full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2010/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 19	² 9	³ 26	⁴ 5	⁵ 6
⁶ 14	⁷ 25	⁸ 31	⁹ 30	¹⁰ 56	¹¹ 11	¹² 21
¹³ 64	¹⁴ 24	¹⁵ 62	¹⁶ 46	¹⁷ 40	¹⁸ 10	¹⁹ 10
²⁰ 27	²¹ 19	²² 9	²³ 32	²⁴ 31	²⁵ 15	²⁶ 13
²⁷ 15	²⁸ 11	²⁹ 15	³⁰ 2	³¹ 4

Messages by day:

December 1 (19 messages)

Re: new facebook apps SQL injection vulnerability (Maciej Gojny <vuln@...ko-security.com>)
Re: new facebook SQL injection vulnerability (Benji <me@...ji.com>)
Re: new facebook SQL injection vulnerability (Benji <me@...ji.com>)
Re: new facebook SQL injection vulnerability (Reed Loden <reed@...dloden.com>)
[ MDVSA-2010:245 ] krb5 (security@...driva.com)
[ MDVSA-2010:246 ] krb5 (security@...driva.com)
Re: cve-2010-4091 - some progress ("Cal Leeming [Simplicity Media Ltd]" <cal.leeming@...plicitymedialtd.co.uk>)
LFImap (Augusto Pereyra <aepereyra@...il.com>)
Vulnerabilities in Fabrica Engine ("MustLive" <mustlive@...security.com.ua>)
[USN-1025-1] Bind vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: LFImap (netinfinity <netinfinity.securitylab@...il.com>)
Re: LFIMAP (netinfinity <netinfinity.securitylab@...il.com>)
Re: LFIMAP (netinfinity <netinfinity.securitylab@...il.com>)
Secunia Research: Winamp NSV Table of Contents Parsing Integer Overflow (Secunia Research <remove-vuln@...unia.com>)
AWStats 6.95 and Older Remote Command Execution When Installed on Windows Apache Tomcat (2010-WEB-001) (CERT VU#870532… ("StenoPlasma @ ExploitDevelopment" <Ste…)
[SECURITY] [DSA-2128-1] New libxml2 packages fix potential code execution (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA-2129-1] New krb5 packages fix checksum verification weakness (Stefan Fritsch <sf@...ian.org>)
Re: LFIMAP (Augusto Pereyra <aepereyra@...il.com>)
2nd CfP: SOTICS 2011 || July 17-22, 2011 - Bournemouth, UK (Sandra Sendra<sandra.sendra.upv@...il.com>)

December 2 (9 messages)

December 3 (26 messages)

REPORT: Andrew W. aka n3tdev supports Anti-wikileaks SHIELD law by Liebermann (Troy Canasta <kingofpainfosec@...il.com>)
VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues (VMware Security team <security@...are.com>)
Re: New Source Code Vulnerability Scanner (Free 30 Day Trial) (Michal Zalewski <lcamtuf@...edump.cx>)
Re: New Source Code Vulnerability Scanner (Free 30 Day Trial) ("Cal Leeming [Simplicity Media Ltd]" <cal.leeming@...plicitymedialtd.co.uk>)
Re: New Source Code Vulnerability Scanner (Free30 Day Trial) ("Benji" <me@...ji.com>)
Various Linksys router CSRF proof of concept exploits (Martin Barbella <martybarbella@...il.com>)
DNS Pointer - DoS Exploit (Srinivas Naik <naik.srinu@...il.com>)
Re: DNS Pointer - DoS Exploit ("Cal Leeming [Simplicity Media Ltd]" <cal.leeming@...plicitymedialtd.co.uk>)
Security Contact at ESRI GIS? ("StenoPlasma @ ExploitDevelopment" <StenoPlasma@...loitdevelopment.com>)
Re: DNS Pointer - DoS Exploit (Florian Weimer <fweimer@....de>)
Re: Security Contact at ESRI GIS? (Jeffrey Walton <noloader@...il.com>)
Re: Security Contact at ESRI GIS? ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Security Contact at ESRI GIS? (Jeffrey Walton <noloader@...il.com>)
Re: Security Contact at ESRI GIS? ("Thor (Hammer of God)" <thor@...merofgod.com>)
Vulnerabilities in Register Plus Redux for WordPress ("MustLive" <mustlive@...security.com.ua>)
Re: Security Contact at ESRI GIS? ("KF (lists)" <kf_lists@...italmunition.com>)
PR10-19 DotNetNuke CMS vulnerabilities (research <research@...checkup.com>)
Re: Security Contact at ESRI GIS? ("StenoPlasma @ ExploitDevelopment" <StenoPlasma@...loitdevelopment.com>)
TPTI-10-16: VMWare VMnc Codec Frame Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Security Contact at ESRI GIS? (Jeffrey Walton <noloader@...il.com>)
Re: Security Contact at ESRI GIS? (Jeffrey Walton <noloader@...il.com>)
STUXNET Stats (simon_lists <simon@...soft.com>)
Re: Security Contact at ESRI GIS? ("Thor (Hammer of God)" <thor@...merofgod.com>)
[ MDVSA-2010:247 ] kernel (security@...driva.com)
Re: Security Contact at ESRI GIS? ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Passive PenTesting (Robin <robin@...ec.net>)

