Full Disclosure: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

582 messages starting Nov 01 07 and ending Dec 01 07
Date index | Thread index | Author index

• an open letter to kevin bacon: hello, how's it going? silky (Nov 01)
  • Re: an open letter to kevin bacon: hello, how's it going? Kollberg, Dirk (Nov 01)
• SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client Bernhard Mueller (Nov 01)
• Re: Full-Disclosure Digest, Vol 33, Issue 1 Joxean Koret (Nov 01)
  • Re: Full-Disclosure Digest, Vol 33, Issue 1 reepex (Nov 01)
• Re: Flash that simulates virus scan Simon Smith (Nov 01)
• [ MDKSA-2007:203 ] - Updated xen packages fix multiple vulnerabilities security (Nov 01)
• [ MDKSA-2007:204 ] - Updated cups packages fix vulnerability security (Nov 01)
• rPSA-2007-0227-1 cups rPath Update Announcements (Nov 01)
• mac trojan in-the-wild Gadi Evron (Nov 01)
  • Re: mac trojan in-the-wild nnp (Nov 01)
    • Re: mac trojan in-the-wild reepex (Nov 01)
  • Re: mac trojan in-the-wild Steven Block (Nov 01)
    • Re: mac trojan in-the-wild Nick FitzGerald (Nov 01)
      • Re: mac trojan in-the-wild reepex (Nov 01)
      • Re: mac trojan in-the-wild Paul Schmehl (Nov 01)
      • Re: mac trojan in-the-wild reepex (Nov 01)
      • Re: mac trojan in-the-wild Nick FitzGerald (Nov 01)
    • Re: mac trojan in-the-wild Paul Schmehl (Nov 01)
  • Re: mac trojan in-the-wild Thor (Hammer of God) (Nov 01)
    • Re: mac trojan in-the-wild Alex Eckelberry (Nov 02)
      • Re: mac trojan in-the-wild nnp (Nov 01)
      • Re: mac trojan in-the-wild Dude VanWinkle (Nov 01)
      • Re: mac trojan in-the-wild nnp (Nov 01)
      • Re: mac trojan in-the-wild Dude VanWinkle (Nov 02)
      • Re: mac trojan in-the-wild Adam St. Onge (Nov 02)
      • Re: mac trojan in-the-wild Paul Schmehl (Nov 02)
      • Re: mac trojan in-the-wild Jay Sulzberger (Nov 02)
      • Re: mac trojan in-the-wild Paul Schmehl (Nov 02)
      • Re: mac trojan in-the-wild Steven Adair (Nov 02)
      • Re: mac trojan in-the-wild Jay Sulzberger (Nov 02)
      • Re: mac trojan in-the-wild Jay Sulzberger (Nov 02)
      • Re: mac trojan in-the-wild Nick FitzGerald (Nov 02)
      • Re: mac trojan in-the-wild Dude VanWinkle (Nov 02)
      • Re: mac trojan in-the-wild J. Oquendo (Nov 02)
      • Re: mac trojan in-the-wild Dude VanWinkle (Nov 02)
      • Re: mac trojan in-the-wild reepex (Nov 02)
      • Re: mac trojan in-the-wild Simon Smith (Nov 02)
      • Re: mac trojan in-the-wild Dude VanWinkle (Nov 05)
      • Re: mac trojan in-the-wild Paul Schmehl (Nov 05)
      • Re: mac trojan in-the-wild Roger A. Grimes (Nov 02)
      • Re: mac trojan in-the-wild Thor (Hammer of God) (Nov 02)
      • Re: mac trojan in-the-wild Jay Sulzberger (Nov 02)
      • the heart of the problem [was: RE: mac trojan in-the-wild] Gadi Evron (Nov 02)
      • Re: [funsec] the heart of the problem [was: RE: mac trojan in-the-wild] Drsolly (Nov 02)
      • Re: [funsec] the heart of the problem [was: RE: mac trojan in-the-wild] yiri (Nov 02)
      • Re: the heart of the problem [was: RE: mac trojan in-the-wild] Roger A. Grimes (Nov 02)
      • Re: mac trojan in-the-wild Roger A. Grimes (Nov 02)
      • Re: mac trojan in-the-wild David Harley (Nov 02)
      • Re: mac trojan in-the-wild Peter Besenbruch (Nov 02)
      • Re: mac trojan in-the-wild Paul Schmehl (Nov 02)
      • Re: mac trojan in-the-wild Peter Besenbruch (Nov 02)
      • Re: mac trojan in-the-wild Paul Schmehl (Nov 02)
      • Re: mac trojan in-the-wild David Harley (Nov 03)
      • Message not available
      • Re: mac trojan in-the-wild Peter Besenbruch (Nov 05)
      • Re: mac trojan in-the-wild Robert McArdle (Nov 02)
      • Re: mac trojan in-the-wild Robert McArdle (Nov 02)
    • Re: mac trojan in-the-wild Jim Harrison (Nov 02)
      • Re: mac trojan in-the-wild Gadi Evron (Nov 02)
  • Re: mac trojan in-the-wild Peter Besenbruch (Nov 01)
  • Re: mac trojan in-the-wild worried security (Nov 02)
• N3TD3V INTERNET SECURITY THREAT CENTER worried security (Nov 01)
  • Re: N3TD3V INTERNET SECURITY THREAT CENTER reepex (Nov 02)
    • Re: N3TD3V INTERNET SECURITY THREAT CENTER scott (Nov 02)
• [ GLSA 200711-01 ] gFTP: Multiple vulnerabilities Pierre-Yves Rofes (Nov 01)
• [ GLSA 200711-02 ] OpenSSH: Security bypass Pierre-Yves Rofes (Nov 01)
• [ GLSA 200711-03 ] Gallery: Multiple vulnerabilities Pierre-Yves Rofes (Nov 01)
• XSS - www.howtoforge.com Emmanouil Gavriil (Nov 02)
  • Re: XSS - www.howtoforge.com reepex (Nov 02)
• Re: [botnets] re MAC trojan (fwd) Gadi Evron (Nov 02)
  • Re: [botnets] re MAC trojan (fwd) reepex (Nov 02)
• Skype IM upgrade/repair automated social engineering attack Dragos Ruiu (Nov 02)
• Re: mac trojan-vs-USERS RMueller (Nov 02)
  • <Possible follow-ups>
  • Re: mac trojan-vs-USERS full-disclosure (Nov 02)
• Secunia Research: ACDSee Products Image and Archive Plug-ins Buffer Overflows Secunia Research (Nov 02)
• Re: XSS - bank of america kevin horvath (Nov 02)
• [USN-537-2] Compiz vulnerability Kees Cook (Nov 02)
• Re: [OSX Ninjashe] Muskegon Whitehall (Nov 02)
• Re: spammer wades into US Presidential race lsi (Nov 02)
  • Re: spammer wades into US Presidential race Aaron Katz (Nov 02)
    • Re: spammer wades into US Presidential race lsi (Nov 08)
      • Re: spammer wades into US Presidential race James Matthews (Nov 08)
      • Re: spammer wades into US Presidential race Bob Bruen (Nov 08)
      • Re: spammer wades into US Presidential race Aaron Katz (Nov 08)
