full-disclosure mailing list - 2010/07

Messages by day:

July 1 (30 messages)

• Re: Should nmap cause a DoS on cisco routers? ("cor@...post24.com" <cor@...post24.com>)
• [Bkis-03-2010] Vulnerability in Flash Slideshow Maker ("Bkis" <minhbq@...v.com.vn>)
• Re: Should nmap cause a DoS on cisco routers? (Thierry Zoller <Thierry@...ler.lu>)
• Re: Should nmap cause a DoS on cisco routers? ("Dobbins, Roland" <rdobbins@...or.net>)
• MSRC-001: Windows Vista/Server 2008 NtUserCheckAccessForIntegrityLevel Use-after-free Vulnerability (msrc-disclosure@...hmail.com)
• Directory Traversal on JTalk HTTP Server (rapper crazy <rappercrazzy@...il.com>)
• Re: Should nmap cause a DoS on cisco routers? (Thierry Zoller <Thierry@...ler.lu>)
• Re: Should nmap cause a DoS on cisco routers? ("Dobbins, Roland" <rdobbins@...or.net>)
• Someone using Wikipedia to infect others (Henri Salo <henri@...v.fi>)
• Vulnerabilities in WP-UserOnline for WordPress ("MustLive" <mustlive@...security.com.ua>)
• The Economist, cyber war issue (Gadi Evron <ge@...uxbox.org>)
• DDIVRT-2010-29 ALPHA Ethernet Adapter II Web-Manager 3.40.2 Authentication Bypass ("ddivulnalert@...frontline.com" <ddivulnalert@...frontline.com>)
• Re: [funsec] The Economist, cyber war issue (rick wesson <rick@...port-intelligence.com>)
• Re: [funsec] The Economist, cyber war issue (Christian Sciberras <uuf6429@...il.com>)
• Re: DDIVRT-2010-29 ALPHA Ethernet Adapter II Web-Manager 3.40.2 Authentication Bypass (Michael Holstein <michael.holstein@...ohio.edu>)
• Re: Should nmap cause a DoS on cisco routers? (Florian Weimer <fweimer@....de>)
• Re: Should nmap cause a DoS on cisco routers? (Dan Kaminsky <dan@...para.com>)
• AIRRAID3 - Asia's Biggest IT-Security Tournament Comes To Singapore on 20 Oct 2010 ("hmmrjmmr@...il.com" <hmmrjmmr@...il.com>)
• Re: [funsec] The Economist, cyber war issue (Joel Esler <joel.esler@...com>)
• Re: [funsec] The Economist, cyber war issue (Benji <me@...ji.com>)
• Re: Should nmap cause a DoS on cisco routers? ("Dario Ciccarone (dciccaro)" <dciccaro@...co.com>)
• CYBSEC Advisory#2010-0701 InterScan Web Security 5.0 Permanent XSS ("CYBSEC Labs" <cybseclabs@...sec.com>)
• [SECURITY] [DSA 2066-1] New wireshark packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Should nmap cause a DoS on cisco routers? (Cor Rosielle <cor@...post24.com>)
• Re: Someone using Wikipedia to infect others (Henri Salo <henri@...v.fi>)
• Re: Should nmap cause a DoS on cisco routers? (Cor Rosielle <cor@...post24.com>)
• Re: Should nmap cause a DoS on cisco routers? (Dan Kaminsky <dan@...para.com>)
• Re: Should nmap cause a DoS on cisco routers? (Benji <me@...ji.com>)
• Re: Should nmap cause a DoS on cisco routers? (AMILABS <amilabs@...online.net>)
• Re: Should nmap cause a DoS on cisco routers? ("Dobbins, Roland" <rdobbins@...or.net>)

