Full-Disclosure
By Thread

851 messages sorted by: [ author ] [ date ] [ subject ] [ attachment ]

---

Starting: 12/01/04
Ending: 12/31/04

• Re: [Full-Disclosure] Multiple Backdoors found in eEye Products (IRISand SecureIIS) gp (12/30/04)
• [Full-Disclosure] Windows (XP SP2): Remotely Code Execution with Parameters (Updated) ShredderSub7 (12/30/04)
• Bluetooth: BlueSnarf and BlueBug Full Disclusore Adam Laurie (12/31/04)
• [Full-Disclosure] Information System Security Assessment Framework (ISSAF) Draft 0.1 admoore_at_phreaker.net (12/30/04)
• [Full-Disclosure] Microsoft Data Access Dav1.1 PoC CorryL (12/31/04)
• [Full-Disclosure] MySQL and the user "su" Sascha Wolf (12/30/04)
• [Full-Disclosure] Multiple Backdoors found in eEye Products (IRISand SecureIIS) Shunryu Suzuki (12/30/04)
  • RE: [Full-Disclosure] Multiple Backdoors found in eEye Products (IRISand SecureIIS) Marc Maiffret (12/30/04)
    • RE: [Full-Disclosure] Multiple Backdoors found in eEye Products (IRISand SecureI Lance Gusto (12/30/04)
  • RE: [Full-Disclosure] Multiple Backdoors found in eEye Products (IRISand SecureIIS) Marc Maiffret (12/30/04)
• [Full-Disclosure] [ GLSA 200412-27 ] PHProjekt: Remote code execution vulnerability Thierry Carrez (12/30/04)
• [Full-Disclosure] MDKSA-2004:160 - Updated kdelibs packages fix konqueror email vulnerability Mandrake Linux Security Team (12/30/04)
• [Full-Disclosure] MDKSA-2004:165 - Updated koffice packages fix multiple vulnerabilities Mandrake Linux Security Team (12/30/04)
• [Full-Disclosure] MDKSA-2004:163 - Updated kdegraphics packages fix buffer overflow vulnerability Mandrake Linux Security Team (12/30/04)
• [Full-Disclosure] MDKSA-2004:161 - Updated xpdf packages fix buffer overflow vulnerability Mandrake Linux Security Team (12/30/04)
• [Full-Disclosure] MDKSA-2004:166 - Updated tetex packages fix multiple vulnerabilities Mandrake Linux Security Team (12/30/04)
• Re: [Full-Disclosure] Multiple Backdoors found in eEye Products (IRIS and Secure Lance Gusto (12/29/04)
• [Full-Disclosure] MDKSA-2004:162 - Updated gpdf packages fix buffer overflow vulnerability Mandrake Linux Security Team (12/30/04)
• [Full-Disclosure] Trivial Bug in Symantec Security Products J. Oquendo (12/29/04)
• [Full-Disclosure] /bin/rm file access vulnerability Lennart Hansen (12/30/04)
  • Re: [Full-Disclosure] /bin/rm file access vulnerability Sean Harlow (12/30/04)
    • Re: [Full-Disclosure] /bin/rm file access vulnerability James Longstreet (12/31/04)
    • Re: [Full-Disclosure] /bin/rm file access vulnerability bkfsec (12/31/04)
  • Re: [Full-Disclosure] /bin/rm file access vulnerability Raymond Morsman (12/30/04)
• [ GLSA 200412-24 ] Xpdf, GPdf: New integer overflows Thierry Carrez (12/28/04)
• [ GLSA 200412-26 ] ViewCVS: Information leak and XSS vulnerabilities Thierry Carrez (12/28/04)
• [ GLSA 200412-25 ] CUPS: Multiple vulnerabilities Thierry Carrez (12/28/04)
• [Full-Disclosure] Heap overflow in Mozilla Browser <= 1.7.3 NNTP code. Maurycy Prodeus (12/29/04)
• [Full-Disclosure] Again: zone transfers, a spammer's dream? Ralf Glauberman (12/29/04)
  • Re: [Full-Disclosure] Again: zone transfers, a spammer's dream? Jorrit Kronjee (12/29/04)
  • Re: [Full-Disclosure] Again: zone transfers, a spammer's dream? xyberpix (12/30/04)
• [Full-Disclosure] Microsoft Windows LoadImage API Integer buffer overflow patch. Artur Byszko (12/29/04)
• [Full-Disclosure] Multiple Backdoors found in eEye Products (IRIS and SecureIIS) Lance Gusto (12/29/04)
  • Re: [Full-Disclosure] Multiple Backdoors found in eEye Products (IRIS and SecureIIS) Daniel H. Renner (12/31/04)
• [Full-Disclosure] QNX crrtrap arbitrary file read/write vulnerability [RLSA_06-2004] Julio Cesar Fort (12/29/04)
• [Full-Disclosure] Isecom, osstm related: CRG was busted yesterday your_momma_at_hushmail.com (12/28/04)
• [Full-Disclosure] Netcat v1.11 , fixed release by VulnWatch, get it! class 101 (12/28/04)
• [Full-Disclosure] Re: Windows (XP SP2) Remote code execution with parameters ShredderSub7 (12/29/04)
• [Full-Disclosure] The Security Forum - meeting #7 -16/1/05 Gadi Evron (12/28/04)
• [Full-Disclosure] unexplained crashes of named Przemyslaw Frasunek (12/28/04)
• [Full-Disclosure] Java Runtime Environment Remote Denial-of-Service (DoS) Vulnerability Marc Schoenefeld (12/22/04)
• [Full-Disclosure] [ GLSA 200412-25 ] CUPS: Multiple vulnerabilities Thierry Carrez (12/28/04)
• [Full-Disclosure] [ GLSA 200412-26 ] ViewCVS: Information leak and XSS vulnerabilities Thierry Carrez (12/28/04)
• Re: [Full-Disclosure] Windows (XP SP2) Remote code executionwithparameters morning_wood (12/28/04)
• [Full-Disclosure] Netsys Mailman Probes due to Illegal Attachments James Tucker (12/28/04)
• [Full-Disclosure] And you're proud of this Mike Evanchick? Elle Chicka (12/28/04)
  • RE: [Full-Disclosure] And you're proud of this Mike Evanchick? Todd Towles (12/29/04)
    • Re: [Full-Disclosure] And you're proud of this Mike Evanchick? Michael Evanchik (12/30/04)
  • RE: [Full-Disclosure] And you're proud of this Mike Evanchick? Esler, Joel - Contractor (12/29/04)
  • RE: [Full-Disclosure] And you're proud of this Mike Evanchick? Todd Towles (12/29/04)
    • Re: [Full-Disclosure] And you're proud of this Mike Evanchick? Ill will (12/29/04)
  • Re: [Full-Disclosure] And you're proud of this Mike Evanchick? Byron L. Sonne (12/30/04)
  • RE: [Full-Disclosure] And you're proud of this Mike Evanchick? Todd Towles (12/30/04)
• [Full-Disclosure] Suggested filters against PHP Attacking Worms Paul Laudanski (12/28/04)
• [Full-Disclosure] more: Isecom, osstm related: CRG was busted yesterday your_momma_at_hushmail.com (12/28/04)
  • Re: [Full-Disclosure] more: Isecom, osstm related: CRG was busted yesterday Crg (12/30/04)
• [Full-Disclosure] Remote code execution with parameters without user interaction, even with XP SP2 ShredderSub7 SecExpert (12/28/04)
