full-disclosure mailing list - 2009/09

Messages by day:

September 1 (17 messages)

• Re: Why FD should unban n3td3v. (vulcanius <vulcanius@...il.com>)
• Re: Microsoft Internet Information Server ftpd zeroday ("r1d1nd1rty" <r1d1nd1rty@...h.com>)
• Re: Microsoft Internet Information Server ftpd zeroday (laurent gaffie <laurent.gaffie@...il.com>)
• VMSA-2009-0011 VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2.0 (VMware Security team <security@...are.com>)
• Vulnerable MSVC++ runtime distributed with OpenOffice.org 3.1.1 for Windows ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: OpenOffice.org Word Document Table Parsing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• Think Drupal was FLOSS and non-profit? Think again. ("Drupal is under attack" <drupal@...h.com>)
• SEC Consult SA-20090901-0 :: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application … (Johannes Greil <research@...-consult.co…)
• Pwning Opera Unite with Inferno's Eleven ("Inferno" <inferno@...urethoughts.com>)
• [BMSA-2009-06] Remote code execution in BKAV eOffice (Nam Nguyen <namn@...emoon.com.vn>)
• [ MDVSA-2009:197 ] nss (security@...driva.com)
• Re: Think Drupal was FLOSS and non-profit? Think again. (BMF <badmotherfsckr@...il.com>)
• [SECURITY] [DSA 1876-1] New dnsmasq packages fix remote code execution (Florian Weimer <fw@...eb.enyo.de>)
• Nipper licensing (dpcybuck@...il.com)
• [USN-827-1] Dnsmasq vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• Re: Nipper licensing (jlay@...ve-tothe-box.net)

• [USN-810-2] NSS regression (Kees Cook <kees@...ntu.com>)
• Re: Nipper licensing (Alan Buxey <A.L.M.Buxey@...ro.ac.uk>)
• Re: Microsoft Internet Information Server ftpd zeroday (Guido Landi <lists@...mera.org>)
• Re: Nipper licensing (BMF <badmotherfsckr@...il.com>)
• Re: Microsoft Internet Information Server ftpd zeroday (Vladimir '3APA3A' Dubrovin <3APA3A@...URITY.NNOV.RU>)
• Re: Microsoft Internet Information Server ftpd zeroday (Guido Landi <lists@...mera.org>)
• Re: Nipper licensing (Eric Sesterhenn <snakebyte@....de>)
• Re: Nipper licensing (Fizz <fizz@...ania.co.uk>)
• Re: Nipper licensing (dpcybuck@...il.com)
• Re: Nipper licensing (Valdis.Kletnieks@...edu)
• Re: Nipper licensing (Fizz <fizz@...ania.co.uk>)
• Re: Nipper licensing ("Adriel T. Desautels" <ad_lists@...ragard.com>)
• Re: Nipper licensing (Alan Buxey <A.L.M.Buxey@...ro.ac.uk>)
• [SECURITY] [DSA 1878-1] New devscripts packages fix remote code execution (Florian Weimer <fw@...eb.enyo.de>)
• Secunia PSI (RC3) - memory corruption condition (exploit dev <extraexploit@...il.com>)
• Re: Secunia PSI (RC3) - memory corruption condition (Thomas Kristensen <tk@...unia.com>)
• Re: Secunia PSI (RC3) - memory corruption condition (exploit dev <extraexploit@...il.com>)

• [SECURITY] [DSA 1877-1] New mysql-dfsg-5.0 packages fix arbitrary code execution (Sebastien Delafond <seb@...ian.org>)
• iAWACS : List of accepted papers and talks (Anthony Desnos <desnos@...ea.fr>)
• Adobe Acrobat and Reader Collab 'getIcon()' JavaScript Method Exploit and Report (CVE-2009-0927) (kralor@...omputer.net)
• PPStream PPSMediaList Activex 0day exploit (expose 0day <0day.expose@...il.com>)
• Re: PPStream PPSMediaList Activex 0day exploit (Rohit Patnaik <quanticle@...il.com>)
• <VIDEO> Global Technocracy - Part 1 (William Dyer <william.dragonlegion.dyer@...il.com>)
• Introduction (William Dyer <william.dragonlegion.dyer@...il.com>)
• <VIDEO> Global Technocracy - Part 2 (William Dyer <william.dragonlegion.dyer@...il.com>)
• Re: <VIDEO> Global Technocracy - Part 1 ("r1d1nd1rty" <r1d1nd1rty@...h.com>)
• Microsoft Internet Information Services 5.0/6.0 FTP SERVER DENIAL OF SERVICE ("Stack Exhaustion") (Kingcope <kcope2@...glemail.com>)
• AST-2009-006: IAX2 Call Number Resource Exhaustion ("Asterisk Security Team" <security@...erisk.org>)

• Re: <VIDEO> Global Technocracy - Part 1 (th3truth@...h.com)
• Re: <VIDEO> Global Technocracy - Part 1 (Rohit Patnaik <quanticle@...il.com>)
• Blonde moment for the list administrator (full-censorship@...hmail.com)
• Re: Blonde moment for the list administrator ("Lincoln Anderson" <ayblinkin@...il.com>)
• Re: windows future ("lsi" <stuart@...erdelix.net>)
• Re: windows future (Rohit Patnaik <quanticle@...il.com>)
• Re: Blonde moment for the list administrator (full-censorship@...hmail.com)
• Re: windows future ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: windows future (Valdis.Kletnieks@...edu)
• Re: Blonde moment for the list administrator (Paul Schmehl <pschmehl_lists@...rr.com>)
• [SECURITY] [DSA 1879-1] New silc-client/silc-toolkit packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
• Re: Blonde moment for the list administrator ("Exibar" <exibar@...lair.com>)
• Re: windows future (Rohit Patnaik <quanticle@...il.com>)
• Re: Blonde moment for the list administrator (full-censorship@...hmail.com)
• Re: windows future ("lsi" <stuart@...erdelix.net>)
• why not a sandbox (RandallM <randallm@...mail.com>)
• Re: why not a sandbox (Guy <full-disclosure@...lamatix.com>)
• Re: why not a sandbox ("frank^2" <frank2@...49.org>)
• Re: why not a sandbox (John Menerick <jmenerick@...suite.com>)
• Re: why not a sandbox (James Rankin <kz20fl@...glemail.com>)
• Re: why not a sandbox (Kurth Bemis <kurth.bemis@...il.com>)
• Re: Blonde moment for the list administrator (full-censorship@...hmail.com)