• Re: Should nmap cause a DoS on cisco routers? (Dan Kaminsky <dan@...para.com>)
• Re: Should nmap cause a DoS on cisco routers? ("Dobbins, Roland" <rdobbins@...or.net>)
• Re: Should nmap cause a DoS on cisco routers? (Lee <ler762@...il.com>)
• Re: Should nmap cause a DoS on cisco routers? ("Dobbins, Roland" <rdobbins@...or.net>)
• Re: Should nmap cause a DoS on cisco routers? (Dan Kaminsky <dan@...para.com>)
• Re: Should nmap cause a DoS on cisco routers? (Florian Weimer <fweimer@....de>)
• [Tool] - inundator - an intrusion detection false positives generator. ("epixoip" <epixoip@...h.com>)
• WiFi sniffing need to be connected? (Vinicius Menezes <cotomax@...oo.com>)
• Re: Should nmap cause a DoS on cisco routers? ("Dobbins, Roland" <rdobbins@...or.net>)
• Re: Should nmap cause a DoS on cisco routers? (Thierry Zoller <Thierry@...ler.lu>)
• Re: Should nmap cause a DoS on cisco routers? (Thierry Zoller <Thierry@...ler.lu>)
• Re: Should nmap cause a DoS on cisco routers? ("Champ Clark III [Softwink]" <champ@...twink.com>)
• Re: Should nmap cause a DoS on cisco routers? (Christian Sciberras <uuf6429@...il.com>)
• Re: Should nmap cause a DoS on cisco routers? ("Champ Clark III [Softwink]" <champ@...twink.com>)
• Re: Should nmap cause a DoS on cisco routers? ("Dobbins, Roland" <rdobbins@...or.net>)
• Re: Should nmap cause a DoS on cisco routers? (Michal <michal@...ic.co.uk>)
• Re: Should nmap cause a DoS on cisco routers? ("Dobbins, Roland" <rdobbins@...or.net>)
• Re: Should nmap cause a DoS on cisco routers? ("Dobbins, Roland" <rdobbins@...or.net>)
• Drupal Views Module Information Disclosure Vulnerability ("Justin C. Klein Keane" <justin@...irish.net>)
• Re: Should nmap cause a DoS on cisco routers? (Thierry Zoller <Thierry@...ler.lu>)
• Re: Should nmap cause a DoS on cisco routers? ("Dobbins, Roland" <rdobbins@...or.net>)
• VSR Advisory: Multiple Cisco CSS / ACE Client Certificate and HTTP Header Manipulation Vulnerabilities (VSR Advisories <advisories@...curity.com>)
• Vulnerabilities in Google (musnt live <musntlive@...il.com>)
• Re: WiFi sniffing need to be connected? (Tyler Borland <tborland1@...il.com>)
• [ MDVSA-2010:127 ] imlib2 (security@...driva.com)
• Re: Should nmap cause a DoS on cisco routers? (coderman <coderman@...il.com>)
• Re: Should nmap cause a DoS on cisco routers? (Dan Kaminsky <dan@...para.com>)
• [SECURITY] [DSA-2067-1] New mahara packages fix several vulnerabilities (Raphael Geissert <geissert@...ian.org>)
• Re: Should nmap cause a DoS on cisco routers? (Mailing lists at Core Security Technologies <lists@...esecurity.com>)
• TELUS Security Labs VR - iSCSI target Multiple Implementations iSNS Stack Buffer Overflow (TELUS Security Labs - Vulnerability Research <noreply@...us.com>)
• Re: Should nmap cause a DoS on cisco routers? ("Dobbins, Roland" <rdobbins@...or.net>)

• Re: Should nmap cause a DoS on cisco routers? (AMILABS <amilabs@...online.net>)
• Re: [funsec] The Economist, cyber war issue ("Tomas L. Byrnes" <tomb@...neit.net>)
• Re: [funsec] The Economist, cyber war issue ("Tomas L. Byrnes" <tomb@...neit.net>)
• Re: [funsec] The Economist, cyber war issue ("Tomas L. Byrnes" <tomb@...neit.net>)
• Security Advisories from TEHTRI-Security at HITB Europe (Laurent OUDOT at TEHTRI-Security <laurent.oudot@...tri-security.com>)
• Re: Redirectors: the phantom menace ("MustLive" <mustlive@...security.com.ua>)
• Hiding Backdoors in plain sight (Mailing lists at Core Security Technologies <lists@...esecurity.com>)
• Re: [funsec] The Economist, cyber war issue ("Rob, grandpa of Ryan, Trevor, Devon & Hannah" <rMslade@...w.ca>)
• Re: Redirectors: the phantom menace (Chris Evans <scarybeasts@...il.com>)
• File Download and DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera ("MustLive" <mustlive@...security.com.ua>)
• Re: File Download and DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera (mitchell <mitchell@....bg>)

• Re: [funsec] The Economist, cyber war issue (coderman <coderman@...il.com>)
• Re: Hiding Backdoors in plain sight (coderman <coderman@...il.com>)
• Re: Hiding Backdoors in plain sight (sunjester <tripmonster@...il.com>)
• Youtube xss (Christopher Grant <chrisgrantmail@...il.com>)
• [SECURITY] [DSA 2059-2] New pcsc-lite packages fix regression (Thijs@...ki.tv, "Kinkhorst <thijs"@debian.org:)

• Re: Youtube xss (rafael.gomes@...a.br)
• [HITB-Announce] HITB Magazine Issue 003 + HITBSecConf2010 - Amsterdam (Hafez Kamal <aphesz@...kinthebox.org>)
• Re: Redirectors: the phantom menace (Sébastien Duquette <ekse.0x@...il.com>)
• Re: Vulnerabilities in Google (PsychoBilly <zpamh0l3@...il.com>)
• Secunia Research: Joomla BookLibrary From Same Author Module "id" SQL Injection (Secunia Research <remove-vuln@...unia.com>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (Nelson Brito <nbrito@...ure.org>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (quispiam lepidus <quispiam.lepidus@...il.com>)

• Re: [Tool] - inundator - an intrusion detection false positives generator. ("epixoip" <epixoip@...h.com>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (Nelson Brito <nbrito@...ure.org>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (Nelson Brito <nbrito@...ure.org>)
• Re: Full-Disclosure Digest, Vol 65, Issue 7 (Mary and Glenn Everhart <Everhart@....com>)
• Re: Full-Disclosure Digest, Vol 65, Issue 7 (Valdis.Kletnieks@...edu)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (Nelson Brito <nbrito@...ure.org>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (Nelson Brito <nbrito@...ure.org>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (Jubei Trippataka <vpn.1.fanatic@...il.com>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (Adriel Desautels <adriel@...ragard.com>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. ("epixoip" <epixoip@...h.com>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. ("epixoip" <epixoip@...h.com>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. ("epixoip" <epixoip@...h.com>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (Nelson Brito <nbrito@...ure.org>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (Valdis.Kletnieks@...edu)
• [USN-943-1] Thunderbird vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (nelsonburrito@...h.ai)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (musnt live <musntlive@...il.com>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (NOC <i@...t.ms>)
• Re: [Tool] - inundator - an intrusion detection false positives generator. (Christian Sciberras <uuf6429@...il.com>)
• MusntLive releases serious Microsoft MS SQL advisory (musnt live <musntlive@...il.com>)
• [ MDVSA-2010:128 ] lftp (security@...driva.com)
• Re: [funsec] The Economist, cyber war issue ("Tomas L. Byrnes" <tomb@...neit.net>)