• Matasano on the mac "trojan" reepex (Nov 02)
• The Daytona Nine: Shallow, Behringer tom skilling jr. (Nov 02)
• oracle oraclefun (Nov 02)
• [UPH-07-01] Firefly Media Server DoS nnp (Nov 02)
  • Re: [UPH-07-01] Firefly Media Server DoS nnp (Nov 02)
• [UPH-07-02] Firefly Media Server DoS nnp (Nov 02)
• [UPH-07-03] Firefly Media Server remote format string vulnerability nnp (Nov 02)
  • Re: [UPH-07-03] Firefly Media Server remote format string vulnerability nnp (Nov 02)
• Firefox 2.0.0.9 remote DoS vulnerability carl hardwick (Nov 02)
  • Re: Firefox 2.0.0.9 remote DoS vulnerability Ismail Dönmez (Nov 05)
    • Re: Firefox 2.0.0.9 remote DoS vulnerability Shyaam (Nov 05)
    • Re: Firefox 2.0.0.9 remote DoS vulnerability FRLinux (Nov 06)
      • Re: Firefox 2.0.0.9 remote DoS vulnerability Martin Aberastegue (Nov 07)
• Local Privilege Escalation in Norton AntiVirus for Mac William A. Carrel (Nov 02)
• DoS Exploit for DHCPd bug (Bugtraq ID 25984 ; CVE-2007-5365) Roman Medina-Heigl Hernandez (Nov 02)
• [ MDKSA-2007:205 ] - Updated opal packages fix vulnerability security (Nov 02)
• [ MDKSA-2007:206 ] - Updated pwlib packages fix vulnerability security (Nov 02)
• Re: mac trojan in-the-wild -- antair restored gjgowey (Nov 02)
• eBay redirects: next step in fake blogs and web search abuse Gadi Evron (Nov 03)
  • Re: [funsec] eBay redirects: next step in fake blogs and web searchabuse Larry Seltzer (Nov 03)
• [SECURITY] [DSA 1397-1] New mono packages fix integer overflow Moritz Muehlenhoff (Nov 03)
• SF-Shoutbox 1.2.1 <= 1.4 HTML/JS Injection Vulnerability SkyOut (Nov 03)
• stop cross posting worried security (Nov 03)
  • Re: stop cross posting Dude VanWinkle (Nov 04)
    • Re: stop cross posting reepex (Nov 04)
      • Re: stop cross posting Dude VanWinkle (Nov 04)
• IDS logs showing outgoing packets on port 80 Kelly Robinson (Nov 03)
  • Re: IDS logs showing outgoing packets on port 80 Dude VanWinkle (Nov 04)
  • Re: IDS logs showing outgoing packets on port 80 Morning Wood (Nov 04)
• Suspicious URL in IDS Kelly Robinson (Nov 03)
  • Re: Suspicious URL in IDS Andrew Farmer (Nov 04)
• Chris-chan Christian Chandler Bud Frank (Nov 04)
  • browser exploit web sites Geo. (Nov 04)
    • Re: browser exploit web sites Nick FitzGerald (Nov 05)
• breaking SIP for fun and toll fraud Radu State (Nov 04)
  • Re: breaking SIP for fun and toll fraud reepex (Nov 04)
• on xss and its technical merit reepex (Nov 04)
  • Re: on xss and its technical merit Volker Tanger (Nov 04)
    • Re: on xss and its technical merit pdp (architect) (Nov 05)
  • Message not available
    • Re: on xss and its technical merit reepex (Nov 04)
      • Re: on xss and its technical merit pdp (architect) (Nov 04)
      • Re: on xss and its technical merit reepex (Nov 04)
      • Re: on xss and its technical merit Dude VanWinkle (Nov 04)
      • Re: on xss and its technical merit pdp (architect) (Nov 04)
      • Re: on xss and its technical merit reepex (Nov 04)
      • Re: on xss and its technical merit pdp (architect) (Nov 04)
      • Re: on xss and its technical merit reepex (Nov 05)
      • Re: on xss and its technical merit pdp (architect) (Nov 05)
  • Re: on xss and its technical merit pdp (architect) (Nov 04)
    • Re: on xss and its technical merit reepex (Nov 04)
      • Re: on xss and its technical merit pdp (architect) (Nov 05)
      • Re: on xss and its technical merit crazy frog crazy frog (Nov 05)
  • Re: on xss and its technical merit nate . mcfeters (Nov 04)
    • Re: on xss and its technical merit pdp (architect) (Nov 04)
      • Re: on xss and its technical merit reepex (Nov 05)
      • Re: on xss and its technical merit pdp (architect) (Nov 05)
      • Re: on xss and its technical merit nate . mcfeters (Nov 05)
  • Re: on xss and its technical merit Eric Rachner (Nov 05)
• Re: [full-disclosure] on xss and its technical merit gjgowey (Nov 04)
• Conferences material, etc Roman Medina-Heigl Hernandez (Nov 05)
• [Tool] sqlmap: a blind SQL injection tool (release 0.5) Bernardo Damele (Nov 05)
• [SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution Noah Meyerhans (Nov 05)
• iDefense Security Advisory 11.02.07: Sun Microsystems Solaris srsexec Format String Vulnerability iDefense Labs (Nov 05)
• sometimes peepee goes in my mouf Dirty Sanchez (Nov 05)
• [NETRAGARD-20070313 SECURITY ADVISORY] [OpenBase SQL Relational Database 10.0.5 - SYSTEM/root compromise] Netragard Security Advisories (Nov 05)
• iDefense Security Advisory 11.05.07: Apple QuickTime Panorama Sample Atom Heap Buffer Overflow Vulnerability iDefense Labs (Nov 05)
• [SECURITY] [DSA 1399-1] New pcre3 packages fix arbitrary code execution Florian Weimer (Nov 05)
• Leopard's firewall damages Skype and WoW Juergen Schmidt (Nov 05)
• ZDI-07-065: Apple QuickTime Color Table RGB Parsing Heap Corruption Vulnerability zdi-disclosures (Nov 05)
• ZDI-07-068: Apple QuickTime Uncompressedfile Opcode Stack Overflow Vulnerability zdi-disclosures (Nov 05)
• ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability zdi-disclosures (Nov 05)
• ZDI-07-066: Apple Quicktime PICT File PackBitsRgn Parsing Heap Corruption Vulnerability zdi-disclosures (Nov 05)
• [SECURITY] [DSA 1401-1] New iceape packages fix several vulnerabilities Moritz Muehlenhoff (Nov 05)
• [ MDKSA-2007:207 ] - Updated perl packages fix vulnerability security (Nov 06)
• [ MDKSA-2007:208 ] - Updated ghostscript packages fix vulnerability security (Nov 06)
