Full Disclosure: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

789 messages starting May 01 06 and ending Jun 01 06
Date index | Thread index | Author index

• Re: Hello gents 0x80 (May 01)
• Secunia Research: WinHKI unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 01)
• [ GLSA 200605-01 ] MPlayer: Heap-based buffer overflow Sune Kloppenborg Jeppesen (May 01)
• DOS device name handling Klaudiusz Kulik (May 01)
  • Re: DOS device name handling 3APA3A (May 01)
  • <Possible follow-ups>
  • Re: DOS device name handling Klaudiusz Kulik (May 01)
    • Re: Re: DOS device name handling Valdis . Kletnieks (May 01)
• Re: Yahoo Messenger Source Code Released: I.M Window Code n3td3v (May 01)
• Re: MSIE (mshtml.dll) OBJECT tag vulnerability bkfsec (May 01)
  • RE: MSIE (mshtml.dll) OBJECT tag vulnerability Tim Bilbro (May 01)
    • Re: MSIE (mshtml.dll) OBJECT tag vulnerability Valdis . Kletnieks (May 01)
    • Re: MSIE (mshtml.dll) OBJECT tag vulnerability bkfsec (May 01)
    • Re: MSIE (mshtml.dll) OBJECT tag vulnerability Matthew Murphy (May 01)
  • <Possible follow-ups>
  • Re: MSIE (mshtml.dll) OBJECT tag vulnerability 0x80 (May 02)
    • Re: MSIE (mshtml.dll) OBJECT tag vulnerability Sol Invictus (May 02)
      • Re: MSIE (mshtml.dll) OBJECT tag vulnerability Ivan . (May 03)
  • RE: MSIE (mshtml.dll) OBJECT tag vulnerability 0x80 (May 05)
  • RE: MSIE (mshtml.dll) OBJECT tag vulnerability 0x80 (May 05)
• [ MDKSA-2006:080 ] - Updated clamav packages fix vulnerability security (May 02)
• Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation Cisco Systems Product Security Incident Response Team (May 02)
• [SECURITY] [DSA 1049-1] New Ethereal packages fix several vulnerabilities Martin Schulze (May 02)
• Oracle, where are the patches??? David Litchfield (May 02)
  • <Possible follow-ups>
  • RE: Oracle, where are the patches??? Kornbrust, Alexander (May 02)
    • Re: RE: Oracle, where are the patches??? Cesar (May 03)
• [ GLSA 200605-02 ] X.Org: Buffer overflow in XRender extension Sune Kloppenborg Jeppesen (May 02)
• [ GLSA 200605-03 ] ClamAV: Buffer overflow in Freshclam Sune Kloppenborg Jeppesen (May 02)
• [ GLSA 200605-04 ] phpWebSite: Local file inclusion Sune Kloppenborg Jeppesen (May 02)
• Hola Distro Help me Edgardo Zavala (May 02)
  • <Possible follow-ups>
  • Hola Distro Help me Edgardo Zavala (May 02)
    • Re: Hola Distro Help me f y (May 02)
      • Re: Hola Distro Help me Edgardo Zavala (May 02)
      • Re: Hola Distro Help me 'FoR ReaLz' E. Balansay (May 02)
      • Re: Hola Distro Help me Edgardo Zavala (May 02)
  • Re: Hola Distro Help me 0x80 (May 02)
• Heard of "Scab 5" or "Scab V" for Hard Drive evidence elimination? Red Leg (May 02)
• [ MDKSA-2006:081 ] - Updated xorg-x11 packages fix vulnerability security (May 03)
• Quagga RIPD unauthenticated route table broadcast Konstantin V. Gavrilenko (May 03)
• Quagga RIPD unauthenticated route injection Konstantin V. Gavrilenko (May 03)
  • Re: Quagga RIPD unauthenticated route injection Paul Jakma (May 03)
• Dynamic Evaluation Vulnerabilities in PHP applications Steven M. Christey (May 03)
• Re: What is wrong with schools these days? Steve Kudlak (May 03)
  • <Possible follow-ups>
  • Re: What is wrong with schools these days? Valdis . Kletnieks (May 03)
• [USN-276-1] Thunderbird vulnerabilities Martin Pitt (May 03)
• BankTown's ActiveX Buffer Overflow Vulnerability Alex Park (May 03)
  • <Possible follow-ups>
  • BankTown's ActiveX Buffer Overflow Vulnerability Alex Park (May 03)
• [USN-277-1] TIFF library vulnerabilities Martin Pitt (May 03)
• [SECURITY] [DSA 1050-1] New ClamAV packages fix denial of service or arbitrary code execution Martin Schulze (May 03)
• [USN-278-1] gdm vulnerability Martin Pitt (May 03)
• [USN-279-1] libnasl/nessus vulnerability Martin Pitt (May 03)
• Analyzing SQL/LDAP Injections in JBOSS/Hibernate Andres Molinetti (May 03)
• (no subject) azrael goblin (May 03)
  • Re: (no subject) Valdis . Kletnieks (May 03)
  • <Possible follow-ups>
  • (no subject) azrael goblin (May 04)
  • (no subject) azrael goblin (May 05)
  • (no subject) azrael goblin (May 06)
  • (no subject) I Test Pens (May 24)
• BA website discloses passenger passport numbers and D.O.B. Adam Laurie (May 03)
• JAVA SQL/LDAP Injections Andres Molinetti (May 03)
• [ MDKSA-2006:082 ] - Updated libtiff packages fix vulnerabilities security (May 03)
• MSIE (mshtml.dll) OBJECT tag vulnerability revealed mephistodreaming (May 04)
• How many vendors knowingly ship GA product with security vulnerabilities? Bill Stout (May 04)
  • Re: How many vendors knowingly ship GA product with security vulnerabilities? Valdis . Kletnieks (May 04)
  • <Possible follow-ups>
  • RE: How many vendors knowingly ship GA product with security vulnerabilities? Bill Stout (May 05)
    • Re: How many vendors knowingly ship GA product with security vulnerabilities? Valdis . Kletnieks (May 05)
• [XPA] - Albinator Pro <= 2.0.8 - Remote Command Execution Vulnerability wr0ck (May 04)
• [SECURITY] [DSA 1051-1] New Mozilla Thunderbird packages fix several vulnerabilities Martin Schulze (May 04)
• [USN-281-1] Linux kernel vulnerabilities Martin Pitt (May 04)
• [USN-280-1] X.org server vulnerability Martin Pitt (May 04)
• shellcode study azrael goblin (May 04)
  • Re: shellcode study GroundZero Security (May 04)
    • Re: shellcode study MR BABS (May 05)
• Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" Joxean Koret (May 04)
  • <Possible follow-ups>
  • RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" Joxean Koret (May 04)
    • Re: RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" Thiago H. Pojda (May 04)
      • RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" Peter van den Houten (May 04)
      • Re: RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" <...> (May 04)
    • Re: RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" Niklas (May 06)
      • RE: RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" Debasis Mohanty (May 07)
  • RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" Joxean Koret (May 04)
  • Re: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" Joxean Koret (May 06)
• ISA Server 2004 Log Manipulation beSIRT (May 04)
  • Re: ISA Server 2004 Log Manipulation Christian Swartzbaugh (May 04)
    • Re: ISA Server 2004 Log Manipulation beSIRT (May 05)
  • Re: ISA Server 2004 Log Manipulation ragdelaed (May 04)
• Re: RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus Juha-Matti Laurio (May 04)
• Re: RE: Panda Antivirus Enterprise Secure, NortonAntivirus 2005 and the virus Steven Rakick (May 04)
  • Re: RE: Panda Antivirus Enterprise Secure, NortonAntivirus 2005 and the virus Thiago H. Pojda (May 04)
  • <Possible follow-ups>
  • Re: RE: Panda Antivirus Enterprise Secure, NortonAntivirus 2005 and the virus Steven Rakick (May 04)
• bigwebmaster guestbook multiply XSS Javor Ninov (May 04)
• WebCalendar User Account Enumeration Weakness David Maciejak (May 04)
  • Re: WebCalendar User Account Enumeration Weakness David Maciejak (May 05)
• IE7 Zero Day 0x80 (May 04)
  • Re: IE7 Zero Day FRLinux (May 04)
  • Re: IE7 Zero Day Valdis . Kletnieks (May 05)
    • Re: IE7 Zero Day Peter Besenbruch (May 05)
  • Re: IE7 Zero Day Exibar (May 05)
