full-disclosure mailing list - 2010/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2010/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 31	² 31	³ 14	⁴ 8	⁵ 5
⁶ 7	⁷ 14	⁸ 49	⁹ 28	¹⁰ 15	¹¹ 11	¹² 26
¹³ 20	¹⁴ 8	¹⁵ 15	¹⁶ 8	¹⁷ 17	¹⁸ 6	¹⁹ 7
²⁰ 27	²¹ 7	²² 13	²³ 6	²⁴ 3	²⁵ 8	²⁶ 2
²⁷ 4	²⁸ 6	²⁹ 24	³⁰ 6

Messages by day:

September 1 (31 messages)

[ MDVSA-2010:167 ] perl-libwww-perl (security@...driva.com)
Re: DLL hijacking with Autorun on a USB drive (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (paul.szabo@...ney.edu.au)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Unusable Security [was: Re: DLL hijacking with Autorun on a USB drive], also proxy in the middle detection / destruction (coderman <coderman@...il.com>)
VMSA-2010-0013 (VMware Security Team <security@...are.com>)
VMSA-2010-0013 VMware ESX third party updates for Service Console (VMware Security Team <security@...are.com>)
Re: Orange Spain disclosing user phone number ("xufi ." <xufxuf@...il.com>)
Mac OS X Mail parental controls vulnerability ("Jonathan Kamens" <jik@...ens.us>)
Gawker/Kotaku Local File Inclusion (kotaku_disclosure@...hmail.com)
Tortoise SVN DLL Hijacking Vulnerability (Nikhil Mittal <nikhil_uitrgpv@...oo.co.in>)
Rooted CON 2011 - Call for Papers (Román Ramírez <patowc@...ne.com>)
Month of Abysssec Undisclosed Bugs - Day 1 (muts <muts@...ensive-security.com>)
Re: DLL hijacking with Autorun on a USB drive (Charles Morris <cmorris@...odu.edu>)
nullcon Goa dwitiya (2.0) Call For Papers (nullcon <nullcon@...lcon.net>)
Online Binary Planting Exposure Test ("ACROS Lists" <lists@...os.si>)
[SecurityArchitect-008]: Xterm Local Buffer Overflow Vulnerability (musashi karak0rsan <karakorsankara@...mail.com>)
LDAP NULL Bind being picked up, making non PCI compliant (Jason Nada <j.crider@...e.com>)
Re: Online Binary Planting Exposure Test (Christian Sciberras <uuf6429@...il.com>)
Re: Online Binary Planting Exposure Test (YGN Ethical Hacker Group <lists@...g.net>)
Re: LDAP NULL Bind being picked up, making non PCI compliant (Valdis.Kletnieks@...edu)
Re: Online Binary Planting Exposure Test (coderman <coderman@...il.com>)
[ MDVSA-2010:168 ] openssl (security@...driva.com)
Re: DLL hijacking with Autorun on a USB drive (matt <matt@...ackvector.org>)
Re: DLL hijacking with Autorun on a USB drive (paul.szabo@...ney.edu.au)
DLL hijacking with ZIP files in email? (paul.szabo@...ney.edu.au)
Re: DLL hijacking with ZIP files in email? (coderman <coderman@...il.com>)
Re: DLL hijacking with ZIP files in email? (Mario Vilas <mvilas@...il.com>)
Re: DLL hijacking with ZIP files in email? (Mario Vilas <mvilas@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (Christian Sciberras <uuf6429@...il.com>)
DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)

September 2 (31 messages)

Re: DLL hijacking POC (failed, see for yourself) (p8x <l@....net>)
Re: DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking POC (failed, see for yourself) (YGN Ethical Hacker Group <lists@...g.net>)
Moovida Media Player version 2.0.0.15 Insecure DLL Hijacking Vulnerability (libc.dll, quserex.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Re: DLL hijacking POC (failed, see for yourself) (YGN Ethical Hacker Group <lists@...g.net>)
Re: DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking POC (failed, see for yourself) (Darren McDonald <athena@...donald.net>)
Re: DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking POC (failed, see for yourself) (Darren McDonald <athena@...donald.net>)
Re: DLL hijacking POC (failed, see for yourself) (Darren McDonald <athena@...donald.net>)
Re: DLL hijacking POC (failed, see for yourself) (Larry Seltzer <larry@...ryseltzer.com>)
Re: DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking POC (failed, see for yourself) (Larry Seltzer <larry@...ryseltzer.com>)
[USN-982-1] Wget vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: DLL hijacking POC (failed, see for yourself) (p8x <l@....net>)
Re: DLL hijacking POC (failed, see for yourself) (Jacky Jack <jacksonsmth698@...il.com>)
Vulnerabilities in CMS WebManager-Pro ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2010:169 ] mozilla-thunderbird (security@...driva.com)
Verizon Wireless security contact? (auto666077@...hmail.com)
Re: question regarding RSA (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: DLL hijacking with Autorun on a USB drive (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Bug in vde_plug, remote exploitation possible? (halfdog <me@...fdog.net>)
Re: DLL hijacking with Autorun on a USB drive (Valdis.Kletnieks@...edu)
Re: DLL hijacking with Autorun on a USB drive (coderman <coderman@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (coderman <coderman@...il.com>)
[ GLSA 201009-01 ] wxGTK: User-assisted execution of arbitrary code (Alex Legler <a3li@...too.org>)
[ MDVSA-2010:170 ] wget (security@...driva.com)