December 4 (5 messages)

December 5 (6 messages)

December 6 (14 messages)

Re: verizon vs m$ ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: verizon vs m$ (Larry Seltzer <larry@...ryseltzer.com>)
how to anti Zozzle (yuange <yuange1975@...mail.com>)
Re: verizon vs m$ (Georgi Guninski <guninski@...inski.com>)
Re: verizon vs m$ (Dan Kaminsky <dan@...para.com>)
Re: verizon vs m$ ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: verizon vs m$ ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: verizon vs m$ (Dan Kaminsky <dan@...para.com>)
Re: verizon vs m$ (Ven Ted <v3nt3d@...glemail.com>)
Re: verizon vs m$ ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: verizon vs m$ ("John Lightfoot" <jlightfoot@...il.com>)
Fwd: verizon vs m$ (Ven Ted <v3nt3d@...glemail.com>)
Re: Fwd: verizon vs m$ ("Thor (Hammer of God)" <thor@...merofgod.com>)
rPSA-2010-0076-1 gnupg (rPath Update Announcements <announce-noreply@...th.com>)

December 7 (25 messages)

Re: verizon vs m$ (Georgi Guninski <guninski@...inski.com>)
Re: verizon vs m$ (Dan Kaminsky <dan@...para.com>)
VMSA-2010-0019 VMware ESX third party updates for Service Console (VMware Security Team <security@...are.com>)
Re: verizon vs m$ (Larry Seltzer <larry@...ryseltzer.com>)
Re: verizon vs m$ (Dan Kaminsky <dan@...para.com>)
Re: verizon vs m$ (Valdis.Kletnieks@...edu)
[ MDVSA-2010:248 ] openssl (security@...driva.com)
Kryptos Logic Advisory: Winamp 5.6 Arbitrary Code Execution in MIDI Parser (Kryptos Logic Secure <secure@...ptoslogic.com>)
[ MDVSA-2010:249 ] clamav (security@...driva.com)
Re: verizon vs m$ ("Thor (Hammer of God)" <thor@...merofgod.com>)
[USN-1026-1] Python Paste vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-1027-1] Quagga vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-1028-1] ImageMagick vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Linux kernel exploit (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Linux kernel exploit ("Cal Leeming [Simplicity Media Ltd]" <cal.leeming@...plicitymedialtd.co.uk>)
Re: Linux kernel exploit (Ryan Sears <rdsears@....edu>)
Re: Linux kernel exploit (coderman <coderman@...il.com>)
Re: verizon vs m$ (Marsh Ray <marsh@...endedsubset.com>)
Re: verizon vs m$ (Christian Sciberras <uuf6429@...il.com>)
ZDI-10-258: Apple QuickTime 3GP Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-259: Apple QuickTime FPX Subimage Count Out-of-bounds Counter Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-260: Apple QuickTime Panorama Atom Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-261: Apple QuickTime PICT File PackBits Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-262: Apple QuickTime PICT directBitsRect Pack3 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
iDefense Security Advisory 12.07.10: Apple QuickTime PICT Memory Corruption Vulnerability (labs-no-reply <labs-no-reply@...fense.com>)

