full-disclosure mailing list - 2010/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2010/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 10	² 9	³ 2	⁴ 12	⁵ 10	⁶ 4	⁷ 12
⁸ 19	⁹ 14	¹⁰ 15	¹¹ 8	¹² 13	¹³ 7	¹⁴ 12
¹⁵ 7	¹⁶ 13	¹⁷ 18	¹⁸ 29	¹⁹ 38	²⁰ 21	²¹ 4
²² 21	²³ 14	²⁴ 23	²⁵ 4	²⁶ 6	²⁷ 2	²⁸ 8
²⁹ 2	³⁰ 18

Messages by day:

November 1 (10 messages)

[ MDVSA-2010:219 ] mozilla-thunderbird (security@...driva.com)
Call for Papers -YSTS V - Security Conference, Brazil (Luiz Eduardo <le@...s.org>)
Re: Evilgrade 2.0 - the update explotation framework is back (Mario Vilas <mvilas@...il.com>)
Re: Evilgrade 2.0 - the update explotation framework is back (Jeffrey Walton <noloader@...il.com>)
Re: Evilgrade 2.0 - the update explotation framework is back (Christian Sciberras <uuf6429@...il.com>)
Re: Evilgrade 2.0 - the update explotation framework is back (Jeffrey Walton <noloader@...il.com>)
Re: Evilgrade 2.0 - the update explotation framework is back (Jhfjjf Hfdsjj <taser3000@...oo.com>)
Re: Evilgrade 2.0 - the update explotation framework is back (Jhfjjf Hfdsjj <taser3000@...oo.com>)
[SECURITY] [DSA 2123-1] New NSS packages fix cryptographic weaknesses (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2124-1] New Xulrunner packages fix several vulnerabilities (Florian Weimer <fw@...eb.enyo.de>)

November 2 (9 messages)

Security-Assessment.com Advisory: BroadWorks Call Detail Record Disclosure Vulnerability (Nick Freeman <nick.freeman@...urity-assessment.com>)
Re: Evilgrade 2.0 - the update explotation framework is back (T Biehn <tbiehn@...il.com>)
Re: Evilgrade 2.0 - the update explotation framework is back (Christian Sciberras <uuf6429@...il.com>)
[ MDVSA-2010:202-1 ] krb5 (security@...driva.com)
[ANN] New version of w3af is available for download ! (Andres Riancho <andres.riancho@...il.com>)
fusermount: Unmount any filesystem (halfdog <me@...fdog.net>)
[Onapsis Security Advisory 2010-008] Oracle Virtual Server Agent Arbitrary File Access (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2010-009] Oracle Virtual Server Agent Remote Command Execution (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2010-010] Oracle Virtual Server Agent Local Privilege Escalation (Onapsis Research Labs <research@...psis.com>)

November 3 (2 messages)

CVE-2010-3863: Apache Shiro information disclosure vulnerability (Les Hazlewood <lhazlewood@...che.org>)
Understanding Man-In-The-Middle Attacks ("Adam Behnke" <adam@...osecinstitute.com>)

November 4 (12 messages)

cve-2010-3962 - memory corruption poc (exploit dev <extraexploit@...il.com>)
Re: [WEB SECURITY] [TOOL] DotDotPwn v2.1 - The Directory Traversal Fuzzer (neza0x@...il.com)
[0dayz] Acrobat Reader Memory Corruption Remote Arbitrary Code Execution (scup@...hmail.com)
Re: [0dayz] Acrobat Reader Memory Corruption RemoteArbitrary Code Execution ("Benji" <me@...ji.com>)
Fuzzing and SEH (primehaxor <primehaxor@...il.com>)
[ MDVSA-2010:220 ] pam (security@...driva.com)
[USN-1012-1] CUPS vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-1013-1] FreeType vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-1014-1] Pidgin vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Fuzzing and SEH (Marsh Ray <marsh@...endedsubset.com>)
Re: [0dayz] Acrobat Reader Memory Corruption RemoteArbitrary Code Execution ("McGhee, Eddie" <Eddie.McGhee@....com>)
Re: [0dayz] Acrobat Reader Memory Corruption RemoteArbitrary Code Execution (Benji <me@...ji.com>)

November 5 (10 messages)