• Re: [funsec] The Economist, cyber war issue (coderman <coderman@...il.com>)
• Re: [funsec] The Economist, cyber war issue (coderman <coderman@...il.com>)
• Re: Full-Disclosure Digest, Vol 65, Issue 8 (Mary and Glenn Everhart <Everhart@....com>)
• Re: [funsec] The Economist, cyber war issue ("Tomas L. Byrnes" <tomb@...neit.net>)
• Re: Should nmap cause a DoS on cisco routers? (Fyodor <fyodor@...ecure.org>)
• Re: [funsec] The Economist, cyber war issue (coderman <coderman@...il.com>)
• Re: Full-Disclosure Digest, Vol 65, Issue 8 (Valdis.Kletnieks@...edu)
• DeepSec 2010 - Call for Papers - REMINDER (DeepSec Conference <deepsec@...psec.net>)
• Citibank CitiDirect - forced usage of vulnerable version of Java Runtime Environment ("Tomasz \"Tometzky\" Ostrowski" <tometzky+fd@...il.com>)
• About the inotify Mechanism in LINUX (supercodeing35271 supercodeing35271 <supercodeing35271@...il.com>)
• Re: [funsec] The Economist, cyber war issue (coderman <coderman@...il.com>)
• Re: About the inotify Mechanism in LINUX (coderman <coderman@...il.com>)
• Re: Should nmap cause a DoS on cisco routers? (coderman <coderman@...il.com>)
• Re: About the inotify Mechanism in LINUX (Valdis.Kletnieks@...edu)
• Re: About the inotify Mechanism in LINUX (Gregory Bellier <gregory.bellier@...il.com>)
• Re: Full-Disclosure Digest, Vol 65, Issue 8 (Michael Simpson <mikie.simpson@...il.com>)
• Re: About the inotify Mechanism in LINUX (Valdis.Kletnieks@...edu)
• Mule Recruiting? (Stack Smasher <stacksmasher@...il.com>)
• Cisco Security Advisory: Hard-Coded SNMP Community Names in Cisco Industrial Ethernet 3000 Series Switches Vulnerabili… (Cisco Systems Product Security Incident…)
• [ MDVSA-2010:129 ] heimdal (security@...driva.com)
• [ MDVSA-2010:130 ] heimdal (security@...driva.com)
• Windows XP bug (BlackHawk <hawkgotyou@...il.com>)
• Re: About the inotify Mechanism in LINUX (Guillaume Friloux <guillaume.friloux@...64.com>)
• Re: Windows XP bug (T Biehn <tbiehn@...il.com>)
• [USN-959-1] PAM vulnerability (Kees Cook <kees@...ntu.com>)

• Real Player 0day for WinXP (webDEViL <w3bd3vil@...il.com>)
• Outlook web access 2007 CSRF (Rosario Valotta <valotta.rosario@...il.com>)
• Re: Windows XP bug (Duboucher Thomas <thomas@...oucher.eu>)
• Re: Windows XP bug (Sagar Belure <sagar.belure@...il.com>)
• IRC FRAUD ALERT ADVISORY 01-2010-07 (IRC FRAUD ALERT <ircfraudalert@...il.com>)
• Re: Windows XP bug (Vipul Agarwal <vipul@...tygeeks.com>)
• Re: Should nmap cause a DoS on cisco routers? (Benji <me@...ji.com>)
• Re: Windows XP bug (Juan Galiana <jgaliana@...il.com>)
• Re: Windows XP bug (Christian Sciberras <uuf6429@...il.com>)
• Re: Windows XP bug (Robert Święcki <robert@...ecki.net>)
• Malware 2010 CfP *** Extended Deadline (Daniel Reynaud <reynaudd@...ia.fr>)
• Re: About the inotify Mechanism in LINUX (Gregory Bellier <gregory.bellier@...il.com>)
• [USN-960-1] libpng vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Re: [USN-960-1] libpng vulnerabilities (Robert Święcki <robert@...ecki.net>)
• Re: Should nmap cause a DoS on cisco routers? (coderman <coderman@...il.com>)
• Re: Real Player 0day for WinXP (webDEViL <w3bd3vil@...il.com>)
• Re: IRC FRAUD ALERT ADVISORY 01-2010-07 (DiKKy Heartiez <dikkyheartiez@...mail.com>)
• Re: Real Player 0day for WinXP (Shreyas Zare <shreyas@...fence.com>)
• Re: Real Player 0day for WinXP (webDEViL <w3bd3vil@...il.com>)
• Re: Real Player 0day for WinXP (mutiny <kefka@...inbeardsucks.com>)
• Re: IRC FRAUD ALERT ADVISORY 01-2010-07 (IRC FRAUD ALERT <ircfraudalert@...il.com>)
• IRC FRAUD ALERT ADVISORY 01-2010-07 Andrew Alan Escher Auernheimer (IRC FRAUD ALERT <ircfraudalert@...il.com>)