• [ MDKSA-2007:209 ] - Updated netpbm packages fix vulnerability security (Nov 06)
• [USN-539-1] CUPS vulnerability Kees Cook (Nov 06)
• MySQL 5.x DoS (unknown) Kristian Erik Hermansen (Nov 06)
• rPSA-2007-0232-1 perl rPath Update Announcements (Nov 06)
  • <Possible follow-ups>
  • rPSA-2007-0232-1 perl rPath Update Announcements (Nov 06)
• iDefense Security Advisory 11.06.07: Microsoft DebugView Privilege Escalation Vulnerability iDefense Labs (Nov 06)
• rPSA-2007-0231-1 pcre rPath Update Announcements (Nov 06)
• These days of several XSS vulns on known sites Juha-Matti Laurio (Nov 06)
• [ GLSA 200711-04 ] Evolution: User-assisted remote execution of arbitrary code Pierre-Yves Rofes (Nov 06)
• [ MDKSA-2007:210 ] - Updated xfs package prevents arbitrary code execution vulnerabilities security (Nov 06)
• [ GLSA 200711-05 ] SiteBar: Multiple issues Pierre-Yves Rofes (Nov 06)
• [SECURITY] [DSA 1400-1] New perl packages fix arbitrary code execution Florian Weimer (Nov 07)
• Secunia Research: Link Grammar "separate_sentence()" Buffer Overflow Secunia Research (Nov 07)
• Secunia Research: AbiWord Link Grammar "separate_sentence()" Buffer Overflow Secunia Research (Nov 07)
• Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities Secunia Research (Nov 07)
• [ GLSA 200711-06 ] Apache: Multiple vulnerabilities Pierre-Yves Rofes (Nov 07)
• [ GLSA 200711-07 ] Python: User-assisted execution of arbitrary code Pierre-Yves Rofes (Nov 07)
• [ GLSA 200711-08 ] libpng: Multiple Denials of Service Pierre-Yves Rofes (Nov 07)
• [SECURITY] [DSA 1402-1] New gforge packages fix several vulnerabilities Steve Kemp (Nov 07)
• [ GLSA 200711-09 ] MadWifi: Denial of Service Pierre-Yves Rofes (Nov 07)
• Announcement : CCWAPSS methodology release 1.1 Frederic Charpentier (Nov 07)
• iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability iDefense Labs (Nov 07)
• [ GLSA 200711-10 ] Mono: Buffer overflow Pierre-Yves Rofes (Nov 07)
• Gmail 0day Scripter Hack (Nov 08)
  • Re: Gmail 0day crazy frog crazy frog (Nov 08)
    • Re: Gmail 0day silky (Nov 08)
      • Re: Gmail 0day Juergen Marester (Nov 08)
      • Re: Gmail 0day pdp (architect) (Nov 08)
      • Re: Gmail 0day silky (Nov 08)
      • Re: Gmail 0day pdp (architect) (Nov 08)
      • Re: Gmail 0day silky (Nov 08)
      • Re: Gmail 0day jam (Nov 08)
      • Re: Gmail 0day XSS Worm XSS Security Information Portal (Nov 09)
      • Re: Gmail 0day Adrian P (Nov 10)
  • <Possible follow-ups>
  • Re: Gmail 0day Juha-Matti Laurio (Nov 08)
• [OpenPKG-SA-2007.023] OpenPKG Security Advisory (perl) OpenPKG GmbH (Nov 08)
• Hushmail == Narqz Paul Melson (Nov 08)
  • Re: Hushmail == Narqz Peter Dawson (Nov 08)
  • Re: Hushmail == Narqz adnan habib (Nov 08)
  • Re: Hushmail == Narqz Simon Smith (Nov 08)
    • Re: Hushmail == Narqz php0t (Nov 08)
      • Re: Hushmail == Narqz Michael Bann (Nov 08)
      • Re: Hushmail == Narqz Byron Sonne (Nov 09)
      • Re: Hushmail == Narqz Simon Smith (Nov 09)
      • Re: Hushmail == Narqz Micheal Espinola Jr (Nov 09)
• [ GLSA 200711-11 ] Nagios Plugins: Two buffer overflows Pierre-Yves Rofes (Nov 08)
• [ GLSA 200711-12 ] Tomboy: User-assisted execution of arbitrary code Pierre-Yves Rofes (Nov 08)
• [ GLSA 200711-13 ] 3proxy: Denial of Service Pierre-Yves Rofes (Nov 08)
• [ MDKSA-2007:211 ] - Updated pcre packages fix vulnerability security (Nov 08)
• [ MDKSA-2007:212 ] - Updated pcre packages fix vulnerability security (Nov 08)
• [ MDKSA-2007:213 ] - Updated pcre packages fix vulnerability security (Nov 08)
• AST-2007-024 - Fallacious security advisory spread on the Internet involving buffer overflow in Zaptel's sethdlc application The Asterisk Development Team (Nov 08)
• [ MDKSA-2007:214 ] - Updated flac packages fix vulnerability security (Nov 09)
• JAR: protocol vulnerability in Firefox, word processing applications reported Juha-Matti Laurio (Nov 09)
• Dissecting The Electronic Jihad v3.0 Dancho Danchev (Nov 09)
• [SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting Thijs Kinkhorst (Nov 09)
• [SECURITY] [DSA 1404-1] New gallery2 packages fix privilege escalation Thijs Kinkhorst (Nov 09)
• Adobe Shockwave ShockwaveVersion() Stack Overflow Elazar Broad (Nov 09)
• [ MDKSA-2007:215 ] - Updated openldap packages fix vulnerability security (Nov 09)
• CanSecWest 2008 CFP (deadline Nov 30, conf Mar 26-28) and PacSec Dojo's Dragos Ruiu (Nov 09)
• still some 0days to sell Juergen Marester (Nov 09)
  • Re: still some 0days to sell Michael Bann (Nov 09)
    • Re: still some 0days to sell T Biehn (Nov 09)
  • <Possible follow-ups>
  • Re: still some 0days to sell Joey Mengele (Nov 10)
• Why I hate you (and a philanthropic challenge!) don bailey (Nov 09)
  • Re: Why I hate you (and a philanthropic challenge!) John C. A. Bambenek, CISSP (Nov 09)
    • Re: Why I hate you (and a philanthropic challenge!) T Biehn (Nov 09)
• Exploit Brokering Simon Smith (Nov 09)
  • Re: Exploit Brokering Thierry Zoller (Nov 09)
    • Re: Exploit Brokering Simon Smith (Nov 09)
      • Re: Exploit Brokering Thierry Zoller (Nov 09)
      • Re: Exploit Brokering Simon Smith (Nov 09)
      • Re: Exploit Brokering Valdis . Kletnieks (Nov 09)
      • Re: Exploit Brokering Simon Smith (Nov 09)
      • Re: Exploit Brokering Thierry Zoller (Nov 09)
      • Re: Exploit Brokering Simon Smith (Nov 09)
  • Re: Exploit Brokering security curmudgeon (Nov 09)
    • Re: Exploit Brokering Simon Smith (Nov 09)