September 3 (14 messages)

Re: DLL hijacking with Autorun on a USB drive (paul.szabo@...ney.edu.au)
Security vulnerabilities in Pligg CMS version 1.0.4 (Bogdan Calin <bogdan@...netix.com>)
[SECURITY] [DSA-2102-1] New barnowl packages fix arbitrary code execution (Sebastien Delafond <seb@...ian.org>)
Virus submission site (Hacxx 20 <hacxx20@...il.com>)
Re: Virus submission site (Christian Sciberras <uuf6429@...il.com>)
Re: Virus submission site (Shreyas Zare <shreyas@...fence.com>)
Re: Virus submission site (IndianZ <indianz@...ianz.ch>)
Re: Virus submission site (T Biehn <tbiehn@...il.com>)
Re: Virus submission site (Hanno Böck <hanno@...eck.de>)
Tuscl.net SQL injection with 30k Plain Text Passwords & 80k Email list (Ben <iluv2cane@...il.com>)
Re: Orange Spain disclosing user phone number (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Virus submission site (Hacxx 20 <hacxx20@...il.com>)
Re: Virus submission site (Hacxx 20 <hacxx20@...il.com>)
Internet Explorer 8 PoC: Twitter forced-tweet demo (Chris Evans <scarybeasts@...il.com>)

September 4 (8 messages)

Re: Virus submission site (Hacxx 20 <hacxx20@...il.com>)
Microsoft Internet explorer 8 DLL Hijacking (IESHIMS.DLL) (YGN Ethical Hacker Group <lists@...g.net>)
Re: Virus submission site (Shreyas Zare <shreyas@...fence.com>)
Re: Tuscl.net SQL injection with 30k Plain Text Passwords & 80k Email list (Ben <iluv2cane@...il.com>)
Re: Tuscl.net SQL injection with 30k Plain Text Passwords & 80k Email list (Jhfjjf Hfdsjj <taser3000@...oo.com>)
reCaptcha secret key - where is the point? (BlackHawk <hawkgotyou@...il.com>)
Re: reCaptcha secret key - where is the point? (Christian Sciberras <uuf6429@...il.com>)
Adobe Flash Player – user-assisted privacy compromise (Alexander Klink <alexander.klink@....fraunhofer.de>)

September 5 (5 messages)

Re: reCaptcha secret key - where is the point? (Harry Strongburg <harry.fd@...ry.lu>)
Did someone hack Dave Aitel's Twitter account or is it an impostor? (<dink@...inkydink.com>)
Re: DLL hijacking with Autorun on a USB drive (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Call for Papers H2HC Cancun/Mexico and H2HC Sao Paulo/Brazil ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
H2HC São Paulo - Capture the Captcha ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)

September 6 (7 messages)

PAPER: JIT spraying and mitigations ("Piotr Bania" <bania.piotr@...il.com>)
nmap <= 5.21 is vulnerable to Windows DLL Hijacking Vulnerability. (Nikhil Mittal <nikhil_uitrgpv@...oo.co.in>)
[SECURITY] [DSA-2103-1] New smbind packages fix sql injection (Giuseppe Iuculano <iuculano@...ian.org>)
[ MDVSA-2010:171 ] lvm2 (security@...driva.com)
XSS in Horde Application Framework <=3.3.8, icon_browser.php (Moritz Naumann <security@...itz-naumann.com>)
[SECURITY] [DSA-2104-1] New quagga packages fix denial of service (Florian Weimer <fw@...eb.enyo.de>)
[ GLSA 201009-02 ] Maildrop: privilege escalation (Pierre-Yves Rofes <py@...too.org>)

September 7 (14 messages)

Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Dan Kaminsky <dan@...para.com>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Dan Kaminsky <dan@...para.com>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Christian Sciberras <uuf6429@...il.com>)
[ GLSA 201009-03 ] sudo: Privilege Escalation (Alex Legler <a3li@...too.org>)
0day analysis of the challenges (yuange <yuange1975@...mail.com>)
Security problems in Zenphoto version 1.3 (Bogdan Calin <bogdan@...netix.com>)
[TEHTRI-Security Training + 0days] "Hunting Web Attackers" at HITBSecConf (Laurent OUDOT at TEHTRI-Security <laurent.oudot@...tri-security.com>)
[USN-983-1] Sudo vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-984-1] LFTP vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ GLSA 201009-04 ] SARG: User-assisted execution of arbitrary code (Stefan Behte <craig@...too.org>)
[ GLSA 201009-05 ] Adobe Reader: Multiple vulnerabilities (Stefan Behte <craig@...too.org>)
[ GLSA 201009-06 ] Clam AntiVirus: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Jacky Jack <jacksonsmth698@...il.com>)

September 8 (49 messages)

i dont know security (full-disclosure-bounces@...ts.grok.org.uk)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
FreeBSD 8.1/7.3 vm.pmap kernel local race condition (Maksymilian Arciemowicz <cxib@...urityreason.com>)
[SECURITY] [DSA 2098-2] New typo3-src packages fix regression (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA-2105-1] New freetype packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
Re: i dont know security (Hurgel Bumpf <l0rd_lunatic@...oo.com>)
Re: i dont know security (YGN Ethical Hacker Group <lists@...g.net>)
Re: i dont know security (p8x <l@....net>)
FreeBSD 7.0 - 7.2 pseudofs null pointer dereference (Przemyslaw Frasunek <venglin@...ebsd.lublin.pl>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Andrew Auernheimer <gluttony@...il.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Tim <tim-security@...tinelchicken.org>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Christian Sciberras <uuf6429@...il.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Christian Sciberras <uuf6429@...il.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Andrew Auernheimer <gluttony@...il.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Andrew Auernheimer <gluttony@...il.com>)
Re: FreeBSD 7.0 - 7.2 pseudofs null pointer dereference (musnt live <musntlive@...il.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Tim <tim-security@...tinelchicken.org>)
[SECURITY] [DSA 2106-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) ("Everhart, Glenn" <glenn.everhart@...se.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Harry Strongburg <harry.fd@...ry.lu>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Andrew Auernheimer <gluttony@...il.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (BMF <badmotherfsckr@...il.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Christian Sciberras <uuf6429@...il.com>)
Medium security flaw in Apache Traffic Server (Tim Brown <timb@...-dimension.org.uk>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Christian Sciberras <uuf6429@...il.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Tim <tim-security@...tinelchicken.org>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Tim <tim-security@...tinelchicken.org>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Dan Kaminsky <dan@...para.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (dvs@...hmail.com)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (BMF <badmotherfsckr@...il.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Andrew Auernheimer <gluttony@...il.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Harry Strongburg <harry.fd@...ry.lu>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Tim <tim-security@...tinelchicken.org>)
[USN-985-1] mountall vulnerability (Kees Cook <kees@...ntu.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Christian Sciberras <uuf6429@...il.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Larry Seltzer <larry@...ryseltzer.com>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (paul.szabo@...ney.edu.au)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Christian Sciberras <uuf6429@...il.com>)
[USN-975-1] Firefox and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (paul.szabo@...ney.edu.au)
Re: Tuscl.net SQL injection with 30k Plain Text Passwords & 80k Email list (Ben <iluv2cane@...il.com>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Fyodor <fyodor@...ecure.org>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Christian Sciberras <uuf6429@...il.com>)
Re: Tuscl.net SQL injection with 30k Plain Text Passwords & 80k Email list (Benji <me@...ji.com>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (paul.szabo@...ney.edu.au)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Christian Sciberras <uuf6429@...il.com>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (paul.szabo@...ney.edu.au)
[USN-978-1] Thunderbird vulnerabilities (Jamie Strandboge <jamie@...onical.com>)

September 9 (28 messages)

Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (paul.szabo@...ney.edu.au)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Rohit Patnaik <quanticle@...il.com>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (paul.szabo@...ney.edu.au)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Christian Sciberras <uuf6429@...il.com>)
Re: i dont know security (huj huj huj <datskihuj@...il.com>)
Re: i dont know security (PsychoBilly <zpamh0l3@...il.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
[RingoBingo Secuity] Wikipedia Reflected XSS (Unresponsive-Conpulsive Disclosure) (ringobingo@...h.ai)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (jf <jf@...co.net>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (jf <jf@...co.net>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (jf <jf@...co.net>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Justin Ferguson <jf@...co.net>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) ("Mitja Kolsek" <mitja.kolsek@...ossecurity.com>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Christian Sciberras <uuf6429@...il.com>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Christian Sciberras <uuf6429@...il.com>)
SQL Injection and XSS vulnerabilities in CubeCart version 4.3.3 (Bogdan Calin <bogdan@...netix.com>)
Juniper Networks DLL Hijacking Vulnerability (musnt live <musntlive@...il.com>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (Shreyas Zare <shreyas@...fence.com>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Christian Sciberras <uuf6429@...il.com>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Re: i dont know security (YGN Ethical Hacker Group <lists@...g.net>)
PGP Desktop version 9.10.x-10.0.0 Insecure DLL Hijacking Vulnerability (tsp.dll, tvttsp.dll) (YGN Ethical Hacker Group <lists@...g.net>)
[SECURITY] [DSA 2107-1] New couchdb package fixes arbitrary code execution (Sebastien Delafond <seb@...ian.org>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Nikhil Mittal <nikhil_uitrgpv@...oo.co.in>)
[ MDVSA-2010:172 ] kernel (security@...driva.com)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Michal Zalewski <lcamtuf@...edump.cx>)

September 10 (15 messages)

Adobe Flash Player IE version 10.1.x Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Re: [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities (PsychoBilly <zpamh0l3@...il.com>)
Re: Juniper Networks DLL Hijacking Vulnerability (musnt live <musntlive@...il.com>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Nikhil Mittal <nikhil_uitrgpv@...oo.co.in>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Valdis.Kletnieks@...edu)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Dan Kaminsky <dan@...para.com>)
stuxnet DATA decoder (Mohammad Hosein <mhtajik@...il.com>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Nikhil Mittal <nikhil_uitrgpv@...oo.co.in>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Shreyas Zare <shreyas@...fence.com>)
NMAP Vulnerable to attack (musnt live <musntlive@...il.com>)
Re: NMAP Vulnerable to attack (Valdis.Kletnieks@...edu)
Re: NMAP Vulnerable to attack (Stefano Angaran <stefano.angaran@...ou.it>)
Re: NMAP Vulnerable to attack (Valdis.Kletnieks@...edu)
Re: NMAP Vulnerable to attack (Andrew Kirch <trelane@...lane.net>)
Re: NMAP Vulnerable to attack (mezgani ali <handrix@...il.com>)

September 11 (11 messages)

Re: NMAP Vulnerable to attack (Stefano Angaran <stefano.angaran@...ou.it>)
Re: NMAP Vulnerable to attack (Justin Ferguson <jf@...co.net>)
WebserverX Google Dork (Christian Sciberras <uuf6429@...il.com>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Fyodor <fyodor@...ecure.org>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (jai <jaikumar.shinde@...il.com>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Valdis.Kletnieks@...edu)
[ MDVSA-2010:173 ] firefox (security@...driva.com)
Re: NMAP Vulnerable to attack (Jacky Jack <jacksonsmth698@...il.com>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
[ MDVSA-2010:174 ] quagga (security@...driva.com)
Re: NMAP Vulnerable to attack (Mario Vilas <mvilas@...il.com>)

September 12 (26 messages)