• [Full-Disclosure] MDKSA-2004:158 - Updated samba packages fix integer overflow vulnerabilities Mandrake Linux Security Team (12/28/04)
• [Full-Disclosure] Windows (XP SP2) Remote code execution with parameters ShredderSub7 SecExpert (12/28/04)
• [Full-Disclosure] IE sp2 and Mozilla Firefox DoS. bipin gautam (12/27/04)
• [Full-Disclosure] (no subject) class 101 (12/26/04)
• [Full-Disclosure] BUG FIX Remote compromise of Internet Explorer Service Pack 2 XP SP2 Michael Evanchik (12/27/04)
• [Full-Disclosure] Re: Fwd: Re: [USN-52-1] vim vulnerability Ciaran McCreesh (12/26/04)
• [Full-Disclosure] Santy.b worm using AOL and YAHOO Stephen Jimson (12/25/04)
• [Full-Disclosure] IE sp2 and Mozilla Firefox DoS. bipin gautam (12/27/04)
  • RE: [Full-Disclosure] IE sp2 and Mozilla Firefox DoS. bipin gautam (12/28/04)
  • Re: [Full-Disclosure] IE sp2 and Mozilla Firefox DoS. morning_wood (12/28/04)
• [Full-Disclosure] Jami L Blume/BOARD/FRS is out of the office. (fwd) J.A. Terranson (12/25/04)
  • Re: [Full-Disclosure] Jami L Blume/BOARD/FRS is out of the office. (fwd) John Cartwright (12/26/04)
• [Full-Disclosure] AOL website redirection scripts allow for abuse Michel Blomgren (12/26/04)
  • Re: [Full-Disclosure] AOL website redirection scripts allow for abuse morning_wood (12/28/04)
• RE: [Full-Disclosure] YEY AGAIN Automatic remote compromiseofInternetExplorer Service Pack 2 XP SP2 Ron Jackson (12/26/04)
  • RE: [Full-Disclosure] YEY AGAIN Automatic remotecompromiseofInternetExplorer Service Pack 2 XP SP2 Michael Evanchik (12/27/04)
• [Full-Disclosure] [HAT-SQUAD] NetCat Remote Critical Vulnerability, Poc inside. class 101 (12/26/04)
• [Full-Disclosure] Multiple vulnerabilities in AOL and AOL affiliate web sites Michel Blomgren (12/26/04)
• [Full-Disclosure] Any study on patch availability? sudhakar+fulldisclosure_at_CS.Princeton.EDU (12/26/04)
• RE: [spam] RE: [inbox] Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- Exibar (12/26/04)
• Re: [Full-Disclosure] Suspect phpBB users GuidoZ (12/26/04)
  • Re: [Full-Disclosure] Suspect phpBB users GuidoZ (12/27/04)
• [Full-Disclosure] New Santy-Worm attacks *all* PHP-skripts Juergen Schmidt (12/25/04)
• new phpBB worm affects 2.0.11 Herman Sheremetyev (12/24/04)
• New Santy-Worm attacks *all* PHP-skripts Juergen Schmidt (12/25/04)
  • [Full-Disclosure] Re: New Santy-Worm attacks *all* PHP-skripts Paul Laudanski (12/25/04)
    • Re: [Full-Disclosure] Re: New Santy-Worm attacks *all* PHP-skripts Raistlin (12/26/04)
      • Re: [Full-Disclosure] Re: New Santy-Worm attacks *all* PHP-skripts Paul Laudanski (12/26/04)
    • Re: [Full-Disclosure] Re: New Santy-Worm attacks *all* PHP-skripts Steve Wray (12/26/04)
    • [Full-Disclosure] Re: New Santy-Worm attacks *all* PHP-skripts Paul Laudanski (12/26/04)
• [Full-Disclosure] DJB's contest (repost after being moderated on BGTQ) support_at_sabre-security.com (12/25/04)
• [Full-Disclosure] iotrace 1.3, an userspace read()/write() logger daemon for linux, osf1, openbsd, freebsd michele dallachiesa (12/25/04)
• [Full-Disclosure] new phpBB worm affects 2.0.11 Herman Sheremetyev (12/24/04)
  • Re: [Full-Disclosure] new phpBB worm affects 2.0.11 ^^MAg^^ (12/25/04)
  • Re: [Full-Disclosure] new phpBB worm affects 2.0.11 Andrew Farmer (12/27/04)
  • Re: [Full-Disclosure] new phpBB worm affects 2.0.11 Andrew Farmer (12/27/04)
  • [Full-Disclosure] Re: new phpBB worm affects 2.0.11 Adam (12/25/04)
    • Re: [Full-Disclosure] Re: new phpBB worm affects 2.0.11 Paul Laudanski (12/29/04)
• [Full-Disclosure] YET AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2 Michael Evanchik (12/25/04)
  • Re: [Full-Disclosure] YET AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2 Berend-Jan Wever (12/25/04)
    • Re: [Full-Disclosure] YET AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2 Andrew Smith (12/26/04)
• [Full-Disclosure] Microsoft Internet Explorer Full Remote Compromise w/o User Intervention tuytumadre_at_att.net (12/24/04)
• [Full-Disclosure] Re: Re: Microsoft Windows LoadImage API Integer Buffer overflow flashsky (12/25/04)
  • [Full-Disclosure] Re: Microsoft Windows LoadImage API IntegerBuffer overflow Berend-Jan Wever (12/25/04)
  • Re: Microsoft Windows LoadImage API IntegerBuffer overflow Berend-Jan Wever (12/25/04)
  • Re: [Full-Disclosure] Re: Re: Microsoft Windows LoadImage API Integer Buffer overflow Valdis.Kletnieks_at_vt.edu (12/26/04)
• [Full-Disclosure] Microsoft Internet Explorer Full Remote Compromise w/o User Intervention tuytumadre_at_att.net (12/24/04)
  • RE: [Full-Disclosure] Microsoft Internet Explorer Full RemoteCompromise w/o User Intervention Alerta RedSegura (12/26/04)
• [Full-Disclosure] XSS in yacy 0.31 Donato Ferrante (12/24/04)
• [Full-Disclosure] New IE / Windoze Zero-Day? aiwadaiwa_at_hushmail.com (12/24/04)
• [Full-Disclosure] YEY AGAIN Automatic remote compromise of Internet Explorer Service Pack 2 XP SP2 Michael Evanchik (12/24/04)
  • RE: [Full-Disclosure] YEY AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2 Aviv Raff (12/25/04)
  • Re: [Full-Disclosure] YEY AGAIN Automatic remote compromise of InternetExplorer Service Pack 2 XP SP2 morning_wood (12/25/04)
    • RE: [Full-Disclosure] YEY AGAIN Automatic remote compromise ofInternetExplorer Service Pack 2 XP SP2 Michael Evanchik (12/26/04)
      • RE: [Full-Disclosure] YEY AGAIN Automatic remote compromise ofInternetExplorer Service Pack 2 XP SP2 Michael Evanchik (12/27/04)
• [Full-Disclosure] [ GLSA 200412-21 ] MPlayer: Multiple overflows Thierry Carrez (12/20/04)
• XSS in yacy 0.31 Donato Ferrante (12/24/04)
• [Full-Disclosure] [ADVISORY] Scripting Vulnerabilities in Indian Email Providers Put Millions At Risk S G Masood (12/23/04)
• [Full-Disclosure] Finnish perlament !?!?! Leeuwen, Allan van (12/24/04)
  • RE: [Full-Disclosure] Finnish perlament !?!?! ALD, Aditya, Aditya Lalit Deshmukh (12/25/04)
