdegraphics packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
• [SECURITY] [DSA 1868-1] New kde4libs packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
• [USN-802-2] Apache regression (Marc Deslauriers <marc.deslauriers@...onical.com>)
• [IVIZ-09-005] CA HIPS Remote Kernel Vulnerability (iViZ Security Advisory <advisories@...zsecurity.com>)
• Re: False statements made about security researcher n3td3v ("Exibar" <exibar@...lair.com>)
• Cisco Security Advisory: Firewall Services Module Crafted ICMP Message Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Re: False statements made about security researcher n3td3v (D-vice <lord.x86@...il.com>)
• iDefense Security Advisory 08.11.09: Microsoft Office Web Components 2000 Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [ MDVSA-2009:207 ] perl-Compress-Raw-Bzip2 (security@...driva.com)
• [USN-809-1] GnuTLS vulnerabilities (Jamie Strandboge <jamie@...onical.com>)

• [SECURITY] [DSA 1869-1] New curl packages fix SSL certificate verification weakness (Nico Golde <nion@...ian.org>)
• [SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
• Re: [SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution (Nico Golde <fd@...lde.de>)
• iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Security Bypass Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Information Disclosure Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• [Bkis-11-2009] ProShow Gold Buffer Overflow Vulnerabilities (Bkis <svrt@...v.com.vn>)
• iDefense Security Advisory 08.11.09: Multiple Vendor Microsoft ATL/MFC ActiveX Type Confusion Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Dirtiest Web Sites of Summer 2009 ("Ivan ." <ivanhec@...il.com>)
• Bypassing OWASP ESAPI XSS Protection inside Javascript ("Inferno" <inferno@...urethoughts.com>)
• What's up with PacktStorm's website? (Leandro Malaquias <lm.net.security@...il.com>)
• Re: What's up with PacktStorm's website? (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• Facebook CSRF attack allows personal information theft (Ronen Z <ronen@...ji.com>)
• [USN-820-1] Pidgin vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Re: What's up with PacktStorm's website? (Iadnah <iadnah@...inklounge.com>)
• Re: What's up with PacketStorm's website? (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
• [ MDVSA-2009:208 ] libgadu (security@...driva.com)
• Authentication bypass on Netgear WNR2000 (Jean Trolleur <sigtstp@...il.com>)
• [USN-817-1] Thunderbird vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• Geeklog <- 1.6.0sr1 - Remote Arbitrary File Upload (Jaloh Smith <jal0h@...mail.com>)

• [ MDVSA-2009:209 ] java-1.6.0-openjdk (security@...driva.com)
• Re: What's up with PacktStorm's website? ("I.M Ariot" <imariot@...il.com>)
• t2?09 Challenge - Free Tickets Available (Tomi Tuominen <tomi.tuominen@...fi>)
• [ MDVSA-2009:210 ] gnutls (security@...driva.com)
• VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server (VMware Security team <security@...are.com>)
• Questions for the iProphet (netdev.doctor@...hmail.com)
• Re: Questions for the iProphet ("Anders Klixbull" <akl@...erian.dk>)
• NTFS Alternate Data Stream (Leandro Malaquias <lm.net.security@...il.com>)
• Free wlan sniffer for vista ("TK" <ktriv3di@....com>)
• Re: ByPass a BlueCoat Proxy 8100 Serie authentification (Guy <full-disclosure@...lamatix.com>)
• Re: Free wlan sniffer for vista (Andrew Kuriger <a.kuriger@...uidphlux.com>)
• OWASP Announces International Application Security Conference for 2009 (AppSec DC <mark.bristow@...sp.org>)
• Re: Questions for the iProphet (Andrew A <gluttony@...il.com>)
• Re: Questions for the iProphet (Paul Schmehl <pschmehl_lists@...rr.com>)
• Re: Questions for the iProphet (T Biehn <tbiehn@...il.com>)
• Re: Questions for the iProphet (Night Ninja <peanuter@...il.com>)
• Intercepting Southern California Gas Company user credentials... (socalgas.com) (Kristian Erik Hermansen <kristian.hermansen@...il.com>)

• FreeBSD stuff (Kingcope <kcope2@...glemail.com>)
• Packet Storm is back online. (Packet Storm <fulldis@...ketstormsecurity.org>)
• Re: Questions for the iProphet (netdev.doctor@...hmail.com)
• Re: Free wlan sniffer for vista (Peter van Hooft <hooft@...lab.research.philips.com>)
• Re: Questions for the iProphet (Iadnah <iadnah@...inklounge.com>)
• Re: Free wlan sniffer for vista ("Ivan ." <ivanhec@...il.com>)
• Re: Questions for the iProphet (Andrew A <gluttony@...il.com>)
• FreeBSD <= 6.1 kqueue() NULL pointer dereference (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)