Apple QuickTime Player version 7.64.17.73 <= Insecure DLL Hijacking Vulnerability (cfnetwork.dll, corefoundation.dll) (YGN Ethical Hacker Group <lists@...g.net…)
[ MDVSA-2010:175 ] sudo (security@...driva.com)
AlZip version 8.0.6.3 <= Insecure DLL Hijacking Vulnerability (mfc90enu.dll, mfc90loc.dll, propsys.dll) (YGN Ethical Hacker Group <lists@...g.net>)
AlSee version 6.20.0.1 <= Insecure DLL Hijacking Vulnerability (patchani.dll) (YGN Ethical Hacker Group <lists@...g.net>)
AlShow version 1.91 <= Insecure DLL Hijacking Vulnerability (mfc90enu.dll, mfc90loc.dll, dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
[ MDVSA-2010:176 ] tomcat5 (security@...driva.com)
[ MDVSA-2010:177 ] tomcat5 (security@...driva.com)
[ MDVSA-2010:178 ] ocsinventory (security@...driva.com)
Re: Adobe Flash Player IE version 10.1.x Insecure DLL Hijacking Vulnerability (dwmapi.dll) ("MustLive" <mustlive@...security.com.ua>)
SoMud P2P version 1.2.8 <= Insecure DLL Hijacking Vulnerability (wintab32.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Re: Adobe Flash Player IE version 10.1.x Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Sorax PDF Reader version 2.0<= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Nuance PDF Reader version 6.0<= Insecure DLL Hijacking Vulnerability (dwmapi.dll, exceptiondumpdll.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Nitro PDF Reader version 2.5.1 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll, nprender.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Brava PDF Reader version 3.3.0.18 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
gDoc Fusion version 2.5.1 <= Insecure DLL Hijacking Vulnerability (wintab32.dll, ssleay32.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Re: gDoc Fusion version 2.5.1 <= Insecure DLL Hijacking Vulnerability (wintab32.dll, ssleay32.dll) (Zach C <fxchip@...il.com>)
E-Press ONE Office Suite <= Insecure DLL Hijacking Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Re: gDoc Fusion version 2.5.1 <= Insecure DLL Hijacking Vulnerability (wintab32.dll, ssleay32.dll) (Jacky Jack <jacksonsmth698@...il.com>)
KingSoft Office Suite 2010 | Insecure DLL Hijacking Vulnerability (plgpf.dll) (YGN Ethical Hacker Group <lists@...g.net>)
CelFrame Office Suite 2008 <= Insecure DLL Hijacking Vulnerability ( java_msci.dll, msci_java.dll, wintab32.dll, gswin… (YGN Ethical Hacker Group <lists@...g.ne…)
IBM Lotus Symphony Office Suite version 3 beta 4 <= Insecure DLL Hijacking Vulnerability (eclipse_1114.dll) (YGN Ethical Hacker Group <lists@...g.net>)
[ MDVSA-2010:179 ] libglpng (security@...driva.com)
UltraEdit Text Editor version 16.10.0.1036 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Firefox same-origin policy for fonts (paul.szabo@...ney.edu.au)
Re: Firefox same-origin policy for fonts (Dan Kaminsky <dan@...para.com>)

September 13 (20 messages)

Re: [ MDVSA-2010:176 ] tomcat5 ("Raj Mathur (राज माथुर)" <raju@...ux-delhi.org>)
[ MDVSA-2010:180 ] rpm (security@...driva.com)
Re: Firefox same-origin policy for fonts (Daniel Veditz <dveditz@...zio.com>)
Mac OS X 10.6 Security Configuration Guides Released (Darren Thurston <darren.t.thurston@...il.com>)
[SECURITY] [DSA 2097-2] New phpmyadmin packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Secunia Research: MailEnable SMTP Service Two Denial of Service Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
H2HC 2010 Sao Paulo - Capture the Flag ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (Rohit Patnaik <quanticle@...il.com>)
DLL Hijacking vulnerability in Opera ("MustLive" <mustlive@...security.com.ua>)
ZDI-10-169: Novell Netware SSHD.NLM Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: DLL Hijacking vulnerability in Opera (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
ZDI-10-170: Apple Safari Webkit Runin Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-171: Mozilla Firefox nsTreeContentView Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-172: Mozilla Firefox tree Object Removal Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-173: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Web challenges from RootedCON'2010 CTF - Contest (Roman Medina-Heigl Hernandez <roman@...labs.com>)
ZDI-10-176: Mozilla Firefox normalizeDocument Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-174: Hewlett-Packard Data Protector DtbClsLogin Utf8cpy Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

September 14 (8 messages)

rPSA-2010-0056-1 httpd mod_ssl (rPath Update Announcements <announce-noreply@...th.com>)
[SECURITY] [DSA 2108-1] New cvsnt package fixes arbitrary code execution (Sébastien Delafond <seb@...ian.org>)
Re: Nmap NOT VULNERABLE to Windows DLL HijackingVulnerability ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[ MDVSA-2010:181 ] ntop (security@...driva.com)
[USN-987-1] Samba vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
ZDI-10-177: IBM Lotus Domino iCalendar MAILTO Stack Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:182 ] kdegraphics (security@...driva.com)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)

September 15 (15 messages)

Re: DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (Larry Seltzer <larry@...ryseltzer.com>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking (cons0ul <sachinshinde11@...il.com>)
Directory Traversal in Axigen v7.4.1 running on Windows (Bogdan Calin <bogdan@...netix.com>)
Secunia Research: Microsoft Outlook Content Parsing Integer Underflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: DLL hijacking POC (failed, see for yourself) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: DLL hijacking with Autorun on a USB drive ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: DLL hijacking with Autorun on a USB drive ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)
ZDI-10-178: Novell PlateSpin Orchestrate Graph Rendering Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:183 ] socat (security@...driva.com)
Re: DLL hijacking with Autorun on a USB drive (Valdis.Kletnieks@...edu)
Re: DLL Hijacking vulnerability in Opera ("MustLive" <mustlive@...security.com.ua>)
Re: DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking POC (failed, see for yourself) (Jeffrey Walton <noloader@...il.com>)