    • Re: IE7 Zero Day Valdis . Kletnieks (May 05)
      • Re: IE7 Zero Day Eliah Kagan (May 05)
      • Re: IE7 Zero Day Exibar (May 05)
  • Re: IE7 Zero Day Ducki3 (May 05)
  • Re: IE7 Zero Day n3td3v (May 07)
    • Re: IE7 Zero Day xyberpix (May 07)
    • Re: IE7 Zero Day c0redump (May 07)
  • <Possible follow-ups>
  • Re: IE7 Zero Day 0x80 (May 05)
    • Re: IE7 Zero Day sk (May 05)
    • Re: IE7 Zero Day FRLinux (May 05)
  • Re: IE7 Zero Day 0x80 (May 05)
  • Re: IE7 Zero Day 0x80 (May 05)
    • Re: IE7 Zero Day Randal T. Rioux (May 05)
  • Re: IE7 Zero Day 0x80 (May 05)
    • Re: IE7 Zero Day ad () heapoverflow com (May 05)
  • Re: IE7 Zero Day 0x80 (May 05)
    • Re: IE7 Zero Day Valdis . Kletnieks (May 05)
      • Re: IE7 Zero Day Ron DuFresne (May 05)
  • Re: IE7 Zero Day 0x80 (May 05)
  • Re: IE7 Zero Day 0x80 (May 05)
    • Re: IE7 Zero Day Ryan Whelan (May 05)
  • Re: IE7 Zero Day 0x80 (May 05)
    • Re: IE7 Zero Day daniel uriah clemens (May 06)
  • Re: IE7 Zero Day Dave Alanis (May 05)
  • Re: IE7 Zero Day 0x80 (May 06)
    • Re: IE7 Zero Day FRLinux (May 06)
    • Re: IE7 Zero Day naveed (May 07)
      • Re: Re: IE7 Zero Day ad () heapoverflow com (May 07)
  • Re: IE7 Zero Day 0x80 (May 07)
    • Re: IE7 Zero Day n3td3v (May 07)
    • Re: IE7 Zero Day bkfsec (May 10)
  • Re: IE7 Zero Day 0x80 (May 07)
  • Re: IE7 Zero Day 0x80 (May 08)
    • Re: IE7 Zero Day n3td3v (May 09)
      • Re: IE7 Zero Day Ducki3 (May 09)
  • Re: IE7 Zero Day 0x80 (May 10)
• IE7 Information Disclosure - For sale 0x80 (May 05)
  • Re: IE7 Information Disclosure - For sale Travis Good (May 05)
  • <Possible follow-ups>
  • Re: IE7 Information Disclosure - For sale 0x80 (May 05)
    • Re: IE7 Information Disclosure - For sale Eliah Kagan (May 06)
      • WRONG MARKET BUDDY Re: IE7 Information Disclosure - For sale donnydark (May 06)
      • Re: WRONG MARKET BUDDY Re: IE7 Information Disclosure - For sale ad () heapoverflow com (May 06)
  • Re: IE7 Information Disclosure - For sale 0x80 (May 06)
    • Re: IE7 Information Disclosure - For sale Eliah Kagan (May 06)
• [ MDKSA-2006:081-1 ] - Updated xorg-x11 packages fix vulnerability security (May 05)
• CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability Williams, James K (May 05)
• does somebody know of php cross site vulnerability azrael goblin (May 05)
• [Fwd: Re: Microsoft DNS resolver: deliberately sabotagedhosts-file lookup] bkfsec (May 05)
• Idle scan rediscovered!!! Joel Jose (May 05)
  • Re: Idle scan rediscovered!!! Tim (May 05)
    • Re: Idle scan rediscovered!!! Cedric Blancher (May 05)
      • Re: Idle scan rediscovered!!! Cedric Blancher (May 05)
      • Re: Idle scan rediscovered!!! Tim (May 05)
      • Re: Idle scan rediscovered!!! Cedric Blancher (May 05)
      • Re: Idle scan rediscovered!!! rembrandt (May 05)
      • Re: Idle scan rediscovered!!! Tim (May 05)
      • Re: Idle scan rediscovered!!! Tim (May 05)
• Patterns and Security Measurement Nguyen Pham (May 05)
  • Re: Patterns and Security Measurement foofus (May 05)
  • Re: Patterns and Security Measurement Sol Invictus (May 05)
  • Re: Patterns and Security Measurement eric williams (May 05)
• Re: does somebody know of php cross site vulnerability 0x80 (May 05)
• CIRT.DK [Cryptomathic ActiveX Buffer Overflow (TDC Digital signature)] CIRT.DK Advisory (May 05)
• Windows XP Home LSA secrets stores XP login passphrase in plain text Markus Jansson (May 05)
  • Re: Windows XP Home LSA secrets stores XP login passphrase in plain text Markus Jansson (May 05)
• phpBB 2.0.20 Full Path Disclosure and SQL Errors Maksymilian Arciemowicz (May 05)
• Re: Windows XP Home LSA secrets stores XP loginpassphrase in plain text John Doe (May 05)
• Re: [Full-Disclosure] The 'good worm' from HP Steve Kudlak (May 06)
• Windows XP Home LSA secrets stores XP loginpassphrase in plain text Markus Jansson (May 06)
• [ GLSA 200605-05 ] rsync: Potential integer overflow Sune Kloppenborg Jeppesen (May 06)
• Re: WRONG MARKET BUDDY Re: IE7 Information Disclosure - For sale 0x80 (May 06)
  • **LosseChange::Debunk it??** Simon Smith (May 08)
    • Re: **LosseChange::Debunk it??** Gary E. Miller (May 08)
      • Re: **LosseChange::Debunk it??** Simon Smith (May 08)
      • Re: **LosseChange::Debunk it??** Valdis . Kletnieks (May 10)
• New site dedicated to security conferences : www.security-briefings.com newslist () security-briefings com (May 06)
  • Re: New site dedicated to security conferences : www.security-briefings.com lee . e . rian (May 06)
• Let's Not Forget Whose In Charge redsand (May 06)
  • Re: Let's Not Forget Whose In Charge c0ntex (May 06)
    • Re: Let's Not Forget Whose In Charge MR BABS (May 06)
      • Re: Let's Not Forget Whose In Charge n3td3v (May 06)
• hey,0day for sale 无敌最寂寞 (May 06)
  • Re: hey,0day for sale john kalergis (May 06)
• SinFP 1.01, new version of the OS fingerprinting next generation tool GomoR (May 06)
• Re: Windows XP Home LSA secrets storesXP loginpassphrase in plain text John Doe (May 06)
  • Re: Windows XP Home LSA secrets storesXPloginpassphrase in plain text Mike N (May 06)
• [ GLSA 200605-06 ] Mozilla Firefox: Potential remote code execution Thierry Carrez (May 06)
• Fw: IT Security Alternatives Marjan Lipovsek (May 06)
• Full Disclosure "Code of conduct" Aaron Gray (May 07)
  • Re: Full Disclosure "Code of conduct" Randal T. Rioux (May 07)
  • Re: Full Disclosure "Code of conduct" n3td3v (May 07)
    • RE: [inbox] Re: Full Disclosure "Code of conduct" Exibar (May 07)
    • Re: Full Disclosure "Code of conduct" GroundZero Security (May 07)
      • Re: Full Disclosure "Code of conduct" n3td3v (May 07)
      • Re: Full Disclosure "Code of conduct" n3td3v (May 07)
  • Re: Full Disclosure "Code of conduct" f y (May 07)
  • Re: Full Disclosure "Code of conduct" Anders B Jansson (May 07)
    • Re: Full Disclosure "Code of conduct" GroundZero Security (May 07)
      • Re: Full Disclosure "Code of conduct" AND AALL THAT JAZZ Steve Kudlak (May 08)
      • Re: Full Disclosure "Code of conduct" AND AALL THAT JAZZ bkfsec (May 08)
  • Re: Full Disclosure "Code of conduct" FRLinux (May 07)
    • Re: Full Disclosure "Code of conduct" Aaron Gray (May 07)
      • Re: Full Disclosure "Code of conduct" lee . e . rian (May 07)
      • Re: Full Disclosure "Code of conduct" n3td3v (May 07)
      • Re: Full Disclosure "Code of conduct" FRLinux (May 07)
  • Re: Full Disclosure "Code of conduct" lee . e . rian (May 07)
  • <Possible follow-ups>
  • Re: Full Disclosure "Code of conduct" 0x80 (May 07)
    • Re: Full Disclosure "Code of conduct" Aaron Gray (May 07)
      • Re: Full Disclosure "Code of conduct" Ryan Whelan (May 07)
      • Re: Full Disclosure "Code of conduct" Javor Ninov (May 07)
    • RE: [inbox] Re: Full Disclosure "Code of conduct" Exibar (May 07)
    • Re: Full Disclosure "Code of conduct" Bruno Wolff III (May 07)
• [XPA] - ISPConfig <= 2.2.2 - Remote Command Execution Vulnerability wr0ck (May 07)
• Heap based overflow Problem--Help Tauqeer Ahmad (May 07)
• Heap overflow problem----Help Tauqeer Ahmad (May 07)
  • Re: Heap overflow problem----Help ad () heapoverflow com (May 07)
• Apache Security Problem - need help Fabio Saber (May 07)
  • Re: Apache Security Problem - need help ml3 () portsonline net (May 07)