• Re: IRC FRAUD ALERT ADVISORY 01-2010-07 (Sam Hocevar <sam@...evar.net>)
• ATTENTION FBI - Want the real names folks involved in the iPad hack??? (IRC FRAUD ALERT <ircfraudalert@...il.com>)
• Re: ATTENTION FBI - Want the real names folks involved in the iPad hack??? (Elly_Tran_Ha <hexmasta@...il.com>)
• Re: IRC FRAUD ALERT ADVISORY 01-2010-07 (DiKKy Heartiez <dikkyheartiez@...mail.com>)
• Re: ATTENTION FBI - Want the real names folks involved in the iPad hack??? (Jhfjjf Hfdsjj <taser3000@...oo.com>)
• Nostalgia and days gone by (Iadnah <iadnah@...inklounge.com>)
• Re: Nostalgia and days gone by (Christian Sciberras <uuf6429@...il.com>)
• Vulnerabilities in SimpNews ("MustLive" <mustlive@...security.com.ua>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• Re: Should nmap cause a DoS on cisco routers? ("Dario Ciccarone (dciccaro)" <dciccaro@...co.com>)
• Re: Nostalgia and days gone by (Ross.Bushby@...ech-ict.co.uk)
• Re: ATTENTION FBI - Want the real names folks involved in the iPad hack??? ("McGhee, Eddie" <Eddie.McGhee@....com>)
• Re: IRC FRAUD ALERT ADVISORY 01-2010-07 (Sam Hocevar <sam@...evar.net>)
• TGP v1.2 released ("Thor (Hammer of God)" <thor@...merofgod.com>)

• Re: Should nmap cause a DoS on cisco routers? (bk <chort0@...il.com>)
• Zend studio location Cross-Domain Scripting Vulnerability (IEhrepus <5up3rh3i@...il.com>)
• Re: Should nmap cause a DoS on cisco routers? ("Dobbins, Roland" <rdobbins@...or.net>)
• ATTENTION BKA, GCHQ and FBI - would you like the full names and information on folks involved in the iPad hack??? (Brian Hatfield <brianhtfld2@...il.com>)

• Re: Using of the sites for attacks on other sites ("MustLive" <mustlive@...security.com.ua>)
• [SECURITY] [DSA-2068-1] New python-cjson packages fix denial of service (Giuseppe Iuculano <iuculano@...ian.org>)
• Re: Using of the sites for attacks on other sites ("MustLive" <mustlive@...security.com.ua>)
• Re: Using of the sites for attacks on other sites (Benji <me@...ji.com>)

• [SECURITY] [DSA-2069-1] New znc packages fix denial of service (Raphael Geissert <geissert@...ian.org>)
• Re: Using of the sites for attacks on other sites ("Paul Blackburn - Server Administrator" <paulb@...na.co.za>)
• NuralStorm Webmail Multiple Vulnerabilities ("Justin C. Klein Keane" <justin@...irish.net>)
• Re: NuralStorm Webmail Multiple Vulnerabilities (musnt live <musntlive@...il.com>)
• [ MDVSA-2010:131 ] iscsitarget (security@...driva.com)
• Re: Full-Disclosure Digest, Vol 65, Issue 14 ("Daniel Sichel" <daniels@...derosatel.com>)
• Asterisk Recording Interface (freePBX as example) Multiple Vulnerabilities (Tyler Borland <tborland1@...il.com>)

• TGP Password Strength Check on-line ("Thor (Hammer of God)" <thor@...merofgod.com>)
• VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0. (VMware Security Team <security@...are.com>)
• CVE-2010-1870: Struts2 remote commands execution (Meder Kydyraliev <meder@....nu>)
• Re: Full-Disclosure Digest, Vol 65, Issue 14 (PsychoBilly <zpamh0l3@...il.com>)
• Re: hashdays 2010 - Call for Papers (#days CFP) (Hashdays CFP <cfp@...con-switzerland.org>)
• ZDI-10-117: Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerabi… (ZDI Disclosures <zdi-disclosures@...pin…)
• [USN-961-1] Ghostscript vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Google auto redirect (Marshall Whittaker <marshallwhittaker@...il.com>)
• TPTI-10-04: Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-10-118: Oracle Secure Backup Administration uname Authentication Bypass Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-10-119: Oracle Secure Backup Administration $other Variable Command Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...ping…)
• ZDI-10-120: Oracle Secure Backup Administration objectname Command Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint…)
• ZDI-10-121: Command Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-10-122: Oracle Secure Backup Administration Command Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-10-123: Oracle Secure Backup Administration Authentication Bypass Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-10-124: Oracle Secure Backup Web Interface Various Post-Auth Command Injection Remote Code Execution Vulnerabilitie… (ZDI Disclosures <zdi-disclosures@...pin…)
• CVE-2010-2375: WebLogic Plugin HTTP Injection via Encoded URLs (VSR Advisories <advisories@...curity.com>)
• ZDI-10-125: IBM SolidDB solid.exe Handshake Request Username Field Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

