full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2009/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 31	² 33	³ 32	⁴ 25	⁵ 26	⁶ 12
⁷ 23	⁸ 28	⁹ 23	¹⁰ 23	¹¹ 29	¹² 28	¹³ 8
¹⁴ 17	¹⁵ 21	¹⁶ 25	¹⁷ 19	¹⁸ 5	¹⁹ 8	²⁰ 3
²¹ 8	²² 13	²³ 8	²⁴	²⁵ 2	²⁶ 5	²⁷ 5
²⁸ 7	²⁹ 18	³⁰ 11	³¹ 11

Messages by day:

December 1 (31 messages)

Re: Software developer looks at CRU code (Rohit Patnaik <quanticle@...il.com>)
Re: Software developer looks at CRU code (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Software developer looks at CRU code ("Ivan ." <ivanhec@...il.com>)
Re: ** FreeBSD local r00t zeroday (Benji <me@...ji.com>)
Re: ** FreeBSD local r00t zeroday (Cody Robertson <cody@...khost.com>)
Re: ** FreeBSD local r00t zeroday (Ryan Steinmetz <rpsfa@....edu>)
WinAppDbg 1.3 is out! (Mario Alejandro Vilas Jerez <mvilas@...il.com>)
Re: Software developer looks at CRU code (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Software developer looks at CRU code ("Ivan ." <ivanhec@...il.com>)
Re: ** FreeBSD local r00t zeroday (David Berard <contact@...idberard.fr>)
Re: ** FreeBSD local r00t zeroday (bk <chort0@...il.com>)
Re: ** FreeBSD local r00t zeroday (Oliver Pinter <oliver.pinter@...il.com>)
Re: ** FreeBSD local r00t zeroday (r00f r00f <r00fsec@...il.com>)
Re: ** FreeBSD local r00t zeroday (Colin Percival <cperciva@...ebsd.org>)
Re: ** FreeBSD local r00t zeroday (David Berard <contact@...idberard.fr>)
Re: Software developer looks at CRU code (RandallM <randallm@...mail.com>)
Re: ** FreeBSD local r00t zeroday (Benji <me@...ji.com>)
Re: ** FreeBSD local r00t zeroday (Robert Portvliet <robert.portvliet@...il.com>)
Re: ** FreeBSD local r00t zeroday (Dawid Golunski <golunski@...t.eu>)
Re: ** FreeBSD local r00t zeroday (FBI BOT <terdlinkmobile@...il.com>)
Re: ** FreeBSD local r00t zeroday (Oliver Pinter <oliver.pinter@...il.com>)
Re: ** FreeBSD local r00t zeroday (r00f r00f <r00fsec@...il.com>)
Re: ** FreeBSD local r00t zeroday (Oliver Pinter <oliver.pinter@...il.com>)
Re: ** FreeBSD local r00t zeroday (r00f r00f <r00fsec@...il.com>)
Transmission #19-WT [re: Andrew Wallace / n3td3v] ("genesis project" <jdl@....hush.com>)
Re: ** FreeBSD local r00t zeroday (bk <chort0@...il.com>)
Re: ** FreeBSD local r00t zeroday (Benji <me@...ji.com>)
** FreeBSD local r00t zeroday (Michał Manterys <michal.manterys@...il.com>)
Re: Transmission #19-WT [re: Andrew Wallace / n3td3v] (Michael Holstein <michael.holstein@...ohio.edu>)
Re: Transmission #19-WT [re: Andrew Wallace / n3td3v] (Cody Robertson <cody@...khost.com>)
[ GLSA 200912-01 ] OpenSSL: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)

December 2 (33 messages)

December 3 (32 messages)

December 4 (25 messages)

December 5 (26 messages)

December 6 (12 messages)

December 7 (23 messages)

Re: Software developer looks at CRU code (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Software developer looks at CRU code ("Ivan ." <ivanhec@...il.com>)
Re: Software developer looks at CRU code ("Thor (Hammer of God)" <thor@...merofgod.com>)
short intro (jai <jaikumar.shinde@...il.com>)
Re: short intro ("McGhee, Eddie" <Eddie.McGhee@....com>)
[ MDVSA-2009:231-1 ] htmldoc (security@...driva.com)
[ MDVSA-2009:322 ] mono (security@...driva.com)
[USN-865-1] Bind vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ MDVSA-2008:233-1 ] libcdaudio (security@...driva.com)
[ MDVSA-2009:323 ] apache (security@...driva.com)
[ MDVSA-2009:324 ] php (security@...driva.com)
Re: short intro (Ferdinand Klinzer <Klinzer@....de>)
Re: The Cyber War Conspiracy (Kevin Wilcox <kevin@....appstate.edu>)
[ MDVSA-2009:199-1 ] subversion (security@...driva.com)
Re: Flieg wenn du fliegen kannst, lieb wenn du lieben kannst ; fly when you can fly, love when you can love (PEra <lists@...enlayers.org>)
[ MDVSA-2009:325 ] ruby (security@...driva.com)
[ MDVSA-2009:326 ] mysql (security@...driva.com)
[USN-866-1] gnome-screensaver vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Climate-Gate:A SysAdmin’s Perspective ("Ivan ." <ivanhec@...il.com>)
[SECURITY] [DSA 1947-1] New Shibboleth packages fix cross-site scripting (Moritz Muehlenhoff <jmm@...ian.org>)
TANDBERG MXP(FIPS140) DOS (0 0 <teknineutensil@...il.com>)
spy guides ("Ivan ." <ivanhec@...il.com>)
Re: Climate-Gate:A SysAdmin’s Perspective (Rohit Patnaik <quanticle@...il.com>)