  • Re: Exploit Brokering jf (Nov 09)
    • Re: Exploit Brokering don bailey (Nov 10)
  • <Possible follow-ups>
  • Re: Exploit Brokering Joey Mengele (Nov 12)
    • Re: Exploit Brokering Simon Smith (Nov 09)
• iDefense Security Advisory 11.09.07: AOL AmpX ActiveX Control Multiple Buffer Overflow Vulnerabilities iDefense Labs (Nov 09)
• iDefense Security Advisory 11.09.07: IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability iDefense Labs (Nov 09)
• [SECURITY] [DSA 1405-1] New zope-cmfplone packages fix arbitrary code execution Thijs Kinkhorst (Nov 10)
• [SECURITY] [DSA 1406-1] New horde3 packages fix several vulnerabilities Thijs Kinkhorst (Nov 10)
• List Charter John Cartwright (Nov 10)
• Canonicalization issues in Flash Cross-domain policy file request s4tan (Nov 10)
• MS explorer.exe high_load caused by malformed png Code Audit Labs (Nov 10)
  • Re: MS explorer.exe high_load caused by malformed png cocoruder . (Nov 10)
• FLEA-2007-0063-1 perl Foresight Linux Essential Announcement Service (Nov 10)
• 0day Shockwave and Flash XSS Fish Exploits on Youtube, Revver, Metacafe, Google. XSS Worm XSS Security Information Portal (Nov 10)
• RealPlayer 0-day exploit was found in malicious lzscg (Nov 10)
• A friend wants to Share Favorites with you gautam . singh (Nov 10)
• Standing Up Against German Laws - Project HayNeedle Paul Sebastian Ziegler (Nov 10)
  • Re: Standing Up Against German Laws - Project HayNeedle Nico Golde (Nov 10)
    • Re: Standing Up Against German Laws - Project HayNeedle Paul Sebastian Ziegler (Nov 10)
  • Re: Standing Up Against German Laws - ProjectHayNeedle nate . mcfeters (Nov 10)
    • Re: Standing Up Against German Laws - ProjectHayNeedle Paul Sebastian Ziegler (Nov 10)
  • Re: Standing Up Against German Laws - Project HayNeedle Jan Newger (Nov 12)
  • Re: Standing Up Against German Laws - Project HayNeedle johan beisser (Nov 12)
  • Re: Standing Up Against German Laws - Project HayNeedle Sysman (Nov 13)
    • Re: Standing Up Against German Laws - Project HayNeedle Valdis . Kletnieks (Nov 13)
    • Re: Standing Up Against German Laws - Project HayNeedle Timo Schoeler (Nov 13)
    • Re: Standing Up Against German Laws - Project HayNeedle Florian Streck (Nov 14)
      • Re: Standing Up Against German Laws - Project HayNeedle sysman (Nov 15)
  • <Possible follow-ups>
  • Re: Standing Up Against German Laws - Project HayNeedle LT (Nov 10)
    • Re: Standing Up Against German Laws - Project HayNeedle Paul Sebastian Ziegler (Nov 11)
    • Re: Standing Up Against German Laws - Project HayNeedle Vincent Archer (Nov 12)
  • Re: Standing Up Against German Laws - Project HayNeedle Paul Sebastian Ziegler (Nov 13)
    • Re: Standing Up Against German Laws - Project HayNeedle Sysman (Nov 14)
      • Re: Standing Up Against German Laws - Project HayNeedle Timo Schoeler (Nov 15)
  • Re: Standing Up Against German Laws - Project HayNeedle imipak (Nov 14)
    • Re: Standing Up Against German Laws - Project HayNeedle Florian Echtler (Nov 14)
      • Re: Standing Up Against German Laws - Project HayNeedle Simon Richter (Nov 19)
• 300$ is more than 0$ don bailey (Nov 10)
  • Re: 300$ is more than 0$ reepex (Nov 10)
  • Re: 300$ is more than 0$ Kevin Finisterre (lists) (Nov 11)
  • Re: 300$ is more than 0$ crazy frog crazy frog (Nov 11)
• Wiretapping Kelly Robinson (Nov 11)
  • Re: Wiretapping crazy frog crazy frog (Nov 11)
  • Re: Wiretapping Joel R. Helgeson (Nov 12)
    • Re: Wiretapping nate . mcfeters (Nov 12)
    • Re: Wiretapping Kevin Wilcox (Nov 12)
  • Re: Wiretapping Michael Holstein (Nov 12)
  • Re: Wiretapping Valdis . Kletnieks (Nov 12)
    • Re: Wiretapping Kevin Finisterre (lists) (Nov 12)
• BT Home Flub: Pwnin the BT Home Hub - Vulnerabilities details published Adrian P (Nov 11)
• WabiSabiLabi Co-Founder Arrested crazy frog crazy frog (Nov 11)
  • <Possible follow-ups>
  • Re: WabiSabiLabi Co-Founder Arrested auto221567 (Nov 11)
• Alice - dns spoofer fabio (Nov 11)
• Cyber Jihad? Yeah, right... worried security (Nov 11)
  • Re: Cyber Jihad? Yeah, right... Kollberg, Dirk (Nov 12)
  • Re: Cyber Jihad? Yeah, right... Mario D (Nov 12)
    • Re: Cyber Jihad? Yeah, right... Steven Adair (Nov 12)
• FLEA-2007-0065-1 libpng Foresight Linux Essential Announcement Service (Nov 12)
• FLEA-2007-0066-1 ImageMagick Foresight Linux Essential Announcement Service (Nov 12)
• FLEA-2007-0067-1 pidgin Foresight Linux Essential Announcement Service (Nov 12)
• FLEA-2007-0068-1 ruby Foresight Linux Essential Announcement Service (Nov 12)
• FLEA-2007-0064-1 pcre Foresight Linux Essential Announcement Service (Nov 12)
• FLEA-2007-0069-1 perl Foresight Linux Essential Announcement Service (Nov 12)
• Port scanning question...SYN/FIN ... SYN/ACK Kelly Robinson (Nov 12)
  • Re: Port scanning question...SYN/FIN ... SYN/ACK Abuse 007 (Nov 12)
    • Re: Port scanning question...SYN/FIN ... SYN/ACK Paul Schmehl (Nov 12)
      • Re: Port scanning question...SYN/FIN ... SYN/ACK Steven Adair (Nov 12)
• Cisco IOS Shellcode Research (Nov 12)
• Office Web Controls DataSourceControl Memory Access Violation Elazar Broad (Nov 12)
• [SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression Thijs Kinkhorst (Nov 12)
• CVE-2007-3694: Cross site scripting (XSS) in broadcast machine Hanno Böck (Nov 12)
• Re: [full-disclosure] wiretapping -- antair restored gjgowey (Nov 12)
• iDefense Security Advisory 11.12.07: WinPcap NPF.SYS bpf_filter_init Arbitrary Array Indexing Vulnerability iDefense Labs (Nov 12)