• IBM AIX, Oracle Sun Solaris, HP HP-UX Remote Vulnerability - CVE-2010-0083 (Rodrigo Branco <rbranco@...ckpoint.com>)
• IS-2010-006 - D-Link DAP-1160 formFilter buffer overflow (Cristofaro Mune <pulsoid@...silence.org>)
• DDoS attacks via other sites execution tool (DAVOSET) ("MustLive" <mustlive@...security.com.ua>)
• Re: DDoS attacks via other sites execution tool (DAVOSET) ("Dobbins, Roland" <rdobbins@...or.net>)
• Re: Google auto redirect ("McGhee, Eddie" <Eddie.McGhee@....com>)
• PR09-16: Juniper Secure Access series (Juniper IVE) Cross-Site Scripting Vulnerability (research <research@...checkup.com>)
• Re: Google auto redirect (Mario Vilas <mvilas@...il.com>)
• Re: Google auto redirect (Juan Galiana <jgaliana@...il.com>)
• Re: Google auto redirect (Chris Evans <scarybeasts@...il.com>)
• Re: Google auto redirect (Chris Evans <scarybeasts@...il.com>)
• [ MDVSA-2010:132 ] python (security@...driva.com)
• Cross-Site Scripting vulnerabilities in SimpGB ("MustLive" <mustlive@...security.com.ua>)
• Outlook PR_ATTACH_METHOD file execution vulnerability (Akita Software Security <lists@...tasecurity.nl>)
• Re: Google auto redirect (is it safe <istheinternetsafe@...glemail.com>)
• Pwnie Awards 2010 (Alexander Sotirov <alex@...irov.net>)
• [SECURITY] [DSA 2070-1] New freetype packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2071-1] New libmikmod packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Drupal OG Menu Module XSS Vulnerability (Justin Klein Keane <justin@...irish.net>)
• Re: ZDI-10-121: Command Injection Remote Code Execution Vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

• Mailman Mis/Default configuration (Sagar Belure <sagar.belure@...il.com>)
• Re: NuralStorm Webmail Multiple Vulnerabilities (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• Re: NuralStorm Webmail Multiple Vulnerabilities (musnt live <musntlive@...il.com>)
• Re: NuralStorm Webmail Multiple Vulnerabilities (Justin Klein Keane <justin@...irish.net>)
• Re: NuralStorm Webmail Multiple Vulnerabilities (Christoph Gruber <list@...u.at>)
• Re: NuralStorm Webmail Multiple Vulnerabilities (musnt live <musntlive@...il.com>)
• Re: NuralStorm Webmail Multiple Vulnerabilities (Valdis.Kletnieks@...edu)
• [USN-961-1] Ghostscript vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Re: Mailman Mis/Default configuration (Valdis.Kletnieks@...edu)
• Secunia Research: GIGABYTE Dldrv2 ActiveX Control Unsafe Methods (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: GIGABYTE Dldrv2 ActiveX Control Array Indexing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
• SAPGui BI wadmxhtml.dll Tags Property Heap Corruption ("Elazar Broad" <elazar@...hmail.com>)
• [USN-962-1] VTE vulnerability (Kees Cook <kees@...ntu.com>)
• ZDI-10-126: Ipswitch Imail Server List Mailer Reply-To Address Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-10-127: Ipswitch Imail Server Mailing List Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-10-128: Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: ZDI-10-117: Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vuln… ("Rotem Kerner | BugSec" <rotem@...sec.c…)
• ClubHack2010 CFP (ClubHack <seclist@...bhack.com>)
• A new zombie port scanning attack (ithilgore <ithilgore.ryu.l@...il.com>)
• [ MDVSA-2010:133 ] libpng (security@...driva.com)
• SmpCTF Hacker Challenge Shirts Available (Night Ninja <peanuter@...il.com>)

• [ MDVSA-2010:134 ] ghostscript (security@...driva.com)
• [ MDVSA-2010:135 ] ghostscript (security@...driva.com)
• [ MDVSA-2010:136 ] ghostscript (security@...driva.com)
• Kiwicon IV: Our Worst CFP Yet (Kiwicon <kiwicon@...icon.org>)
• Patent Absurdity - How software patents broke the system ("M.B.Jr." <marcio.barbado@...il.com>)
• Re: Patent Absurdity - How software patents broke the system (sunjester <tripmonster@...il.com>)
• Re: Should nmap cause a DoS on cisco routers? (Curt Purdy <infosysec@...il.com>)
• ZDI-10-129: Novell Netware Groupwise Internet Gateway Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: Patent Absurdity - How software patents broke the system ("M.B.Jr." <marcio.barbado@...il.com>)
• Expired certificate ("Daniel Sichel" <daniels@...derosatel.com>)
• Re: Expired certificate (Larry Seltzer <larry@...ryseltzer.com>)
• Re: Expired certificate (Dimitry Andric <dimitry@...ric.com>)
• Re: Expired certificate (Junk Meat <junkmeat@...hawn.com>)
• Re: Expired certificate (Valdis.Kletnieks@...edu)
• Re: Expired certificate (bk <chort0@...il.com>)
• Re: Expired certificate (Junk Meat <junkmeat@...hawn.com>)
• Re: Patent Absurdity - How software patents broke the system (sunjester <tripmonster@...il.com>)
• Re: Expired certificate (bk <chort0@...il.com>)