Re: [0dayz] Acrobat Reader Memory Corruption Remote Arbitrary Code Execution (auto199984@...hmail.com)
Re: Fwd: [CASE:12632] Warning: BrailleNote Apex Offers Read/Write FTP And Telnet Access To All Comers (Sabahattin Gucukoglu <mail@...ahattin-gucukoglu.com>)
Re: Fuzzing and SEH (Gynvael Coldwind <gynvael@...dwind.pl>)
Re: Fwd: [CASE:12632] Warning: BrailleNote Apex Offers Read/Write FTP And Telnet Access To All Comers (Tweedle Doh <tweedledoh@...il.com>)
[FG-VD-10-020]Adobe Flash Player Remote Memory corruption Vulnerability ("xpzhang" <xpzhang@...tinet.com>)
New version of ddosim - DDOS simulator (Adrian Furtuna <adif2k8@...il.com>)
Re: Joomla 1.5.21 | Potential SQL Injection Flaws (YGN Ethical Hacker Group <lists@...g.net>)
nSense-2010-003: Cisco Unified Communications Manager (Henri Lindberg <henri+fulldisclosure@...nse.fi>)
Angel LMS Exploit (Wesley Kerfoot <wjak56@...il.com>)
[ MDVSA-2010:221 ] openoffice.org (security@...driva.com)

November 6 (4 messages)

pfsense xss issues. (dave b <db.pub.mail@...il.com>)
Vulnerabilities in PHPShop ("MustLive" <mustlive@...security.com.ua>)
PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference (Maksymilian Arciemowicz <cxib@...urityreason.com>)
CFP: DIMVA 2011 - Detection of Intrusions and Malware & Vulnerability Assessment (Konrad Rieck <konrad.rieck@...berlin.de>)

November 7 (12 messages)

ASPilot Pilot Cart 7.3 multiple vulnerabilities addition to CVE-2008-2688 (Maciej Gojny <vuln@...ko-security.com>)
ZDI-10-229: ProFTPD TELNET_IAC Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ProFTPD IAC Remote Root Exploit ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
Re: ProFTPD IAC Remote Root Exploit (Jeff Williams <jeffwillis30@...il.com>)
Re: Vulnerabilities in W-Agora (Jeff Williams <jeffwillis30@...il.com>)
ZDI-10-230: Novell ZENworks Handheld Management ZfHIPCND.exe Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-231: Juniper Secure Access Series meeting_testjava.cgi XSS Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-232: Cisco ICM Setup Manager Agent.exe HandleUpgradeAll Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
XSSer v1.0 aka "The Mosquito" released (psy <root@...depsylon.net>)
ZDI-10-233: Cisco ICM Setup Manager Agent.exe AgentUpgrade Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-234: Cisco ICM Setup Manager Agent.exe HandleQueryNodeInfoReq Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-235: Cisco ICM Setup Manager Agent.exe HandleUpgradeTrace Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

November 8 (19 messages)

some ooold Juniper bugs (was: ZDI-10-231: Juniper Secure Access Series meeting_testjava.cgi XSS Vulnerability) (Michal Zalewski <lcamtuf@...edump.cx>)
Re: some ooold Juniper bugs (was: ZDI-10-231: Juniper Secure Access Series meeting_testjava.cgi XSS Vulnerability) (Jeffrey Walton <noloader@...il.com>)
Re: some ooold Juniper bugs (was: ZDI-10-231: Juniper Secure Access Series meeting_testjava.cgi XSS Vulnerability) (Michal Zalewski <lcamtuf@...edump.cx>)
Re: [0dayz] Acrobat Reader Memory Corruption Remote Arbitrary Code Execution (exploit dev <extraexploit@...il.com>)
Re: [0dayz] Acrobat Reader Memory Corruption Remote Arbitrary Code Execution (exploit dev <extraexploit@...il.com>)
Spree e-commerce JSON Hijacking Vulnerabilities - CVE-2010-3978 (Rodrigo Branco <rbranco@...ckpoint.com>)
Malware Collections and Feed Exchange ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
[ MDVSA-2010:155-1 ] mysql (security@...driva.com)
[CORE-2010-0825] Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[USN-1008-4] libvirt regression (Jamie Strandboge <jamie@...onical.com>)
ZDI-10-236: SAP NetWeaver Composition Environment sapstartsrv.exe Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-237: Novell GroupWise Internet Agent Content-Type Multiple Value Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpo…)
ZDI-10-238: Novell GroupWise Internet Agent Content-Type String Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-239: Novell GroupWise Internet Agent RRULE Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-240: Novell GroupWise Internet Agent COMMENT Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-241: Novell GroupWise Internet Agent Content-Type Parsing Integer Signedness Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pin…)
ZDI-10-242: Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-243: Novell GroupWise Internet Agent TZNAME Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: [0dayz] Acrobat Reader Memory Corruption Remote Arbitrary Code Execution (exploit dev <extraexploit@...il.com>)

November 9 (14 messages)