    • Re: [Full-Disclosure] Finnish perlament !?!?! Kero-Chan (12/26/04)
  • RE: [Full-Disclosure] Finnish perlament !?!?! Todd Towles (12/27/04)
• [Full-Disclosure] [USN-49-1] debmake vulnerability Martin Pitt (12/23/04)
• [Full-Disclosure] [USN-47-1] Linux kernel vulnerabilities Martin Pitt (12/23/04)
• [Full-Disclosure] Joyous Holiday Hacking Gregory Gilliss (12/24/04)
  • Re: [Full-Disclosure] Joyous Holiday Hacking Stef (12/24/04)
• [Full-Disclosure] [USN-50-1] CUPS vulnerabilities Martin Pitt (12/23/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability idlabs-advisories_at_idefense.com (12/21/04)
• [Full-Disclosure] [USN-48-1] xpdf, tetex-bin vulnerabilities Martin Pitt (12/23/04)
• [Full-Disclosure] [USN-52-1] vim vulnerability Martin Pitt (12/23/04)
• [Full-Disclosure] [USN-51-1] teTeX auxiliary script vulnerability Martin Pitt (12/23/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability idlabs-advisories_at_idefense.com (12/21/04)
• [Full-Disclosure] ICT Security in the Finnish Parliament Mustajärvi Olli (12/23/04)
• [Full-Disclosure] Insecurity in Finnish parlament (computers) Mustajärvi Olli (12/23/04)
  • Re: [Full-Disclosure] Insecurity in Finnish parlament (computers) Markus Jansson (12/26/04)
    • Re: [Full-Disclosure] Insecurity in Finnish parlament (computers) James Tucker (12/27/04)
  • Re: [Full-Disclosure] Insecurity in Finnish parlament (computers) Markus Jansson (12/27/04)
    • Re: [Full-Disclosure] Insecurity in Finnish parlament (computers) James Tucker (12/27/04)
• [Full-Disclosure] Final Call for Papers & Workshops - BCS Asia 2005 Anthony.zboralski (12/24/04)
• [Full-Disclosure] Insecurity in Finnish parlament (computers) Mustajärvi Olli (12/23/04)
• [Full-Disclosure] Cross-Site Scripting - an industry-wide problem mikx (12/23/04)
  • Re: [Full-Disclosure] Cross-Site Scripting - an industry-wide problem morning_wood (12/24/04)
    • Re: [Full-Disclosure] Cross-Site Scripting - an industry-wide problem Berend-Jan Wever (12/24/04)
• [Full-Disclosure] STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard SSR Team (12/24/04)
• [Full-Disclosure] Internet Explorer FTP client can be used to send mail Ian Gulliver (12/24/04)
  • Re: [Full-Disclosure] Internet Explorer FTP client can be used to send mail Ian Gulliver (12/24/04)
    • RE: [Full-Disclosure] Internet Explorer FTP client can be used to send mail Aviv Raff (12/25/04)
      • Re: [Full-Disclosure] Internet Explorer FTP client can be used to send mail Ian Gulliver (12/25/04)
• [Full-Disclosure] Insecurity in Finnish parlament (computers) Mustajärvi Olli (12/23/04)
• [Full-Disclosure] Insecurity in Finnish parlament (computers) Mustajärvi Olli (12/23/04)
  • Re: [Full-Disclosure] Insecurity in Finnish parlament (computers) Peter Besenbruch (12/24/04)
  • Re: [Full-Disclosure] Insecurity in Finnish parlament (computers) Alex V. Lukyanenko (12/24/04)
• [Full-Disclosure] Plesk 7 Cross-Site Scripting Andrew Smith (12/23/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.21.04: libtiff Directory Entry Count Integer Overflow Vulnerability idlabs-advisories_at_idefense.com (12/21/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.21.04: Hewlett Packard HP-UX ftpd Remote Buffer Overflow Vulnerability idlabs-advisories_at_idefense.com (12/21/04)
• [Full-Disclosure] WPkontakt message parsing error Jaroslaw Sajko (12/23/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability idlabs-advisories_at_idefense.com (12/21/04)
• [Full-Disclosure] change email PBSoft Computer Labs (Peter) (12/23/04)
  • Re: [Full-Disclosure] change email GuidoZ (12/28/04)
• [Full-Disclosure] RE: Worm hitting PHPbb2 Forums Mattias R. Lindgren (12/23/04)
• [Full-Disclosure] [OpenPKG-SA-2004.055] OpenPKG Security Advisory (gettext) OpenPKG (12/23/04)
• [USN-50-1] CUPS vulnerabilities Martin Pitt (12/23/04)
• WPkontakt message parsing error Jaroslaw Sajko (12/23/04)
• [USN-52-1] vim vulnerability Martin Pitt (12/23/04)
  • [Full-Disclosure] Re: [USN-52-1] vim vulnerability Liu Die Yu (12/24/04)
  • Re: [USN-52-1] vim vulnerability Liu Die Yu (12/24/04)
• [USN-51-1] teTeX auxiliary script vulnerability Martin Pitt (12/23/04)
• [USN-49-1] debmake vulnerability Martin Pitt (12/23/04)
• [USN-48-1] xpdf, tetex-bin vulnerabilities Martin Pitt (12/23/04)
• [USN-47-1] Linux kernel vulnerabilities Martin Pitt (12/23/04)
• [Full-Disclosure] MDKSA-2004:151 - Updated php packages fix multiple vulnerabilities Mandrake Linux Security Team (12/18/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.16.04: MPlayer Bitmap Parsing Remote Heap Overflow Vulnerability idlabs-advisories_at_idefense.com (12/16/04)
• [Full-Disclosure] Script Injection in Google Groups Beta n3td3v (12/17/04)
  • [Full-Disclosure] Re: Script Injection in Google Groups Beta n3td3v (12/17/04)
    • [Full-Disclosure] Re: Script Injection in Google Groups Beta n3td3v (12/17/04)
• [Full-Disclosure] NetBSD Security Advisory 2004-010: Insufficient argument validation in compat code NetBSD Security-Officer (12/17/04)
• [Full-Disclosure] [ GLSA 200412-13 ] Samba: Integer overflow Sune Kloppenborg Jeppesen (12/17/04)
• [Full-Disclosure] MDKSA-2004:154 - Updated kdelibs packages fix multiple vulnerability Mandrake Linux Security Team (12/22/04)
• [Full-Disclosure] SUSE Security Announcement: kernel local privilege escalation (SUSE-SA:2004:046) Marcus Meissner (12/22/04)
• [Full-Disclosure] Objet :Full-Disclosure Digestq_Vol_1=2C_Issue_2120_=28De_retour_le_mardi_28_d=E9cembr?= e.) Christophe Savin (12/22/04)
• [ GLSA 200412-23 ] Zwiki: XSS vulnerability Luke Macken (12/22/04)
• [Full-Disclosure] MDKSA-2004:155 - Updated logcheck packages fix temporary file vulnerability Mandrake Linux Security Team (12/22/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.16.04: Veritas Backup Exec Agent Browser Registration Request Buffer Overflow Vulnerability idlabs-advisories_at_idefense.com (12/16/04)
