full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2010/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 12	² 6	³ 4
⁴ 9	⁵ 27	⁶ 22	⁷ 44	⁸ 13	⁹ 4	¹⁰ 10
¹¹ 34	¹² 30	¹³ 25	¹⁴ 22	¹⁵ 28	¹⁶ 20	¹⁷ 7
¹⁸ 26	¹⁹ 16	²⁰ 42	²¹ 45	²² 12	²³ 7	²⁴ 21
²⁵ 30	²⁶ 53	²⁷ 31	²⁸ 12	²⁹ 16	³⁰ 7	³¹ 10

Messages by day:

January 2 (6 messages)

Re: Antisec for lulz - exposed (anti-sec.com) ("Glafkos Charalambous" <info@...osec.org.uk>)
Re: Antisec for lulz - exposed (anti-sec.com) (Benji <me@...ji.com>)
Re: Antisec for lulz - exposed (anti-sec.com) (Jeff Blaum <jblaum02@...il.com>)
BETA3 released (Berend-Jan Wever <berendjanwever@...il.com>)
Re: Antisec for lulz - exposed (anti-sec.com) (Gichuki John Chuksjonia <chuksjonia@...il.com>)
Countslide alphanumeric GetPC (Berend-Jan Wever <berendjanwever@...il.com>)

January 3 (4 messages)

January 4 (9 messages)

January 5 (27 messages)

January 6 (22 messages)

January 7 (44 messages)

Re: iiscan results ("Vincent Chao" <zwell.nosec@...il.com>)
Re: HTTP Digest Integrity: Another look, in light of recent attacks ("Timothy D\. Morgan" <tmorgan@...curity.com>)
VMSA-2010-0001 ESX Service Console updates for nss and nspr (VMware Security team <security@...are.com>)
Re: HTTP Digest Integrity: Another look, in light of recent attacks (Dan Kaminsky <dan@...para.com>)
Re: iiscan results (mrx <mrx@...pergander.org.uk>)
Re: iiscan results (p8x <l@....net>)
Re: iiscan results ("Jan G.B." <ro0ot.w00t@...glemail.com>)
Re: iiscan results (p8x <l@....net>)
Re: iiscan results (Jardel Weyrich <jweyrich@...il.com>)
Re: iiscan results (mrx <mrx@...pergander.org.uk>)
[ MDVSA-2009:300-1 ] apache-conf (security@...driva.com)
[ MDVSA-2009:300-2 ] apache-conf (security@...driva.com)
Re: iiscan results (mrx <mrx@...pergander.org.uk>)
Need a invitation code of the IIScan.com for test. (Adrian liu <lfd@...t.org.cn>)
VMware server (2.0.2) insecure file creation (dd@...uri.net)
[SECURITY] [DSA-1965-1] New phpldapadmin packages fix remote file inclusion (Giuseppe Iuculano <iuculano@...ian.org>)
pdp petkov files still available? (excuseme@...h.ai)
Geolocation Question ("McGhee, Eddie" <Eddie.McGhee@....com>)
[SECURITY] [DSA 1966-1] New horde3 packages fix cross-site scripting (white@...ian.org (Steffen Joeris))
Re: iiScan - Full-function web application security scanning platform for free (Adrian liu <cncert1000@...il.com>)
iiscan (auto454357@...hmail.com)
Re: iiscan (Cody Robertson <cody@...khost.com>)
Re: iiscan results (Robin Sage <robin.sage@...ketmail.com>)
Re: iiscan (Robin Sage <robin.sage@...ketmail.com>)
[USN-880-1] GIMP vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: iiScan - Full-function web application security scanning platform for free (Cody Robertson <cody@...khost.com>)
Re: Geolocation Question (Dan Kaminsky <dan@...para.com>)
Re: VMware server (2.0.2) insecure file creation (Valdis.Kletnieks@...edu)
Re: iiscan (Jeffrey Walton <noloader@...il.com>)
Re: iiscan (Benji <me@...ji.com>)
Re: iiscan (Michael Holstein <michael.holstein@...ohio.edu>)
Re: iiscan (mrx <mrx@...pergander.org.uk>)
Web Issue phpinfo.php (Pablo Roberto <pabloroberto@...il.com>)
dotProject 2.1.3 Multiple Vulnerabilities ("Justin C. Klein Keane" <justin@...irish.net>)
[SECURITY] [DSA 1967-1] New transmission packages fix directory traversal (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Geolocation Question (Valdis.Kletnieks@...edu)
Re: Geolocation Question (Dan Kaminsky <dan@...para.com>)
Re: Geolocation Question (Valdis.Kletnieks@...edu)
Re: Geolocation Question (Dan Kaminsky <dan@...para.com>)
Re: Geolocation Question (mrx <mrx@...pergander.org.uk>)
ZDI-10-001: Novell iManager eDirectory Plugin Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Geolocation Question (Valdis.Kletnieks@...edu)
Re: Geolocation Question (Dan Kaminsky <dan@...para.com>)
Re: Geolocation Question (Paul Schmehl <pschmehl_lists@...rr.com>)