Hackito Ergo Sum 2011 - Call For Paper - HES2011 CFP (Philippe Mailinglist <philippe.mailinglist@...il.com>)
IBM OmniFind - several vulnerabilities (Fatih Kilic <Fatih.Kilic@....fraunhofer.de>)
Hackito Ergo Sum 2011 - Call For Paper - HES2011 CFP (Philippe Langlois <philippe.langlois@...il.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
[ MDVSA-2010:222 ] mysql (security@...driva.com)
ZDI-10-244: Apple Quicktime Movie Malformed H.264 Sample Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:223 ] mysql (security@...driva.com)
[ MDVSA-2010:224 ] php (security@...driva.com)
ZDI-10-245: Microsoft Office PowerPoint Unknown Animation Node Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-246: Microsoft Excel MSODrawing Improper Exception Handling Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:225 ] libmbfl (security@...driva.com)
Kernel 0-day (Dan Rosenberg <dan.j.rosenberg@...il.com>)
ZDI-10-247: Novell Groupwise GWPOA HTTP Request Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Kernel 0-day (Dan Rosenberg <dan.j.rosenberg@...il.com>)

November 10 (15 messages)

iDefense Security Advisory 11.09.10: Microsoft Word RTF File Parsing Stack Buffer Overflow Vulnerability (labs-no-reply <labs-no-reply@...fense.com>)
[ MDVSA-2010:225-1 ] libmbfl (security@...driva.com)
ASPR #2010-11-10-3: Remote Binary Planting in Microsoft Excel 2010 ("ACROS Security Lists" <lists@...os.si>)
ASPR #2010-11-10-2: Remote Binary Planting in Microsoft Word 2010 ("ACROS Security Lists" <lists@...os.si>)
ASPR #2010-11-10-1: Remote Binary Planting in Microsoft PowerPoint 2010 ("ACROS Security Lists" <lists@...os.si>)
Secunia Research: Microsoft PowerPoint PP7X32.DLL Record Parsing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Microsoft Office Drawing Shape Container Parsing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Reflected XSS in Ricoh Aficio Web Image Monitor v2.03 (The Light Cosine <thelightcosine@...il.com>)
[USN-1015-1] libvpx vulnerability (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2010:226 ] dhcp (security@...driva.com)
Vulnerability in Google AJAX Search ("MustLive" <mustlive@...security.com.ua>)
Re: Vulnerability in Google AJAX Search (Christian Sciberras <uuf6429@...il.com>)
[USN-1016-1] libxml2 vulnerability (Jamie Strandboge <jamie@...onical.com>)
CORE-2010-1018 - Landesk OS command injection (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Additional information on the Microsoft Office 2010 binary planting bugs ("ACROS Security Lists" <lists@...os.si>)

November 11 (8 messages)

Apple Directory Services Memory Corruption - CVE-2010-1840 (Rodrigo Branco <rbranco@...ckpoint.com>)
Secunia Research: QuickTime Sorenson Video 3 Array-Indexing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Building wireless IDS system (article) | Sagan with Prelude ("Champ Clark III [Softwink]" <champ@...twink.com>)
[USN-1017-1] MySQL vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[TEHTRI-Security] CVE-2010-1752: Update your MacOSX (Laurent OUDOT at TEHTRI-Security <laurent.oudot@...tri-security.com>)
iDefense Security Advisory 11.11.10: Apple Mobile OfficeImport Framework Excel Parsing Memory Corruption Vulnerability (labs-no-reply <labs-no-reply@...fense.c…)
[HITB-Announce] HITB Magazine #5 Call for Articles (Hafez Kamal <aphesz@...kinthebox.org>)
[ MDVSA-2010:227 ] proftpd (security@...driva.com)

November 12 (13 messages)

NiX - Linux Brute Forcer (the beast) has been released! (nix@...roxylists.com)
printSeps - cve-2010-4091 - exploitation attempts (exploit dev <extraexploit@...il.com>)
Re: NiX - Linux Brute Forcer (the beast) has been released!] (nix@...roxylists.com)
[ MDVSA-2010:228 ] xpdf (security@...driva.com)
[ MDVSA-2010:229 ] kdegraphics (security@...driva.com)
[ MDVSA-2010:230 ] poppler (security@...driva.com)
Re: NiX - Linux Brute Forcer (the beast) has been released!] (Ryan Sears <rdsears@....edu>)
[ MDVSA-2010:231 ] poppler (security@...driva.com)
Re: NiX - Linux Brute Forcer (the beast) has been released!]] (nix@...roxylists.com)
Babylon Cross-Application Scripting Code Execution (Roee Hay <ROEEH@...ibm.com>)
Archive of NoMarriage.com, The definitive guide on marriage and staying single. (Troy Canasta <kingofpainfosec@...il.com>)
Re: Archive of NoMarriage.com, The definitive guide on marriage and staying single. (Jeffrey Walton <noloader@...il.com>)
TWSL2010-006: Multiple Vulnerabilities in Camtron CMNC-200 IP Camera (Trustwave Advisories <trustwaveadvisories@...stwave.com>)