  • RE: [Full-Disclosure] iDEFENSE Security Advisory 12.16.04: VeritasBackup Exec AgentBrowser Registration Request Buffer Overflow Vulnerability Geo. (12/23/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.16.04: MPlayer MMST Streaming Stack Overflow Vulnerability idlabs-advisories_at_idefense.com (12/16/04)
• [Full-Disclosure] Objet :Full-Disclosure Digestq_Vol_1=2C_Issue_2110_=28De_retour_le_mardi_28_d=E9cembr?= e.) Christophe Savin (12/22/04)
• Java Runtime Environment Remote Denial-of-Service (DoS) Vulnerability Marc Schoenefeld (12/22/04)
• [Full-Disclosure] Re: [caudium-devel] [SECUNIA] Regarding Secunia Advisory SA13040 Xavier Beaudouin (12/22/04)
• [Full-Disclosure] MDKSA-2004:157 - Updated mplayer packages fix multiple vulnerabilities Mandrake Linux Security Team (12/22/04)
• [Full-Disclosure] Shoe 1.0 - Remote Lace Overflow announce_at_0x90.org (12/22/04)
  • RE: [Full-Disclosure] Shoe 1.0 - Remote Lace Overflow Todd Towles (12/23/04)
  • Re: [Full-Disclosure] Shoe 1.0 - Remote Lace Overflow Alex V. Lukyanenko (12/24/04)
  • Re: [Full-Disclosure] Shoe 1.0 - Remote Lace Overflow Thomas Sutpen (12/26/04)
    • Re: [Full-Disclosure] Shoe 1.0 - Remote Lace Overflow Nancy Kramer (12/27/04)
• [Full-Disclosure] MDKSA-2004:156 - Updated krb5 packages fix buffer overflow vulnerability Mandrake Linux Security Team (12/22/04)
• [Full-Disclosure] [USN-40-1] PHP vulnerabilities Martin Pitt (12/16/04)
• [Full-Disclosure] Lavasoft Ad-Watch SE fails to detect registry deletion Micheal Espinola Jr (12/22/04)
• [Full-Disclosure] SUSE Security Announcement: samba (SUSE-SA:2004:045) Sebastian Krahmer (12/22/04)
• [Full-Disclosure] Delay of netsys ? Matteo Giannone (12/22/04)
• [Full-Disclosure] [USN-46-1] TIFF library vulnerability Martin Pitt (12/22/04)
• [Full-Disclosure] header intact. Meteor (12/15/04)
• [Full-Disclosure] [ GLSA 200412-09 ] ncpfs: Buffer overflow in ncplogin and ncpmap Thierry Carrez (12/15/04)
• [Full-Disclosure] Regarding Secunia Advisory SA13040. Xavier Beaudouin (12/22/04)
  • [Full-Disclosure] [SECUNIA] Regarding Secunia Advisory SA13040 Thomas Kristensen (12/22/04)
    • [Full-Disclosure] Re: [caudium-devel] [SECUNIA] Regarding Secunia Advisory SA13040 Marek Habersack (12/22/04)
• [Full-Disclosure] Java Runtime Environment Remote Denial-of-Service (DoS) Vulnerability Marc Schoenefeld (12/22/04)
  • Re: [Full-Disclosure] Java Runtime Environment Remote Denial-of-Service (DoS) Vulnerability James Tucker (12/22/04)
• [Full-Disclosure] Funny Google segfault Przemyslaw Frasunek (12/22/04)
• [Full-Disclosure] [USN-45-1] nasm vulnerability Martin Pitt (12/22/04)
  • RE: [Full-Disclosure] [USN-45-1] nasm vulnerability Todd Towles (12/22/04)
    • Re: [Full-Disclosure] [USN-45-1] nasm vulnerability Martin Pitt (12/23/04)
    • Re: [Full-Disclosure] [USN-45-1] nasm vulnerability Devdas Bhagat (12/24/04)
• [Full-Disclosure] List of worm and trojan files Carilda A Thomas (12/22/04)
  • Re: [Full-Disclosure] List of worm and trojan files Matt McCormack (12/23/04)
  • Re: [Full-Disclosure] List of worm and trojan files Carilda A Thomas (12/24/04)
    • Re: [Full-Disclosure] List of worm and trojan files Barrie Dempster (12/24/04)
    • Re: [Full-Disclosure] List of worm and trojan files Kevin (12/24/04)
    • RE: [Full-Disclosure] List of worm and trojan files ALD, Aditya, Aditya Lalit Deshmukh (12/24/04)
  • Re: [Full-Disclosure] List of worm and trojan files Sam Gentle (12/24/04)
  • RE: [Full-Disclosure] List of worm and trojan files Todd Towles (12/29/04)
  • Re: [Full-Disclosure] List of worm and trojan files James Tucker (12/29/04)
• [Full-Disclosure] Re: Full-Disclosure Digest, Vol 1, Issue 2116 (Vacation Auto-Reply) Harold Dahlstrom (12/22/04)
• [Full-Disclosure] Objet :Full-Disclosure Digestq_Vol_1=2C_Issue_2112_=28De_retour_le_mardi_28_d=E9cembr?= e.) Christophe Savin (12/22/04)
• [Full-Disclosure] [USN-39-1] Linux amd64 kernel vulnerability Martin Pitt (12/16/04)
• [Full-Disclosure] [USN-41-1] Samba vulnerability Martin Pitt (12/17/04)
• [Full-Disclosure] Insecurity in Finnish parlament (computers) Markus Jansson (12/19/04)
  • Re: [Full-Disclosure] Insecurity in Finnish parlament (computers) Carlos de Oliveira (12/23/04)
  • Re: [Full-Disclosure] Insecurity in Finnish parlament (computers) Valdis.Kletnieks_at_vt.edu (12/28/04)
• [Full-Disclosure] Cisco Security Advisory: Cisco Unity Integrated with Exchange Has Default Passwords Cisco Systems Product Security Incident Response Team (12/15/04)
• [Full-Disclosure] [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines Thierry Carrez (12/15/04)
• [Full-Disclosure] Objet :Full-Disclosure Digestq_Vol_1=2C_Issue_2116_=28De_retour_le_mardi_28_d=E9cembr?= e.) Christophe Savin (12/22/04)
• [Full-Disclosure] [ GLSA 200412-11 ] Cscope: Insecure creation of temporary files Luke Macken (12/16/04)
• [Full-Disclosure] [OpenPKG-SA-2004.053] OpenPKG Security Advisory (php) OpenPKG (12/16/04)
• Fwd: [Full-Disclosure] TCP Port 42 port scans? What the heck over... wastedimage (12/16/04)
• [Full-Disclosure] Script Injection in Google Groups Beta n3td3v (12/18/04)
• [Full-Disclosure] RE: Worm hitting PHPbb2 Forums David Devault (12/22/04)
• [Full-Disclosure] This sums up Yahoo!s security policy to a -T- n3td3v (12/22/04)
  • Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- Bart.Lansing_at_kohls.com (12/22/04)
    • Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- morning_wood (12/23/04)
      • Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- n3td3v (12/23/04)
      • Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- Brenno J.S.A.A.F. de Winter (12/24/04)
      • Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- Bart.Lansing_at_kohls.com (12/24/04)
      • Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- Exibar (12/23/04)
      • Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- Bart.Lansing_at_kohls.com (12/24/04)
      • RE: [inbox] Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- Exibar (12/25/04)
      • RE: [inbox] Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- Bart.Lansing_at_kohls.com (12/28/04)
      • Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- J.A. Terranson (12/24/04)
      • RE: [spam] Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- Exibar (12/25/04)
    • [Full-Disclosure] Re: This sums up Yahoo!s security policy to a -T- Steve R (12/23/04)
    • Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T- Florian Weimer (12/23/04)
• Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer. Berend-Jan Wever (12/21/04)
  • Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer. Berend-Jan Wever (12/21/04)
• [Full-Disclosure] Sanity.a (phpbb web worm) Source code Stephen Jimson (12/22/04)
• [Full-Disclosure] Objet :Full-Disclosure Digestq_Vol_1=2C_Issue_2113_=28De_retour_le_mardi_28_d=E9cembr?= e.) Christophe Savin (12/22/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.16.04: Samba smbd Security Descriptor Integer Overflow Vulnerability idlabs-advisories_at_idefense.com (12/16/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.16.04: MPlayer Remote RTSP Heap Overflow Vulnerability idlabs-advisories_at_idefense.com (12/16/04)
• [Full-Disclosure] eDonkey Hub version 16.50 vunerability? Daniel Guido (12/17/04)
  • [Full-Disclosure] Re: eDonkey Hub version 16.50 vunerability? Steve R (12/24/04)
• [Full-Disclosure] [ GLSA 200412-23 ] Zwiki: XSS vulnerability Luke Macken (12/22/04)
• [Full-Disclosure] RE: Worm hitting PHPbb2 Forums Christopher Adickes (12/21/04)
• [Full-Disclosure] SUSE Security Announcement: various kernel problems (SUSE-SA:2004:044) Marcus Meissner (12/21/04)
• [Full-Disclosure] [USN-43-1] groff utility vulnerabilities Martin Pitt (12/20/04)
• [Full-Disclosure] Re: Worm hitting PHPbb2 Forums mark_at_onnow.net (12/21/04)
• [Full-Disclosure] Re: Full-Disclosure Digest, Vol 1, Issue 2120 Justin Mason (12/21/04)
• [Full-Disclosure] hijack_apache-0.1a beta EmirAga (12/21/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.21.04: Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability idlabs-advisories_at_idefense.com (12/21/04)
• [Full-Disclosure] FreezeX file access vulnerability Xenzeo (12/20/04)
• [Full-Disclosure] Re: Possible apache2/php 4.3.9 worm Joe Stewart (12/21/04)
  • Re: [Full-Disclosure] Re: Possible apache2/php 4.3.9 worm Max Valdez (12/22/04)
  • Re: [Full-Disclosure] Re: Possible apache2/php 4.3.9 worm morning_wood (12/22/04)
  • RE: [Full-Disclosure] Re: Possible apache2/php 4.3.9 worm Patrick Nolan (12/22/04)
• [Full-Disclosure] Gadu-Gadu Remote DoS (all versions) Maciej Soltysiak (12/20/04)
• [Full-Disclosure] Unchecked returns from kernel_read() in linux-2.6.10-rc2 kernel Katrina Tsipenyuk (12/17/04)
• [Full-Disclosure] [ GLSA 200412-12 ] Adobe Acrobat Reader: Buffer overflow vulnerability Luke Macken (12/17/04)
• [Full-Disclosure] (Fwd) how to filter the xmas virus lsi (12/17/04)
• [Full-Disclosure] STG Security Advisory: [SSA-20041214-14] GNUBoard PHP injection vulnerability SSR Team (12/15/04)
• [Full-Disclosure] STG Security Advisory: [SSA-20041215-15] Vulnerability of uploading files with multiple extensions in MoniWiki SSR Team (12/15/04)
• [Full-Disclosure] [OpenPKG-SA-2004.056] OpenPKG Security Advisory (cvstrac) OpenPKG (12/17/04)
• [Full-Disclosure] Objet :Full-Disclosure Digestq_Vol_1=2C_Issue_2118_=28De_retour_le_mardi_28_d=E9cembr?= e.) Christophe Savin (12/21/04)
• [Full-Disclosure] RE: phpBB vulnerability/Santy.a (formerly Possible apache2/php 4.3.9 worm) Alex Schultz (12/21/04)
• [Full-Disclosure] fun with linux kernel Georgi Guninski (12/15/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.15.04: Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability idlabs-advisories_at_idefense.com (12/15/04)
• [Full-Disclosure] [ GLSA 200412-22 ] mpg123: Playlist buffer overflow Thierry Carrez (12/21/04)
• [Full-Disclosure] RE: Worm hitting PHPbb2 Forums Mike (12/21/04)
  • [Full-Disclosure] RE: Worm hitting PHPbb2 Forums M. Shirk (12/22/04)
  • Re: [Full-Disclosure] RE: Worm hitting PHPbb2 Forums Willem Koenings (12/22/04)
    • RE: [Full-Disclosure] RE: Worm hitting PHPbb2 Forums Patrick Nolan (12/23/04)
      • RE: [Full-Disclosure] RE: Worm hitting PHPbb2 Forums Paul Laudanski (12/24/04)
• [Full-Disclosure] Re: Possible apache2/php 4.3.9 worm Feher Tamas (12/21/04)
• [Full-Disclosure] Possible apache2/php 4.3.9 worm Alex Schultz (12/21/04)
  • Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm Paul Schmehl (12/21/04)
  • Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm Juan Carlos Navea (12/21/04)
    • Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm milw0rm Inc. (12/22/04)
  • RE: [Full-Disclosure] Possible apache2/php 4.3.9 worm Todd Towles (12/21/04)
  • RE: [Full-Disclosure] Possible apache2/php 4.3.9 worm Randal, Phil (12/21/04)
  • Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm Pamela Patterson (12/21/04)
  • Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm Ron Brogden (12/21/04)
    • Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm Brendan Dolan-Gavitt (12/22/04)
    • Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm DanB UK (12/22/04)
      • Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm Barrie Dempster (12/22/04)
      • Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm dk (12/23/04)
      • Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm DanB UK (12/23/04)
• [Full-Disclosure] multiple remote root vulns in Rosiello rFTPD and RPF Slotto Corleone (12/20/04)
• [VulnWatch] Secunia Research: Spy Sweeper Enterprise Client Privilege Escalation Carsten H. Eiram (12/21/04)