December 8 (31 messages)

[USN-1029-1] OpenSSL vulnerabilities (Steve Beattie <sbeattie@...ntu.com>)
Re: Linux kernel exploit (Rem7ter <rem7ter@...il.com>)
Re: Linux kernel exploit (mezgani ali <handrix@...il.com>)
Re: verizon vs m$ (Georgi Guninski <guninski@...inski.com>)
Firefox Addon: KeyScrambler (mrx <mrx@...pergander.org.uk>)
Re: Firefox Addon: KeyScrambler (Dan Kaminsky <dan@...para.com>)
Re: Firefox Addon: KeyScrambler (mrx <mrx@...pergander.org.uk>)
Re: Firefox Addon: KeyScrambler (Tim Gurney <tim.gurney@...gurney.net>)
Re: Firefox Addon: KeyScrambler ("Julien Reveret" <shaddai@...8.org>)
Re: Linux kernel exploit (Guillaume Friloux <guillaume.friloux@...64.com>)
PR10-05: XSS injection vulnerability within HP System Management Homepage (Formally Insight Manager) (Rolando Fuentes <Rolando.Fuentes@...CHECKUP.com>)
Re: Linux kernel exploit (Kai <kai@...nn.net>)
Re: Linux kernel exploit (Thomas SOETE <thomas@...te.org>)
IE CSS parser dos bug (sec yun <root@...yun.org>)
FireFox 3.6.12 Stack Overflow Denial of Service (sec yun <root@...yun.org>)
apache default printenv.cgi script hijacking (sec yun <root@...yun.org>)
RomPager/4.07 (ricky-lee birtles <mr.r.birtles@...il.com>)
Re: Linux kernel exploit (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Linux kernel exploit (nix@...roxylists.com)
Re: Linux kernel exploit (Marcus Meissner <meissner@...e.de>)
Re: apache default printenv.cgi script hijacking (Eyeballing Weev <eyeballing.weev@...il.com>)
Re: Linux kernel exploit ("Sherwyn" <infolookup@...il.com>)
Re: Linux kernel exploit (dave b <db.pub.mail@...il.com>)
Secunia Research: QuickTime Track Dimensions Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: FireFox 3.6.12 Stack Overflow Denial of Service (Berend-Jan Wever <berendjanwever@...il.com>)
Re: Linux kernel exploit (John Jacobs <flamdugen@...mail.com>)
Re: Linux kernel exploit (niklas | brueckenschlaeger <niklas@...eckenschlaeger.de>)
Re: Linux kernel exploit (leandro_lista <leandro_lista@...tari.com.br>)
Re: Linux kernel exploit (Benji <me@...ji.com>)
Google Website Optimizer security issue reportedly fixed (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Linux kernel exploit (David Flores <dmousex@...il.com>)

December 9 (30 messages)

December 10 (56 messages)

December 11 (11 messages)

December 12 (21 messages)

December 13 (64 messages)

December 14 (24 messages)

December 15 (62 messages)

December 16 (46 messages)

December 17 (40 messages)

December 18 (10 messages)

December 19 (10 messages)

December 20 (27 messages)

December 21 (19 messages)

December 22 (9 messages)

December 23 (32 messages)

December 24 (31 messages)