• VMSA-2009-0012 VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE resolve security issues. (VMware Security team <security@...are.com>)
• Re: Blonde moment for the list administrator (ghost <ghosts@...il.com>)
• Re: Blonde moment for the list administrator (IM_Ariot <imariot@...il.com>)
• Re: windows future (Rohit Patnaik <quanticle@...il.com>)
• Re: why not a sandbox (Rohit Patnaik <quanticle@...il.com>)
• Re: Blonde moment for the list administrator (vulcanius <vulcanius@...il.com>)
• Re: why not a sandbox (BlackHawk <hawkgotyou@...il.com>)
• Re: why not a sandbox (Adrenalin <adrenalinup@...il.com>)
• [SECURITY] [DSA 1880-1] New OpenOffice.org packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• Re: why not a sandbox (Fatherlaptop <fatherlaptop@...il.com>)

• yTNEF/Evolution TNEF Attachment decoder plugin directory traversal & buffer overflow vulnerabilities (Akita Software Security <lists@...tasecurity.nl>)
• Re: Blonde moment for the list administrator (full-censorship@...hmail.com)
• Re: Blonde moment for the list administrator (Stuart Carter <stuart.carter@...mcop.net>)
• Re: Blonde moment for the list administrator (Valdis.Kletnieks@...edu)
• Re: Blonde moment for the list administrator (Paul Schmehl <pschmehl_lists@...rr.com>)
• What's with www.modsecurity.org (David Alanis <canito@...an.us>)
• IS-2009-001 - Pidgin IRC TOPIC message DOS (Cristofaro Mune <pulsoid@...silence.org>)
• Re: why not a sandbox ("Elazar Broad" <elazar@...hmail.com>)
• Re: What's with www.modsecurity.org ("Elazar Broad" <elazar@...hmail.com>)

• [ GLSA 200909-01 ] Linux-PAM: Privilege escalation (Alex Legler <a3li@...too.org>)
• [ GLSA 200909-02 ] libvorbis: User-assisted execution of arbitrary code (Alex Legler <a3li@...too.org>)
• IEhrepus 想跟您聊天 (IEhrepus <5up3rh3i@...il.com>)
• DefCon 17 CTF packet captures online (Holt Sorenson <hso@...neros.net>)
• Secunia Research: VMWare VMnc Codec Mismatched Dimensions Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• [SECURITY] [DSA 1881-1] New cyrus-imapd packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
• Re: why not a sandbox (yersinia <yersinia.spiros@...il.com>)

• Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. (laurent gaffie <laurent.gaffie@...il.com>)
• Re: DefCon 17 CTF packet captures online (dreyer <dreyer@...das.es>)
• Re: Microsoft Internet Information Server ftpd zeroday (Thierry Zoller <Thierry@...ler.lu>)
• [scip_Advisory 4021] IBM Lotus Notes 8.5 RSS Widget Privilege Escalation ("Marc Ruef" <maru@...p.ch>)
• This is n3td3v and Gary McKinnon's lawyer. My client's have asburger syndrome. ("Central Security District of UK [MI7.5]" <shadowdong007@...h.com>)
• On the subject of security researcher n3td3v, Gary McKinnon "Autistic rockstar felon" ("Central Security District of UK [MI7.5]" <shadowdong007@...h.com>)
• [ MDVSA-2009:225 ] qt4 (security@...driva.com)
• [USN-828-1] PAM vulnerability (Kees Cook <kees@...ntu.com>)

• Web-monitoring software gathers data on kid chats ("Ivan ." <ivanhec@...il.com>)
• Re: Web-monitoring software gathers data on kid chats (dramacrat <yirimyah@...il.com>)
• Re: Web-monitoring software gathers data on kid chats (Rohit Patnaik <quanticle@...il.com>)
• Re: Web-monitoring software gathers data on kid chats ("Rafal M. Los" <rafal@...ackingyou.com>)
• 4f: The File Format Fuzzing Framework (Krakow Labs <krakowlabs@...il.com>)
• Cisco Security Advisory: TCP State Manipulation Denial of Service Vulnerabilities in Multiple Cisco Products (Cisco Systems Product Security Incident Response …)
• ZDI-09-062: Microsoft Internet Explorer JScript arguments Invocation Memory Corruption Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• R. RHEL, RHCS, and Selinux : hype, reality or dream? (yersinia <yersinia.spiros@...il.com>)
• Re: This is n3td3v and Gary McKinnon's lawyer. My client's have asburger syndrome. (full-censorship@...hmail.com)
• [ GLSA 200909-03 ] Apache Portable Runtime, APR Utility Library: Execution of arbitrary code (Alex Legler <a3li@...too.org>)
• [ GLSA 200909-04 ] Clam AntiVirus: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
• [ GLSA 200909-05 ] Openswan: Denial of Service (Alex Legler <a3li@...too.org>)
• [ GLSA 200909-06 ] aMule: Parameter injection (Alex Legler <a3li@...too.org>)
• [ GLSA 200909-07 ] TkMan: Insecure temporary file usage (Alex Legler <a3li@...too.org>)
• [ GLSA 200909-08 ] C* music player: Insecure temporary file usage (Alex Legler <a3li@...too.org>)
• [ GLSA 200909-09 ] Screenie: Insecure temporary file usage (Alex Legler <a3li@...too.org>)
• [ GLSA 200909-10 ] LMBench: Insecure temporary file usage (Alex Legler <a3li@...too.org>)
• [ GLSA 200909-11 ] GCC-XML: Insecure temporary file usage (Alex Legler <a3li@...too.org>)
• TCP/IP Orphaned Connections Vulnerability (Fabian Yamaguchi <fabs@...urity-labs.com>)
• [SECURITY] [DSA 1882-1] New xapian-omega packages fix cross-site scripting (Nico Golde <nion@...ian.org>)
• Re: Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. (randomguy@...hmail.com)
• Re: This is n3td3v and Gary McKinnon's lawyer. My client's have asburger syndrome. (Valdis.Kletnieks@...edu)
• CORE-2009-0820 - Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• [ MDVSA-2009:226 ] aria2 (security@...driva.com)
• Re: This is n3td3v and Gary McKinnon's lawyer. My client's have asburger syndrome. (mrx <mrx@...pergander.org.uk>)
• Re: This is n3td3v and Gary McKinnon's lawyer. My client's have asburger syndrome. (randomguy@...hmail.com)