• [Full-Disclosure] Re: @SPAM+++++++++ steve menard (12/21/04)
• [VulnWatch] Secunia Research: My Firewall Plus Privilege Escalation Vulnerability Carsten H. Eiram (12/21/04)
• [Full-Disclosure] [USN-44-1] perl information leak Martin Pitt (12/21/04)
• [Full-Disclosure] Secunia Research: Spy Sweeper Enterprise Client Privilege Escalation Carsten H. Eiram (12/21/04)
• [Full-Disclosure] Secunia Research: My Firewall Plus Privilege Escalation Vulnerability Carsten H. Eiram (12/21/04)
• [Full-Disclosure] Re: Gadu-Gadu Remote DoS (all versions) Maciej Soltysiak (12/21/04)
• [Full-Disclosure] [ GLSA 200412-16 ] kdelibs, kdebase: Multiple vulnerabilities Sune Kloppenborg Jeppesen (12/19/04)
• [Full-Disclosure] [ GLSA 200412-14 ] PHP: Multiple vulnerabilities Thierry Carrez (12/19/04)
• Re: [Full-Disclosure] Mailing lists and unsolicited/malicious spam GuidoZ (12/20/04)
  • Re: [Full-Disclosure] Mailing lists and unsolicited/malicious spam GuidoZ (12/20/04)
• [Full-Disclosure] Re: PHP and curl open_basedir still bypassable VeNoMouS (12/20/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.20.04: IBM AIX invscout Local Command Execution Vulnerability idlabs-advisories_at_idefense.com (12/20/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.20.04: IBM AIX chcod Local Privilege Escalation Vulnerability idlabs-advisories_at_idefense.com (12/20/04)
• [Full-Disclosure] Administrivia: Explanation Len Rose (12/21/04)
• [Full-Disclosure] MDKSA-2004:152 - Updated ethereal packages fix multiple vulnerabilities Mandrake Linux Security Team (12/20/04)
• [Full-Disclosure] [ GLSA 200412-21 ] MPlayer: Multiple overflows Thierry Carrez (12/20/04)
• [Full-Disclosure] MDKSA-2004:153 - Updated aspell packages fix vulnerability Mandrake Linux Security Team (12/20/04)
• [Full-Disclosure] Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer. Berend-Jan Wever (12/21/04)
• [Full-Disclosure] Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer. Berend-Jan Wever (12/21/04)
• Re: [Full-Disclosure] Re: Gadu-Gadu, another two bugs Maciej Soltysiak (12/20/04)
  • Re: [Full-Disclosure] Re: Gadu-Gadu, another two bugs Maciej Soltysiak (12/20/04)
• [USN-43-1] groff utility vulnerabilities Martin Pitt (12/20/04)
• [Full-Disclosure] [ GLSA 200412-17 ] kfax: Multiple overflows in the included TIFF library Sune Kloppenborg Jeppesen (12/19/04)
• [Full-Disclosure] [ GLSA 200412-20 ] NASM: Buffer overflow vulnerability Luke Macken (12/20/04)
• [ GLSA 200412-19 ] phpMyAdmin: Multiple vulnerabilities Sune Kloppenborg Jeppesen (12/19/04)
• [Full-Disclosure] [ GLSA 200412-19 ] phpMyAdmin: Multiple vulnerabilities Sune Kloppenborg Jeppesen (12/19/04)
• [Full-Disclosure] Possible Python 2.3 DoS Vulnerability Jack Shell (12/20/04)
  • Re: [Full-Disclosure] Possible Python 2.3 DoS Vulnerability André Malo (12/20/04)
• [USN-42-1] Xine library vulnerabilities Martin Pitt (12/20/04)
• [ GLSA 200412-21 ] MPlayer: Multiple overflows Thierry Carrez (12/20/04)
• [Full-Disclosure] OpenSSH is a good choice? Carlos de Oliveira (12/18/04)
  • Re: [Full-Disclosure] OpenSSH is a good choice? Andrew Farmer (12/20/04)
  • Re: [Full-Disclosure] OpenSSH is a good choice? Carlos de Oliveira (12/21/04)
  • Re: [Full-Disclosure] OpenSSH is a good choice? hutuworm (12/21/04)
  • RE: [Full-Disclosure] OpenSSH is a good choice? ALD, Aditya, Aditya Lalit Deshmukh (12/21/04)
    • RE: [Full-Disclosure] OpenSSH is a good choice? Ron DuFresne (12/21/04)
    • Re: [Full-Disclosure] OpenSSH is a good choice? Willem Koenings (12/21/04)
      • Re: [Full-Disclosure] OpenSSH is a good choice? Ron DuFresne (12/22/04)
      • Re: [Full-Disclosure] OpenSSH is a good choice? Willem Koenings (12/22/04)
      • Re: [Full-Disclosure] OpenSSH is a good choice? Ron DuFresne (12/23/04)
      • Re: [Full-Disclosure] OpenSSH is a good choice? Ben Hawkes (12/24/04)
      • Re: [Full-Disclosure] OpenSSH is a good choice? Willem Koenings (12/24/04)
      • Re: [Full-Disclosure] OpenSSH is a good choice? Ron DuFresne (12/24/04)
      • Re: [Full-Disclosure] OpenSSH is a good choice? Stian Øvrevåge (12/23/04)
      • Re: [Full-Disclosure] OpenSSH is a good choice? dk (12/24/04)
    • Re: [Full-Disclosure] OpenSSH is a good choice? Willem Koenings (12/21/04)
    • Re: [Full-Disclosure] OpenSSH is a good choice? Willem Koenings (12/21/04)
    • Re: [Full-Disclosure] OpenSSH is a good choice? Willem Koenings (12/21/04)
  • Re: [Full-Disclosure] OpenSSH is a good choice? Barrie Dempster (12/20/04)
  • RE: [Full-Disclosure] OpenSSH is a good choice? Todd Towles (12/22/04)
  • Re: [Full-Disclosure] OpenSSH is a good choice? Ron DuFresne (12/25/04)
• [Full-Disclosure] [ GLSA 200412-15 ] Ethereal: Multiple vulnerabilities Sune Kloppenborg Jeppesen (12/19/04)
• [ GLSA 200412-18 ] abcm2ps: Buffer overflow vulnerability Luke Macken (12/19/04)
• [Full-Disclosure] [USN-42-1] Xine library vulnerabilities Martin Pitt (12/20/04)
• [ GLSA 200412-17 ] kfax: Multiple overflows in the included TIFF library Sune Kloppenborg Jeppesen (12/19/04)
• [ GLSA 200412-20 ] NASM: Buffer overflow vulnerability Luke Macken (12/20/04)
• [Full-Disclosure] [ GLSA 200412-19 ] phpMyAdmin: Multiple vulnerabilities Sune Kloppenborg Jeppesen (12/19/04)
• [ GLSA 200412-16 ] kdelibs, kdebase: Multiple vulnerabilities Sune Kloppenborg Jeppesen (12/19/04)
• UPDATE: [ GLSA 200410-12 ] WordPress: HTTP response splitting and XSS vulnerabilities Luke Macken (12/19/04)
• [ GLSA 200412-15 ] Ethereal: Multiple vulnerabilities Sune Kloppenborg Jeppesen (12/19/04)
• [ GLSA 200412-14 ] PHP: Multiple vulnerabilities Thierry Carrez (12/19/04)
• [Full-Disclosure] [ GLSA 200412-18 ] abcm2ps: Buffer overflow vulnerability Luke Macken (12/19/04)
• [Full-Disclosure] NetBSD kernel local vulnerabilities Evgeny Demidov (12/17/04)
• [Full-Disclosure] Tlen.pl, remote script execution Jaroslaw Sajko (12/20/04)
• [USN-41-1] Samba vulnerability Martin Pitt (12/17/04)
