full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2009/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 4
² 8	³ 5	⁴ 29	⁵ 17	⁶ 33	⁷ 13	⁸ 4
⁹ 6	¹⁰ 12	¹¹ 10	¹² 15	¹³ 17	¹⁴ 6	¹⁵ 3
¹⁶ 4	¹⁷ 16	¹⁸ 5	¹⁹ 14	²⁰ 14	²¹ 5	²² 4
²³ 9	²⁴ 12	²⁵ 24	²⁶ 12	²⁷ 23	²⁸ 9	²⁹ 12
³⁰ 32

Messages by day:

November 1 (4 messages)

November 2 (8 messages)

Re: Hash (Pete Licoln <pete.licoln@...il.com>)
Re: Hash (Fionnbharr <thouth@...il.com>)
KCSEC-00000001-ServUWebClient ("Nikolaos Rangos" <nikolaos@...gos.de>)
Reminder for DeepSec 2009 Conference (DeepSec Conference - Announcement <deepsec@...psec.net>)
Re: Dark side of bookmarks ("Memisyazici, Aras" <arasm@...edu>)
Re: Dark side of bookmarks (S/U/N <s.u.n@...e.Fr>)
NSOADV-2009-001: Symantec ConsoleUtilities ActiveX Control buffer overflow (NSO Research <nso-research@...iriu.de>)
[USN-850-3] poppler vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)

November 3 (5 messages)

November 4 (29 messages)

November 5 (17 messages)

Re: Apple ptrace panic PoC - R.I.P str0ke (Micheal Turner <wh1t3h4t3@...oo.co.uk>)
Re: Apple ptrace panic PoC - R.I.P str0ke ("frank^2" <frank2@...49.org>)
Re: Apple ptrace panic PoC - R.I.P str0ke (Micheal Turner <wh1t3h4t3@...oo.co.uk>)
Re: How Prosecutors Wiretap Wall Street (mrx <mrx@...pergander.org.uk>)
Re: How Prosecutors Wiretap Wall Street ("Gary E. Miller" <gem@...lim.com>)
Re: How Prosecutors Wiretap Wall Street (Valdis.Kletnieks@...edu)
Re: How Prosecutors Wiretap Wall Street ("Ivan ." <ivanhec@...il.com>)
Re: Apple ptrace panic PoC - R.I.P str0ke (Jubei Trippataka <vpn.1.fanatic@...il.com>)
Re: How Prosecutors Wiretap Wall Street (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: How Prosecutors Wiretap Wall Street (Paul Schmehl <pschmehl_lists@...rr.com>)
Exp1oit for Serv-U 9.0.0.5 new bug (Megumi Yanagishita <megumi1990@...il.com>)
[Bkis-12-2009] eoCMS SQL injection vulnerability - Bkis Report (Bkis <svrt@...v.com.vn>)
Re: Apple ptrace panic PoC - R.I.P str0ke (sunjester <tripmonster@...il.com>)
CORE-2009-0912: Blender .blend Project Arbitrary Command Execution (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[USN-854-1] GD library vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-855-1] libhtml-parser-perl vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
SSL/TLS MiTM PoC (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)

November 6 (33 messages)

November 7 (13 messages)

November 8 (4 messages)

November 9 (6 messages)

Re: Hash (Pete Licoln <pete.licoln@...il.com>)
Re: Hash (Fionnbharr <thouth@...il.com>)
Re: How Prosecutors Wiretap Wall Street (<Glenn.Everhart@...se.com>)
DoS vulnerability in Internet Explorer ("MustLive" <mustlive@...security.com.ua>)
Dark home ("MustLive" <mustlive@...security.com.ua>)
Cisco Security Advisory: Transport Layer Security Renegotiation Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)

November 10 (12 messages)

November 11 (10 messages)

November 12 (15 messages)

November 13 (17 messages)

JTTF/FBI informant "snitching" on security professionals in Bay Area ("Jacob Appelbaum [ioerror]" <jdl@....hush.com>)
rPSA-2009-0142-1 httpd mod_ssl (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0143-1 util-linux util-linux-extras (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0144-1 apr-util (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0145-1 samba samba-client samba-server samba-swat (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2009-0142-2 httpd mod_ssl (rPath Update Announcements <announce-noreply@...th.com>)
Re: Microsoft Patents the "sudo" command ("McGhee, Eddie" <Eddie.McGhee@....com>)
Re: Microsoft Patents the "sudo" command (Leandro Malaquias <lm.net.security@...il.com>)
Re: Microsoft Patents the "sudo" command ("Larry Seltzer" <larry@...ryseltzer.com>)
PHP 5.2.11/5.3.0 Multiple Vulnerabilities (Maksymilian Arciemowicz <cxib@...urityreason.com>)
MS09-053 (Tomoki Sanaki <sanaki@...rim.or.jp>)
Re: Full-Disclosure Digest, Vol 57, Issue 17 (RandallM <randallm@...mail.com>)
[ MDVSA-2009:296 ] gimp (security@...driva.com)
OS Commerce authentication bypass ("lsi" <stuart@...erdelix.net>)
Re: OS Commerce authentication bypass (ANONYMOUS REMOTE CODE EXECUTION) (Tim <tim-security@...tinelchicken.org>)
[USN-859-1] OpenJDK vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: OS Commerce authentication bypass (ANONYMOUS REMOTE CODE EXECUTION) ("lsi" <stuart@...erdelix.net>)