September 16 (8 messages)

Ac1db1tch3z vs x86_64 Linux Kernel (ac1db1tch3z@...il.com)
Re: DLL hijacking with Autorun on a USB drive ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: DLL hijacking POC (failed, see for yourself) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: DLL hijacking POC (failed, see for yourself) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: DLL hijacking POC (failed, see for yourself) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Workaround for Ac1db1tch3z exploit. (Terje Malmedal <terje.malmedal@...t.uio.no>)
Re: DLL hijacking POC (failed, see for yourself) (T Biehn <tbiehn@...il.com>)
[ MDVSA-2010:184 ] samba (security@...driva.com)

September 17 (17 messages)

[USN-975-2] Firefox and Xulrunner regression (Jamie Strandboge <jamie@...onical.com>)
[USN-978-2] Thunderbird regression (Jamie Strandboge <jamie@...onical.com>)
[SECURITY] [DSA-2109-1] New samba packages fix buffer overflow (Stefan Fritsch <sf@...ian.org>)
New tool for pentesting (runlvl <runlvl@...il.com>)
Re: DLL hijacking POC (failed, see for yourself) (huj huj huj <datskihuj@...il.com>)
Re: DLL hijacking POC (failed, see for yourself) (Christian Sciberras <uuf6429@...il.com>)
Re: New tool for pentesting (Omar B Villa <bvomar@...il.com>)
Re: New tool for pentesting (Jhfjjf Hfdsjj <taser3000@...oo.com>)
Re: New tool for pentesting (Taras <oxdef@...ef.info>)
Re: New tool for pentesting (Hurgel Bumpf <l0rd_lunatic@...oo.com>)
Re: New tool for pentesting (Eyeballing Weev <eyeballing.weev@...il.com>)
Re: New tool for pentesting (rdsears@....edu)
[SECURITY] [DSA 2110-1] New Linux 2.6.26 packages fix several issues (dann frazier <dannf@...ian.org>)
Re: New tool for pentesting (Mario Vilas <mvilas@...il.com>)
Re: New tool for pentesting (excore@...hmail.com)
Re: New tool for pentesting (Eyeballing Weev <eyeballing.weev@...il.com>)
[USN-988-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)

September 18 (6 messages)

Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
ManageEngine OpUtils 'Login.do' SQL Injection Vulnerability (information security <informationhacker08@...il.com>)
Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability ("Thor (Hammer of God)" <thor@...merofgod.com>)
Gödel and kernel backdoors (Georgi Guninski <guninski@...inski.com>)
Re: Gödel and kernel backdoors (mrx <mrx@...pergander.org.uk>)
Re: Gödel and kernel backdoors (Giuseppe Fuggiano <giuseppe.fuggiano@...il.com>)

September 19 (7 messages)

Re: Gödel and kernel backdoors (BMF <badmotherfsckr@...il.com>)
Re: Gödel and kernel backdoors (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: Gödel and kernel backdoors (Georgi Guninski <guninski@...inski.com>)
Re: Gödel and kernel backdoors (Berend-Jan Wever <berendjanwever@...il.com>)
Re: Gödel and kernel backdoors (Christian Sciberras <uuf6429@...il.com>)
Re: Gödel and kernel backdoors (Berend-Jan Wever <berendjanwever@...il.com>)
TA-Mapper v1.1: Application Pen-Testing Effort Estimator ("Debasis Mohanty" <dm.mailinglists@...il.com>)

September 20 (27 messages)