• Twitter Pro: Best Buy's @twelpforce is full of [security] fail (Sam Johnston <samj@...j.net>)
• Re: Twitter Pro: Best Buy's @twelpforce is full of [security] fail ("Valdis' Mustache" <securitas.mustata@...il.com>)
• Re: Twitter Pro: Best Buy's @twelpforce is full of [security] fail (Iadnah <iadnah@...inklounge.com>)
• Re: Twitter Pro: Best Buy's @twelpforce is full of [security] fail (Iadnah <iadnah@...inklounge.com>)
• Cisco CS-MARS Clear Text Password Storage - v6.0.4 and Earlier (R Wessels <ko.security@...il.com>)
• Re: NTFS Alternate Data Stream (Paul Schmehl <pauls@...allas.edu>)
• Re: Free wlan sniffer for vista (Jon Janego <jonjanego@...il.com>)
• [ MDVSA-2009:211 ] expat (security@...driva.com)
• [ MDVSA-2009:212 ] python (security@...driva.com)
• [ MDVSA-2009:212 ] python (security@...driva.com)
• [ MDVSA-2009:213 ] wxgtk (security@...driva.com)
• [ MDVSA-2009:213 ] wxgtk (security@...driva.com)
• [ MDVSA-2009:214 ] python-celementtree (security@...driva.com)
• [ MDVSA-2009:215 ] audacity (security@...driva.com)
• [ MDVSA-2009:216 ] mozilla-thunderbird (security@...driva.com)
• [ MDVSA-2009:217 ] mozilla-thunderbird (security@...driva.com)

• WizzRSS Firefox Extension - Privileged Code Injection (Nick Freeman <nick.freeman@...urity-assessment.com>)
• ScribeFire Firefox Extension - Privileged Code Injection (Nick Freeman <nick.freeman@...urity-assessment.com>)
• Feed Sidebar Firefox Extension - Privileged Code Injection (Nick Freeman <nick.freeman@...urity-assessment.com>)
• [SECURITY] [DSA 1871-1] New wordpress packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
• Radvision's Scopia Cross Site Scripting Vulnerabilities (Francesco Bianchino <f.bianchino@...il.com>)
• Re: FreeBSD <= 6.1 kqueue() NULL pointer dereference (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
• CoolPreviews - Firefox Extension - Chrome Privileged Code Injection (Roberto Suggi Liverani <roberto.suggi@...urity-assessment.com>)
• Update Scanner - Firefox Extension - Chrome Privileged Code Injection (Roberto Suggi Liverani <roberto.suggi@...urity-assessment.com>)
• D-Link 500G Authentication Bypass (Jardel Weyrich <jweyrich@...il.com>)
• D-Link 500G Authentication Bypass (Jardel Weyrich <jweyrich@...il.com>)
• [ MDVSA-2009:218 ] w3c-libwww (security@...driva.com)
• [ MDVSA-2009:219 ] kompozer (security@...driva.com)
• [USN-822-1] KDE-Libs vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• [USN-823-1] KDE-Graphics vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• [USN-824-1] PHP vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
• [USN-825-1] libvorbis vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
• [ MDVSA-2009:220 ] davfs (security@...driva.com)
• [ MDVSA-2009:221 ] libneon0.27 (security@...driva.com)

• [SECURITY] [DSA 1872-1] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
• rPSA-2009-0122-1 idle python (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2009-0123-1 apr-util (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2009-0124-1 curl (rPath Update Announcements <announce-noreply@...th.com>)
• Sexless schadenfreude: the potential extremist Michael Crook. ("Michael Crook" <michael.crook@...hmail.com>)
• Re: Sexless schadenfreude: the potential extremist Michael Crook. (dramacrat <yirimyah@...il.com>)
• Re: Sexless schadenfreude: the potential extremist Michael Crook. (Valdis.Kletnieks@...edu)
• Re: Sexless schadenfreude: the potential extremist Michael Crook. (T Biehn <tbiehn@...il.com>)
• [SECURITY] [DSA 1833-2] New dhcp3 packages fix arbitrary code execution (Florian Weimer <fw@...eb.enyo.de>)
• iDefense Security Advisory 08.25.09: Autonomy KeyView Excel File SST Parsing Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Bypassing DBMS_ASSERT in certain situations ("David Litchfield" <davidl@...software.com>)
• Oracle PL/SQL Injection Flaw in REPCAT_RPC.VALIDATE_REMOTE_RC ("David Litchfield" <davidl@...software.com>)
• Oracle 11g (11.1.0.6) Password Policy and Compliance ("David Litchfield" <davidl@...software.com>)
• H4RDW4RE presentations updated ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Flex website scanners ("TK" <ktriv3di@....com>)
• Re: Flex website scanners (Jack Mannino <jack.a.mannino@...il.com>)