• Question about police harassment. Police trying over years to "entrap" me as hacker. ("TheLearner" <mrxisaplant@...h.com>)
• Re: Question about police harassment. Police trying over years to "entrap" me as hacker. (Jeff MacDonald <jam@...dtechnologies.com>)
• Re: Question about police harassment. Police trying over years to "entrap" me as hacker. (auto199984@...hmail.com)
• Re: Question about police harassment. Police trying over years to "entrap" me as hacker. (David Shaw <dave.shaw@...il.com>)
• Re: Question about police harassment. Police trying over years to "entrap" me as hacker. (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. (James Matthews <nytrokiss@...il.com>)
• Re: This is n3td3v and Gary McKinnon's lawyer. My client's have asburger syndrome. (D-vice <lord.x86@...il.com>)
• Re: Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. (D-vice <lord.x86@...il.com>)
• [SECURITY] [DSA 1883-1] New nagios2 packages fix several cross-site scriptings (white@...ian.org (Steffen Joeris))
• Re: Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOLREQUEST Remote B.S.O.D. ("mutiny" <mutiny@...inbeardsucks.com>)
• [ MDVSA-2009:226 ] freeradius (security@...driva.com)
• Re: Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. (Mitch Oliver <oliverm@...pine.com>)
• Plain Text Password Disclosure vulnerability in rediff mail (kalyan <kalyanakumar1985@...il.com>)
• [USN-821-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• Re: Plain Text Password Disclosure vulnerability in rediff mail (webDEViL <w3bd3vil@...il.com>)
• Re: Question about police harassment. Police trying over years to "entrap" me as hacker. (T Biehn <tbiehn@...il.com>)
• Re: Question about police harassment. Police trying over years to "entrap" me as hacker. (mrx <mrx@...pergander.org.uk>)
• [USN-829-1] Qt vulnerability (Jamie Strandboge <jamie@...onical.com>)

• Firefox <3.0.14 Multiplatform RCE via pkcs11.addmodule (Dan Kaminsky <dan@...para.com>)
• ZDI-09-063: Apple QuickTime H.264 Nal Unit Length Heap Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-09-064: Apple QuickTime FlashPix Sector Size Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-09-065: Mozilla Firefox TreeColumns Dangling Pointer Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: Plain Text Password Disclosure vulnerability in rediff mail (awf awf <lol-wut-hurr@...e.com>)
• Re: Plain Text Password Disclosure vulnerability in rediff mail (Dan Kaminsky <dan@...para.com>)
• Friday the 11th of September 2009 (full-censorship@...hmail.com)
• Re: Plain Text Password Disclosure vulnerability in rediff mail (dramacrat <yirimyah@...il.com>)
• [SECURITY] [DSA 1878-2] New devscripts packages fix regressions (Florian Weimer <fw@...eb.enyo.de>)
• Re: Question about police harassment. Police trying over years to "entrap" me as hacker. (mrx <mrx@...pergander.org.uk>)
• Hack-Mail.net or similar site (mamo <mamo74@...il.com>)
• Re: Plain Text Password Disclosure vulnerability in rediff mail (D-vice <lord.x86@...il.com>)
• Multiple Smartphones MMS Notification Sender Obfuscation (<c0rnholio@...cologne.de>)
• Multiple Smartphones SMS Sender Obfuscation via WAP Push SI (<c0rnholio@...cologne.de>)
• 0xHACK - Oxford Info-Sec Group (James Whayman <whayman.jw@...il.com>)
• [ MDVSA-2009:229 ] cyrus-imapd (security@...driva.com)
• Re: Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. (laurent gaffie <laurent.gaffie@...il.com>)
• Re: 0xHACK - Oxford Info-Sec Group (Lolek of TK53 <lolek1337@...glemail.com>)
• Re: 0xHACK - Oxford Info-Sec Group (Rohit Patnaik <quanticle@...il.com>)
• A closed doors hands-on ITSec meeting (Leandro Malaquias <lm.net.security@...il.com>)
• [ MDVSA-2009:230 ] pidgin (security@...driva.com)
• Re: Plain Text Password Disclosure vulnerability in rediff mail (Valdis.Kletnieks@...edu)
• [ MDVSA-2009:231 ] htmldoc (security@...driva.com)
• ShmooCon 2010 CFP (Bruce Potter <gdead@...oo.com>)
• [ MDVSA-2009:228 ] libneon (security@...driva.com)
• [ MDVSA-2009:197-2 ] nss (security@...driva.com)
• [ MDVSA-2009:232 ] libsamplerate (security@...driva.com)
• Re: Plain Text Password Disclosure vulnerability in rediff mail (full-censorship@...hmail.com)
• Re: Plain Text Password Disclosure vulnerability in rediff mail (Valdis.Kletnieks@...edu)
• Re: Plain Text Password Disclosure vulnerability in rediff mail (full-censorship@...hmail.com)
• Re: Plain Text Password Disclosure vulnerability in rediff mail (Rohit Patnaik <quanticle@...il.com>)