• iOffice 0.1 command execution vulnerability (Marshall Whittaker <marshallwhittaker@...il.com>)
• who know about this--can not catch the absolute path on intercept the mkdir() syscall in linux. (supercodeing35271 supercodeing35271 <supercodeing35271@...il.c…)
• Two biggest Indian University Websites are vulnerable (Sandeep Sengupta <sandeep.sengupta@...il.com>)
• Re: who know about this--can not catch the absolute path on intercept the mkdir() syscall in linux. (Valdis.Kletnieks@...edu)
• Re: Two biggest Indian University Websites are vulnerable (Shreyas Zare <shreyas@...fence.com>)
• Re: Two biggest Indian University Websites are vulnerable (Benji <me@...ji.com>)
• Re: Two biggest Indian University Websites are vulnerable (Sandeep Sengupta <sandeep.sengupta@...il.com>)
• Re: Two biggest Indian University Websites are vulnerable (Benji <me@...ji.com>)
• Re: Two biggest Indian University Websites are vulnerable (Valdis.Kletnieks@...edu)
• Re: Two biggest Indian University Websites are vulnerable (Jeffrey Walton <noloader@...il.com>)
• Re: Expired certificate (Junk Meat <junkmeat@...hawn.com>)
• Interesting link regarding FIOS WEP keys ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Expired certificate (Dan Kaminsky <dan@...para.com>)
• Re: Interesting link regarding FIOS WEP keys (bk <chort0@...il.com>)
• Re: Interesting link regarding FIOS WEP keys ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Interesting link regarding FIOS WEP keys (bk <chort0@...il.com>)
• Re: Interesting link regarding FIOS WEP keys ("Thor (Hammer of God)" <thor@...merofgod.com>)
• In-band signalling (was: Re: NuralStorm Webmail Multiple Vulnerabilities) (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• Re: In-band signalling (was: Re: NuralStorm Webmail Multiple Vulnerabilities) (Dan Kaminsky <dan@...para.com>)
• Re: Interesting link regarding FIOS WEP keys (coderman <coderman@...il.com>)

• Re: In-band signalling (was: Re: NuralStorm Webmail Multiple Vulnerabilities) (coderman <coderman@...il.com>)
• Re: who know about this--can not catch the absolute path on intercept the mkdir() syscall in linux. (coderman <coderman@...il.com>)
• Re: Interesting link regarding FIOS WEP keys (Peter Bruderer <peter.bruderer@....ch>)
• PoC for CVE-2010-1869 (ghostscript) and CVE-2010-1039 (rpc.pcnfsd) (Rodrigo Branco <rbranco@...ckpoint.com>)
• Re: Expired certificate (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)

• --== ~ AIX5l w/ FTP-SERVER REMOTE ROOT HASH DISCLOSURE EXPLOIT ~ =-- ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• [ MDVSA-2010:137 ] freetype2 (security@...driva.com)
• PoC Malicious GKrellM2 System Monitor Plugin (Marshall Whittaker <marshallwhittaker@...il.com>)
• VMSA-2010-0012 VMware vCenter Update Manager fix for Jetty Web server addresses important security vulnerabilities (VMware Security Team <security@...are.com>)
• [SECURITY] [DSA 2072-1] New libpng packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)

• [USN-963-1] FreeType vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• [Onapsis Security Advisory 2010-006] SAP J2EE Web Services Navigator Cross-Site Scripting (Onapsis Research Labs <research@...psis.com>)
• [USN-962-1] VTE vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-963-1] FreeType vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Re: Expired certificate (Marsh Ray <marsh@...endedsubset.com>)
• Sending spam via sites and creating spam-botnets ("MustLive" <mustlive@...security.com.ua>)

• ZDI-10-130: Mozilla Firefox NodeIterator Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-10-131: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-10-132: Mozilla Firefox Plugin Parameter EnsureCachedAttrParamArrays Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com…)
• ZDI-10-133: Mozilla Firefox CSS font-face Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-10-134: Mozilla Firefox DOM Attribute Cloning Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-10-135: Novell Groupwise WebAccess Multiple Cross-Site Scripting Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• [USN-940-2] Kerberos vulnerability (Kees Cook <kees@...ntu.com>)
• Demonstration of the new Windows 'LNK' exploit (matt <matt@...ackvector.org>)
• [SECURITY] [DSA 2073-1] New mlmmj packages fix directory traversal (Thijs Kinkhorst <thijs@...ian.org>)
• "Jailpassing" technique for iphones ("hmmrjmmr@...il.com" <hmmrjmmr@...il.com>)
• [SECURITY] [DSA 2074-1] New ncompress packages fix execution of arbitrary code (Giuseppe Iuculano <iuculano@...ian.org>)
• Re: Sending spam via sites and creating spam-botnets (Benji <me@...ji.com>)
• Re: Sending spam via sites and creating spam-botnets ("McGhee, Eddie" <Eddie.McGhee@....com>)
• Re: "Jailpassing" technique for iphones (Fionnbharr <thouth@...il.com>)
• Re: "Jailpassing" technique for iphones ("hmmrjmmr@...il.com" <hmmrjmmr@...il.com>)
• Re: "Jailpassing" technique for iphones ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: "Jailpassing" technique for iphones (Michael Neal Vasquez <mnv@...mni.princeton.edu>)
• Cisco Security Advisory: CDS Internet Streamer: Web Server Directory Traversal Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...c…)
• Re: "Jailpassing" technique for iphones (Tyler Borland <tborland1@...il.com>)
• Re: "Jailpassing" technique for iphones ("hmmrjmmr@...il.com" <hmmrjmmr@...il.com>)
• SQL Injection vulnerability in coWiki ("MustLive" <mustlive@...security.com.ua>)
• Re: Expired certificate (Jan Schejbal <jan.mailinglisten@...glemail.com>)
• ZDI-10-136: Novell Teaming ajaxUploadImageFile Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-10-137: Hewlett-Packard OpenView NNM webappmon.exe execvp_nc Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: "Jailpassing" technique for iphones (Fionnbharr <thouth@...il.com>)