• [ GLSA 200711-14 ] Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities Pierre-Yves Rofes (Nov 12)
• [ GLSA 200711-15 ] FLAC: Buffer overflow Pierre-Yves Rofes (Nov 12)
• [ MDKSA-2007:204-1 ] - Updated cups packages fix vulnerability security (Nov 12)
• [ GLSA 200711-16 ] CUPS: Memory corruption Pierre-Yves Rofes (Nov 12)
• 0day0day0day0day AURACMS XSS!! LATEST VERSION!!! 0day0day0day0day ULTRA.HAQRS.4.ALL ULTRA.HAQRS.4.ALL (Nov 12)
• Microsoft Remote Help safrcdlg.dll Buffer Overflow Elazar Broad (Nov 13)
• Microsoft Forms 2.0 Controls Multiple Memory Access Violations Elazar Broad (Nov 13)
• Security contact @ TrendMicro? Sowhat (Nov 13)
• Skype network scanning? halfdog (Nov 13)
• End of the world? whupass (Nov 13)
  • Re: End of the world? Kevin Finisterre (lists) (Nov 13)
  • <Possible follow-ups>
  • Re: End of the world? imipak (Nov 13)
• [ MDKSA-2007:216 ] - Updated kernel packages fix multiple vulnerabilities and bugs security (Nov 13)
• Oracle 11g/10g Installation Vulnerability David Litchfield (Nov 13)
  • Re: Oracle 11g/10g Installation Vulnerability Peter Dawson (Nov 14)
• iDefense Security Advisory 11.12.07: Novell NetWare Client Local Privilege Escalation Vulnerability iDefense Labs (Nov 13)
• WebEx GPCContainer Memory Access Violation Elazar Broad (Nov 13)
  • <Possible follow-ups>
  • Re: WebEx GPCContainer Memory Access Violation Elazar Broad (Nov 14)
• [paper] protocol hopping covert channels Steffen Wendzel (Nov 13)
• [ MDKSA-2007:217 ] - Updated libpng packages fix multiple vulnerabilities security (Nov 13)
• [USN-540-1] flac vulnerability Kees Cook (Nov 13)
• [USN-541-1] Emacs vulnerability Kees Cook (Nov 13)
• Crafted SYN Packets... Kelly Robinson (Nov 13)
  • Re: Crafted SYN Packets... Simon Smith (Nov 13)
    • Re: Crafted SYN Packets... Paul Schmehl (Nov 13)
    • Re: Crafted SYN Packets... Dean Pierce (Nov 14)
      • Re: Crafted SYN Packets... nocfed (Nov 14)
  • Re: Crafted SYN Packets... Thierry Zoller (Nov 13)
• Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com XSS Worm XSS Security Information Portal (Nov 14)
  • Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com Andrew Farmer (Nov 14)
  • Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com dave-san (Nov 14)
    • Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com XSS Worm XSS Security Information Portal (Nov 14)
      • Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com nocfed (Nov 14)
• [USN-542-1] poppler vulnerabilities Kees Cook (Nov 14)
• Citrix Brute Force Tool Lohan Spies (Nov 14)
  • Fwd: Citrix Brute Force Tool Lohan Spies (Nov 14)
    • Re: Fwd: Citrix Brute Force Tool James Matthews (Nov 14)
      • Re: Fwd: Citrix Brute Force Tool foofus (Nov 14)
• Predictable DNS transaction IDs in Microsoft DNS Server Alla Bezroutchko (Nov 14)
• Six Remote Memory Corruption Vulnerabilities in IBM WebSphere MQ 6.0 IRM Research (Nov 14)
• [ MDKSA-2007:218 ] - Updated mono packages fix arbitrary code execution vulnerability security (Nov 14)
• [ GLSA 200711-17 ] Ruby on Rails: Multiple vulnerabilities Pierre-Yves Rofes (Nov 14)
• [ GLSA 200711-18 ] Cpio: Buffer overflow Pierre-Yves Rofes (Nov 14)
• save gary mckinnon or lock away dan egerstad worried security (Nov 14)
  • Re: save gary mckinnon or lock away dan egerstad James Rankin (Nov 14)
    • Re: save gary mckinnon or lock away dan egerstad worried security (Nov 14)
    • Re: save gary mckinnon or lock away dan egerstad Jim Popovitch (Nov 15)
  • Re: save gary mckinnon or lock away dan egerstad reepex (Nov 15)
• [ GLSA 200711-19 ] TikiWiki: Multiple vulnerabilities Pierre-Yves Rofes (Nov 14)
• [ GLSA 200711-20 ] Pioneers: Denial of Service Pierre-Yves Rofes (Nov 14)
• iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk ASP Message Kernel Heap Overflow Vulnerability iDefense Labs (Nov 14)
• iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk Socket IOCTL Kernel Stack Buffer Overflow Vulnerability iDefense Labs (Nov 14)
• iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk mbuf Kernel Heap Overflow Vulnerability iDefense Labs (Nov 14)
• iDefense Security Advisory 11.14.07: Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability iDefense Labs (Nov 14)
• SUSE Security Announcement: xpdf and more (SUSE-SA:2007:060) Thomas Biege (Nov 15)
• TPTI-07-20: Apple Quicktime Movie Stack Overflow Vulnerability DVLabs (Nov 15)
• Some hashes for the record shadown (Nov 15)
  • Re: Some hashes for the record Alexander Klimov (Nov 16)
  • Re: Some hashes for the record Open Phugu (Nov 16)
• Police swoop on 'hacker of the year' worried security (Nov 15)
  • Re: Police swoop on 'hacker of the year' Peter Dawson (Nov 15)
• Re: n3td3v denounces the actions of www.derangedsecurity.com worried security (Nov 15)
  • Re: n3td3v denounces the actions of www.derangedsecurity.com XSS Worm XSS Security Information Portal (Nov 15)
  • Re: n3td3v denounces the actions of www.derangedsecurity.com XSS Worm XSS Security Information Portal (Nov 15)
  • Message not available
    • Re: n3td3v denounces the actions of www.derangedsecurity.com worried security (Nov 16)
      • Re: n3td3v denounces the actions ofwww.derangedsecurity.com Richard Golodner (Nov 16)
      • Re: n3td3v denounces the actions of www.derangedsecurity.com Prohest (Nov 17)
      • Re: n3td3v denounces the actions of www.derangedsecurity.com XSS Worm XSS Security Information Portal (Nov 19)