December 8 (28 messages)

December 9 (23 messages)

December 10 (23 messages)

December 11 (29 messages)

[USN-870-1] PyGreSQL vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-871-1] KDE vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-871-2] KDE 4 vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-872-1] KDE 4 Runtime vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: TLS / SSLv3 vulnerability explained (New ways to leverage the vulnerability) (Thierry Zoller <Thierry@...ler.lu>)
SecurityReason: Flock 2.5.2 Remote Array Overrun (Arbitrary code execution) (Maksymilian Arciemowicz <cxib@...urityreason.com>)
SecurityReason: Camino 1.6.10 Remote Array Overrun (Arbitrary code execution) (Maksymilian Arciemowicz <cxib@...urityreason.com>)
SecurityReason: Thunderbird 2.0.0.23 (lib) Remote Array Overrun (Arbitrary code execution) (Maksymilian Arciemowicz <cxib@...urityreason.com>)
SecurityReason: Sunbird 0.9 Array Overrun (code execution) 0day (Maksymilian Arciemowicz <cxib@...urityreason.com>)
kaspersky Portugal Vulnerable to blind SQLi (vmware vmware <vmw4r3@...oo.ie>)
[ MDVSA-2009:332 ] gimp (security@...driva.com)
IE 0day for sale (Freddie Vicious <fred.vicious@...il.com>)
Re: IE 0day for sale (Valdis.Kletnieks@...edu)
Re: IE 0day for sale (Freddie Vicious <fred.vicious@...il.com>)
Re: IE 0day for sale (yaroslav <ambivalenced@...il.com>)
Re: IE 0day for sale (Benji <me@...ji.com>)
Safer-networking.org: (Spybot) Vulnerable to Blind SQLi by VMw4r3 (VMw4r3 <vmw4r3@...oo.ie>)
Re: IE 0day for sale (Michael Lenz <shadow.stalker@....de>)
Re: IE 0day for sale ("Thor (Hammer of God)" <thor@...merofgod.com>)
[ MDVSA-2009:296-1 ] gimp (security@...driva.com)
Re: IE 0day for sale ("Nelson Brito" <nbrito@...ure.org>)
[ MDVSA-2009:259-1 ] snort (security@...driva.com)
Brilliant attack "bypasses" bitlocker ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Brilliant attack "bypasses" bitlocker ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Brilliant attack "bypasses" bitlocker ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Brilliant attack "bypasses" bitlocker (Michal Zalewski <lcamtuf@...edump.cx>)
Re: IE 0day for sale (mrx <mrx@...pergander.org.uk>)
Re: IE 0day for sale (Shyaam <shyaam@...il.com>)
Re: Brilliant attack "bypasses" bitlocker (yaroslav <ambivalenced@...il.com>)

December 12 (28 messages)

Re: IE 0day for sale (Jeff Williams <jeffwillis30@...il.com>)
stupid question again (RandallM <randallm@...mail.com>)
Re: stupid question again ("frank^2" <frank2@...49.org>)
Re: stupid question again (Guy <full-disclosure@...lamatix.com>)
Re: stupid question again (Valdis.Kletnieks@...edu)
Re: IE 0day for sale (Valdis.Kletnieks@...edu)
Re: IE 0day for sale (Shyaam <shyaam@...il.com>)
Re: stupid question again (RandallM <randallm@...mail.com>)
Re: stupid question again (RandallM <randallm@...mail.com>)
Re: IE 0day for sale (Jeff Williams <jeffwillis30@...il.com>)
Re: IE 0day for sale (Jeff Williams <jeffwillis30@...il.com>)
Re: IE 0day for sale (jack.a.mannino@...il.com)
Re: stupid question again (Tim <tim-security@...tinelchicken.org>)
Re: stupid question again (Randall M <randallm@...mail.com>)
Re: stupid question again (Tracy Reed <treed@...raviolet.org>)
Gadi Evron: SecuriTeam: The Mossad: IE 0day for sale (cyber armageddon <cyberarmageddon@...glemail.com>)
Re: Gadi Evron: SecuriTeam: The Mossad: IE 0day for sale (Freddie Vicious <fred.vicious@...il.com>)
Re: Gadi Evron: SecuriTeam: The Mossad: IE 0day for sale (cyber armageddon <cyberarmageddon@...glemail.com>)
Gadi Evron's professional profile exposed (cyber armageddon <cyberarmageddon@...glemail.com>)
Re: Gadi Evron's professional profile exposed (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Gadi Evron's professional profile exposed (cyber armageddon <cyberarmageddon@...glemail.com>)
Re: Gadi Evron's professional profile exposed (Valdis.Kletnieks@...edu)
Re: Gadi Evron's professional profile exposed (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: Brilliant attack "bypasses" bitlocker (bugtraq@...security.net)
[SECURITY] [DSA 1949-1] New php-net-ping packages fix arbitrary code execution (geissert@...ian.org (Raphael Geissert))
[SECURITY] [DSA-1950-1] New webkit packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
[gif2png] long filename Buffer Overrun (Razuel Akaharnath <razuel@...il.com>)
Re: IE 0day for sale (Gregor Schneider <rc46fi@...glemail.com>)