• [Full-Disclosure] Re: zone transfers, a spammer's dream? Troubles Troubles (12/17/04)
• [Full-Disclosure] Re: zone transfers, a spammer's dream? Troubles Troubles (12/17/04)
• [Full-Disclosure] PHP and curl open_basedir still bypassable VeNoMouS (12/19/04)
• [Full-Disclosure] UPDATE: [ GLSA 200410-12 ] WordPress: HTTP response splitting and XSS vulnerabilities Luke Macken (12/19/04)
• [Full-Disclosure] E-mail tracking finds murderess and baby in kidnap-homicide case. Tamas Feher (12/18/04)
  • Re: [Full-Disclosure] E-mail tracking finds murderess and baby in kidnap-homicide case. Kero-Chan (12/22/04)
  • RE: [Full-Disclosure] E-mail tracking finds murderess and baby in kidnap-homicide case. irfan.syed_at_guoco.com (12/23/04)
  • Re: [Full-Disclosure] E-mail tracking finds murderess and baby in kidnap-homicide case. Kero-Chan (12/24/04)
• [Full-Disclosure] Re: zone transfers, a spammer's dream? Troubles Troubles (12/20/04)
  • Re: [Full-Disclosure] Re: zone transfers, a spammer's dream? Byron Copeland (12/20/04)
• [Full-Disclosure] [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines Thierry Carrez (12/15/04)
• [Full-Disclosure] [ GLSA 200412-09 ] ncpfs: Buffer overflow in ncplogin and ncpmap Thierry Carrez (12/15/04)
• [Full-Disclosure] Cisco Security Advisory: Default Administrative Password in Cisco Guard and Traffic Anomaly Detector Cisco Systems Product Security Incident Response Team (12/15/04)
• [Full-Disclosure] MDKSA-2004:150 - Updated kdelibs and kdebase packages fix vulnerability Mandrake Linux Security Team (12/15/04)
• [Full-Disclosure] Advisory 01/2004: Multiple vulnerabilities in PHP 4/5 Stefan Esser (12/15/04)
• [Full-Disclosure] Advisory 01/2004: Multiple Vulnerabilities in PHP 4/5 Stefan Esser (12/16/04)
• [Full-Disclosure] [ZH2004-18SA]Firefox/Opera-bypass of security restrcition by Content-Type spoofi Giovanni Delvecchio (12/16/04)
  • Re: [Full-Disclosure] [ZH2004-18SA]Firefox/Opera-bypass of security restrcition by Content-Type spoofi James Tucker (12/20/04)
• [Full-Disclosure] PHP Input Validation Vulnerabilities Daniel Fabian (12/16/04)
• [Full-Disclosure] [MaxPatrol] SQL-injection in Ikonboard 3.1.x aanisimov_at_ptsecurity.ru (12/16/04)
• [Full-Disclosure] php unserialize Martin Eiszner (12/15/04)
• [Full-Disclosure] STG Security Advisory: [SSA-20041215-17] Vulnerability of uploading files with multiple extensions in JSBoard SSR Team (12/16/04)
• [ GLSA 200412-13 ] Samba: Integer overflow Sune Kloppenborg Jeppesen (12/17/04)
• [Full-Disclosure] STG Security Advisory: [SSA-20041215-18] Vulnerability of uploading files with multiple extensions in phpBB Attachment Mod SSR Team (12/16/04)
• [Full-Disclosure] Gadu-Gadu, another two bugs Jaroslaw Sajko (12/17/04)
• [Full-Disclosure] KIT.GED Raoul Nakhmanson-Kulish (12/17/04)
  • RE: [Full-Disclosure] KIT.GED Tiago Halm (12/18/04)
  • Re: [Full-Disclosure] KIT.GED GuidoZ (12/18/04)
• NetBSD kernel local vulnerabilities Evgeny Demidov (12/17/04)
• [Full-Disclosure] Re: Linux kernel IGMP vulnerabilities Timothy Hall (12/15/04)
• [ GLSA 200412-12 ] Adobe Acrobat Reader: Buffer overflow vulnerability Luke Macken (12/17/04)
• Gadu-Gadu, another two bugs Jaroslaw Sajko (12/17/04)
  • [Full-Disclosure] Re: Gadu-Gadu, another two bugs lazy_at_server.gwsh.gda.pl (12/20/04)
• Unchecked returns from kernel_read() in linux-2.6.10-rc2 kernel Katrina Tsipenyuk (12/17/04)
• [Full-Disclosure] OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS Vulnerability dila (12/15/04)
• [Full-Disclosure] Re: Full-Disclosure Digest, Vol 1, Issue 2105 Bryan Pinkerton (12/15/04)
• [Full-Disclosure] RE: NetWare Screensaver Authentication Bypass From The Local Console Adam Gray (12/15/04)
  • Re: [Full-Disclosure] RE: NetWare Screensaver Authentication Bypass From The Local Console James Tucker (12/17/04)
    • Re: [Full-Disclosure] RE: NetWare Screensaver Authentication Bypass From The Local Console Steve Wray (12/22/04)
• [Full-Disclosure] HyperTerminal - Buffer Overflow In .ht File Brett Moore (12/14/04)
  • Re: [Full-Disclosure] HyperTerminal - Buffer Overflow In .ht File Gregory Gilliss (12/17/04)
• [ GLSA 200412-11 ] Cscope: Insecure creation of temporary files Luke Macken (12/16/04)
• [USN-40-1] PHP vulnerabilities Martin Pitt (12/16/04)
• [USN-39-1] Linux amd64 kernel vulnerability Martin Pitt (12/16/04)
• [Full-Disclosure] Re: NetWare Screensaver Authentication Bypass From The Local Console Roger McLaren (12/14/04)
• PHP Input Validation Vulnerabilities Daniel Fabian (12/16/04)
• Re: [Full-Disclosure] To anybody who's offended by my disclosure policy-GET THIS GUYS GuidoZ (12/14/04)
  • Re: [Full-Disclosure] To anybody who's offended by my disclosure policy-GET THIS GUYS devis (12/16/04)
  • Re: [Full-Disclosure] To anybody who's offended by my disclosure policy-GET THIS GUYS James Tucker (12/17/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.13.04: Adobe Reader 6.0 .ETD File Format String Vulnerability idlabs-advisories_at_idefense.com (12/14/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.14.04: Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability idlabs-advisories_at_idefense.com (12/14/04)
• [Full-Disclosure] [USN-38-1] Linux kernel vulnerabilities Martin Pitt (12/14/04)
• [Full-Disclosure] Hotmail Cross-Site Scripting Vulnerability #2 Rafel Ivgi, The-Insider (10/14/04)
• [Full-Disclosure] Hotmail Cross-Site Scripting Vulnerability #1 Rafel Ivgi, The-Insider (10/14/04)
• [Full-Disclosure] Yahoo! Mail Cross-Site Scripting Vulnerability Rafel Ivgi, The-Insider (10/14/04)
• [Full-Disclosure] RE: Linux kernel scm_send local DoS Leif Sawyer (12/14/04)
  • [Full-Disclosure] RE: Linux kernel scm_send local DoS Paul Starzetz (12/14/04)
• [Full-Disclosure] [Correction For]: Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory Secure Network Operations, Inc. (12/14/04)