• Re: Two biggest Indian University Websites are vulnerable (Sandeep Sengupta <sandeep.sengupta@...il.com>)
• Re: Sending spam via sites and creating spam-botnets ("MustLive" <mustlive@...security.com.ua>)
• Re: --== ~ AIX5l w/ FTP-SERVER REMOTE ROOT HASH DISCLOSURE EXPLOIT ~ =-- ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• there might be three people who missed it... (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: there might be three people who missed it... (Valdis.Kletnieks@...edu)
• Re: there might be three people who missed it... (Valdis.Kletnieks@...edu)
• Re: there might be three people who missed it... (Christian Sciberras <uuf6429@...il.com>)

• Re: Expired certificate (Ryan Castellucci <ryan.castellucci@...il.com>)
• Re: Expired certificate (Dan Kaminsky <dan@...para.com>)
• Advanced AIX 5l FTPd Exploit ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• Re: Expired certificate (Dan Kaminsky <dan@...para.com>)
• Re: Expired certificate (Marsh Ray <marsh@...endedsubset.com>)
• Re: there might be three people who missed it... (Bipin Gautam <bipin.gautam@...il.com>)
• Re: Expired certificate (Marsh Ray <marsh@...endedsubset.com>)
• Pwn1n6 r4nd0m n00bs s1nc3 0x7CF (Balkans Report) (hack4pr0n@...hmail.com)
• [USN-927-7] nspr update (Jamie Strandboge <jamie@...onical.com>)
• [USN-957-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• [USN-927-6] NSS vulnerability (Jamie Strandboge <jamie@...onical.com>)
• [USN-927-8] Thunderbird update (Jamie Strandboge <jamie@...onical.com>)
• [USN-930-4] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
• [USN-930-5] ant, apturl, Epiphany, gluezilla, gnome-python-extras, liferea, mozvoikko, OpenJDK, packagekit, ubufox, webf… (Jamie Strandboge <jamie@...onical.com>)
• [ MDVSA-2010:138 ] iputils (security@...driva.com)
• Advanced AIX 5l FTPd Exploit V2.0 ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• [Software Freedom Law Center paper] Killed by Code: Software Transparency in Implantable Medical Devices (Shawn Merdinger <shawnmer@...il.com>)
• Re: [Software Freedom Law Center paper] Killed by Code: Software Transparency in Implantable Medical Devices (Christian Sciberras <uuf6429@...il.com>)
• Open Letter to Uncle Sam (Iadnah Enoch <iadnah@...inklounge.com>)
• Re: Open Letter to Uncle Sam (Rohit Patnaik <quanticle@...il.com>)
• Re: Expired certificate (Meadow <Meadow@...merofgod.com>)
• Re: [Software Freedom Law Center paper] Killed by Code: Software Transparency in Implantable Medical Devices (Paul Schmehl <pschmehl_lists@...rr.com>)
• Re: Open Letter to Uncle Sam ("Brian Wilson" <vaifan@...mail.net>)
• Re: Expired certificate (bk <chort0@...il.com>)

• Re: Expired certificate (Marsh Ray <marsh@...endedsubset.com>)
• Call For Papers - Hackers 2 Hackers Conference 7th Edition - Brazil ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
• Re: Expired certificate (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• Re: In-band signalling (was: Re: NuralStorm Webmail Multiple Vulnerabilities) (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• Re: Expired certificate (Dan Kaminsky <dan@...para.com>)
• Re: Expired certificate (Dan Kaminsky <dan@...para.com>)
• Re: Patent Absurdity - How software patents broke the system (Rohit Patnaik <quanticle@...il.com>)

• iKAT - Interactive Kiosk Attack Tool v3 - Defcon 18 Edition (Paul Craig <paul.craig@...urity-assessment.com>)
• Multiple vulnerabilities in MC Content Manager ("MustLive" <mustlive@...security.com.ua>)
• Re: Expired certificate (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• Is it too late for nominations for Pwnie awards? (Valdis.Kletnieks@...edu)