• [ GLSA 200605-07 ] Nagios: Buffer overflow Sune Kloppenborg Jeppesen (May 07)
• Re: Windows XP Home LSA secrets storesXP loginpassphrase in plain text (John Doe) Markus Jansson (May 07)
• [SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution Martin Schulze (May 08)
• Multiple Vulnerabilities In IdealBB ASP Bulletin Board CodeScan Labs (May 08)
• [USN-282-1] Nagios vulnerability Martin Pitt (May 08)
• [USN-283-1] MySQL vulnerabilities Martin Pitt (May 08)
• Secunia Research: TZipBuilder ZIP File Handling Buffer Overflow Vulnerability Secunia Research (May 08)
• Secunia Research: Anti-Trojan unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 08)
• [XPA] ActualAnalyzer Pro v6.88 - Remote Command Execution Vulnerability wr0ck (May 08)
• Claroline file inclusion vulnerabilities Siegfried (May 08)
• ZDI-06-012: Sophos Anti-Virus CAB Unpacking Code Execution Vulnerability zdi-disclosures (May 08)
• VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices VSR Advisories (May 08)
  • <Possible follow-ups>
  • VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices Matthew Cerha (May 08)
• [ GLSA 200605-08 ] PHP: Multiple vulnerabilities Thierry Carrez (May 08)
• [ GLSA 200605-09 ] Mozilla Thunderbird: Multiple vulnerabilities Thierry Carrez (May 08)
• Googling or Google Hacking Security Conference slides newslist () security-briefings com (May 08)
• Re: Googling or Google Hacking Security Conferenceslides dust bin (May 08)
• Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games Thilo Schulz (May 08)
• excessive xss vulnerabilities Christian Swartzbaugh (May 08)
  • Re: excessive xss vulnerabilities n3td3v (May 09)
  • <Possible follow-ups>
  • RE: excessive xss vulnerabilities Edward Pearson (May 09)
    • Re: excessive xss vulnerabilities bugtraq (May 10)
• hack.lu 2006 info (May 09)
• [MU-200605-01] Multiple vulnerabilities in Linux SCTP 2.6.16 noreply (May 09)
• Security Events Google Calendar Rajesh V (May 09)
• [SECURITY] [DSA 1053-1] New Mozilla packages fix arbitrary code execution Martin Schulze (May 09)
• List Charter John Cartwright (May 09)
• ICQ Client Cross-Application Scripting (XAS) 3APA3A (May 09)
• [SECURITY] [DSA 1054-1] New TIFF packages fix denial of service and arbitrary code execution Martin Schulze (May 09)
• Secunia Research: Where Is It unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 09)
• [EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service eEye Advisories (May 09)
• [EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow eEye Advisories (May 09)
• ZDI-06-013: 3Com TippingPoint SMS Server Information Disclosure Vulnerability zdi-disclosures (May 09)
• [TZO-042006] Insecure Auto-Update and File execution Thierry Zoller (May 09)
• Re: Should I Be Worried? David (May 10)
  • <Possible follow-ups>
  • Re: Should I Be Worried? Rajesh V (May 12)
• [ MDKSA-2006:083 ] - Updated gdm package fixes symlink attack vulnerability security (May 10)
• Oracle - the last word David Litchfield (May 10)
  • <Possible follow-ups>
  • RE: Oracle - the last word Joseph Finley (May 11)
• [ GLSA 200605-10 ] pdnsd: Denial of Service and potential arbitrary code execution Sune Kloppenborg Jeppesen (May 10)
• [ GLSA 200605-11 ] Ruby: Denial of Service Sune Kloppenborg Jeppesen (May 10)
• [ GLSA 200605-12 ] Quake 3 engine based games: Buffer Overflow Sune Kloppenborg Jeppesen (May 10)
• PGP Corporation Security Contact? Matthew Murphy (May 10)
  • Re: PGP Corporation Security Contact? Cat Okita (May 10)
• VISA PCI DSS standard : Good or bad? newslist () security-briefings com (May 10)
  • <Possible follow-ups>
  • Re: VISA PCI DSS standard : Good or bad?   (May 10)
• MS06-019 - How long before this develops into a self propagating email worm schanulleke . 29172787 (May 10)
  • Re: MS06-019 - How long before this develops into a self propagating email worm David Taylor (May 10)
  • Re: MS06-019 - How long before this develops into a self propagating email worm TheGesus (May 13)
  • <Possible follow-ups>
  • Re: MS06-019 - How long before this develops into a self propagating email worm schanulleke . 29172787 (May 10)
  • Re: MS06-019 - How long before this develops into a self propagating email worm schanulleke . 29172787 (May 12)
• Re: MS06-019 - How long before this develops into a self propagating email worm Juha-Matti Laurio (May 10)
  • Re: MS06-019 - How long before this develops into a self propagating email worm n3td3v (May 11)
    • Re: MS06-019 - How long before this develops into a self propagating email worm bkfsec (May 11)
    • Re: MS06-019 - How long before this develops into a self propagating email worm n3td3v (May 11)
      • Re: MS06-019 - How long before this develops into a self propagating email worm Valdis . Kletnieks (May 11)
      • Re: MS06-019 - How long before this develops into a self propagating email worm n3td3v (May 11)
      • Re: MS06-019 - How long before this develops into aself propagating email worm David Litchfield (May 11)
  • <Possible follow-ups>
  • Re: MS06-019 - How long before this develops into a self propagating email worm Juha-Matti Laurio (May 11)
• Cisco Security Advisory: AVS TCP Relay Vulnerability Cisco Systems Product Security Incident Response Team (May 10)
• [ MDKSA-2006:084 ] - Updated MySQL packages fix several vulnerabilities security (May 10)
• ZDI-06-014: Verisign I-Nav ActiveX Control Code Execution Vulnerability zdi-disclosures (May 10)
• Re: **LosseChange::Debunk it??** (May 10)
  • Re: **LosseChange::Debunk it??** Gary E. Miller (May 10)
  • Re: **LosseChange::Debunk it??** Morning Wood (May 11)
    • Re: **LosseChange::Debunk it??** eisi (May 11)
      • Re: **LosseChange::Debunk it??** Gary E. Miller (May 11)
      • Re: **LosseChange::Debunk it??** emmanuel lewis (May 11)
      • Re: **LosseChange::Debunk it??** Gary E. Miller (May 11)
  • <Possible follow-ups>
  • Re: **LosseChange::Debunk it??** (May 12)
    • Re: **LosseChange::Debunk it??** Micheal Espinola Jr (May 12)
  • RE: **LosseChange::Debunk it??** Pete Simpson (May 16)
    • Re: **LosseChange::Debunk it??** Morning Wood (May 16)
    • RE: **LosseChange::Debunk it??** pauls (May 17)
      • Re: **LosseChange::Debunk it??** ducki3 (May 17)
      • Re: **LosseChange::Debunk it??** ducki3 (May 17)
      • Re: **LosseChange::Debunk it??** Valdis . Kletnieks (May 17)
      • Re: **LosseChange::Debunk it??** bruen (May 17)
      • Re: **LosseChange::Debunk it??** Paul Schmehl (May 17)
      • Re: **LosseChange::Debunk it??** bkfsec (May 17)
    • Re: **LosseChange::Debunk it??** Dave \"No, not that one\" Korn (May 17)
  • RE: **LosseChange::Debunk it??** Pete Simpson (May 17)
    • Re: **LosseChange::Debunk it??** c0ntex (May 17)
    • Re: **LosseChange::Debunk it??** Paul Schmehl (May 17)
  • RE: **LosseChange::Debunk it??** Pete Simpson (May 17)
    • Re: **LosseChange::Debunk it??** Paul Schmehl (May 17)
  • RE: **LosseChange::Debunk it??** Pete Simpson (May 17)
    • Re: **LosseChange::Debunk it??** Valdis . Kletnieks (May 17)
  • RE: **LosseChange::Debunk it??** Pete Simpson (May 17)
    • Re: **LosseChange::Debunk it??** Paul Schmehl (May 17)
      • Re: **LosseChange::Debunk it??** Ducki3 (May 18)
      • Re: **LosseChange::Debunk it??** c0ntex (May 18)