December 13 (8 messages)

Re: Gadi Evron's professional profile exposed (Sam Haldorf <sahalderf@...il.com>)
Re: Gadi Evron's professional profile exposed (Valdis.Kletnieks@...edu)
Re: stupid question again (Pradip Sharma <sharma.pradip@...il.com>)
Unu hits Kaspersky (Pradip Sharma <sharma.pradip@...il.com>)
Re: [gif2png] long filename Buffer Overrun (Patroklos Argyroudis <argp@...sus-labs.com>)
Re: [gif2png] long filename Buffer Overrun (Razuel Akaharnath <razuel@...il.com>)
Re: [gif2png] long filename Buffer Overrun (Nico Golde <fd@...lde.de>)
Re: [gif2png] long filename Buffer Overrun (Razuel Akaharnath <razuel@...il.com>)

December 14 (17 messages)

December 15 (21 messages)

December 16 (25 messages)

December 17 (19 messages)

December 18 (5 messages)

December 19 (8 messages)

December 20 (3 messages)

December 21 (8 messages)

December 22 (13 messages)

December 23 (8 messages)

December 25 (2 messages)

DECAF patched and re-enabled (thediskprotector@...h.com)
Re: DECAF patched and re-enabled (Christian Sciberras <uuf6429@...il.com>)

December 26 (5 messages)

Vulnerability in Joomulus for Joomla ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2009:340 ] jpgraph (security@...driva.com)
[ MDVSA-2009:341 ] dstat (security@...driva.com)
[ MDVSA-2009:343 ] acpid (security@...driva.com)
[tools] hostmap-0.2.1 released (Alessandro Tanasi <alessandro@...erunners.net>)

December 27 (5 messages)

[ MDVSA-2009:342 ] acpid (security@...driva.com)
Path disclosure in PHP 5.3.1 (WHK <www.kernel32@...il.com>)
Re: Path disclosure in PHP 5.3.1 (Jeff Williams <jeffwillis30@...il.com>)
Re: DECAF patched and re-enabled (James Matthews <nytrokiss@...il.com>)
Re: DECAF patched and re-enabled 133-54D (James Matthews <nytrokiss@...il.com>)

December 28 (7 messages)

December 29 (18 messages)

December 30 (11 messages)

[NETRAGARD SECURITY ADVISORY] [< Java for Mac OS X 10.6 Update 1 ][NETRAGARD-20091219] (Netragard Advisories <advisories@...ragard.com>)
Re: File Disclosure in DAMN VULNERABLE WEB APPversion 1.0.6 ("Valdis' Mustache" <securitas.mustata@...il.com>)
Re: security hole on local ISP (Cilia Pretel Gallo <cpretelgallo@...oo.com>)
The Game (Will McAfee <sec-community@...goodhacker.com>)
Re: The Game (Christian Sciberras <uuf6429@...il.com>)
Facebook Query Language (FQL) security issue ("Zerial." <fernando@...ial.org>)
Re: The Game (Rohit Patnaik <quanticle@...il.com>)
[SECURITY] [DSA 1958-1] New libtool packages fix privilege escalation (geissert@...ian.org (Raphael Geissert))
MouseOverJacking attacks ("MustLive" <mustlive@...security.com.ua>)
Re: The Game ("McGhee, Eddie" <Eddie.McGhee@....com>)
Re: WinScanX - The safest way to retrieve Windows password hashes, LSA secrets, etc. (jellybambam <jellybambam@...il.com>)

December 31 (11 messages)

Re: The Game (James Matthews <nytrokiss@...il.com>)
Re: MouseOverJacking attacks (Andrew Farmer <andfarm@...il.com>)
Re: The Game (Andrew Haninger <ahaning@...dspring.com>)
[SECURITY] [DSA-1964-1] New PostgreSQL packages fix several vulnerabilities (Florian Weimer <fw@...eb.enyo.de>)
Antisec for lulz - exposed (anti-sec.com) ("Glafkos Charalambous" <info@...osec.org.uk>)
Re: Antisec for lulz - exposed (anti-sec.com) (Christian Sciberras <uuf6429@...il.com>)
Re: The Game (mrx <mrx@...pergander.org.uk>)
Selling Adobe exploit (John Smith <0day.seller@...il.com>)
Security-Database Best IT Security Tools for 2009 (Maximiliano Soler <mjsolerg@...il.com>)
Pedro Miguel Bernardino Eleutério is out of the office. (<peleuterio@...ul.pt>)
Re: Pedro Miguel Bernardino Eleutério is out of the office. ("Thor (Hammer of God)" <thor@...merofgod.com>)

507 messages