• Re: Plain Text Password Disclosure vulnerability in rediff mail (mrx <mrx@...pergander.org.uk>)
• Re: Plain Text Password Disclosure vulnerability in rediff mail ("Lincoln Anderson" <ayblinkin@...il.com>)
• nullcon Goa 2010 Call For Papers (nullcon nullcon <nullcon@...lcon.net>)
• Re: Hack-Mail.net or similar site ("TheLearner" <mrxisaplant@...h.com>)
• Re: 0xHACK - Oxford Info-Sec Group ("TheLearner" <mrxisaplant@...h.com>)
• Re: Hack-Mail.net or similar site (dramacrat <yirimyah@...il.com>)
• [ GLSA 200909-12 ] HTMLDOC: User-assisted execution of arbitrary code (Alex Legler <a3li@...too.org>)
• [ GLSA 200909-13 ] irssi: Execution of arbitrary code (Alex Legler <a3li@...too.org>)
• [ GLSA 200909-14 ] Horde: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
• [ GLSA 200909-15 ] Lynx: Arbitrary command execution (Alex Legler <a3li@...too.org>)
• Re: Hack-Mail.net or similar site (Andrew Farmer <andfarm@...il.com>)

• Internet Explorer 8 Crash @ Sourceforge (Jeremy Brown <0xjbrown41@...il.com>)
• Re: Internet Explorer 8 Crash @ Sourceforge (Jeremy Brown <0xjbrown41@...il.com>)
• Re: Internet Explorer 8 Crash @ Sourceforge (Jordan Bray <jordanbray@...il.com>)
• Re: Internet Explorer 8 Crash @ Sourceforge (Lane Christiansen <lanec42@...il.com>)
• Re: Internet Explorer 8 Crash @ Sourceforge (Rohit Patnaik <quanticle@...il.com>)
• Re: Internet Explorer 8 Crash @ Sourceforge (Rohit Patnaik <quanticle@...il.com>)
• Re: Internet Explorer 8 Crash (Kema Druma <kemadruma@...il.com>)
• Re: Internet Explorer 8 Crash (Jeremy Brown <0xjbrown41@...il.com>)
• Re: FreeBSD <= 6.1 kqueue() NULL pointer dereference (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
• Re: ShmooCon 2010 CFP (Buherátor <buherator@...il.com>)
• [ GLSA 200909-17 ] ZNC: Directory traversal (Tobias Heinlein <keytoaster@...too.org>)
• [ GLSA 200909-16 ] Wireshark: Denial of Service (Tobias Heinlein <keytoaster@...too.org>)

• Re: Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. ("Randal T. Rioux" <randy@...cyonlabs.com>)
• PakBugs.Com Report (Catch Them <catch.them@...e.com>)
• Presentation of Message-ID Fingerprinting Tool ("Marc Ruef" <maru@...p.ch>)
• Re: PakBugs.Com Report ("TheLearner" <mrxisaplant@...h.com>)
• Re: PakBugs.Com Report (Rohit Patnaik <quanticle@...il.com>)
• [SECURITY] [DSA 1883-2] New nagios2 packages fix regression (white@...ian.org (Steffen Joeris))
• Re: Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. (D-vice <lord.x86@...il.com>)
• Re: Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. ("Randal T. Rioux" <randy@...cyonlabs.com>)
• Re: Plain Text Password Disclosure vulnerability in rediff mail (D-vice <lord.x86@...il.com>)
• PakBugs.Com Report (full-censorship@...hmail.com)
• [SECURITY] [DSA 1885-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1886-1] New iceweasel packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. ("r1d1nd1rty" <r1d1nd1rty@...h.com>)
• [SECURITY] [DSA 1884-1] New nginx packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
• Distribution of passwords between man and women (Tõnu Samuel <tonu@....ee>)
• [USN-830-1] OpenSSL vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
• [USN-831-1] OpenEXR vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Re: Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. ("Randal T. Rioux" <randy@...cyonlabs.com>)
• Plain Text Password Disclosure vulnerability in rediff mail (full-censorship@...hmail.com)
• Re: Hack-Mail.net or similar site (mamo <mamo74@...il.com>)
• Re: Hack-Mail.net or similar site (maxigas <maxigas@...rgeek.net>)
• [ MDVSA-2009:233 ] kernel (security@...driva.com)

• Andrew Aurenheimer aka weev gets tree'd ("GOBBLES" <jdl@....hush.com>)
• Re: Andrew Aurenheimer aka weev gets tree'd (Andrew A <gluttony@...il.com>)
• Re: Andrew Aurenheimer aka weev gets tree'd ("Valdis' Mustache" <securitas.mustata@...il.com>)
• Re: Andrew Aurenheimer aka weev gets tree'd (GOBBLES <gobbles1337@...e-mail.net>)
• Re: Andrew Aurenheimer aka weev gets tree'd (Andrew A <gluttony@...il.com>)
• Re: Hack-Mail.net or similar site (Augusto Pereyra <aepereyra@...il.com>)
• Re: Andrew Aurenheimer aka weev gets tree'd ("Valdis' Mustache" <securitas.mustata@...il.com>)
• Andrew Auernheimer aka weev gets tree'd (GOBBLES <gobbles1337@...e-mail.net>)
• Andrew Aurenheimer aka weev gets tree'd (full-censorship@...hmail.com)
• Re: PakBugs.Com Report (Haris Pilton <harispilton37@...il.com>)
• Re: Plain Text Password Disclosure vulnerability in rediff mail (D-vice <lord.x86@...il.com>)
• Re: Distribution of passwords between man and women (Anıl Kurmuş <akurmus@...il.com>)
• Re: Distribution of passwords between man and women (Tõnu Samuel <tonu@....ee>)
• CVE-2009-2958 (srujan <srujan82@...il.com>)
• CVE-2009-2958 (srujan <srujan82@...il.com>)
• Re: PakBugs.Com Report ("Jan G.B." <ro0ot.w00t@...glemail.com>)
• Re: Andrew Aurenheimer aka weev gets tree'd (Valdis.Kletnieks@...edu)
• [ MDVSA-2009:234 ] silc-toolkit (security@...driva.com)
• [ MDVSA-2009:234-1 ] silc-toolkit (security@...driva.com)
• [ MDVSA-2009:235 ] silc-toolkit (security@...driva.com)
• [SECURITY] [DSA 1887-1] New rails packages fix cross-site scripting (white@...ian.org (Steffen Joeris))
• Re: Hack-Mail.net or similar site (maxigas <maxigas@...rgeek.net>)
• Re: 3rd party patch for XP for MS09-048? (Susan Bradley <sbradcpa@...bell.net>)
• Re: 3rd party patch for XP for MS09-048? (Susan Bradley <sbradcpa@...bell.net>)
• [SECURITY] [DSA 1888-1] New openssl packages deprecate MD2 hash signatures (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: 3rd party patch for XP for MS09-048? (Susan Bradley <sbradcpa@...bell.net>)
• ANNOUNCE: RFIDIOt release - v0.z - 16th September, 2009 (Adam Laurie <adam@...roup.co.uk>)