      • Re: **LosseChange::Debunk it??** Paul Schmehl (May 18)
      • Re: **LosseChange::Debunk it??** Ducki3 (May 18)
      • Re: **LosseChange::Debunk it??** Paul Schmehl (May 18)
      • Re: **LosseChange::Debunk it??** Steve Kudlak (May 21)
  • RE: **LosseChange::Debunk it??** Pete Simpson (May 17)
  • Re: **LosseChange::Debunk it??** jptrash (May 18)
  • Re: **LosseChange::Debunk it??** 0x80 (May 20)
• [ MDKSA-2006:085 ] - Updated xine-ui packages fix format string vulnerabilities security (May 10)
• Security contact at America Online for an AOL Instant Messenger issue? Kevin (May 10)
  • Re: Security contact at America Online for an AOL Instant Messenger issue? Christian Swartzbaugh (May 10)
  • <Possible follow-ups>
  • Re: Security contact at America Online for an AOL Instant Messenger issue? Juha-Matti Laurio (May 10)
    • Re: Security contact at America Online for an AOL Instant Messenger issue? Kevin (May 10)
• Microsoft MSDTC NdrAllocate Validation Vulnerability Avert (May 11)
  • <Possible follow-ups>
  • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability 0x80 (May 11)
    • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability . Solo (May 12)
  • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability 0x80 (May 15)
    • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability . Solo (May 16)
  • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability bart.lansing (May 16)
  • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability 0x80 (May 17)
    • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability Rajesh V (May 17)
  • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability 0x80 (May 20)
    • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability ad () heapoverflow com (May 20)
  • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability 0x80 (May 20)
    • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability ad () heapoverflow com (May 21)
    • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability Barrie Dempster (May 21)
  • Re: Microsoft MSDTC NdrAllocate Validation Vulnerability 0x80 (May 21)
• [SECURITY] [DSA 1055-1] New Mozilla Firefox packages fix arbitrary code execution Martin Schulze (May 11)
• Free antivirus software ArsenKirillov (May 11)
  • Re: Free antivirus software Ivan . (May 11)
    • Re: Free antivirus software Eliah Kagan (May 11)
  • Re: Free antivirus software Valdis Shkesters (May 11)
    • Re: Free antivirus software Geo. (May 11)
      • Re: Free antivirus software Mary Landesman (May 11)
  • RE: Free antivirus software Randall M (May 11)
• [TZO-042006] Insecure Auto-Update and File execution (2) Thierry Zoller (May 11)
• Secunia Research: UltimateZip unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 11)
• [ GLSA 200605-13 ] MySQL: Information leakage Sune Kloppenborg Jeppesen (May 11)
• Ipswitch WhatsUp Professional multiple flaws David Maciejak (May 11)
• [EEYEB-20060307] Apple QuickTime FPX Integer Overflow eEye Advisories (May 11)
• Several flaws in e-business designer (eBD) Pedro Andújar (May 11)
• ZDI-06-015: Apple QuickTime H.264 Parsing Heap Overflow Vulnerability zdi-disclosures (May 11)
• Kenshoto Report: IIS 6.0 Remote Exploit PoC Kenshoto CTF (May 12)
• Apple QuickTimeStreamingServer RTSP Server Vulnerability [MU-200605-02] noreply (May 12)
• How secure is software X? David Litchfield (May 12)
  • Re: How secure is software X? Michael Silk (May 12)
    • Re: How secure is software X? David Litchfield (May 12)
  • Re: How secure is software X? Blue Boar (May 12)
    • Re: How secure is software X? Brian Eaton (May 12)
      • Re: How secure is software X? Blue Boar (May 12)
      • Re: How secure is software X? Brian Eaton (May 12)
      • Re: How secure is software X? sebastian . rother (May 12)
    • Re: How secure is software X? Lucien Fransman (May 12)
    • Re: How secure is software X? Lucien Fransman (May 12)
      • Re: How secure is software X? Roman Medina-Heigl Hernandez (May 13)
      • Re: How secure is software X? Valdis . Kletnieks (May 13)
  • Re: How secure is software X? Adam Shostack (May 12)
  • Re: How secure is software X? Tim Newsham (May 12)
  • Re: How secure is software X? Paul B. Saitta (May 12)
  • <Possible follow-ups>
  • RE: How secure is software X? Ferguson, Justin (IARC) (May 12)
    • Re: How secure is software X? David Litchfield (May 13)
      • Re: How secure is software X? Mike Hoskins (May 13)
• Apple QuickTime udta ATOM Heap Overflow Sowhat (May 12)
• SEC Consult SA-20060512-0 :: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure Bernhard Mueller (May 12)
• escalating privileges with named pipes /dev/null (May 12)
  • Re: escalating privileges with named pipes 3APA3A (May 12)
    • Re: escalating privileges with named pipes Andrew R. Reiter (May 12)
  • <Possible follow-ups>
  • Re: escalating privileges with named pipes 3APA3A (May 12)
• MS Jet Vuln... evilrabbi (May 12)
• Apple QuickDraw/QuickTime Multiple Vulnerabilities Avert (May 12)
• Black Box Voting's Latest Diebold Report Seth Johnson (May 12)
• Scientists Call Diebold Security Flaw 'Worst Ever' lsi (May 12)
  • Re: Scientists Call Diebold Security Flaw 'Worst Ever' bkfsec (May 12)
  • Re: Scientists Call Diebold Security Flaw 'Worst Ever' Simon Roberts (May 12)
• Multiple vulnerabilities in Raydium rev 309 Luigi Auriemma (May 12)
• Buffer-overflow and NULL pointer crash in Genecys 0.2 Luigi Auriemma (May 12)
• Server crash in Empire 4.3.2 Luigi Auriemma (May 12)
• Multiple vulnerabilities in Outgun 1.0.3 bot 2 Luigi Auriemma (May 12)
• Socket unreachable in GNUnet rev 2780 Luigi Auriemma (May 12)
• [FLSA-2006:152868] Updated tetex packages fix security issues Marc Deslauriers (May 13)
• [FLSA-2006:152898] Updated emacs packages fix a security issue Marc Deslauriers (May 13)
• [FLSA-2006:152904] Updated ncpfs package fixes security issues Marc Deslauriers (May 13)
• [FLSA-2006:152923] Updated xloadimage package fixes security issues Marc Deslauriers (May 13)
• [FLSA-2006:164512] Updated fetchmail packages fix security issues Marc Deslauriers (May 13)
• [FLSA-2006:185355] Updated gnupg package fixes security issues Marc Deslauriers (May 13)
• [ADVISORY] Remote Integer Underflow PHP 4.3.4 Vulnerability -BanSec Industries MR BABS (May 13)
  • Re: [ADVISORY] Remote Integer Underflow PHP 4.3.4 Vulnerability -BanSec Industries Matthew Murphy (May 14)
• For Bantown, A Poem by Bob. MR BABS (May 13)
• POC exploit for freeSSHd version 1.0.9 Tauqeer Ahmad (May 14)
  • Re: POC exploit for freeSSHd version 1.0.9 David Maciejak (May 15)
• Wargames network. Dusty (May 14)
• DMA[2006-0514a] - 'ClamAV freshclam incorrect privilege drop' KF (lists) (May 15)
  • Re: DMA[2006-0514a] - 'ClamAV freshclam incorrect privilege drop' aCaB (May 15)
• [SECURITY] [DSA 1056-1] New webcalendar packages fix information leak Martin Schulze (May 15)
• RealVNC 4.1.1 Remote Compromise James Evans (May 15)
  • RE: RealVNC 4.1.1 Remote Compromise Dixon, Wayne (May 15)
    • Re: RealVNC 4.1.1 Remote Compromise Joachim Schipper (May 15)
    • Re: RealVNC 4.1.1 Remote Compromise Michael Holstein (May 15)
  • Re: RealVNC 4.1.1 Remote Compromise Dave \"No, not that one\" Korn (May 16)
  • <Possible follow-ups>
  • Re: RealVNC 4.1.1 Remote Compromise Juha-Matti Laurio (May 15)