  • Re: n3td3v denounces the actions of www.derangedsecurity.com Byron Sonne (Nov 29)
  • <Possible follow-ups>
  • Re: n3td3v denounces the actions of www.derangedsecurity.com Joey Mengele (Nov 30)
• Secunia Research: Samba "reply_netbios_packet()" Buffer Overflow Vulnerability Secunia Research (Nov 15)
• [TKADV2007-001] Mac OS X TIOCSETD IOCTL Kernel Memory Corruption Vulnerability Tobias Klein (Nov 15)
• [ MDKSA-2007:219 ] - Updated xpdf packages fix vulnerabilities security (Nov 15)
• [ MDKSA-2007:220 ] - Updated gpdf packages fix vulnerabilities security (Nov 15)
• [USN-543-1] VMWare vulnerabilities Kees Cook (Nov 15)
• ComponentOne FlexGrid 7.1 Light Multiple Stack Overflows Elazar Broad (Nov 16)
• [USN-542-2] KOffice vulnerabilities Jamie Strandboge (Nov 16)
• [RISE-2007004] Apple Mac OS X 10.4.x Kernel i386_set_ldt() Integer Overflow Vulnerability RISE Security (Nov 16)
• [USN-544-1] Samba vulnerabilities Jamie Strandboge (Nov 16)
• [ MDKSA-2007:221 ] - Updated kdegraphics packages fix vulnerabilities in kpdf security (Nov 16)
• Popular Spammers Strategies and Tactics Dancho Danchev (Nov 16)
• Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability cocoruder (Nov 16)
  • Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability CaseArmour.net Security Administrator (Nov 17)
    • Re: Microsoft Jet Engine MDB File Parsing StackOverflow Vulnerability Peter Ferrie (Nov 17)
    • Re: Microsoft Jet Engine MDB File Parsing StackOverflow Vulnerability Peter Ferrie (Nov 17)
• AhnLab AntiVirus Remote Kernel Memory Corruption Sowhat (Nov 16)
• dangerous vulnerability netclown (Nov 16)
• Anti-arp lzscg (Nov 16)
• TROJAN FOUND electric (Nov 17)
• [USN-544-2] Samba regression Jamie Strandboge (Nov 17)
• How to become a Computer Security Professional ? Meef (Nov 17)
  • Re: How to become a Computer Security Professional ? Fabio Pietrosanti (Nov 17)
  • Re: How to become a Computer Security Professional ? M. Shirk (Nov 18)
  • Re: How to become a Computer Security Professional ? Dude VanWinkle (Nov 19)
  • Re: How to become a Computer Security Professional ? worried security (Nov 19)
    • Re: How to become a Computer Security Professional ? Paul Schmehl (Nov 19)
      • Re: How to become a Computer Security Professional ? Richard Golodner (Nov 19)
      • Re: How to become a Computer Security Professional ? rchrafe (Nov 20)
      • Message not available
      • Re: so gay huh? rchrafe (Nov 20)
      • Message not available
      • Re: so gay huh? rchrafe (Nov 20)
      • Re: How to become a Computer Security Professional ? XSS Worm XSS Security Information Portal (Nov 19)
      • Re: How to become a Computer Security Professional ? rchrafe (Nov 20)
    • Re: How to become a Computer Security Professional ? rchrafe (Nov 20)
• rPSA-2007-0241-1 samba samba-swat rPath Update Announcements (Nov 17)
• Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability dev code (Nov 17)
  • <Possible follow-ups>
  • Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability Juha-Matti Laurio (Nov 18)
    • Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability jf (Nov 18)
• [ MDKSA-2007:222 ] - Updated koffice packages fix vulnerabilities security (Nov 17)
• [ MDKSA-2007:223 ] - Updated pdftohtml packages fix vulnerabilities security (Nov 17)
• [ MDKSA-2007:224 ] - Updated samba packages fix vulnerabilities security (Nov 17)
• [ GLSA 200711-21 ] Bochs: Multiple vulnerabilities Pierre-Yves Rofes (Nov 17)
• Vulnerability Hash Database - Maillist Sowhat (Nov 18)
• When will Matasano stop the retarded commentary? Gobbles is back (Nov 18)
• [SECURITY] [DSA 1407-1] New cupsys packages fix arbitrary code execution Moritz Muehlenhoff (Nov 18)
• Bluetooth Security; Bluetooth Penetration Testing Framework Odley Mike (Nov 18)
  • Re: Bluetooth Security; Bluetooth Penetration Testing Framework crazy frog crazy frog (Nov 18)
• Crash in LIVE555 Media Server 2007.11.01 Luigi Auriemma (Nov 18)
• [ GLSA 200711-22 ] Poppler, KDE: User-assisted execution of arbitrary code Pierre-Yves Rofes (Nov 18)
• [ GLSA 200711-23 ] VMware Workstation and Player: Multiple vulnerabilities Pierre-Yves Rofes (Nov 18)
• [ GLSA 200711-24 ] Mozilla Thunderbird: Multiple vulnerabilities Pierre-Yves Rofes (Nov 18)
• Certificate spoofing issue with Mozilla, Konqueror, Safari 2 Nils Toedtmann (Nov 18)
• [ GLSA 200711-25 ] MySQL: Denial of Service Pierre-Yves Rofes (Nov 18)
• [ GLSA 200711-26 ] teTeX: Multiple vulnerabilities Pierre-Yves Rofes (Nov 18)
• [ GLSA 200711-27 ] Link Grammar: User-assisted execution of arbitrary code Pierre-Yves Rofes (Nov 18)
• [ MDKSA-2007:225 ] - Updated net-snmp packages fix remote denial of service vulnerability security (Nov 19)
• Wordpress Cookie Authentication Vulnerability Steven J. Murdoch (Nov 19)
  • Re: Wordpress Cookie Authentication Vulnerability XSS Worm XSS Security Information Portal (Nov 20)
    • Re: Wordpress Cookie Authentication Vulnerability Steven Murdoch (Nov 20)
  • Re: Wordpress Cookie Authentication Vulnerability Stefan Esser (Nov 20)
    • Re: Wordpress Cookie Authentication Vulnerability Steven J. Murdoch (Nov 20)
  • <Possible follow-ups>
  • Re: Wordpress Cookie Authentication Vulnerability Juha-Matti Laurio (Nov 20)
    • Re: Wordpress Cookie Authentication Vulnerability Steven Adair (Nov 20)
      • Re: Wordpress Cookie Authentication Vulnerability James Matthews (Nov 20)
      • Re: Wordpress Cookie Authentication Vulnerability Eduardo Tongson (Nov 20)