• Re: Hack-Mail.net or similar site (Zach Riggle <zachriggle@...il.com>)
• Re: PakBugs.Com Report (Lane Christiansen <lanec42@...il.com>)
• Re: Andrew Aurenheimer aka weev gets tree'd (Andrew A <gluttony@...il.com>)
• Re: Andrew Aurenheimer aka weev gets tree'd (Ronny Lawson <ronnylawson@...il.com>)
• Re: Andrew Aurenheimer aka weev gets tree'd (Valdis.Kletnieks@...edu)
• Re: Andrew Aurenheimer aka weev gets tree'd (Ronny Lawson <ronnylawson@...il.com>)
• Re: Andrew Aurenheimer aka weev gets tree'd (Ronny Lawson <ronnylawson@...il.com>)
• Exploiting Chrome and Opera's inbuilt ATOM/RSS reader with Script Execution and more ("Inferno" <inferno@...urethoughts.com>)
• Re: Exploiting Chrome and Opera's inbuilt ATOM/RSS reader with Script Execution and more (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: PakBugs.Com Report ("Anders Klixbull" <akl@...erian.dk>)
• Re: PakBugs.Com Report ("Jan G.B." <ro0ot.w00t@...glemail.com>)
• Re: Exploiting Chrome and Opera's inbuilt ATOM/RSS reader with Script Execution and more ("Inferno" <inferno@...urethoughts.com>)
• Re: 3rd party patch for XP for MS09-048? (Jeffrey Walton <noloader@...il.com>)
• Re: 3rd party patch for XP for MS09-048? (Jeffrey Walton <noloader@...il.com>)
• Re: 3rd party patch for XP for MS09-048? (Eric Kimminau <eak@...minau.org>)
• Re: 3rd party patch for XP for MS09-048? (Matt Riddell <matt@...turevoip.com>)
• Re: 3rd party patch for XP for MS09-048? ("Eric C. Lukens" <eric.lukens@....edu>)
• 3rd party patch for XP for MS09-048? ("Aras \"Russ\" Memisyazici" <nowhere@...null.com>)
• Re: PakBugs.Com Report (Catch Them <catch.them@...e.com>)
• Re: 3rd party patch for XP for MS09-048? ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: 3rd party patch for XP for MS09-048? ("Thor (Hammer of God)" <thor@...merofgod.com>)
• PakBugs.Com Report (full-censorship@...hmail.com)
• Re: 3rd party patch for XP for MS09-048? ("Larry Seltzer" <larry@...ryseltzer.com>)
• Re: 3rd party patch for XP for MS09-048? ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: 3rd party patch for XP for MS09-048? (Susan Bradley <sbradcpa@...bell.net>)
• Re: 3rd party patch for XP for MS09-048? (Tom Grace <tom@...thbycomputers.co.uk>)
• Re: 3rd party patch for XP for MS09-048? ("James Lay" <jlay@...ve-tothe-box.net>)
• Iret #GP on pre-commit handling failure: the NetBSD case (CVE-2009-2793) (Julien TINNES <julien@....org>)
• Re: 3rd party patch for XP for MS09-048? ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: 3rd party patch for XP for MS09-048? (Valdis.Kletnieks@...edu)
• Re: 3rd party patch for XP for MS09-048? (Susan Bradley <sbradcpa@...bell.net>)
• [SECURITY] [DSA 1889-1] New icu packages correct multibyte sequence parsing (Moritz Muehlenhoff <jmm@...ian.org>)
• [USN-832-1] FreeRADIUS vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Re: 3rd party patch for XP for MS09-048? ("Larry Seltzer" <larry@...ryseltzer.com>)
• Re: Andrew Aurenheimer aka weev gets tree'd (GOBBLES <gobbles1337@...e-mail.net>)
• Re: 3rd party patch for XP for MS09-048? (Peter Besenbruch <prb@...a.net>)