November 13 (7 messages)

csrf and xss vs the openwrt 10.03 webinterface (dave b <db.pub.mail@...il.com>)
Re: NiX - Linux Brute Forcer (the beast) has been released!]] (phocean <news@...cean.net>)
Re: NiX - Linux Brute Forcer (the beast) has been released!]] (nix@...roxylists.com)
Re: NiX - Linux Brute Forcer (the beast) has been released!]] (nix@...roxylists.com)
Re: NiX - Linux Brute Forcer (the beast) has been released!]] (rdsears@....edu)
Re: NiX - Linux Brute Forcer (the beast) has been released!]] (nix@...roxylists.com)
Re: NiX - Linux Brute Forcer (the beast) has been released!]] (Robert Kim App and Facebook Marketing <evdo.hsdpa@...il.com>)

November 14 (12 messages)

Re: NiX - Linux Brute Forcer (the beast) has been released!]] (nix@...roxylists.com)
Re: Joomla 1.5.21 | Potential SQL Injection Flaws (Henri Salo <henri@...v.fi>)
[SECURITY] [DSA 2038-3] New pidgin packages fix regression (Thijs Kinkhorst <thijs@...ian.org>)
Re: Python ssl handling could be better... (dave b <db.pub.mail@...il.com>)
Re: Archive of NoMarriage.com, The definitive guide on marriage and staying single. (Kenneth Voort <listbounce-01@...rt.ca>)
Re: Archive of NoMarriage.com, The definitive guide on marriage and staying single. (Jens Christian Hillerup <jens@...lerup.net>)
Saved XSS vulnerability in Internet Explorer ("MustLive" <mustlive@...security.com.ua>)
Facebook API (RandallM <randallm@...mail.com>)
Re: Facebook API (Christian Sciberras <uuf6429@...il.com>)
Re: Saved XSS vulnerability in Internet Explorer (Zach C <fxchip@...il.com>)
Re: Saved XSS vulnerability in Internet Explorer (Christian Sciberras <uuf6429@...il.com>)
Re: Facebook API (RandallM <randallm@...mail.com>)

November 15 (7 messages)

Re: Archive of NoMarriage.com, The definitive guide on marriage and staying single. (huj huj huj <datskihuj@...il.com>)
CakePHP <= 1.3.5 / 1.2.8 unserialize() Vulnerability (Felix <felix@...loc.im>)
vBulletin 4.0.8 - Persistent XSS via Profile Customization ("advisories@...ern0t.net" <advisories@...ern0t.net>)
Re: Saved XSS vulnerability in Internet Explorer (Jacky Jack <jacksonsmth698@...il.com>)
Reverse Engineering the Source of the ZeroAccess Crimeware Rootkit ("Adam Behnke" <adam@...osecinstitute.com>)
[ GLSA 201011-01 ] GNU C library: Multiple vulnerabilities (Tobias Heinlein <keytoaster@...too.org>)
[ MDVSA-2010:232 ] cups (security@...driva.com)

November 16 (13 messages)

[ MDVSA-2010:233 ] cups (security@...driva.com)
[ MDVSA-2010:234 ] cups (security@...driva.com)
Re: [ MDVSA-2010:233 ] cups (shawn Davison <shawn@...p.com>)
Re: Mail Insecure TLS Usage For SMTPS (Sabahattin Gucukoglu <mail@...ahattin-gucukoglu.com>)
VMSA-2010-0016 VMware ESXi and ESX third party updates for Service Console and Likewise components (VMware Security team <security@...are.com>)
Eclipse IDE | Help Server Local Cross Site Scripting (XSS) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
[ MDVSA-2010:235 ] freetype2 (security@...driva.com)
[ MDVSA-2010:236 ] freetype2 (security@...driva.com)
Re: Archive of NoMarriage.com, The definitive guide on marriage and staying single. (Troy Canasta <kingofpainfosec@...il.com>)
Re: Archive of NoMarriage.com, The definitive guide on marriage and staying single. (Cal Leeming <cal@...whisper.co.uk>)
[ MDVSA-2010:237 ] perl-CGI (security@...driva.com)
nullcon Goa dwitiya (2.0) Call For Papers Closing on 30th November (nullcon <nullcon@...lcon.net>)
Vtiger CRM 5.2.0 Multiple Vulnerabilities (ascii <ascii@...amail.com>)

November 17 (18 messages)