      • Re: Wordpress Cookie Authentication Vulnerability Valdis . Kletnieks (Nov 21)
      • Re: Wordpress Cookie Authentication Vulnerability Paul Schmehl (Nov 21)
      • Re: Wordpress Cookie Authentication Vulnerability Adrian P (Nov 21)
  • Re: Wordpress Cookie Authentication Vulnerability Juha-Matti Laurio (Nov 22)
• [ GLSA 200711-28 ] Perl: Buffer overflow Pierre-Yves Rofes (Nov 19)
• [ MDKSA-2007:226 ] - Updated kernel packages fix multiple vulnerabilities and bugs security (Nov 19)
• H2HC Materials Rodrigo Rubira Branco (BSDaemon) (Nov 19)
• rPSA-2007-0242-1 php5 php5-cgi php5-mysql php5-pear php5-pgsql php5-soap php5-xsl rPath Update Announcements (Nov 19)
• Multiple stack-based buffer overflows in dxmsft.dll Elazar Broad (Nov 19)
  • Knowing you're Secure! rchrafe (Nov 22)
  • <Possible follow-ups>
  • Re: Multiple stack-based buffer overflows in dxmsft.dll Elazar Broad (Nov 20)
• [ MDKSA-2007:227 ] - Updated poppler packages fix vulnerabilities security (Nov 20)
• [ MDKSA-2007:228 ] - Updated cups packages fix vulnerabilities security (Nov 20)
• Tha Manual. rchrafe (Nov 20)
• The Call to Reason rchrafe (Nov 20)
• Large Scale MySpace Phishing Attack Dancho Danchev (Nov 20)
• RIPA powers being used James Rankin (Nov 20)
  • Re: RIPA powers being used Morning Wood (Nov 21)
    • Re: RIPA powers being used North, Quinn (Nov 21)
    • Re: RIPA powers being used reepex (Nov 22)
• major security breach in united kingdom worried security (Nov 20)
• Wordpress 0day: Hacking into computers now easier than previously believed - Heise Security XSS Worm XSS Security Information Portal (Nov 20)
• [ GLSA 200711-29 ] Samba: Execution of arbitrary code Pierre-Yves Rofes (Nov 20)
• [ GLSA 200711-30 ] PCRE: Multiple vulnerabilities Pierre-Yves Rofes (Nov 20)
• [ GLSA 200711-31 ] Net-SNMP: Denial of Service Pierre-Yves Rofes (Nov 20)
• [ GLSA 200711-32 ] Feynmf: Insecure temporary file creation Pierre-Yves Rofes (Nov 20)
• Websense security contact? The Security Community (Nov 20)
  • Re: Websense security contact? Ronald MacDonald (Nov 20)
  • Websense security contact? Hubbard, Dan (Nov 21)
  • <Possible follow-ups>
  • Re: Websense security contact? Juha-Matti Laurio (Nov 20)
• [ MDKSA-2007:229 ] - Updated phpMyAdmin packages fix multiple vulnerabilities security (Nov 20)
• [ MDKSA-2007:230 ] - Updated tetex packages fix vulnerabilities security (Nov 21)
• Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] XSS Worm XSS Security Information Portal (Nov 21)
  • Re: Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] Paul Schmehl (Nov 21)
    • Re: Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] Gadi Evron (Nov 21)
• rPSA-2007-0243-1 flac rPath Update Announcements (Nov 21)
• rPSA-2007-0245-1 kernel rPath Update Announcements (Nov 21)
• rPSA-2007-0245-2 kernel rPath Update Announcements (Nov 21)
• Barbut Simon Smith (Nov 21)
  • Re: Barbut Valdis . Kletnieks (Nov 21)
    • Re: Barbut Simon Smith (Nov 21)
      • Re: Barbut Ben van Staveren (Nov 22)
      • Re: Barbut Aleksandar Nikolic (Nov 22)
• [SECURITY] [DSA 1408-1] New kdegraphics packages fix arbitrary code execution Moritz Muehlenhoff (Nov 21)
• [ MDKSA-2007:224-1 ] - Updated samba packages fix vulnerabilities security (Nov 22)
• [Argeniss] Data0: Next generation malware for stealing databases (Paper) Cesar (Nov 22)
  • Re: [Argeniss] Data0: Next generation malware for stealing databases (Paper) reepex (Nov 24)
• Aurigma ImageUploader 4.1 Multiple stack overflows Elazar Broad (Nov 22)
• [ MDKSA-2007:231 ] - Updated cacti packages fix SQL injection vulnerability security (Nov 22)
• [SECURITY] [DSA 1409-1] New samba packages fix several vulnerabilities Steve Kemp (Nov 22)
• Using CSRF to Attack Mobile Phones avivra (Nov 22)
• Google Sacure V2.0 -- Sacure Corporation whupass (Nov 23)
• [ MDKSA-2007:224-2 ] - Updated samba packages fix vulnerabilities security (Nov 23)
• [SECURITY] [DSA 1410-1] New ruby1.8 packages fix insecure SSL certificate validation Moritz Muehlenhoff (Nov 25)
• [SECURITY] [DSA 1412-1] New ruby1.9 packages fix insecure SSL certificate validation Moritz Muehlenhoff (Nov 25)
• [SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation Moritz Muehlenhoff (Nov 25)
• Re: Aurigma ImageUploader 4.1 Multiple stack overflows Elazar Broad (Nov 25)
• PHP 5.2.4 mail.force_extra_parameters unsecure Maksymilian Arciemowicz (Nov 25)
• [ GLSA 200711-33 ] nss_ldap: Information disclosure Pierre-Yves Rofes (Nov 25)
• [ GLSA 200711-34 ] CSTeX: Multiple vulnerabilities Pierre-Yves Rofes (Nov 25)
• XSS with UTF-7 in yahoo.com HASEGAWA Yosuke (Nov 26)
• False advertisting and possible click fraud about n3td3v worried security (Nov 26)
  • <Possible follow-ups>
  • False advertisting and possible click fraud about n3td3v blackhat4lyf3 blackhat4lyf3 (Nov 26)
• RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows Elazar Broad (Nov 26)
  • <Possible follow-ups>
  • Re: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows Elazar Broad (Nov 26)
• RichFX nprfxins.dll ActiveX Control Multiple Stack Overflows Elazar Broad (Nov 26)
• two bytehoard bugs Ernesto Alvarez (Nov 26)
• [SECURITY] [DSA 1409-2] New samba packages fix several vulnerabilities Steve Kemp (Nov 26)
• oh oh 0 day - MyTV/x Version 3.6.6 & 4.0.8 for MyTV.PVR allows local authentication bypass and root access on Apple Mac OS X David Wharton (Nov 26)