Re: How long was the twitter outage? ("Cal Leeming [Simplicity Media Ltd]" <cal.leeming@...plicitymedialtd.co.uk>)
Re: How long was the twitter outage? ("Thor (Hammer of God)" <thor@...merofgod.com>)
FW: Your email message was blocked ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: FW: Your email message was blocked ("Cal Leeming [Simplicity Media Ltd]" <cal.leeming@...plicitymedialtd.co.uk>)
Re: FW: Your email message was blocked (bk <chort0@...il.com>)
Re: adobe.com important subdomain SQL injection again! (Jeffrey Walton <noloader@...il.com>)
ZDI-10-293: HP StorageWorks Storage Mirroring DoubleTake.exe Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
how i stopped worrying and loved the backdoor (Григорий Братислава <musntlive@...il.com>)
ZDI-10-294: Rocket U2 Uni RPC Service Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: how i stopped worrying and loved the backdoor (Marsh Ray <marsh@...endedsubset.com>)
Re: how i stopped worrying and loved the backdoor (coderman <coderman@...il.com>)
Re: how i stopped worrying and loved the backdoor (coderman <coderman@...il.com>)
Re: FW: Your email message was blocked (Georgi Guninski <guninski@...inski.com>)
Re: FW: Your email message was blocked (Georgi Guninski <guninski@...inski.com>)
Re: [IMF 2011] 2nd Call - Deadline Extended - Addenunm (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
Re: how i stopped worrying and loved the backdoor (Marsh Ray <marsh@...endedsubset.com>)
Re: [IMF 2011] 2nd Call - Deadline Extended - Addenunm (Marsh Ray <marsh@...endedsubset.com>)
Re: how i stopped worrying and loved the backdoor (Григорий Братислава <musntlive@...il.com>)
[ MDVSA-2010:251-1 ] firefox (security@...driva.com)
Re: How long was the twitter outage? (Josey Yelsef <hg_exposed@...oo.com>)
Re: How long was the twitter outage? (Eyeballing Weev <eyeballing.weev@...il.com>)
[US-2010-xmas]: American Women are lazy, hypocritical, corpulent, psychotic thieves. People are treacherous and worthless. (Josey Yelsef <hg_exposed@...oo.com>)
[ MDVSA-2010:251-2 ] firefox (security@...driva.com)
OpenBSD CD's NSA crafted (Dave Nett <dave.nett@...oo.com>)
Re: How long was the twitter outage? ("Cal Leeming [Simplicity Media Ltd]" <cal.leeming@...plicitymedialtd.co.uk>)
Re: FW: Your email message was blocked ("Cal Leeming [Simplicity Media Ltd]" <cal.leeming@...plicitymedialtd.co.uk>)
Security Advisory - FlexVision Listener Vulnerability (Victor Ribeiro Hora <victor@...pest.com.br>)
OpenBSD - grey user's oppinion. (asmo <asmo@...n-station.us>)
Re: how i stopped worrying and loved the backdoor ("McGhee, Eddie" <Eddie.McGhee@....com>)
Re: how i stopped worrying and loved the backdoor (Gary Baribault <gary@...ibault.net>)
Re: OpenBSD - grey user's oppinion. ("Thor (Hammer of God)" <thor@...merofgod.com>)

December 25 (15 messages)

December 26 (13 messages)

December 27 (15 messages)

December 28 (11 messages)

Dave Nett official letter (Dave Nett <dave.nett@...oo.com>)
Re: backtrack-linux.org hacked? (Christian Sciberras <uuf6429@...il.com>)
Re: backtrack-linux.org hacked? (coderman <coderman@...il.com>)
Re: Musntlive 2011 crystal security ball (Erick Staal <elstaal@...all.nl>)
Re: Musntlive 2011 crystal security ball (Dave Nett <dave.nett@...oo.com>)
iis4\iis5 older bug (yuange <yuange1975@...mail.com>)
FreeBSD backdoor full disclosure (Григорий Братислава <musntlive@...il.com>)
Re: FreeBSD backdoor full disclosure (Dave Nett <dave.nett@...oo.com>)
Mongoose 2.11 DoS PoC (Rhonda Kreklau <rhonda.kreklau@...il.com>)
Multiple CSRF in Pixie <= 1.04 (Ali Raheem <ali.raheem@...glemail.com>)
[0day?] sql-injection in people.joomla.org ("Zerial." <fernando@...ial.org>)

December 29 (15 messages)

December 30 (2 messages)

December 31 (4 messages)

702 messages