  • re: RealVNC 4.1.1 Remote Compromise plato (May 16)
  • Re: RealVNC 4.1.1 Remote Compromise ad () heapoverflow com (May 16)
  • RE: RealVNC 4.1.1 Remote Compromise Krpata, Tyler (May 19)
    • Re: RealVNC 4.1.1 Remote Compromise ad () heapoverflow com (May 19)
    • Re: RealVNC 4.1.1 Remote Compromise Matt Venzke (May 20)
  • Re: RealVNC 4.1.1 Remote Compromise ad () heapoverflow com (May 19)
• CYBSEC - Security Advisory: Phishing Vector in SAP BC (Business Connector) Leandro Meiners (May 15)
• CYBSEC - Security Advisory: Arbitrary File Read/Delete in SAP BC (Business Connector) Leandro Meiners (May 15)
• Re: Re: Shell accounts Steve Kudlak (May 15)
• Secunia Research: FilZip unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 15)
• [SECURITY] [DSA 1057-1] New phpLDAPadmin packages fix cross-site scripting Martin Schulze (May 15)
• [USN-274-2] MySQL vulnerability Martin Pitt (May 15)
• Novell NDPS Remote Vulnerability (Server & Client) Ryan Smith (May 15)
• Secunia Research: Abakt ZIP File Handling Buffer Overflow Vulnerability Secunia Research (May 15)
• [USN-284-1] Quagga vulnerabilities Martin Pitt (May 15)
• Breaking LoJack for Laptops Jay Nevins (May 16)
  • Re: Breaking LoJack for Laptops Michael Holstein (May 16)
    • Re: Breaking LoJack for Laptops Jay Nevins (May 16)
• [Full-Disclosure] Xfree86 video buffering? Indraveni (May 16)
• vncviewer patched... evilrabbi (May 16)
  • Re: vncviewer patched... sekure (May 16)
    • Re: vncviewer patched... evilrabbi (May 16)
      • Wireless access points wilder_jeff Wilder (May 16)
      • Re: Wireless access points sbernard (May 16)
      • RE: Wireless access points Waters, Chris (May 23)
  • Re: vncviewer patched... H D Moore (May 16)
    • Re: vncviewer patched... evilrabbi (May 16)
• ScanAlert Security Advisory Joseph Pierini (May 16)
  • security open source tools require adnan habib (May 17)
    • Re: security open source tools require analyzerx (May 17)
    • Re: security open source tools require subhag ghosh (May 17)
• Caucho Resin Windows Directory Traversal Vulnerability advisory (May 16)
• UPDATE: [ GLSA 200605-13 ] MySQL: Information leakage Sune Kloppenborg Jeppesen (May 16)
• ERRATA: [ GLSA 200605-07 ] Nagios: Buffer overflow Sune Kloppenborg Jeppesen (May 16)
• iDefense Q2 2006 Vulnerability Challenge labs-no-reply () idefense com (May 17)
  • Re: iDefense Q2 2006 Vulnerability Challenge Pavel Kankovsky (May 20)
• Advisory: Quezza BB <= 1.0 File Inclusion Vulnerability. Mustafa Can Bjorn IPEKCI (May 17)
• blue security folds Gadi Evron (May 17)
  • bluesecurity IS the spammers you fools. Re: blue security folds donnydark (May 19)
    • Re: bluesecurity IS the spammers you fools. Re: [Full-disclosure] blue security folds Valdis . Kletnieks (May 19)
  • <Possible follow-ups>
  • RE: blue security folds Mike Adams (May 17)
    • Re: blue security folds Peter Besenbruch (May 17)
      • Re: blue security folds nocfed (May 18)
      • Re: blue security folds Gaddis, Jeremy L. (May 18)
      • Re: blue security folds Michael Silk (May 18)
      • Re: blue security folds evilrabbi (May 18)
      • Re: blue security folds Steve Kudlak (May 18)
      • Re: blue security folds Kyle Lutze (May 18)
    • Re: blue security folds Abuse 007 (May 19)
      • Re: blue security folds nocfed (May 19)
      • Re: blue security folds Aaron Gray (May 19)
  • RE: blue security folds 0x80 (May 20)
• Secunia Research: Eazel unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 17)
• Secunia Research: IZArc unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 17)
• HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection h4cky0u (May 17)
• What's Up Professional Spoofing Authentication Bypass Kenneth F. Belva (May 17)
  • Re: What's Up Professional Spoofing Authentication Bypass David Maciejak (May 17)
• VNC_bypauth: vnc scanner multithreaded linux & windows ad () heapoverflow com (May 17)
• Firefox (with IETab Plugin) Null Pointer Dereferences Bug Debasis Mohanty (May 17)
  • <Possible follow-ups>
  • Firefox (with IETab Plugin) Null Pointer Dereferences Bug Debasis Mohanty (May 17)
  • Firefox (with IETab Plugin) Null Pointer Dereferences Bug Debasis Mohanty (May 18)
    • Re: Firefox (with IETab Plugin) Null Pointer Dereferences Bug PERFECT . MATERIAL (May 18)
      • Re: Firefox (with IETab Plugin) Null Pointer Dereferences Bug Joshua Russel (May 18)
    • Re: Firefox (with IETab Plugin) Null Pointer Dereferences Bug Amit Sharma (May 18)
• RE: LOOSE change. LOOSE! ericscher () mac com (May 17)
  • Re: RE: LOOSE change. LOOSE! pauls (May 18)
    • RE: RE: LOOSE change. LOOSE! BsCaBl (May 18)
      • Re: RE: LOOSE change. LOOSE! Simon Smith (May 18)
  • Re: RE: LOOSE change. LOOSE! Valdis . Kletnieks (May 18)
    • Re: RE: LOOSE change. LOOSE! Robert Kim Wireless Internet Advisor (May 18)
• Two heap overflow in libextractor 0.5.13 (rev 2832) Luigi Auriemma (May 17)
• CodeScan Advisory: Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload CodeScan Labs (May 17)
• ThreatCon at Normal level now - Was: MS06-019 - How long before this develops into a self propagating email worm Juha-Matti Laurio (May 17)
• [Full-Disclosure] Xfree86 video buffering? -- HELP PLEASE Indraveni (May 18)
• Multiple Vulns in Bitrix CMS Gogi The Georgian (May 18)
• [Info Disclosure] Diesel PHP Job Site Latest Version Matt Gibson (May 18)
• CYBSEC - Security Pre-Advisory: Local Privilege Escalation in SAP sapdba Command Leandro Meiners (May 18)
• [SECURITY] [DSA 1058-1] New awstats packages fix arbitrary command execution Martin Schulze (May 18)
• HOTORNOT api engine - any ideas? Robert Kim Wireless Internet Advisor (May 18)
  • Re: HOTORNOT api engine - any ideas? Valdis . Kletnieks (May 18)
• [ MDKSA-2006:086 ] - Updated kernel packages fix multiple vulnerabilities security (May 18)
• Apple Safari 2.0.3 (417.9.3) JavaScript - Denial of Service Yannick von Arx (May 19)
• Secunia Research: CAM UnZip ZIP File Handling Buffer Overflow Vulnerability Secunia Research (May 19)
• [SECURITY] [DSA 1059-1] New quagga packages fix several vulnerabilities Martin Schulze (May 19)
• Call for moderation Aaron Gray (May 19)
  • Re: Call for moderation evilrabbi (May 19)
    • Re: Call for moderation Micheal Espinola Jr (May 19)
      • Re: Call for moderation J.A. Terranson (May 19)
      • Re: Call for moderation Eliah Kagan (May 19)
      • Re: Call for moderation Stephen Johnson (May 19)
      • Re: Call for moderation Micheal Espinola Jr (May 19)
      • Re: Call for moderation Paul Schmehl (May 19)
    • Re: Call for moderation Eliah Kagan (May 19)
    • Re: Call for moderation Paul Schmehl (May 19)
  • Re: Call for moderation Stack Smasher (May 19)
  • Re: Call for moderation Ducki3 (May 19)
  • Re: Call for moderation David Taylor (May 19)
    • Re: Call for moderation Eliah Kagan (May 19)
  • Re: Call for moderation Steven (May 19)
  • Re: Call for moderation Daniel Veditz (May 19)
    • Re: Call for moderation Valdis . Kletnieks (May 19)
      • Re: Call for moderation Andrew Smith (May 20)
      • Re: Call for moderation nocfed (May 20)
      • Re: Call for moderation Valdis . Kletnieks (May 21)
    • Re: Call for moderation Don Bailey (May 20)
  • Re: Call for moderation Jason (May 20)