• Re: 3rd party patch for XP for MS09-048? (Rohit Patnaik <quanticle@...il.com>)
• Re: Andrew Aurenheimer aka weev gets tree'd ("zewbiechan@...il.com" <zewbiechan@...il.com>)
• Re: Andrew Auerenheimer aka weev gets tree'd ("Valdis' Mustache" <securitas.mustata@...il.com>)
• Re: Andrew Auerenheimer aka weev gets tree'd (BMF <badmotherfsckr@...il.com>)
• Re: Andrew Auerenheimer aka weev gets tree'd ("zewb" <zewbiechan@...il.com>)
• Re: Andrew Auerenheimer aka weev gets tree'd (dramacrat <yirimyah@...il.com>)
• Re: Andrew Auerenheimer aka weev gets tree'd ("Anders Klixbull" <akl@...erian.dk>)
• Quiksoft EasyMail 6.0.3.0 imap connect() ActiveX stack overflow exploit (Sebastian Wolfgarten <sebastian@...fgarten.com>)
• Quiksoft EasyMail 6 (AddAttachment) Remote Buffer Overflow Exploit (bmgsec <bmgsec@...il.com>)
• Re: 3rd party patch for XP for MS09-048? (Susan Bradley <sbradcpa@...bell.net>)
• SEC Consult SA-20090917-0 :: RADactive I-Load Multiple Vulnerabilities (Stefan Streichsbier <research@...-consult.com>)
• Re: Andrew Aurenheimer aka weev gets tree'd (T Biehn <tbiehn@...il.com>)
• Peiter "Mudge" Zatko petition to be named U.S. Cybersecurity Chief (The Sp3ctacle <sp3ctacle@...il.com>)
• Re: Andrew Auerenheimer aka weev gets tree'd ("frank^2" <frank2@...49.org>)
• Re: 3rd party patch for XP for MS09-048? (Susan Bradley <sbradcpa@...bell.net>)
• Peiter "Mudge" Zatko petition to be named U.S. Cybersecurity Chief (full-censorship@...hmail.com)
• Re: Peiter "Mudge" Zatko petition to be named U.S. Cybersecurity Chief ("Randal T. Rioux" <randy@...cyonlabs.com>)
• SecurityReason: glibc x<=2.10.1 stdio/strfmon.c Multiple vulnerabilities (Maksymilian Arciemowicz <cxib@...urityreason.com>)
• Re: 3rd party patch for XP for MS09-048? (John Morrison <john.morrison101@...glemail.com>)
• Re: 3rd party patch for XP for MS09-048? ("Aras \"Russ\" Memisyazici" <nowhere@...null.com>)
• Cross-Site Scripting attacks via redirectors in different browsers ("MustLive" <mustlive@...dgeoflove.com.ua>)
• List Charter (John Cartwright <johnc@...k.org.uk>)

• [USN-833-1] KDE-Libs vulnerability (Jamie Strandboge <jamie@...onical.com>)
• Re: Andrew Auerenheimer aka weev gets tree'd (Jubei Trippataka <vpn.1.fanatic@...il.com>)
• Advisory 01/2009: Horde_Form_Type_image Arbitrary File Overwrite Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
• Advisory: Crypto backdoor in Qnap storage devices (CVE-2009-3200) (Marc Heuse <mh@...eline-security.de>)
• Re: Advisory: Crypto backdoor in Qnap storage devices (CVE-2009-3200) (Rohit Patnaik <quanticle@...il.com>)
• Re: Cross-Site Scripting attacks via redirectors in different browsers (darky <mlistdarky@...il.com>)
• [ GLSA 200909-18 ] nginx: Remote execution of arbitrary code (Alex Legler <a3li@...too.org>)
• Re: Advisory: Crypto backdoor in Qnap storage devices (CVE-2009-3200) (Marc Heuse <mh@...eline-security.de>)

• Re: Andrew Auerenheimer aka weev gets tree'd (GOBBLES <gobbles1337@...e-mail.net>)
• Re: Andrew Aurenheimer aka weev gets tree'd (GOBBLES <gobbles1337@...e-mail.net>)
• [SECURITY] [DSA 1890-1] New wxwidgets packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
• n3td3v's Twitter account hacked (The Security Community <thesecuritycommunity@...il.com>)
• Re: n3td3v's Twitter account hacked (Gichuki John Chuksjonia <chuksjonia@...il.com>)
• No subject (full-censorship@...hmail.com)

• Re: Cross-Site Scripting attacks via redirectors in different browsers (Tõnu Samuel <tonu@....ee>)
• [ MDVSA-2009:236 ] firefox (security@...driva.com)
• Re: [inbox] n3td3v's Twitter account hacked ("Exibar" <exibar@...lair.com>)
• [ GLSA 200909-19 ] Dnsmasq: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)

• DoS vulnerability in Mozilla Firefox ("MustLive" <mustlive@...security.com.ua>)
• Re: DoS vulnerability in Mozilla Firefox ("YGN Ethical Hacker Group (http://yehg.net)" <lists@...g.net>)
• DEFCON London - September 2009 Meet - Thursday 24th (Major Malfunction <majormal@...ate-radio.org>)
• [scip_Advisory 4020] Check Point Connectra R62 Login Script Injection Vulnerability ("Stefan Friedli" <stfr@...p.ch>)
• [USN-834-1] PostgreSQL vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• 0xHACK - Wednesday, September 23rd, 2009 (James Whayman <whayman.jw@...il.com>)
• [ MDVSA-2009:237 ] openssl (security@...driva.com)
• [ MDVSA-2009:238 ] openssl (security@...driva.com)
• [USN-835-1] neon vulnerabilities (Kees Cook <kees@...ntu.com>)
• List of security conferences ("TK" <ktriv3di@....com>)
• Re: List of security conferences (Shawn Merdinger <shawnmer@...il.com>)
• Re: List of security conferences (cr01nk zer0 <cr01nk@...il.com>)
• Re: List of security conferences (Packet Storm <fulldis@...ketstormsecurity.org>)
• Re: List of security conferences (Byron Sonne <blsonne@...vdan.com>)
• List of security conferences (full-censorship@...hmail.com)

• Chargebacks and credit card frauds (Steven Anders <anderstev@...il.com>)
• Re: Chargebacks and credit card frauds (BMF <badmotherfsckr@...il.com>)
• Re: Chargebacks and credit card frauds (Andrew Haninger <ahaning@...dspring.com>)
• Re: Chargebacks and credit card frauds (Iadnah <iadnah@...inklounge.com>)
• [SECURITY] [DSA 1891-1] New changetrack packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
• Re: Chargebacks and credit card frauds (mrx <mrx@...pergander.org.uk>)
• [ MDVSA-2009:239 ] openssl (security@...driva.com)
• [ MDVSA-2009:240 ] apache (security@...driva.com)
• [ MDVSA-2009:241 ] squid (security@...driva.com)
• [ MDVSA-2009:242 ] dovecot (security@...driva.com)
• Dumb question: Is Windows box behind a router safe ? (Steven Anders <anderstev@...il.com>)
• Re: Chargebacks and credit card frauds (Steven Anders <anderstev@...il.com>)
• [ MDVSA-2009:242-1 ] dovecot (security@...driva.com)
• Re: Dumb question: Is Windows box behind a router safe ? (Kos <kpo.mail.list@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? ("G. D. Fuego" <gdfuego@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (Abhijeet Jain <abhijeet.ecstatic@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (Valdis.Kletnieks@...edu)
• Re: Dumb question: Is Windows box behind a router safe ? (john s <rwnin.security@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? ("a.kuriger" <a.kuriger@...uidphlux.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (yersinia <yersinia.spiros@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (Robert Portvliet <robert.portvliet@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (Brian Anderson <brianlanderson@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? ("Elonym (elone)" <enonnn@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (Rohit Patnaik <quanticle@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (Rohit Patnaik <quanticle@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (Chris <r0ck@...ramail.com>)
• Re: Dumb question: Is Windows box behind a router safe ? ("G. D. Fuego" <gdfuego@...il.com>)
• Re: Chargebacks and credit card frauds (T Biehn <tbiehn@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (john s <rwnin.security@...il.com>)
• Call For Papers - Hackers 2 Hackers Conference 6th Edition - Brazil ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)