Cisco Unified Videoconferencing multiple vulnerabilities - CVE-2010-3037 CVE-2010-3038 (Florent Daigniere <florent.daigniere@...stmatta.com>)
Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Auernheimer <gluttony@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Christian Sciberras <uuf6429@...il.com>)
H2CSO (Hackers to CSO) debate second edition - Free Live Streaming ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
Cisco Security Response: Multiple Vulnerabilities in Cisco Unified Videoconferencing Products (Cisco Systems Product Security Incident Response Team <psirt@cis…)
[ MDVSA-2010:238 ] openssl (security@...driva.com)
CarolinaCon-VII/2011 - Call for Papers/Presenters (Vic Vandal <vvandal@...l.com>)
Fun statistics on who is naughty and nice. ("Tomas L. Byrnes" <tomb@...neit.net>)
ZDI-10-249: Apple Quicktime Sorenson Video Codec Decoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-250: Apple Quicktime rec Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-251: Apple QuickTime FlashPix Max Uninitialized Jpeg Table Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-252: Apple QuickTime JP2 SIZ Chunk Uninitialized Object Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-254: Apple QuickTime ELST MediaRate Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-255: Apple QuickTime m1s Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-253: Apple QuickTime GIF LZW Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Troy Canasta <kingofpainfosec@...il.com>)
Re: Full-Disclosure Digest, Vol 69, Issue 26 (Vic Vandal <vvandal@...l.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Troy Canasta <kingofpainfosec@...il.com>)

November 18 (29 messages)

Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Kirch <trelane@...lane.net>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Auernheimer <gluttony@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (R S <fifteenfourtyone@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Auernheimer <gluttony@...il.com>)
[USN-1018-1] OpenSSL vulnerability (Steve Beattie <sbeattie@...ntu.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Auernheimer <gluttony@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (huj huj huj <datskihuj@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Auernheimer <gluttony@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (huj huj huj <datskihuj@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (huj huj huj <datskihuj@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Auernheimer <gluttony@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Auernheimer <gluttony@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (huj huj huj <datskihuj@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Auernheimer <gluttony@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (huj huj huj <datskihuj@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Auernheimer <gluttony@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (huj huj huj <datskihuj@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse SecurityiPad case. (huj huj huj <datskihuj@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse SecurityiPad case. ("Benji" <me@...ji.com>)
[HITB-Announce] HITB2011AMS -- Call For Papers now Open (Hafez Kamal <aphesz@...kinthebox.org>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse SecurityiPad case. (huj huj huj <datskihuj@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse SecurityiPad case. (<news@...cean.net>)
Re: Saved XSS vulnerability in Internet Explorer ("MustLive" <mustlive@...security.com.ua>)
Re: Saved XSS vulnerability in Internet Explorer ("MustLive" <mustlive@...security.com.ua>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse SecurityiPad case. (phocean <news@...cean.net>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (coderman <coderman@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Auernheimer <gluttony@...il.com>)
Fwd: Spambox Spam Quarantine Notification (RandallM <randallm@...mail.com>)
ZDI-10-256: Novell iPrint Activex GetDriverSettings Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

November 19 (38 messages)

Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Kirch <trelane@...lane.net>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse SecurityiPad case. ("Benji" <me@...ji.com>)
Re: Fwd: Spambox Spam Quarantine Notification (w0lfd33m@...il.com)
Re: Saved XSS vulnerability in Internet Explorer (Jacky Jack <jacksonsmth698@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Auernheimer <gluttony@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (FullDisclosure@...chaos.com)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Kirch <trelane@...lane.net>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andrew Kirch <trelane@...lane.net>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Eyeballing Weev <eyeballing.weev@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. ("John R. Dennison" <jrd@...desas.com>)
0day McSploit - McDonalds Dollar Menu Exploit/Vulnerability Released (savethedollarmenu <info@...ethedollarmenu.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Michal <michal@...rescope.co.uk>)
Re: Open Letter to Lee Vartan,... ("petrzelkai" <petrzelkai@...metrus.sytes.net>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (William Pitcock <nenolod@...teminplace.net>)
SSH scans, i caught one (Marco van Berkum <marco@...t.nl>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Peter Osterberg <j@....nu>)
Re: Fwd: Spambox Spam Quarantine Notification (Joe Average <yahooinsider@...il.com>)
Re: SSH scans, i caught one (Marco van Berkum <marco@...t.nl>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (root <root_@...ertel.com.ar>)
Re: SSH scans, i caught one (Alan Buxey <A.L.M.Buxey@...ro.ac.uk>)
Re: SSH scans, i caught one (Marco van Berkum <marco@...t.nl>)
Re: SSH scans, i caught one ("Julien Reveret" <shaddai@...8.org>)
Re: SSH scans, i caught one (Marco van Berkum <marco@...t.nl>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Valdis.Kletnieks@...edu)
Deadline extension: ICDT 2011 | The Sixth International Conference on Digital Telecommunications (Sandra Sendra<sandra.sendra.upv@...il.com>)
Re: Open Letter to Lee Vartan,... (Andriy Tereshchenko <tag@...odessa.ua>)
[ MDVSA-2010:239 ] php (security@...driva.com)
cve-2010-4091 exploited ? (exploit dev <extraexploit@...il.com>)
CALL FOR PAPERS, TUTORIALS, PANELS: Advances in Network and Communications (Alejandro C�novas Solbes<alejandro.canovas.cp46700@...il.com>)
Re: Open Letter to Lee Vartan,... (Christian Sciberras <uuf6429@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (Andriy Tereshchenko <tag@...odessa.ua>)
Re: Open Letter to Lee Vartan,... (Andriy Tereshchenko <tag@...odessa.ua>)
Re: Open Letter to Lee Vartan,... (Christian Sciberras <uuf6429@...il.com>)
Re: 0day McSploit - McDonalds Dollar Menu Exploit/Vulnerability Released (Shawn Merdinger <shawnmer@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. (phocean <news@...cean.net>)
Re: SSH scans, i caught one (Marco van Berkum <marco@...t.nl>)
New vulnerabilities in CMS SiteLogic ("MustLive" <mustlive@...security.com.ua>)
NiX - Linux Brute Force 1.0.3 update has been released (nix@...roxylists.com)