November 14 (6 messages)

November 15 (3 messages)

November 16 (4 messages)

November 17 (16 messages)

November 18 (5 messages)

November 19 (14 messages)

November 20 (14 messages)

November 21 (5 messages)

November 22 (4 messages)

November 23 (9 messages)

November 24 (12 messages)

November 25 (24 messages)

November 26 (12 messages)

November 27 (23 messages)

November 28 (9 messages)

Re: Microsoft Windows TCP/IP Timestamps Code Execution Vulnerability (Ivan Security <ivanchukl@...il.com>)
Re: "funsec" as a terror cell (full-disclosure@...e-mail.net)
Re: Facebook Police (William Wylde <durtybill@...il.com>)
Internet Stalker (Steve Pheby <stevepheby@...oo.com>)
"funsec" as a terror cell (RandallM <randallm@...mail.com>)
Re: "funsec" as a terror cell (RandallM <randallm@...mail.com>)
MuPDF pdf_shade4.c multiple stack-based buffer overflows (Christophe Devine <c09.fd@....cat>)
Re: "funsec" as a terror cell (Valdis.Kletnieks@...edu)
[ MDVSA-2009:303 ] php (security@...driva.com)

November 29 (12 messages)

November 30 (32 messages)

Re: Software developer looks at CRU code (Paul Schmehl <pschmehl_lists@...rr.com>)
The Cyber War Conspiracy (full-disclosure@...e-mail.net)
Announce: RFIDIOt-1.0a released - November 2009 (Adam Laurie <adam@...roup.co.uk>)
Re: The Cyber War Conspiracy ("Jan G.B." <ro0ot.w00t@...glemail.com>)
Oracle exploit for CTXSYS.DRVXTABC.CREATE_TABLES and others (Andrea Purificato <a.purificato@....it>)
XSS vulnerabilities at 404 pages ("MustLive" <mustlive@...security.com.ua>)
Re: "funsec" as a terror cell (Michael Graham <jmgraham@...il.com>)
Re: Facebook Police (<glenn.everhart@...se.com>)
TLS / SSLv3 vulnerability explained (New ways to leverage the vulnerability) (Thierry Zoller <Thierry@...ler.lu>)
[BMSA-2009-07] Backdoor in PyForum (Nam Nguyen <namn@...emoon.com.vn>)
Re: The Cyber War Conspiracy (Valdis.Kletnieks@...edu)
Re: UK jails schizophrenic for refusal to decrypt files (Stephen Mullins <steve.mullins.work@...il.com>)
Re: The Cyber War Conspiracy (James Rankin <kz20fl@...glemail.com>)
Remote Command Execution in dotDefender Site Management (John Dos <dotdefeater@...glemail.com>)
[ MDVSA-2009:307 ] libtool (security@...driva.com)
Re: The Cyber War Conspiracy (Sam Haldorf <sahalderf@...il.com>)
Re: Software developer looks at CRU code (Ali Raheem <ali.raheem@...glemail.com>)
Re: Facebook Police (rogue <wmrogue2@...glemail.com>)
Re: Software developer looks at CRU code (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Facebook Police ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Software developer looks at CRU code (Valdis.Kletnieks@...edu)
Re: Facebook Police (Michael Holstein <michael.holstein@...ohio.edu>)
Fingerprinting of Apache ("MustLive" <mustlive@...security.com.ua>)
AST-2009-010: RTP Remote Crash Vulnerability ("Asterisk Security Team" <security@...erisk.org>)
Re: Software developer looks at CRU code (Rohit Patnaik <quanticle@...il.com>)
Re: Facebook Police (Valdis.Kletnieks@...edu)
Re: Software developer looks at CRU code ("Larry Seltzer" <larry@...ryseltzer.com>)
** FreeBSD local r00t zeroday (Kingcope <kcope2@...glemail.com>)
Re: ** FreeBSD local r00t zeroday (Ed Carp <erc@...ox.com>)
Re: UK jails schizophrenic for refusal to decrypt files (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: ** FreeBSD local r00t zeroday (phantomcircuit <phantomcircuit@...ertinferno.org>)
Re: Software developer looks at CRU code (Paul Schmehl <pschmehl_lists@...rr.com>)

377 messages