• Executing Code on Linux/x86 with ASLR+GCC4 Protections (Lucus Rife <lucus.rife@...glemail.com>)
• [ MDVSA-2009:243 ] freetype2 (security@...driva.com)
• Re: Dumb question: Is Windows box behind a router safe ? ("Michael Fritscher" <michael@...tscher.net>)
• Re: Dumb question: Is Windows box behind a router safe ? (Dave <iryshman@...il.com>)
• Re: Cross-Site Scripting attacks via redirectors in different browsers ("MustLive" <mustlive@...security.com.ua>)
• Re: Dumb question: Is Windows box behind a router safe ? (vulcanius <vulcanius@...il.com>)
• PHP file vulnerable on SMF 1.1.10 (bro <tweetycoaster@...il.com>)
• Re: PHP file vulnerable on SMF 1.1.10 ("Elonym (elone)" <enonnn@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (Chris <r0ck@...ramail.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (Chris <r0ck@...ramail.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (OTB <ownthebox@...herpunx.org>)
• Re: Dumb question: Is Windows box behind a router safe ? (Steven Anders <anderstev@...il.com>)
• Re: Executing Code on Linux/x86 with ASLR+GCC4Protections ("Jeremi Gosney" <Jeremi.Gosney@...ricity.com>)
• nginx - low risk webdav destination bug (Kingcope <kcope2@...glemail.com>)
• Re: PHP file vulnerable on SMF 1.1.10 (» Ruben Alves <rubenalves@...ul.pt>)
• Re: PHP file vulnerable on SMF 1.1.10 (Anastasios Monachos <anastasiosm@...il.com>)
• Re: Dumb question: Is Windows box behind a router safe ? ("Elonym (elone)" <enonnn@...il.com>)
• HaXor and Developer training (Jared DeMott <jared.demott@...ris.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (Camilo Uribe <camilo.uribe@...il.com>)
• [USN-836-1] WebKit vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Re: Dumb question: Is Windows box behind a router safe ? (Jeff Kell <jeff-kell@....edu>)
• Re: PHP file vulnerable on SMF 1.1.10 (» Ruben Alves <rubenalves@...ul.pt>)
• Re: Dumb question: Is Windows box behind a router safe ? (john s <rwnin.security@...il.com>)
• Re: Chargebacks and credit card frauds (Anıl Kurmuş <akurmus@...il.com>)
• Re: Chargebacks and credit card frauds (T Biehn <tbiehn@...il.com>)
• Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabil… (Cisco Systems Product Security Incident…)
• Cisco Security Advisory: Cisco IOS Software Object-group Access Control List Bypass Vulnerability (Cisco Systems Product Security Incident Response Team <psirt…)
• Cisco Security Advisory: Cisco Unified Communications Manager Express Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Cisco IOS Software H.323 Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Cisco IOS Software Zone-Based Policy Firewall Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Cisco IOS Software Network Time Protocol Packet Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team …)
• Cisco Security Advisory: Cisco IOS Software Internet Key Exchange Resource Exhaustion Vulnerability (Cisco Systems Product Security Incident Response Team <psi…)
• Cisco Security Advisory: Cisco IOS Software Crafted Encryption Packet Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <p…)
• [ MDVSA-2009:244 ] xfig (security@...driva.com)
• Re: Executing Code on Linux/x86 with ASLR+GCC4Protections (Jeremy Brown <0xjbrown41@...il.com>)
• Cisco Security Advisory: Cisco IOS Software Authentication Proxy Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Cisco IOS Software Tunnels Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation (evil fingers <contact.fingers@...il.com>)
• [SECURITY] [DSA 1892-1] New dovecot packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
• [SECURITY] [DSA 1893-1] New cyrus-imapd-2.2/kolab-cyrus-imapd packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
• Audited by Netcraft... any feedback (jk3380@...da.org)
• Re: Executing Code on Linux/x86 with ASLR+GCC4Protections (Jeremy Brown <0xjbrown41@...il.com>)
• Re: Executing Code on Linux/x86 with ASLR+GCC4Protections ("Jeremi Gosney" <Jeremi.Gosney@...ricity.com>)
• ZDI-09-066: Adobe RoboHelp Server Arbitrary File Upload and Execute Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

• [ MDVSA-2009:243-1 ] freetype2 (security@...driva.com)
• Re: Dumb question: Is Windows box behind a router safe ? (Mary Landesman <marylande@...il.com>)
• CFS 09/October 5-6 Updated Speaker/Session List ("Trish M" <trish.morgan@...puterforensicshow.com>)
• [SECURITY] [DSA 1894-1] New newt packages fix arbitrary code execution (white@...ian.org (Steffen Joeris))
• [USN-837-1] Newt vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
• [ MDVSA-2009:245 ] glib2.0 (security@...driva.com)
• PakBugs.com Aftermath. (Catch Them <catch.them@...e.com>)
• Cross-Site Scripting vulnerability in E107 ("MustLive" <mustlive@...security.com.ua>)
• [SECURITY] [DSA 1895-1] New xmltooling packages fix potential code execution (Florian Weimer <fw@...eb.enyo.de>)