January 8 (13 messages)

January 9 (4 messages)

January 10 (10 messages)

January 11 (34 messages)

January 12 (30 messages)

January 13 (25 messages)

January 14 (22 messages)

[ MDVSA-2010:005 ] krb5 (security@...driva.com)
Re: Google Maps XSS (currently unpatched) ("Rafal Los" <Rafal@...ackingYou.com>)
[USN-884-1] OpenSSL vulnerability (Kees Cook <kees@...ntu.com>)
[ MDVSA-2010:006 ] krb5 (security@...driva.com)
Re: All China, All The Time ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: All China, All The Time (NOC <i@...t.ms>)
looking for this tools (�蹫�� <kimms@...osec.co.kr>)
Zenoss getJSONEventsInfo SQL Injection (Adam Baldwin <adam_baldwin@...nuity-is.com>)
Re: Fwd: All China, All The Time (Gregor Schneider <rc46fi@...glemail.com>)
Re: Fwd: All China, All The Time (Christian Sciberras <uuf6429@...il.com>)
Adobe Acrobat Script Injection (stratsec Research <research@...atsec.net>)
[SECURITY] [DSA-1970-1] New openssl packages fix denial of service (Stefan Fritsch <sf@...ian.org>)
Re: looking for this tools (Christoph Gruber <list@...u.at>)
Some SQL inj and including hints (Vladimir Vorontsov <vladimir.vorontsov@...ec.ru>)
XSS Vulnerability in Drupal's Node Blocks contributed module (6.x-1.3 and 5.x-1.1) (Marty Barbella <martybarbella@...il.com>)
[ GLSA 201001-09 ] Ruby: Terminal Control Character Injection (Alex Legler <a3li@...too.org>)
Re: All China, All The Time (Michael Holstein <michael.holstein@...ohio.edu>)
Locked fasync file descriptors can be referenced after free in >= 2.6.28 (Tavis Ormandy <taviso@....lonestar.org>)
Re: looking for this tools (Marek Lukaszuk <m.lukaszuk@...il.com>)
[USN-885-1] Transmission vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Looking at SSH scans passwords (honeypot analysis) (dd@...uri.net)
Re: Geolocation Question (Daniel Veditz <dveditz@...zio.com>)

January 15 (28 messages)

January 16 (20 messages)

[ MDVSA-2010:009 ] php (security@...driva.com)
Sprint / Verizon MiFi CSRF+CSS Gives up GPS info to attacker ("Adam Baldwin" <adam_baldwin@...nuity-is.com>)
Sprint / Verizon MiFi CSRF+CSS Gives up GPS info to attacker ("Adam Baldwin" <adam_baldwin@...nuity-is.com>)
Sprint / Verizon MiFi CSRF+CSS Gives up GPS info to attacker ("Adam Baldwin" <adam_baldwin@...nuity-is.com>)
Re: All China, All The Time (Marc Maiffret <marc@...cmaiffret.com>)
Re: All China, All The Time (Stack Smasher <stacksmasher@...il.com>)
Browser Fuzzer 3 (Krakow Labs <krakowlabs@...il.com>)
Re: All China, All The Time (Dan Kaminsky <dan@...para.com>)
Re: All China, All The Time (Marc Maiffret <marc@...cmaiffret.com>)
Re: Browser Fuzzer 3 (Jeff Williams <jeffwillis30@...il.com>)
Google today ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Google today (netinfinity <netinfinity.securitylab@...il.com>)
Re: Sprint / Verizon MiFi CSRF+CSS Gives up GPS info to attacker ("A. Ramos" <aramosf@...ec.net>)
Re: Google today (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Sprint / Verizon MiFi CSRF+CSS Gives up GPS info to attacker (Adam Baldwin <adam_baldwin@...nuity-is.com>)
Re: Virus "JS.Dropper-33" gefunden (Stack Smasher <stacksmasher@...il.com>)
Zenoss Multiple Admin CSRF (Adam Baldwin <adam_baldwin@...nuity-is.com>)
[ MDVSA-2010:010 ] libthai (security@...driva.com)
Re: Cross Site Identification (CSID) attack. Description and demonstration. (Ronen Z <ronen@...ji.com>)
Re: Cross Site Identification (CSID) attack. Description and demonstration. (Christian Sciberras <uuf6429@...il.com>)

January 17 (7 messages)

January 18 (26 messages)