• WPA attack improved to 1min, MITM (Dragos Ruiu <dr@....net>)
• НА: WPA attack improved to 1min, MITM (Найденко Александр <aanaydenko@...il.com>)
• Re: WPA attack improved to 1min, MITM (NOC <i@...t.ms>)
• [PT-2009-05] CA Internet Security Suite Denial of Service Vulnerability ("Valery Marchuk" <tecklord@...uritylab.ru>)
• Re: H4RDW4RE presentations updated ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: НА: WPA attack improved to 1min, MITM (Rohit Patnaik <quanticle@...il.com>)
• Re: НА: WPA attack improved to 1min, MITM (S I <skander.iversen@...il.com>)
• Re: НА: WPA attack improved to 1min, MITM (Cedric Blancher <blancher@...tel-securite.fr>)
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@c…)
• Re: НА: WPA attack improved to 1min, MITM (Dragos Ruiu <dr@....net>)
• Re: НА: WPA attack improved to 1min, MITM ("M.B.Jr." <marcio.barbado@...il.com>)
• Re: НА: WPA attack improved to 1min, MITM (Rohit Patnaik <quanticle@...il.com>)
• Re: НА: WPA attack improved to 1min, MITM (Tim <tim-security@...tinelchicken.org>)
• [SECURITY] [DSA 1873-1] New xulrunner packages fix spoofing vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1874-1] New nss packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [USN-826-1] Mono vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

• Intelligence Report: n3td3v went into cybercrime underground ("Jack Bauer - Internet JTTF" <whereisnetdev@...hmail.com>)
• Re: Intelligence Report: n3td3v went into cybercrime underground (Ronny Lawson <ronnylawson@...il.com>)
• Re: Intelligence Report: n3td3v went into cybercrime underground (Ronny Lawson <ronnylawson@...il.com>)
• [SECURITY] [DSA 1871-2] New wordpress packages fix regression (white@...ian.org (Steffen Joeris))
• n3td3v drops handle, picks up "InfoSecAlertNet". iProphet treks toward hyperborea (Joey Kilmore <jkilmore3@...oo.de>)
• Re: n3td3v drops handle, picks up "InfoSecAlertNet". iProphet treks toward hyperborea (D-vice <lord.x86@...il.com>)
• Re: n3td3v drops handle, picks up "InfoSecAlertNet". iProphet treks toward hyperborea (Sub <fd@....de>)
• Re: [SECURITY] [DSA 1862-1] New Linux 2.6.26 packages fix privilege escalation (morla <morla@...cksucht.de>)
• Re: phish war game ("lsi" <stuart@...erdelix.net>)
• windows future ("lsi" <stuart@...erdelix.net>)
• Re: [SECURITY] [DSA 1862-1] New Linux 2.6.26 packages fix privilege escalation (D-vice <lord.x86@...il.com>)
• (no subject) (rahul nagpal <rahulnagpal1989@...oo.com>)
• (no subject) (rahul nagpal <rahulnagpal1989@...oo.com>)
• [Fwd: Re: windows future] (Rohit Patnaik <quanticle@...il.com>)
• Re: [SECURITY] [DSA 1862-1] New Linux 2.6.26 packages fix privilege escalation (Peter Besenbruch <prb@...a.net>)
• Re: [Fwd: Re: windows future] (Peter Besenbruch <prb@...a.net>)
• Re: [Fwd: Re: windows future] ("Thor (Hammer of God)" <thor@...merofgod.com>)
• SANS ... CERT Handler ("J. Oquendo" <sil@...iltrated.net>)
• Re: [Fwd: Re: windows future] (Rohit Patnaik <quanticle@...il.com>)
• Re: [Fwd: Re: windows future] (Peter Besenbruch <prb@...a.net>)
• Re: [Fwd: Re: windows future] (Rohit Patnaik <quanticle@...il.com>)
• Re: [Fwd: Re: windows future] ("Thor (Hammer of God)" <thor@...merofgod.com>)