• Cisco ACE XML Gateway <= 6.0 Internal IP disclosure (nitrØus <nitrousenador@...il.com>)
• Re: Cisco ACE XML Gateway <= 6.0 Internal IP disclosure (Richard Cyrios <r.u.cyrios@...il.com>)
• Re: Cisco ACE XML Gateway <= 6.0 Internal IP disclosure (Jeremy Brown <0xjbrown41@...il.com>)
• Attacks via redirectors ("MustLive" <mustlive@...security.com.ua>)
• Drupal Bibliography 6.x-1.6 XSS Vuln (Black Packeteer <black.packeteer@...il.com>)
• Drupal Bibliography 6.x-1.6 XSS Vuln (Black Packeteer <black.packeteer@...il.com>)
• Re: Cisco ACE XML Gateway <= 6.0 Internal IP disclosure (Valdis.Kletnieks@...edu)
• Re: Cisco ACE XML Gateway <= 6.0 Internal IPdisclosure ("Paul Oxman (poxman)" <poxman@...co.com>)
• [ GLSA 200909-20 ] cURL: Certificate validation error (Alex Legler <a3li@...too.org>)
• [ MDVSA-2009:246 ] php (security@...driva.com)
• [ MDVSA-2009:247 ] php (security@...driva.com)
• [ MDVSA-2009:248 ] php (security@...driva.com)

• [ MDVSA-2009:249 ] newt (security@...driva.com)
• Windows 7 Launch Party hosted by JTTF and Andrew Auernheimer ("David Kernell [rubico]" <windows7jttf@...e-mail.net>)

• [SECURITY] [DSA 1896-1] New Shibboleth 1.x packages fix potential code execution (Florian Weimer <fw@...eb.enyo.de>)
• Vulnerabilities in E107 ("MustLive" <mustlive@...security.com.ua>)
• [SECURITY] [DSA 1897-1] New horde3 packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
• [USN-838-1] Dovecot vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Full Path Disclosure in most wordpress' plugins [?] ("Fernando A. Lagos B." <fernando@...ial.org>)
• Drupal XML-Sitemap 5.x-1.6 XSS Vulnerability (Black Packeteer <black.packeteer@...il.com>)
• For sale - Microsoft Internet Explorer 0day (Freddie Vicious <fred.vicious@...il.com>)
• Re: Full Path Disclosure in most wordpress' plugins [?] (majinboo <majinbou@...il.com>)
• Re: Full Path Disclosure in most wordpress' plugins [?] ("Fernando A. Lagos B." <fernando@...ial.org>)
• Re: Full Path Disclosure in most wordpress' plugins [?] ("Glafkos Charalambous" <info@...osec.org.uk>)
• Re: Full Path Disclosure in most wordpress' plugins [?] ("Fernando A. Lagos B." <fernando@...ial.org>)

• WinRAR v3.80 - ZIP Filename Spoofing (chr1x <chr1x@...tester.net>)
• Cross-Site Scripting vulnerability in eCaptcha ("MustLive" <mustlive@...security.com.ua>)
• Re: Full Path Disclosure in most wordpress' plugins [?] ("Jan G.B." <ro0ot.w00t@...glemail.com>)
• Re: Full Path Disclosure in most wordpress' plugins [?] (Loaden <loaden@...malmitprofis.com>)
• Re: Full Path Disclosure in most wordpress' plugins [?] (Peter Bruderer <peter.bruderer@....ch>)
• Modifying SSH to Capture Login Credentials from Attackers ("my.hndl" <my.hndl@...il.com>)
• Re: Modifying SSH to Capture Login Credentials from Attackers (Kurth Bemis <kurth.bemis@...il.com>)
• Re: Modifying SSH to Capture Login Credentials from Attackers (Kos <kpo.mail.list@...il.com>)
• Re: Full Path Disclosure in most wordpress' plugins [?] ("Glafkos Charalambous" <info@...osec.org.uk>)
• Re: Modifying SSH to Capture Login Credentials from Attackers ("my.hndl" <my.hndl@...il.com>)
• Re: Modifying SSH to Capture Login Credentials from Attackers (Kurth Bemis <kurth.bemis@...il.com>)
• Re: Modifying SSH to Capture Login Credentials from Attackers ("bodik@....zcu.cz" <bodik@....zcu.cz>)

• Re: Modifying SSH to Capture Login Credentials from Attackers (maxigas <maxigas@...rgeek.net>)
• MD5 hash extension attack breaks API authentication of Flickr and other online services (Juliano Rizzo <netiferasnospam@...ifera.com>)
• Re: Modifying SSH to Capture Login Credentials from Attackers (Gichuki John Chuksjonia <chuksjonia@...il.com>)
• Re: Full Path Disclosure in most wordpress' plugins [?] (majinboo <majinbou@...il.com>)
• Re: Modifying SSH to Capture Login Credentials from Attackers (jfch@...da.eu)
• Re: Modifying SSH to Capture Login Credentials from Attackers (dramacrat <yirimyah@...il.com>)
• gameforge.de gaming platform (validated for: kingsage.gr) authentication bypass (using hashed values) and cross site scr… (mestre rigel <mestre.rigel@...il.com>)
• Re: Full Path Disclosure in most wordpress' plugins [?] ("Glafkos Charalambous" <info@...osec.org.uk>)
• Re: DoS vulnerability in Mozilla Firefox ("MustLive" <mustlive@...security.com.ua>)
• Re: Modifying SSH to Capture Login Credentials from Attackers ("Fernando A. Lagos B." <fernando@...ial.org>)
• Re: Full Path Disclosure in most wordpress' plugins [?] (James Matthews <nytrokiss@...il.com>)
• [ MDVSA-2009:176 ] postgresql (security@...driva.com)
• [ MDVSA-2009:177 ] postgresql (security@...driva.com)
• [ MDVSA-2009:178 ] perl-IO-Socket-SSL (security@...driva.com)

474 messages

Powered by blists - more mailing lists