November 20 (21 messages)

Re: NiX - Linux Brute Force 1.0.3 update has been released (rdsears@....edu)
CVE-2010-1845: ImageIO PSD Memory Corruption (Dominic Chell <Dominic.Chell@...secure.com>)
Re: SSH scans, i caught one (Danijel <theghost101@...il.com>)
Help required for Javascript emulators (rajendra prasad <rajendra.palnaty@...il.com>)
Re: SSH scans, i caught one ("OrderZero" <orderzero@...hmail.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse SecurityiPad case. (Joe Average <yahooinsider@...il.com>)
Re: Help required for Javascript emulators (Christian Sciberras <uuf6429@...il.com>)
Re: SSH scans, i caught one (Marco van Berkum <marco@...t.nl>)
Re: SSH scans, i caught one (Marco van Berkum <marco@...t.nl>)
DLINK router vulnerabilities (naresh jha <rappercrazzy@...il.com>)
Re: SSH scans, i caught one (Egon Alter <egon.alter@....net>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse SecurityiPad case. (savethedollarmenu <info@...ethedollarmenu.com>)
Re: 0day McSploit - McDonalds Dollar Menu Exploit/Vulnerability Released (savethedollarmenu <info@...ethedollarmenu.com>)
vBulletin 4.0.8 PL1 - XSS Filter Bypass within Profile Customization ("advisories@...ern0t.net" <advisories@...ern0t.net>)
Re: NiX - Linux Brute Force 1.0.3 update has been released (nix@...roxylists.com)
Re: SSH scans, i caught one (Marco van Berkum <marco@...t.nl>)
Re: SSH scans, i caught one (Marco van Berkum <marco@...t.nl>)
Re: SSH scans, i caught one (andrew wiggin <end3er@...il.com>)
Re: SSH scans, i caught one (Robin <robin@...ec.net>)
Re: SSH scans, i caught one (Robin <robin@...ec.net>)
NIPS/NIDS prodcuts: HTML evasions (Uma Mahesh Venkata <umamahesh.venkata@...il.com>)

November 21 (4 messages)

Re: SSH scans, i caught one (Marco van Berkum <marco@...t.nl>)
Re: SSH scans, i caught one ("Thor (Hammer of God)" <thor@...merofgod.com>)
'Free Simple Software' SQL Injection Vulnerability (CVE-2010-4298) (Mark Stanislav <mark.stanislav@...il.com>)
H2HC Cancun - Free Entrance! ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)

November 22 (21 messages)