    • Re: **SPAM** Re: Call for moderation Aaron Gray (May 20)
    • Re: **SPAM** Re: Call for moderation Aaron Gray (May 20)
      • Re: **SPAM** Re: Call for moderation bkfsec (May 22)
  • <Possible follow-ups>
  • Re: Call for moderation Dave Alanis (May 19)
  • Re: Call for moderation Steven Rakick (May 19)
• [SECURITY] [DSA 1060-1] New kernel-patch-vserver packages fix privilege escalation Moritz Muehlenhoff (May 19)
• [SECURITY] [DSA 1061-1] New popfile packages fix denial of service Moritz Muehlenhoff (May 19)
• [SECURITY] [DSA 1062-1] New kphone packages fix information disclosure Moritz Muehlenhoff (May 19)
• [SECURITY] [DSA 1063-1] New phpgroupware packages fix execution of arbitrary web script code Moritz Muehlenhoff (May 19)
• [SECURITY] [DSA 1064-1] New cscope packages fix arbitrary code execution Moritz Muehlenhoff (May 20)
• [SECURITY] [DSA 1065-1] New hostapd packages fix denial of service Moritz Muehlenhoff (May 20)
• [SECURITY] [DSA 1066-1] New phpbb2 packages fix execution of arbitrary web script code Moritz Muehlenhoff (May 20)
• [SECURITY] [DSA 1067-1] New Linux kernel 2.4.16 packages fix several vulnerabilities Moritz Muehlenhoff (May 20)
• [SECURITY] [DSA 1068-1] New fbi packages fix denial of service Moritz Muehlenhoff (May 20)
• Black clouds over Sunnyvale go unchecked n3td3v (May 20)
  • <Possible follow-ups>
  • RE: Black clouds over Sunnyvale go unchecked Edward Pearson (May 22)
    • Re: Black clouds over Sunnyvale go unchecked c0ntex (May 22)
• Re: ThreatCon at Normal level now - Was: MS06-019 - How long before this develops into a self propagating email worm 0x80 (May 20)
• Mitigating Newly-Reported Microsoft Word Vulnerability Matthew Murphy (May 21)
• [SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities Moritz Muehlenhoff (May 21)
  • <Possible follow-ups>
  • [SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities Moritz Muehlenhoff (May 21)
• FALSE FLAG Re[2]: **LooseChange::Debunk it??** donnydark (May 21)
  • Re: FALSE FLAG Re[2]: **LooseChange::Debunk it??** Rob \"Nexis\" Nelson (May 21)
    • Re: FALSE FLAG Re[2]: **LooseChange::Debunk it??** Steve Kudlak (May 21)
  • Re: FALSE FLAG Re[2]: **LooseChange::Debunk it??** J.A. Terranson (May 21)
  • Re: FALSE FLAG Re[2]: **LooseChange::Debunk it??** Paul Schmehl (May 21)
• [SECURITY] [DSA 1070-1] New Linux kernel 2.4.19 packages fix several vulnerabilities Moritz Muehlenhoff (May 21)
• Cyrus IMAPD pop3d remote compromise aka cyrusFUCK3d kcope (May 21)
• Insecure call to CreateProcess()/CreateProcessAsUser() Charles Morris (May 21)
  • Re: Insecure call to CreateProcess()/CreateProcessAsUser() Andres Tarasco (May 21)
    • Re: Insecure call to CreateProcess()/CreateProcessAsUser() Charles Morris (May 21)
      • Re: Insecure call to CreateProcess()/CreateProcessAsUser() Andres Tarasco (May 21)
      • Re[2]: Insecure call to CreateProcess()/CreateProcessAsUser() Thierry Zoller (May 21)
  • Re: Insecure call to CreateProcess()/CreateProcessAsUser() Paul Szabo (May 21)
• Five Ways to Screw Up SSL Ginsu Rabbit (May 21)
  • Re: Five Ways to Screw Up SSL Michal Zalewski (May 21)
    • Re: Five Ways to Screw Up SSL Ginsu Rabbit (May 21)
      • Re: Five Ways to Screw Up SSL Dude VanWinkle (May 22)
      • Re[2]: Five Ways to Screw Up SSL Thierry Zoller (May 22)
      • Re: Re[2]: Five Ways to Screw Up SSL Dude VanWinkle (May 22)
      • Re: Five Ways to Screw Up SSL Michael Holstein (May 22)
      • Re: Five Ways to Screw Up SSL Dude VanWinkle (May 22)
      • Re: Five Ways to Screw Up SSL Valdis . Kletnieks (May 22)
      • Re: Five Ways to Screw Up SSL Brian Dessent (May 23)
      • Re: Five Ways to Screw Up SSL Dude VanWinkle (May 23)
      • Re: Five Ways to Screw Up SSL Brian Eaton (May 23)
      • Re: Five Ways to Screw Up SSL Dude VanWinkle (May 23)
      • Re: Five Ways to Screw Up SSL Michael Holstein (May 22)
    • Re: Five Ways to Screw Up SSL Florian Weimer (May 22)
  • Re: Five Ways to Screw Up SSL Thomas (May 22)
• [TZO-072006]-Xampp - Multiple Priviledge Escalation (SYSTEM) and Rogue Autostart Thierry Zoller (May 21)
• [ GLSA 200605-14 ] libextractor: Two heap-based buffer overflows Stefan Cornelius (May 21)
• [ GLSA 200605-15 ] Quagga Routing Suite: Multiple vulnerabilities Stefan Cornelius (May 21)
• PBNJ 1.14 released Joshua D. Abraham (May 21)
• Responsibility Greg (May 21)
  • Re: Responsibility Line Noise (May 22)
  • Re: Responsibility Paul Schmehl (May 22)
    • Re: Responsibility Sol Invictus (May 22)
  • Re: Responsibility <...> (May 23)
  • Re: Responsibility Sean Comeau (May 24)
  • <Possible follow-ups>
  • RE: Responsibility Scott Forrest (May 25)
    • Re: Responsibility Michael Holstein (May 25)
  • RE: Responsibility Scott Forrest (May 25)
    • Re: Responsibility Valdis . Kletnieks (May 25)
      • Re: Responsibility gboyce (May 25)
• Urgent: For the attention of the intelligence services n3td3v (May 21)
• For the attention of Mi5, Mi6 or Symantec n3td3v (May 21)
  • Re: For the attention of Mi5, Mi6 or Symantec <...> (May 22)
    • Re: For the attention of Mi5, Mi6 or Symantec nocfed (May 22)
  • Re: For the attention of Mi5, Mi6 or Symantec Valdis . Kletnieks (May 22)
  • Re: For the attention of Mi5, Mi6 or Symantec Sean Crawford (May 22)
  • Re: For the attention of Mi5, Mi6 or Symantec J.A. Terranson (May 22)
  • Re: For the attention of Mi5, Mi6 or Symantec womber (May 23)
    • Re: For the attention of Mi5, Mi6 or Symantec John Bond (May 23)
    • Re: For the attention of Mi5, Mi6 or Symantec Steve Kudlak (May 25)
  • <Possible follow-ups>
  • RE: For the attention of Mi5, Mi6 or Symantec Cassidy Macfarlane (May 22)
• Flirtlife.de compromised here are the passwords asas asasa (May 21)
• Skype - URI Handler Command Switch Parsing Brett Moore (May 22)
• I'm ready to tell the police n3td3v (May 22)
  • Re: I'm ready to tell the police Michael Silk (May 22)
    • Re: I'm ready to tell the police n3td3v (May 22)
      • Re: I'm ready to tell the police Michael Simpson (May 22)
      • Re: I'm ready to tell the police GroundZero Security (May 22)
      • So tell the police already (Re: I'm ready to tell the police Rowland (May 22)
      • Re: So tell the police already (Re: I'm ready to tell the police Steve Kudlak (May 25)
      • Re: I'm ready to tell the police Dave \"No, not that one\" Korn (May 22)
      • Re: I'm ready to tell the police Exibar (May 23)
      • Re: I'm ready to tell the police Steve Kudlak (May 26)
      • Re: I'm ready to tell the police (Note I was goiong to retire from this one but I thought it deserves at least a sensible reply with real information Steve Kudlak (May 25)
  • Re: I'm ready to tell the police Bernhard Mueller (May 22)
  • Re: I'm ready to tell the police Michael (May 24)
• The Akamai attacks on Yahoo n3td3v (May 22)
  • RE: The Akamai attacks on Yahoo Larry Seltzer (May 22)
• [SECURITY] [DSA 1071-1] New MySQL 3.23 packages fix several vulnerabilities Martin Schulze (May 22)
• Prodder Remote Arbitrary Command Execution RedTeam Pentesting (May 22)
• Perlpodder Remote Arbitrary Command Execution RedTeam Pentesting (May 22)
• REMINDER: DC4420 London meet this Thursday - 25th May Major Malfunction (May 22)
• Finding Function in IAT tables Andres Molinetti (May 22)