Re: Gödel and kernel backdoors (Hurgel Bumpf <l0rd_lunatic@...oo.com>)
Re: Gödel and kernel backdoors (Georgi Guninski <guninski@...inski.com>)
Re: Gödel and kernel backdoors (Valdis.Kletnieks@...edu)
[USN-986-1] bzip2 vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-986-2] ClamAV vulnerability (Jamie Strandboge <jamie@...onical.com>)
www.PasswordAnalytics.com Released!!! (evil fingers <contact.fingers@...il.com>)
Re: Gödel and kernel backdoors (wmsecurity <wmsecurity@...il.com>)
[SECURITY] [DSA 2111-1] New squid3 packages fix denial of service (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA-2106-2] New xulrunner packages fix regression (Stefan Fritsch <sf@...ian.org>)
[SECURITY] [DSA-2112-1] New bzip2 packages fix integer overflow (Stefan Fritsch <sf@...ian.org>)
[SECURITY] [DSA 2113-1] New drupal6 packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
Re: Gödel and kernel backdoors (dave b <db.pub.mail@...il.com>)
Sysinternals Process Explorer DLL Hijacking on x86 Windows systems (wow64cpu.dll) (miom <miom@....net>)
Deutsche Post Security Cup (<Ralph.Zwierzina@...tschepost.de>)
Re: ManageEngine OpUtils 'Login.do' SQL Injection Vulnerability (Packet Storm <packet@...ketstormsecurity.org>)
False Authentication Attack/Any Browser (iforone <iforone@...f.pl>)
[USN-985-1] mountall vulnerability ("." <spamonsophia@...il.com>)
Intro to Using the OSSTMM 3 (Pete Herzog <lists@...com.org>)
Vulnerabilities in IB Promotion Advanced Business Web Suite ("MustLive" <mustlive@...security.com.ua>)
n.runs-SA-2010.002 - Alcatel-Lucent - arbitrary code execution on OmniVista 4760 (<security@...ns.com>)
n.runs-SA-2010.001 - Alcatel-Lucent - unauthenticated administrative access to CTI CCA Server (<security@...ns.com>)
n.runs-SA-2010.002 - Alcatel-Lucent - arbitrary code execution on OmniVista 4760 (<security@...ns.com>)
Binary Planting Attack Vectors - There's more than one way to skin a cat... or plant a binary, for that matter ("ACROS Security Lists" <lists@...os.si>)
[USN-986-3] dpkg vulnerability (Jamie Strandboge <jamie@...onical.com>)
Re: DDoS attacks via other sites execution tool (DAVOSET) ("MustLive" <mustlive@...security.com.ua>)
[USN-989-1] PHP vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ MDVSA-2010:185 ] bzip2 (security@...driva.com)

September 21 (7 messages)

Vulnerable 3rd-party DLLs used in TrendMicro's malware scanner HouseCall ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[ MDVSA-2010:186 ] phpmyadmin (security@...driva.com)
[USN-990-1] OpenSSL vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-990-2] Apache vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Freepbx (Marsh Ray <marsh@...endedsubset.com>)
[ GLSA 201009-07 ] libxml2: Denial of Service (Stefan Behte <craig@...too.org>)
[ GLSA 201009-08 ] python-updater: Untrusted search path (Stefan Behte <craig@...too.org>)

September 22 (13 messages)

[ISecAuditors Security Advisories] Insecure Direct Object Reference in tuenti.com allow to read of any message user (ISecAuditors Security Advisories <advisori…)
[ISecAuditors Security Advisories] Reflected XSS in Atmail WebMail < v6.2.0 (ISecAuditors Security Advisories <advisories@...cauditors.com>)
monitoring the media monitors for fun and profit! (omfgomfg@...hmail.com)
Re: monitoring the media monitors for fun and profit! (Benji <me@...ji.com>)
Re: Freepbx (Tyler Borland <tborland1@...il.com>)
Re: Freepbx (Marsh Ray <marsh@...endedsubset.com>)
Cisco Security Advisory: Cisco IOS SSL VPN Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Internet Group Management Protocol Denial of Service Vulnerability (Cisco Systems Product Security Incident Respons…)
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Tea…)
Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Cisco IOS Software H.323 Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabil… (Cisco Systems Product Security Incident…)
[ MDVSA-2010:187 ] squid (security@...driva.com)

September 23 (6 messages)

[ MDVSA-2010:188 ] kernel (security@...driva.com)
OpenText LiveLink 9.7.1 multiple vulnerabilities (CSRF, XSS) ("A. Ramos" <aramosf@...il.com>)
[ISecAuditors Security Advisories] SQL Injection and XSS in Motorito < v2.0 Ni 483 (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Teamspeak default passwords? (Gary Baribault <gary@...ibault.net>)
TWSL2010-005: FreePBX recordings interface allows remote code execution (Trustwave Advisories <trustwaveadvisories@...stwave.com>)
[USN-991-1] quassel vulnerability (Steve Beattie <sbeattie@...ntu.com>)

September 24 (3 messages)

VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues (VMware Security team <security@...are.com>)
[ MDVSA-2010:189 ] pcsc-lite (security@...driva.com)
[ MDVSA-2010:189-1 ] pcsc-lite (security@...driva.com)

September 25 (8 messages)