• Re: Expired certificate (Dan Kaminsky <dan@...para.com>)
• Paper on the law and Implantable Devices security (Gadi Evron <ge@...uxbox.org>)
• Re: Paper on the law and Implantable Devices security (Jeffrey Walton <noloader@...il.com>)
• Mac OS X WebDAV kernel extension local denial-of-service (Dan Rosenberg <dan.j.rosenberg@...il.com>)
• Re: Paper on the law and Implantable Devices security (Shawn Merdinger <shawnmer@...il.com>)
• [USN-958-1] Thunderbird vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
• [USN-957-2] Firefox and Xulrunner vulnerability (Jamie Strandboge <jamie@...onical.com>)
• Foofus.net Security Advisory: Symantec AMS Intel Alert Handler service Design Flaw (spider <spider@...mp.foofus.net>)
• [USN-930-6] Firefox and Xulrunner vulnerability (Jamie Strandboge <jamie@...onical.com>)
• Re: Expired certificate (Marsh Ray <marsh@...endedsubset.com>)
• FuzzDiff tool (Dan Rosenberg <drosenberg@...curity.com>)
• [USN-964-1] Likewise Open vulnerability (Kees Cook <kees@...ntu.com>)

• [ MDVSA-2010:139 ] php (security@...driva.com)
• [ MDVSA-2010:140 ] php (security@...driva.com)
• London DEFCON July meet - DC4420 - Wed 28th July 2010 (Dominic <dominicgs@...il.com>)
• [ MDVSA-2010:141 ] samba (security@...driva.com)
• [SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2076-1] New gnupg2 packages fix potential code execution (Florian Weimer <fw@...eb.enyo.de>)

• Speakers Required for null+h4ck3r meet in Delhi on 31st July 2010 (Rockey Killer <skg102@...il.com>)
• Re: Speakers Required for null+h4ck3r meet in Delhi on 31st July 2010 (Rockey Killer <skg102@...il.com>)
• Secunia Research: Autonomy KeyView Compound File Parsing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: Autonomy KeyView wkssr.dll Floating Point Conversion Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: Autonomy KeyView rtfsr.dll RTF Parsing Signedness Error (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: Autonomy KeyView wkssr.dll Integer Underflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: Autonomy KeyView wkssr.dll String Indexing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: Autonomy KeyView wkssr.dll Record Parsing Buffer Overflows (Secunia Research <remove-vuln@...unia.com>)
• Re: Speakers Required for null+h4ck3r meet in Delhi on 31st July 2010 (Tõnu Samuel <tonu@....ee>)
• Qualys Adds Exploitability Data (<sergio@...osegura.net>)
• Vulnerabilities in Cetera eCommerce ("MustLive" <mustlive@...security.com.ua>)
• New vulnerabilities in Cetera eCommerce ("MustLive" <mustlive@...security.com.ua>)
• Re: Patent Absurdity - How software patents broke the system ("M.B.Jr." <marcio.barbado@...il.com>)
• [ MDVSA-2010:142 ] openldap (security@...driva.com)
• Re: Patent Absurdity - How software patents broke the system ("M.B.Jr." <marcio.barbado@...il.com>)

• [HITB-Ann] Reminder: HITB2010 Malaysia Call for Papers Closing August 9th (Hafez Kamal <aphesz@...kinthebox.org>)
• the real stuxnet authors plz stand up (coderman <coderman@...il.com>)
• [SECURITY] [DSA 2077-1] New openldap packages fix potential code execution (Florian Weimer <fw@...eb.enyo.de>)
• Day of bugs in WordPress 2 ("MustLive" <mustlive@...security.com.ua>)
• Re: Day of bugs in WordPress 2 (coderman <coderman@...il.com>)
• Re: Day of bugs in WordPress 2 (Christian Sciberras <uuf6429@...il.com>)
• Re: Day of bugs in WordPress 2 (coderman <coderman@...il.com>)

• Re: Day of bugs in WordPress 2 (Zach C <fxchip@...il.com>)
• Re: Day of bugs in WordPress 2 (Valdis.Kletnieks@...edu)
• Re: Day of bugs in WordPress 2 ("Elazar Broad" <elazar@...hmail.com>)
• Insomnia : ISVA-100730.1 - CMS Multiple SQL injection Vulnerabilities ("Insomnia Security" <advisories@...omniasec.com>)
• Black Hat Video Stream Hack - Ironic (Michael Coates <michaelcoates.webappsec@...il.com>)
• Re: Day of bugs in WordPress 2 (Christian Sciberras <uuf6429@...il.com>)
• Akamai Download Manager arbitrary file download & execution (Akita Software Security <lists@...tasecurity.nl>)
• Re: Day of bugs in WordPress 2 (Valdis.Kletnieks@...edu)
• WAF fail (Henri Salo <henri@...v.fi>)
• NULL + H4CK3R Meet in Delhi on 31st July 2010 (Rockey Killer <skg102@...il.com>)
• [ MDVSA-2010:143 ] gnupg2 (security@...driva.com)

• OpenDNS is acting improperly !!! (Paulo Cesar Breim (PCB) <paulo@...im.com.br>)
• Re: Day of bugs in WordPress 2 (L0rd Ch0de1m0rt <l0rdch0de1m0rt@...il.com>)
• Re: Day of bugs in WordPress 2 (Jhfjjf Hfdsjj <taser3000@...oo.com>)
• Re: OpenDNS is acting improperly !!! (Jardel Weyrich <jweyrich@...il.com>)
• Re: OpenDNS is acting improperly !!! (Valdis.Kletnieks@...edu)
• [SECURITY] [DSA 2078-1] New kvirc packages fix arbitrary IRC command execution (Moritz Muehlenhoff <jmm@...ian.org>)

419 messages

Powered by blists - more mailing lists