  • Re: Finding Function in IAT tables Nagareshwar Talekar (May 25)
  • Re: Finding Function in IAT tables Randhir Vayalambrone (May 26)
  • Re: Finding Function in IAT tables naveed (May 26)
• The Stakkato Intrusions Micheal Turner (May 22)
• [SECURITY] [DSA 1072-1] New Nagios packages fix arbitrary code execution Martin Schulze (May 22)
• Finding Function in Import Address Tables (IATs) Andres Molinetti (May 22)
  • RE: Finding Function in Import Address Tables (IATs) Chris Eagle (May 22)
  • Re: Finding Function in Import Address Tables (IATs) H D Moore (May 22)
• [SECURITY] [DSA 1073-1] New MySQL 4.1 packages fix several vulnerabilities Martin Schulze (May 22)
• ZDI-06-016: Novell eDirectory 8.8 NDS Server Buffer Overflow Vulnerability zdi-disclosures (May 22)
• taking bets (not really) - janus wireless dc14 challenge coderman (May 22)
• Non eXecutable Stack Lovin on OSX86 KF (lists) (May 22)
  • <Possible follow-ups>
  • Re: Non eXecutable Stack Lovin on OSX86 Hexose Augury (May 23)
• [USN-285-1] awstats vulnerability Martin Pitt (May 23)
• [2006-23-05] Critical Vulnerability - Biometric Devices Joxean Koret (May 23)
• Server termination in netPanzer 0.8 (rev 952) Luigi Auriemma (May 23)
• Buffer-overflow in the WebTool service of PunkBuster for servers (minor than v1.229) Luigi Auriemma (May 23)
• VSR Advisory: PDF Tools AG - PDF Form Filling and Flattening Tool Overflow advisories (May 23)
• [USN-286-1] Dia vulnerabilities Martin Pitt (May 24)
• [SECURITY] [DSA 1074-1] New mpg123 packages fix arbitrary code execution Martin Schulze (May 24)
• Cisco Security Advisory: Windows VPN Client Local Privilege Escalation Vulnerability Cisco Systems Product Security Incident Response Team (May 24)
• [ MDKSA-2006:087 ] - Updated kernel packages fixes netfilter SNMP NAT memory corruption security (May 24)
• [ MDKSA-2006:088 ] - Updated hostapd package to address DoS vulnerability security (May 24)
• [ MDKSA-2006:089 ] - Updated kphone packages fixes permissions issue with .qt/kphonerc security (May 24)
• [ MDKSA-2006:090 ] - Updated shadow-utils packages fix mailbox creation vulnerability security (May 24)
• [ MDKSA-2006:091 ] - Updated php packages fix vulnerabilities security (May 24)
• rPSA-2006-0080-1 postgresql postgresql-server Justin M. Forbes (May 24)
• Security speakers are often very good book writers newslist () security-briefings com (May 25)
  • Re: Security speakers are often very good book writers Michal Zalewski (May 25)
  • Re: Security speakers are often very good book writers Marcos Agüero (May 25)
    • Re: Security speakers are often very good book writers ad () heapoverflow com (May 25)
      • Re: Security speakers are often very good book writers Sol Invictus (May 25)
• New problem in Upload section in ASP service saied hackeriran (May 25)
  • Re: New problem in Upload section in ASP service Valdis . Kletnieks (May 25)
  • Re: New problem in Upload section in ASP service c0redump (May 25)
• RE: bypassing Windows Domain Group Policy Objects alan.cl.wong (May 25)
• rPSA-2006-0082-1 vixie-cron Justin M. Forbes (May 25)
• rPSA-2006-0082-2 vixie-cron Justin M. Forbes (May 25)
• VulnSale: Windows Vista Exploit 0x80 (May 26)
  • Re: VulnSale: Windows Vista Exploit evilrabbi (May 26)
    • Re: VulnSale: Windows Vista Exploit Javor Ninov (May 29)
      • Re: VulnSale: Windows Vista Exploit evilrabbi (May 29)
      • Re: VulnSale: Windows Vista Exploit Javor Ninov (May 29)
    • Re: VulnSale: Windows Vista Exploit Valdis . Kletnieks (May 29)
  • <Possible follow-ups>
  • Re: VulnSale: Windows Vista Exploit 0x80 (May 29)
    • Re: VulnSale: Windows Vista Exploit Aaron Gray (May 29)
  • Re: VulnSale: Windows Vista Exploit 0x80 (May 29)
  • Re: VulnSale: Windows Vista Exploit 0x80 (May 29)
• XSS Vector at www.titus.de batchwork (May 26)
• XSS Vector at www.emopunk.de batchwork (May 26)
• Using HTML errors to steal MySpace accounts batchwork (May 26)
• ASLR now built into Vista David Litchfield (May 26)
  • Re: ASLR now built into Vista c0ntex (May 26)
    • Re[2]: ASLR now built into Vista 3APA3A (May 26)
  • <Possible follow-ups>
  • Re: ASLR now built into Vista 0x80 (May 26)
• Graph analysis of stolen credit cards Lance James (May 26)
  • Re: [General-discussion] Graph analysis of stolen credit cards Lance James (May 26)
    • Re: [General-discussion] Graph analysis of stolen credit cards Lance James (May 26)
  • Re: [General-discussion] Graph analysis of stolen credit cards Justin Mason (May 26)
    • Re: Re: [General-discussion] Graph analysis of stolen credit cards James Eaton-Lee (May 26)
      • Re: Re: [General-discussion] Graph analysis of stolen credit cards James Eaton-Lee (May 26)
      • Re: Re: [General-discussion] Graph analysis of stolen credit cards Lance James (May 26)
  • Re: [apwg] Graph analysis of stolen credit cards glennhall (May 26)
    • Re: [apwg] Graph analysis of stolen credit cards Lance James (May 26)
• [SECURITY] [DSA 1075-1] New awstats packages fix arbitrary command execution Martin Schulze (May 26)
• EXIF thumbnails - now with sourcecode Tonu Samuel (May 26)
  • Re: EXIF thumbnails - now with sourcecode KF (lists) (May 26)
  • Re: EXIF thumbnails - now with sourcecode Tonu Samuel (May 26)
• Internet Explorer Ver 6.0.2800.1106 vulnerability r k (May 26)
  • Re: Internet Explorer Ver 6.0.2800.1106 vulnerability Tonu Samuel (May 26)
    • Re: Internet Explorer Ver 6.0.2800.1106 vulnerability ad () heapoverflow com (May 26)
  • Re: Internet Explorer Ver 6.0.2800.1106 vulnerability yuanfan bai (May 26)
    • Re: Internet Explorer Ver 6.0.2800.1106 vulnerability str0ke (May 26)
  • Re: Internet Explorer Ver 6.0.2800.1106 vulnerability Alexander Sotirov (May 26)
• XSS Vector at www.borussia.de batchwork (May 26)
• [SECURITY] [DSA 1076-1] New lynx packages fix denial of service Martin Schulze (May 26)
• [SECURITY] [DSA 1077-1] New lynx-ssl packages fix denial of service Martin Schulze (May 26)
• new symantec vuln Bug Traq (May 26)
• [ MDKSA-2006:092 ] - Updated mpg123 packages fix DoS vulnerability. security (May 26)
• rPSA-2006-0083-1 enscript Justin M. Forbes (May 26)
• Application Security Hacking Videos Joel R. Helgeson (May 26)
  • Re: Application Security Hacking Videos Dave King (May 27)
    • Re: Application Security Hacking Videos Joel R. Helgeson (May 27)
      • Re: Application Security Hacking Videos pagvac (May 27)
• RE: [security] A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. fractalg (May 26)
  • Re: RE: [security] A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. Valdis . Kletnieks (May 27)
    • RE: RE: [security] A Nasty Security Bug that affectPGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. Pedro Hugo (May 28)
• rPSA-2006-0084-1 fetchmail Justin M. Forbes (May 26)
• ZH2006-20 SA: CosmicShoppingCart Multiple Vulnerabilities Vympel (May 26)
• [SECURITY] [DSA 1078-1] New tiff packages fix denial of service Martin Schulze (May 27)
• Multiple XSS Vulnerabilities in Tikiwiki 1.9.x Raoul (May 28)
• cURL Safe Mode Bypass PHP 4.4.2 and 5.1.4 Maksymilian Arciemowicz (May 28)
• Re: PGP & Truecrypt "A Nasty Security Bug" Markus Jansson (May 28)
• I need some backdoor code source azrael goblin (May 28)
  • Re: I need some backdoor code source Rob \"Nexis\" Nelson (May 28)