NIPS/NIDS prodcuts: HTML evasions (Srinivas Naik <naik.srinu@...il.com>)
Re: NIPS/NIDS prodcuts: HTML evasions (OTB <ownthebox@...herpunx.org>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse SecurityiPad case. (huj huj huj <datskihuj@...il.com>)
Re: SSH scans, i caught one (Graham Gower <graham.gower@...il.com>)
Bypassing Export address table Address Filter (EAF) (Berend-Jan Wever <berendjanwever@...il.com>)
Re: SSH scans, i caught one (Valdis.Kletnieks@...edu)
Re: NIPS/NIDS prodcuts: HTML evasions (John Jacobs <flamdugen@...mail.com>)
[SECURITY] CVE-2010-4172: Apache Tomcat Manager application XSS vulnerability (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2010-4172: Apache Tomcat Manager application XSS vulnerability (Mark Thomas <markt@...che.org>)
virus in email RTF message MS OE almost disabled ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
Agnitio Security Code Review Tool v1.0.0 released (David Rook <david.a.rook@...il.com>)
Re: SSH scans, i caught one (Lukasz Jaroszewski <lvj@...tykalni.org>)
Re: SSH scans, i caught one (Lukasz Jaroszewski <lvj@...tykalni.org>)
Re: virus in email RTF message MS OE almost disabled ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: SSH scans, i caught one (Marco van Berkum <marco@...t.nl>)
Re: virus in email RTF message MS OE almost disabled (Gary Baribault <gary@...ibault.net>)
Re: virus in email RTF message MS OE almost disabled ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: virus in email RTF message MS OE almost disabled (Jeffrey Walton <noloader@...il.com>)
Re: virus in email RTF message MS OE almost disabled (Gary Baribault <gary@...ibault.net>)
Re: virus in email RTF message MS OE almost disabled (Ryan Sears <rdsears@....edu>)
Deadline extension: CTRQ 2011 | The Fourth International Conference on Communication Theory, Reliability, and Quality … (Alejandro Canovas<alejandro.canovas.cp4…)

November 23 (14 messages)

[SECURITY] [DSA-2125-1] New openssl packages fix buffer overflow (Stefan Fritsch <sf@...ian.org>)
Microsoft Visual Studio vulnerability ("phil" <jabea@...ea.net>)
Re: virus in email RTF message MS OE almost disabled ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
Re: virus in email RTF message MS OE almost disabled (Benji <me@...ji.com>)
Re: virus in email RTF message MS OE almost disabled (mrx <mrx@...pergander.org.uk>)
Re: virus in email RTF message MS OE almost disabled ("Thor (Hammer of God)" <thor@...merofgod.com>)
ZDI-10-257: Apple Webkit WholeText Integer Overflow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: virus in email RTF message MS OE almost disabled ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
Re: virus in email RTF message MS OE almost disabled (Ryan Sears <rdsears@....edu>)
Re: virus in email RTF message MS OE almost disabled (Peter Besenbruch <prb@...a.net>)
Re: virus in email RTF message MS OE almost disabled ("Elazar Broad" <elazar@...hmail.com>)
Hijack SSL with a Man-In-The-Middle Attack ("Adam Behnke" <adam@...osecinstitute.com>)
Re: Hijack SSL with a Man-In-The-Middle Attack (Eyeballing Weev <eyeballing.weev@...il.com>)
Re: Hijack SSL with a Man-In-The-Middle Attack (Larry Seltzer <larry@...ryseltzer.com>)

November 24 (23 messages)

The Unbearable Lightness Of Non-Fixing: A Short Study in Security Reactiveness And Proactiveness ("ACROS Security Lists" <lists@...os.si>)
Re: Hijack SSL with a Man-In-The-Middle Attack (coderman <coderman@...il.com>)
Please read: A personal appeal from n3td3v founder Andrew Wallace (The Jimmy Wales appeal meme) (Josey Yelsef <hg_exposed@...oo.com>)
Re: Hijack SSL with a Man-In-The-Middle Attack (coderman <coderman@...il.com>)
Re: Please read: A personal appeal from n3td3v founder Andrew Wallace (The Jimmy Wales appeal meme) (Valdis.Kletnieks@...edu)
Re: Hijack SSL with a Man-In-The-Middle Attack (coderman <coderman@...il.com>)
Re: (no subject) (coderman <coderman@...il.com>)
Android and malware (Eyeballing Weev <eyeballing.weev@...il.com>)
Re: Android and malware (coderman <coderman@...il.com>)
Re: Android and malware (savethedollarmenu <info@...ethedollarmenu.com>)
Re: Android and malware (Eyeballing Weev <eyeballing.weev@...il.com>)
D-LINK router vulnerabilities (naresh jha <rappercrazzy@...il.com>)
Juniper VPN client rdesktop clickhack (niekt0 <niekt0@...teria.sk>)
Re: [SECURITY] CVE-2010-4172: Apache Tomcat Manager application XSS vulnerability (Adam Nichols <adam@...easedmind.com>)
Re: Juniper VPN client rdesktop clickhack (coderman <coderman@...il.com>)
Re: Android and malware (Jeffrey Walton <noloader@...il.com>)
Re: Android and malware (Milan Berger <m.berger@...ject-mindstorm.net>)
Re: Android and malware (Eyeballing Weev <eyeballing.weev@...il.com>)
Re: Open Letter to Lee Vartan, Assistant United States Attorney in regards to the Goatse Security iPad case. ("Kain, Becki (B.)" <bkain1@...d.com>)
Re: Android and malware ("Elazar Broad" <elazar@...hmail.com>)
[ MDVSA-2010:240 ] mono (security@...driva.com)
[ MDVSA-2010:241 ] gnucash (security@...driva.com)
cve-2010-4091 (exploit dev <extraexploit@...il.com>)