  • Re: oh oh 0 day - MyTV/x Version 3.6.6 & 4.0.8 for MyTV.PVR allows local authentication bypass and root access on Apple Mac OS X Kevin Finisterre (lists) (Nov 26)
• Eee PC Security Danny (Nov 26)
  • Re: Eee PC Security Matthew Hall (Nov 27)
    • Re: Eee PC Security Michael Holstein (Nov 27)
• To Hell With Georgia georgepburdell (Nov 26)
• [SECURITY] [DSA 1413-1] New mysql packages fix multiple vulnerabilities Noah Meyerhans (Nov 26)
• unsubscribe LT (Nov 26)
• UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows Elazar Broad (Nov 26)
  • Re: UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows James Matthews (Nov 27)
  • <Possible follow-ups>
  • Re: UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows Elazar Broad (Nov 27)
• ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability zdi-disclosures (Nov 26)
  • Re: ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Expos cocoruder . (Nov 28)
• [USN-545-1] link-grammar vulnerability Kees Cook (Nov 27)
• [USN-546-1] Firefox vulnerabilities Kees Cook (Nov 27)
• [USN-547-1] PCRE vulnerabilities Kees Cook (Nov 27)
• [SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities Moritz Muehlenhoff (Nov 27)
• Creating Backdoors in Cisco IOS using Tcl IRM Research (Nov 27)
  • Re: Creating Backdoors in Cisco IOS using Tcl Nicolas FISCHBACH (Nov 27)
• Announce: RFIDIOt release RFIDIOt-0.1r, November 2007 Adam Laurie (Nov 27)
• Trent Lott Ned Bender (Nov 27)
• CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor Core Security Technologies Advisories (Nov 27)
• Re: UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows Joey Mengele (Nov 27)
  • <Possible follow-ups>
  • Re: UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows Joey Mengele (Nov 27)
• [SECURITY] [DSA 1416-1] New tk8.3 packages fix arbitrary code execution Moritz Muehlenhoff (Nov 27)
• [SECURITY] [DSA 1415-1] New tk8.4 packages fix arbitrary code execution Moritz Muehlenhoff (Nov 27)
• Security Contact @ Avast! Sowhat (Nov 28)
  • Re: Security Contact @ Avast! Thierry Zoller (Nov 29)
• Microsoft FTP Client Multiple Bufferoverflow Vulnerability Rajesh Sethumadhavan (Nov 28)
  • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability KJK::Hyperion (Nov 28)
    • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Tonnerre Lombard (Nov 28)
      • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability KJK::Hyperion (Nov 28)
      • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Tonnerre Lombard (Nov 28)
      • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability KJK::Hyperion (Nov 29)
    • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Valdis . Kletnieks (Nov 28)
  • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability reepex (Nov 28)
    • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability dev code (Nov 28)
      • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Stan Bubrouski (Nov 28)
      • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Peter Dawson (Nov 28)
      • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability reepex (Nov 28)
• Secunia Research: Symantec Backup Exec Job Engine Denial of Service Secunia Research (Nov 28)
• [ MDKSA-2007:232 ] - Updated kernel packages fix multiple vulnerabilities and bugs security (Nov 28)
• [ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities security (Nov 28)
  • <Possible follow-ups>
  • [ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities security (Nov 28)
• Re: Full-Disclosure Digest, Vol 33, Issue 52 admin (Nov 29)
• [USN-548-1] Pidgin vulnerability Kees Cook (Nov 29)
• rPSA-2007-0252-1 cups poppler tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi rPath Update Announcements (Nov 29)
• Re: Microsoft FTP Client Multiple Daniel H. Renner (Nov 29)
  • Re: Microsoft FTP Client Multiple Valdis . Kletnieks (Nov 29)
    • Re: Microsoft FTP Client Multiple Dude VanWinkle (Nov 29)
      • Re: Microsoft FTP Client Multiple Daniel H. Renner (Nov 29)
    • Re: Microsoft FTP Client Multiple Peter Besenbruch (Nov 30)
• IRM025: TIBCO Rendezvous RVD Daemon Remote Memory Leak DoS IRM Research (Nov 29)
• [SECURITY] [DSA 1409-3] New samba packages fix several vulnerabilities Steve Kemp (Nov 29)
• ERRATA: [ GLSA 200711-20 ] Pioneers: Multiple Denials of Service Pierre-Yves Rofes (Nov 29)
• [USN-549-1] PHP vulnerabilities Kees Cook (Nov 29)
• AST-2007-025 - SQL Injection issue in res_config_pgsql Asterisk Security Team (Nov 29)
  • <Possible follow-ups>
  • AST-2007-025 - SQL Injection issue in res_config_pgsql Asterisk Security Team (Nov 30)
• AST-2007-026 - SQL Injection issue in cdr_pgsql Asterisk Security Team (Nov 29)
  • <Possible follow-ups>
  • AST-2007-026 - SQL Injection issue in cdr_pgsql Asterisk Security Team (Nov 30)
• [ MDKSA-2007:224-3 ] - Updated samba packages fix regressions security (Nov 30)
• Yahoo Toolbar Helper c() Method Stack Overflow DoS Elazar Broad (Nov 30)
• Matasano watchdog blog opening shortly .. Gobbles is back (Nov 30)
• rPSA-2007-0254-1 idle python rPath Update Announcements (Nov 30)
• Re: Yahoo Toolbar Helper c() Method Stack Overflow DoS Joey Mengele (Nov 30)
• High Value Target Selection gmaggro (Nov 30)
  • Re: High Value Target Selection Peter Besenbruch (Dec 01)
  • Re: High Value Target Selection coderman (Dec 01)
• PlayStation 3 predicts next US president (fwd) Jay Sulzberger (Nov 30)
• 27Mhz based wireless security insecurities - Aka - "We know what you typed last summer" Max Moser (Nov 30)

Previous period

Next period