  • Re: I need some backdoor code source Joaquim Moreno (May 28)
• *zeroday warez* MDAEMON LATEST VERSION PREAUTH REMOTE ROOT HOLE *zeroday warez* kcope (May 28)
  • Re: *zeroday warez* MDAEMON LATEST VERSION PREAUTH REMOTE ROOT HOLE *zeroday warez* ad () heapoverflow com (May 28)
    • Re: *zeroday warez* MDAEMON LATEST VERSION PREAUTH REMOTE ROOT HOLE *zeroday warez* . Solo (May 29)
      • Re: *zeroday warez* MDAEMON LATEST VERSION PREAUTH REMOTE ROOT HOLE *zeroday warez* . Solo (May 29)
      • Re: *zeroday warez* MDAEMON LATEST VERSION PREAUTH REMOTE ROOT HOLE *zeroday warez* kcope (May 29)
• Books from security conference speakers ... reloaded ! newslist () security-briefings com (May 28)
• A Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8 & 9 Adbulaziz Hariri (May 28)
• XSS vuln- swapitshop.com vulnkiller (May 28)
• Advisory: MiniNuke v2.x Multiple Remote Vulnerabilities Mustafa Can Bjorn IPEKCI (May 28)
• Advisory: ASPBB <= 0.52 (perform_search.asp) XSS vulnerability Mustafa Can Bjorn IPEKCI (May 28)
• Advisory: tinyBB <= 0.3 Multiple Remote Vulnerabilities. Mustafa Can Bjorn IPEKCI (May 28)
• Advisory: Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities Mustafa Can Bjorn IPEKCI (May 28)
• Advisory: F () cile Interactive Web <= 0.8x Multiple Remote Vulnerabilities. Mustafa Can Bjorn IPEKCI (May 28)
• Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities Mustafa Can Bjorn IPEKCI (May 28)
  • RE: Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities Egg (May 29)
• Advisory: phpBB 2.x (admin/admin_hacks_list.php) Local Inclusion Vulnerability. Mustafa Can Bjorn IPEKCI (May 28)
• Advisory: phpBB 2.x (Activity MOD Plus) File Inclusion Vulnerability. Mustafa Can Bjorn IPEKCI (May 28)
• Advisory: ASPSitem <= 2.0 Multiple Vulnerabilities. Mustafa Can Bjorn IPEKCI (May 28)
• Advisory: UBBThreads 5.x, 6.x Multiple File Inclusion Vulnerabilities. Mustafa Can Bjorn IPEKCI (May 28)
• Re: Internet Explorer Ver 6.0.2800.1106 vulnerability 0x80 (May 29)
  • Re: Internet Explorer Ver 6.0.2800.1106 vulnerability Javor Ninov (May 29)
    • Re: Internet Explorer Ver6.0.2800.1106 vulnerability Aaron Gray (May 29)
      • Re: Internet Explorer Ver6.0.2800.1106 vulnerability Valdis . Kletnieks (May 29)
      • Re: Internet Explorer Ver6.0.2800.1106 vulnerability Aaron Gray (May 30)
      • Re: Internet Explorer Ver6.0.2800.1106 vulnerability c0redump (May 29)
      • Re: Internet Explorer Ver6.0.2800.1106 vulnerability Aaron Gray (May 31)
      • Re: Internet Explorer Ver6.0.2800.1106 vulnerability c0redump (May 31)
• Advisory: Blend Portal <= 1.2.0 for phpBB 2.x (blend_data/blend_common.php) File Inclusion Vulnerability Mustafa Can Bjorn IPEKCI (May 29)
  • RE: Advisory: Blend Portal <= 1.2.0 for phpBB 2.x(blend_data/blend_common.php) File Inclusion Vulnerability austin best (May 29)
• Jiwa Financials - Reporting allows execution of arbitrary reports as SQL user with full permissions. Robert Passlow (May 29)
• [SECURITY] [DSA 1079-1] New MySQL 4.0 packages fix several vulnerabilities Martin Schulze (May 29)
• [SECURITY] [DSA 1080-1] New dovecot packages fix directory traversal Steve Kemp (May 29)
• [SECURITY] [DSA 1081-1] New libextractor packages fix arbitrary code execution Martin Schulze (May 29)
• [USN-287-1] Nagios vulnerability Martin Pitt (May 29)
• [USN-288-1] PostgreSQL server/client vulnerabilities Martin Pitt (May 29)
• Latest cron bug, Is opensolaris affected? Sheshka, Alexey (May 29)
• phpbb blend portal and activity mods at risk ad () heapoverflow com (May 29)
• VulnSale: IE 6.0.2900.2180.yeahlatestversion 0x80 (May 29)
  • Re: VulnSale: IE 6.0.2900.2180.yeahlatestversion ad () heapoverflow com (May 29)
  • Re: VulnSale: IE 6.0.2900.2180.yeahlatestversion Aaron Gray (May 29)
    • Re: VulnSale: IE 6.0.2900.2180.yeahlatestversion Valdis . Kletnieks (May 29)
      • Re: VulnSale: IE 6.0.2900.2180.yeahlatestversion Aaron Gray (May 29)
  • <Possible follow-ups>
  • Re: VulnSale: IE 6.0.2900.2180.yeahlatestversion 0x80 (May 29)
    • Re: VulnSale: IE 6.0.2900.2180.yeahlatestversion ad () heapoverflow com (May 29)
  • Re: VulnSale: IE 6.0.2900.2180.yeahlatestversion 0xbadedd1e (May 29)
  • Re: VulnSale: IE 6.0.2900.2180.yeahlatestversion 0x80 (May 29)
• Re: Proof of concept that PGP AUTHENTICATION CAN BE BYPASSED WITHOUTPATCHING madsys (May 29)
• [SECURITY] [DSA 1082-1] New Linux kernel 2.4.17 packages fix several vulnerabilities Moritz Muehlenhoff (May 29)
• Re: [Full-Disclosure] Fwd: Re: FullDisclosure: Security aspects of time synchronization infrastructure Steve Kudlak (May 30)
• Backdoor in RelevantKnowledge adware (What are we fighting for?) 3APA3A (May 30)
  • Re: Backdoor in RelevantKnowledge adware (What are we fighting for?) Ag. System Administrator (May 30)
  • Re: Backdoor in RelevantKnowledge adware (What are wefighting for?) Dave \"No, not that one\" Korn (May 30)
• [ GLSA 200605-16 ] CherryPy: Directory traversal vulnerability Stefan Cornelius (May 30)
• abnormal behavior Gmail logon Ratna Kumar Ch (May 30)
  • RE: abnormal behavior Gmail logon Oscar Fajardo (May 30)
    • Re: abnormal behavior Gmail logon Valdis . Kletnieks (May 30)
  • <Possible follow-ups>
  • Re: abnormal behavior Gmail logon Oscar Fajardo Sanchez (May 30)
    • Re: abnormal behavior Gmail logon Valdis . Kletnieks (May 30)
  • Re: abnormal behavior Gmail logon Oscar Fajardo Sanchez (May 30)
    • Re: abnormal behavior Gmail logon Valdis . Kletnieks (May 30)
    • Re: abnormal behavior Gmail logon Brian Eaton (May 30)
      • Re: abnormal behavior Gmail logon Oscar Fajardo (May 30)
  • RE: abnormal behavior Gmail logon Edward Pearson (May 31)
    • Re: abnormal behavior Gmail logon Valdis . Kletnieks (May 31)
      • Re: abnormal behavior Gmail logon Brian Eaton (May 31)
  • RE: abnormal behavior Gmail logon David Farinic (May 31)
  • Re: abnormal behavior Gmail logon Ajay Pal Singh Atwal (May 31)
• [ MDKSA-2006:093 ] - Updated dia packages fix string format vulnerabilities. security (May 30)
• [ GLSA 200605-17 ] libTIFF: Multiple vulnerabilities Stefan Cornelius (May 30)
• [SECURITY] [DSA 1083-1] New motor packages fix arbitrary code execution Martin Schulze (May 31)
• GnuPG fun Evgeny Legerov (May 31)
  • Re: GnuPG fun Steffen Kluge (Jun 01)
  • <Possible follow-ups>
  • RE: GnuPG fun Sigint Consulting (May 31)
• SUSE Security Announcement: cron local privilege escalation (SUSE-SA:2006:027) Marcus Meissner (May 31)
• Secunia Research: Eserv/3 IMAP and HTTP Server Multiple Vulnerabilities Secunia Research (May 31)
• Secunia Research: Rising Antivirus unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 31)
• Secunia Research: ZipCentral ZIP File Handling Buffer Overflow Vulnerability Secunia Research (May 31)
• working contact for 3ware.com? Tonu Samuel (May 31)
• [SECURITY] [DSA 1084-1] New typespeed packages fix arbitrary code execution Steve Kemp (May 31)
• SUSE Security Announcement: kernel (SUSE-SA:2006:028) Marcus Meissner (May 31)
• rPSA-2006-0087-1 kernel Justin M. Forbes (May 31)
• RFID used at Olympics in Germany Josh L. Perrymon (Jun 01)
  • Re: RFID used at Olympics in Germany Jim Popovitch (Jun 01)
    • Re: RFID used at Olympics in Germany Josh L. Perrymon (Jun 01)

Previous period

Next period