• Re: [Fwd: Re: windows future] (Rob Thompson <my.security.lists@...il.com>)
• Re: [Fwd: Re: windows future] (Peter Besenbruch <prb@...a.net>)
• Re: [Fwd: Re: windows future] ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: [Fwd: Re: windows future] ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Time to stop this non-sense ("jamesleesmith67@....co.uk" <jamesleesmith67@....co.uk>)
• Re: windows future ("lsi" <stuart@...erdelix.net>)
• Re: Time to stop this non-sense (Gavin <netmatters@...il.com>)
• Team SHATTER Security Advisory: Buffer Overflow in Resource Manager of Oracle Database - Plan name parameter (Shatter <shatter@...secinc.com>)
• Re: windows future (Rohit Patnaik <quanticle@...il.com>)
• Re: Time to stop this non-sense (T Biehn <tbiehn@...il.com>)
• Re: Time to stop this non-sense (r1d1nd1rty@...h.com)
• Re: Time to stop this non-sense (Gavin <netmatters@...il.com>)
• Re: [Fwd: Re: windows future] (Peter Besenbruch <prb@...a.net>)
• Re: windows future (Paul Schmehl <pschmehl_lists@...rr.com>)
• [ MDVSA-2009:222 ] squirrelmail (security@...driva.com)
• Re: [Fwd: Re: windows future] ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: windows future (Rohit Patnaik <quanticle@...il.com>)
• Re: [Fwd: Re: windows future] (Peter Besenbruch <prb@...a.net>)
• Re: [Fwd: Re: windows future] ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Time to stop this non-sense (T Biehn <tbiehn@...il.com>)
• Re: windows future (Paul Schmehl <pschmehl_lists@...rr.com>)
• Re: [Fwd: Re: windows future] (Peter Besenbruch <prb@...a.net>)
• Re: windows future (Rob Thompson <my.security.lists@...il.com>)

• about PC AntiSpyware 2010 (KY <manager@...seeda.ddo.jp>)
• Re: about PC AntiSpyware 2010 (Guy <full-disclosure@...lamatix.com>)
• Re: [Fwd: Re: windows future] ("Michal" <michal@...rescope.co.uk>)
• Moar iProphet questions ("Gary McKinnon" <john.wallace@...h.com>)
• Re: Moar iProphet questions (Gichuki John Chuksjonia <chuksjonia@...il.com>)
• Re: Moar iProphet questions ("jamesleesmith67@....co.uk" <jamesleesmith67@....co.uk>)
• Re: Moar iProphet questions (r1d1nd1rty@...h.com)
• Re: windows future (Robinson DELAUGERRE <rdelaugerre@...international.com>)

• Re: windows future ("lsi" <stuart@...erdelix.net>)
• Re: windows future ("lsi" <stuart@...erdelix.net>)
• Re: windows future (Peter Ferrie <peter.ferrie@...il.com>)
• Re: [Fwd: Re: windows future] ("Elazar Broad" <elazar@...hmail.com>)
• Re: windows future ("Elazar Broad" <elazar@...hmail.com>)
• Why the censorship? (was re: Inquira: Multiple Vulnerabilities) (security curmudgeon <jericho@...rition.org>)
• Re: windows future ("Elazar Broad" <elazar@...hmail.com>)
• Wachovia Banking Wizard - XSS - PoC (Marshall Whittaker <marshallwhittaker@...il.com>)
• Re: Why the censorship? ("jamesleesmith67@....co.uk" <jamesleesmith67@....co.uk>)
• Chicken soup for the suspects soul. ("Henry David Notso Thorough" <jd.suspect@...h.com>)
• [ MDVSA-2009:223 ] xerces-c (security@...driva.com)
• Free n3td3v is born ("jamesleesmith67@....co.uk" <jamesleesmith67@....co.uk>)
• [ MDVSA-2009:224 ] postfix (security@...driva.com)

• Why FD should unban n3td3v. ("John Q Publix" <johnqpublicr@...h.com>)
• Re: Why FD should unban n3td3v. (Lane Christiansen <lanec42@...il.com>)
• Re: Why FD should unban n3td3v. ("Anders Klixbull" <akl@...erian.dk>)
• Microsoft Internet Information Server ftpd zeroday (Kingcope <kcope2@...glemail.com>)
• Illustrating the Linux sock_sendpage() NULL pointer dereference on Power/Cell BE Architecture (Ramon de Carvalho Valle <ramon@...esecurity.org>)
• Re: windows future (Valdis.Kletnieks@...edu)
• Re: Microsoft Internet Information Server ftpd zeroday (Thierry Zoller <Thierry@...ler.lu>)
• Re: Microsoft Internet Information Server ftpd zeroday (Vladimir '3APA3A' Dubrovin <3APA3A@...URITY.NNOV.RU>)
• [SECURITY] [DSA 1875-1] New ikiwiki packages fix information disclosure (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Microsoft Internet Information Server ftpd zeroday (Kingcope <kcope2@...glemail.com>)
• CORE-2009-0820: Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server (CORE Security Technologies Advisories <advisories@...esecurity.com>)

454 messages

Powered by blists - more mailing lists