November 25 (4 messages)

[USN-1021-1] Apache vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-1022-1] APR-util vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
3rd CfP: MMEDIA 2011 || April 17-22, 2011 - Budapest, Hungary (Sandra Sendra<sandra.sendra.upv@...il.com>)
Vulnerabilities in Register Plus for WordPress ("MustLive" <mustlive@...security.com.ua>)

November 26 (6 messages)

cve-2010-4091 exploited via womens-puzzle.com ? (exploit dev <extraexploit@...il.com>)
Privilege escalation 0-day in almost all Windows versions (- - <blastres@...mail.com>)
TSSA-2010-01 Ghostscript library Ins_MINDEX() integer overflow and heap corruption (Advisories Toucan-System <advisories@...can-system.com>)
[CSESA-2010-8] Cisco Clientless SSL VPN Weak URL encoding and dangerous default access policy (George Hedfors <George.Hedfors@...ercomgroup.com>)
Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect :( (Key Night <key.night@...glemail.com>)
Re: Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect :( (Dan Rosenberg <dan.j.rosenberg@...il.com>)

November 27 (2 messages)

[SECURITY] [DSA 2126-1] New Linux 2.6.26 packages fix several issues (dann frazier <dannf@...ian.org>)
HbHc - Hacked by Hackers #1 (Denny Roger <hbhc1337@...oo.com>)

November 28 (8 messages)

Recruiting Troopers - Call for Papers, March 30-31 2011 (Enno Rey <erey@...w.de>)
Re: Please read: A personal appeal from n3td3v founder Andrew Wallace (The Jimmy Wales appeal meme) (Valdis.Kletnieks@...edu)
[ MDVSA-2010:242 ] wireshark (security@...driva.com)
MD5 "decrypter" PHP Script (Bob Smith <bobbyhadababyitsaboy@...glemail.com>)
Vulnerabilities in Joomla ("MustLive" <mustlive@...security.com.ua>)
Re: Please read: A personal appeal from n3td3v founder Andrew Wallace (The Jimmy Wales appeal meme) ("Cal Leeming [Simplicity Media Ltd]" <cal.leeming@...plic…)
classifiedextra.ca #4986576 : Interesting ad (mustlive@...security.com.ua)
3rd CfP: SPACOMM 2011 || April 17-22, 2011 - Budapest, Hungary (Alejandro Canovas<alejandro.canovas.cp46700@...il.com>)

November 29 (2 messages)

n.runs-SA-2010.003 - Hewlett Packard LaserJet MFP devices - Directory Traversal in PJL interface (<security@...ns.com>)
[ MDVSA-2010:243 ] libxml2 (security@...driva.com)

November 30 (18 messages)

'Orbis CMS' Arbitrary Script Execution Vulnerability (CVE-2010-4313) (Mark Stanislav <mark.stanislav@...il.com>)
VMSA-2010-0017 VMware ESX third party update for Service Console kernel (VMware Security Team <security@...are.com>)
Twitter - Security bug in user profiles [HTML, JS, Malware] (Reverse Skills <contact@...erseskills.com>)
[USN-1023-1] Linux kernel vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: Vulnerabilities in Joomla (Jacky Jack <jacksonsmth698@...il.com>)
[CVE-2010-3449] Apache Archiva CSRF Vulnerability (Deng Ching <oching@...che.org>)
[SECURITY] [DSA-2127-1] New wireshark packages fix denial of service (Stefan Fritsch <sf@...ian.org>)
SIP Communicator - or how to call 18003825968 (stormrider <strmrdr42@...oo.de>)
Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities (Juan Galiana Lara <jgaliana@...its.com>)
[ MDVSA-2010:244 ] phpmyadmin (security@...driva.com)
Fwd: NoScript (2.0.5.1 < less ) - Bypass "Reflective XSS" through Union SQL Poisoning Trick (SQLXSSI) (dave b <db.pub.mail@...il.com>)
[USN-1024-1] OpenJDK vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: SIP Communicator - or how to call 18003825968 (rappercrazzy@...il.com)
cve-2010-4091 - some progress (exploit dev <extraexploit@...il.com>)
CORE-2010-1109 - Multiple vulnerabilities in BugTracker.Net (CORE Security Technologies Advisories <advisories@...esecurity.com>)
new facebook SQL injection vulnerability (Maciej Gojny <vuln@...ko-security.com>)
Re: new facebook SQL injection vulnerability (Maciej Gojny <vuln@...ko-security.com>)
Re: new facebook SQL injection vulnerability (Benji <me@...ji.com>)

375 messages

Powered by blists - more mailing lists