Re: the real stuxnet authors plz stand up (coderman <coderman@...il.com>)
Re: the real stuxnet authors plz stand up (coderman <coderman@...il.com>)
Re: the real stuxnet authors plz stand up (coderman <coderman@...il.com>)
Re: the real stuxnet authors plz stand up (coderman <coderman@...il.com>)
Re: the real stuxnet authors plz stand up (coderman <coderman@...il.com>)
Re: the real stuxnet authors plz stand up ("Kenneth Voort" <kenneth@...rt.ca>)
Vulnerabilities in CMS MYsite ("MustLive" <mustlive@...security.com.ua>)
Re: Full-Disclosure Digest, Vol 67, Issue 41 (hmarti2@...c.edu)

September 26 (2 messages)

Web commands injection through FTP Login in Synology Disk Station - CVE-2010-2453 (Rodrigo Branco <rbranco@...ckpoint.com>)
Exploit Next Generation(R) Example Codes (Nelson Brito <nbrito@...ure.org>)

September 27 (4 messages)

Re: Vulnerabilities in CMS MYsite ("Jan G.B." <ro0ot.w00t@...glemail.com>)
Re: [funsec] And they intend to do this securely, how, exactly? (PsychoBilly <zpamh0l3@...il.com>)
XSS in Horde IMP <=4.3.7, fetchmailprefs.php (Moritz Naumann <security@...itz-naumann.com>)
[SECURITY] [DSA-2114-1] New git-core packages fix regression (Stefan Fritsch <sf@...ian.org>)

September 28 (6 messages)

[New Tool Announcement] inspath - Path Disclosure Finder (YGN Ethical Hacker Group <lists@...g.net>)
Profile - OSSTMM use at a Security Consultancy (Pete Herzog <lists@...com.org>)
Free Anti Social-Engineering Seminar (Pete Herzog <lists@...com.org>)
Re: TWSL2010-005: FreePBX recordings interface allows remote code execution (Richard Miles <richard.k.miles@...glemail.com>)
CYBSEC Advisory 2010 0901 Achievo 1.4.3 (Multiple Authorization Flaws) ("CYBSEC Labs" <cybseclabs@...sec.com>)
CYBSEC Advisory 2010 0902 Achievo 1.4.3 (CSRF) ("CYBSEC Labs" <cybseclabs@...sec.com>)

September 29 (24 messages)

Python ssl handling could be better... (dave b <db.pub.mail@...il.com>)
Re: Python ssl handling could be better... (dave b <db.pub.mail@...il.com>)
Security ie9? (yuange <yuange1975@...mail.com>)
[USN-992-1] Avahi vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-993-1] libgdiplus vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-994-1] libHX vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Backward disassembler for ROP exploitation (Adrian Furtuna <adif2k8@...il.com>)
[USN-995-1] libMikMod vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-996-1] Mako vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
XSS in a lot of products ("<b>pepelotas</b>" <pepelotas123@...il.com>)
Re: Security ie9? (Christian Sciberras <uuf6429@...il.com>)
Re: Python ssl handling could be better... (dave b <db.pub.mail@...il.com>)
[Onapsis Security Advisory 2010-007] SAP Management Console Multiple Denial of Service (Onapsis Research Labs <research@...psis.com>)
[ GLSA 201009-09 ] fence: Multiple symlink vulnerabilites (Stefan Behte <craig@...too.org>)
[SECURITY] [DSA-2115-1] New moodle packages fix several vulnerabilities (Florian Weimer <fw@...eb.enyo.de>)
ZDI-10-179: IBM TSM FastBack Mount Service Arbitrary Overwrite Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-180: IBM TSM FastBack Server _SendToLog Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-182: IBM TSM FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-181: IBM TSM FastBack Server ActivateLTScriptReply Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-187: IBM TSM FastBack Server _DAS_ReadBlockReply Remote Denial of Service Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-185: IBM TSM FastBack Server _Eventlog Format String Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-186: IBM TSM FastBack _CalcHashValueWithLength Remote Denial of Service Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-183: IBM TSM FastBack Server FXCLI_checkIndexDBLocation Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-184: IBM TSM FastBack Server USER_S_AddADGroup Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

September 30 (6 messages)

VMSA-2010-0015 VMware ESX third party updates for Service Console (VMware Security team <security@...are.com>)
Re: XSS in a lot of products (rancor <therancor@...il.com>)
Re: XSS in a lot of products ("Benji" <me@...ji.com>)
Re: XSS in a lot of products (Jeffrey Walton <noloader@...il.com>)
[ MDVSA-2010:190 ] libtiff (security@...driva.com)
Re: XSS in a lot of products (hackyouridols@...glemail.com)

426 messages

Powered by blists - more mailing lists