[ MDVSA-2010:012 ] mysql (security@...driva.com)
IE8 Crash (Stack Smasher <stacksmasher@...il.com>)
Network flaw causes scary Web error ("Ivan ." <ivanhec@...il.com>)
Re: IE8 Crash (Tim Kunschke <tim@...mey.homelinux.com>)
Re: IE8 Crash (Christian Sciberras <uuf6429@...il.com>)
Re: All China, All The Time ("Anders Klixbull" <akl@...erian.dk>)
Re: All China, All The Time (Christian Sciberras <uuf6429@...il.com>)
Reminder: Campus Party EU 2010 Call For Participants (Campus Party EU Spain <campuseu@...uritybydefault.com>)
Reminder: Campus Party EU 2010 Call For Participants (Campus Party EU Spain <campuseu@...uritybydefault.com>)
[USN-886-1] Pidgin vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-885-1] LibThai vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: IE8 Crash (omg wtf <hexmasta@...il.com>)
Study of BlackBerry Proof-of-Concept Malicious Applications (Whitepaper) (Mayank Aggarwal <aggarwam@....osu.edu>)
[USN-887-1] LibThai vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
iiscan results - a closer look (Beatyou Man <beatyouman@...il.com>)
[ MDVSA-2010:013 ] transmission (security@...driva.com)
Re: All China, All The Time (Bipin Gautam <bipin.gautam@...il.com>)
Linkedin shared complete "personally identifiable data" to third party websites (Bipin Gautam <bipin.gautam@...il.com>)
Re: All China, All The Time (Christian Sciberras <uuf6429@...il.com>)
[ MDVSA-2010:014 ] transmission (security@...driva.com)
Re: All China, All The Time (Bipin Gautam <bipin.gautam@...il.com>)
Re: All China, All The Time (Christian Sciberras <uuf6429@...il.com>)
AOL ActiveX - Hail to The Francis (phc@...hmail.com)
CYBSEC Advisory#2010-0101-FreePBX 2.5.x Information disclosure ("CYBSEC Labs" <cybseclabs@...sec.com>)
CYBSEC Advisory#2010-0102-FreePBX 2.5.x-2.6 Permanent XSS ("CYBSEC Labs" <cybseclabs@...sec.com>)
CYBSEC Advisory#2010-0103-FreePBX 2.5.1 SQL Injection ("CYBSEC Labs" <cybseclabs@...sec.com>)

January 19 (16 messages)

January 20 (42 messages)

January 21 (45 messages)

January 22 (12 messages)

CVE-2010-0071 (Oracle TNS Listener) PoC (Dennis Yurichev <dennis@...us.info>)
Re: FREE STEPHEN WATT !!! (BMF <badmotherfsckr@...il.com>)
Re: PHC is _NOT_ DEAD !!!! (dramacrat <yirimyah@...il.com>)
Re: Two MSIE 6.0/7.0 NULL pointer crashes (Jeffrey Walton <noloader@...il.com>)
Re: Two MSIE 6.0/7.0 NULL pointer crashes (Jeffrey Walton <noloader@...il.com>)
Re: PHC is _NOT_ DEAD !!!! (Christian Sciberras <uuf6429@...il.com>)
Re: iiscan results - a closer look (Gregor Schneider <rc46fi@...glemail.com>)
Re: PHC is _NOT_ DEAD !!!! (phc@...hmail.com)
[USN-890-3] Python 2.4 vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Silverstripe <= v2.3.4: two XSS vulnerabilities (Moritz Naumann <security@...itz-naumann.com>)
Netragard's Exploit Acquisition Program -- We're back at it again. (Netragard Advisories <advisories@...ragard.com>)
Re: CVE-2010-0249 in the wild (exploit dev <extraexploit@...il.com>)

January 23 (7 messages)

Re: CVE-2010-0249 in the wild (Marc Maiffret <marc@...cmaiffret.com>)
Re: CVE-2010-0249 in the wild (exploit dev <extraexploit@...il.com>)
Re: Two MSIE 6.0/7.0 NULL pointer crashes (Valdis.Kletnieks@...edu)
Re: Two MSIE 6.0/7.0 NULL pointer crashes (Christian Sciberras <uuf6429@...il.com>)
[ MDVSA-2010:024 ] coreutils (security@...driva.com)
Re: FREE STEPHEN WATT !!! (sunjester <tripmonster@...il.com>)
Re: NSOADV-2010-002: Google Wave Design Bugs (sunjester <tripmonster@...il.com>)

January 24 (21 messages)

January 25 (30 messages)

January 26 (53 messages)

January 27 (31 messages)

January 28 (12 messages)

January 29 (16 messages)

January 30 (7 messages)

January 31 (10 messages)

645 messages