• Advisory 01/2004: Multiple vulnerabilities in PHP 4/5 Stefan Esser (12/15/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.14.04: Adobe Acrobat Reader 5.0.9 mailListIsPdf() Buffer Overflow Vulnerability idlabs-advisories_at_idefense.com (12/14/04)
• [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines Thierry Carrez (12/15/04)
• [ GLSA 200412-09 ] ncpfs: Buffer overflow in ncplogin and ncpmap Thierry Carrez (12/15/04)
• *nix data wipe tools Thomas C. Greene (12/15/04)
  • Re: [Full-Disclosure] *nix data wipe tools Gregory Gilliss (12/17/04)
• Yahoo! Mail Cross-Site Scripting Vulnerability Rafel Ivgi (10/15/04)
• Hotmail Cross Site Scripting Vulnerability #2 Rafel Ivgi (10/15/04)
• Hotmail Cross-Site Scripting Vulnerability #1 Rafel Ivgi (10/15/04)
• [Full-Disclosure] [ GLSA 200412-07 ] file: Arbitrary code execution Matthias Geerdsen (12/13/04)
• [VulnWatch] Hotmail Cross Site Scripting Vulnerability #2 Rafel Ivgi (10/15/04)
• [Full-Disclosure] Linux kernel scm_send local DoS Paul Starzetz (12/14/04)
• [Full-Disclosure] Linux kernel IGMP vulnerabilities Paul Starzetz (12/14/04)
• [Full-Disclosure] (no subject) Levent (12/14/04)
• [Full-Disclosure] phpBB Attachment Mod Directory Traversal HTTP POST Injection Paul Laudanski (12/14/04)
• [Full-Disclosure] Merry Christmas worm (Zafi.D) is spreading now. Beware! Feher Tamas (12/14/04)
  • Re: [Full-Disclosure] Merry Christmas worm (Zafi.D) is spreading now. Beware! Valdis.Kletnieks_at_vt.edu (12/15/04)
• [Full-Disclosure] Re: Full-Disclosure Digest, Vol 1, Issue 2104 Bryan Pinkerton (12/14/04)
• [Full-Disclosure] [ GLSA 200412-08 ] nfs-utils: Multiple remote vulnerabilities Luke Macken (12/14/04)
• [Full-Disclosure] STG Security Advisory: [SSA-20041209-13] UseModWiki XSS vulnerability SSR Team (12/14/04)
• [Full-Disclosure] Re: Full-Disclosure Digest, Vol 1, Issue 2103 Bryan Pinkerton (12/14/04)
• [Full-Disclosure] MDKSA-2004:149 - Updated postgresql packages fix temporary file vulnerability Mandrake Linux Security Team (12/14/04)
• [Full-Disclosure] MDKSA-2004:148 - Updated iproute2 packages fix temporary file vulnerability Mandrake Linux Security Team (12/14/04)
• [Full-Disclosure] [ GLSA 200412-07 ] file: Arbitrary code execution Matthias Geerdsen (12/13/04)
• RE: [Full-Disclosure] TCP Port 42 port scans? What the heck over ... Stuart Fox (DSL AK) (12/13/04)
• [VulnWatch] Hotmail Cross-Site Scripting Vulnerability #1 Rafel Ivgi, The-Insider (10/14/04)
• [Full-Disclosure] Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory Secure Network Operations, Inc. (12/13/04)
• [VulnWatch] Yahoo! Mail Cross-Site Scripting Vulnerability Rafel Ivgi, The-Insider (10/14/04)
• [VulnWatch] Linux kernel scm_send local DoS Paul Starzetz (12/14/04)
• [USN-38-1] Linux kernel vulnerabilities Martin Pitt (12/14/04)
• [Correction For]: Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory Secure Network Operations, Inc. (12/14/04)
• [VulnWatch] Linux kernel IGMP vulnerabilities Paul Starzetz (12/14/04)
• [ GLSA 200412-08 ] nfs-utils: Multiple remote vulnerabilities Luke Macken (12/14/04)
• phpBB Attachment Mod Directory Traversal HTTP POST Injection Paul Laudanski (12/14/04)
• [Full-Disclosure] Winamp 5.07 (latest version) Remote Crash + other stupid shizle b0f (12/13/04)
• Linux kernel scm_send local DoS Paul Starzetz (12/14/04)
  • Re: Linux kernel scm_send local DoS even multiplexed (12/15/04)
    • Re: Linux kernel scm_send local DoS Paul Starzetz (12/15/04)
      • Re: Linux kernel scm_send local DoS even multiplexed (12/15/04)
      • Re: Linux kernel scm_send local DoS gadgeteer_at_elegantinnovations.org (12/15/04)
      • Re: [Full-Disclosure] Re: Linux kernel scm_send local DoS xbud (12/17/04)
      • [Full-Disclosure] Re: Linux kernel scm_send local DoS gadgeteer_at_elegantinnovations.org (12/15/04)
      • [Full-Disclosure] Re: Linux kernel scm_send local DoS gadgeteer_at_elegantinnovations.org (12/15/04)
      • [Full-Disclosure] Re: Linux kernel scm_send local DoS even multiplexed (12/15/04)
      • Re: [Full-Disclosure] Re: Linux kernel scm_send local DoS Valdis.Kletnieks_at_vt.edu (12/23/04)
    • [Full-Disclosure] Re: Linux kernel scm_send local DoS Paul Starzetz (12/15/04)
  • [Full-Disclosure] Re: Linux kernel scm_send local DoS even multiplexed (12/15/04)
  • [Full-Disclosure] Re: Linux kernel scm_send local DoS even multiplexed (12/15/04)
  • [Full-Disclosure] [VulnDiscuss] Re: Linux kernel scm_send local DoS even multiplexed (12/15/04)
  • Re: Linux kernel scm_send local DoS Pavel Kankovsky (12/23/04)
  • [Full-Disclosure] Re: Linux kernel scm_send local DoS Pavel Kankovsky (12/23/04)
• [VulnWatch] phpBB Attachment Mod Directory Traversal HTTP POST Injection Paul Laudanski (12/14/04)
• Linux kernel IGMP vulnerabilities Paul Starzetz (12/14/04)
  • Re: Linux kernel IGMP vulnerabilities Pekka Savola (12/14/04)
  • Re: Linux kernel IGMP vulnerabilities stephen joseph butler (12/15/04)
    • Re: Linux kernel IGMP vulnerabilities Paul Starzetz (12/15/04)
    • [Full-Disclosure] Re: Linux kernel IGMP vulnerabilities Paul Starzetz (12/15/04)
  • [Full-Disclosure] Re: Linux kernel IGMP vulnerabilities Pekka Savola (12/14/04)
  • [Full-Disclosure] Re: Linux kernel IGMP vulnerabilities stephen joseph butler (12/15/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.13.04: Multiple Vendor xzgv PRF Parsing Integer Overflow Vulnerability idlabs-advisories_at_idefense.com (12/13/04)
• [Full-Disclosure] [ZH2004-19SA]Possible execution of remote shell commands in Opera with kfmclient Giovanni Delvecchio (12/13/04)
• [Full-Disclosure] Socket unreacheable in the Lithtech engine (new protocol) Luigi Auriemma (12/13/04)
• [Full-Disclosure] [johnc@grok.org.uk: Administrivia: Hardware Failure] John Cartwright (12/13/04)
• [Full-Disclosure] KDE Security Advisory: kfax libtiff vulnerabilities Dirk Mueller (12/09/04)
• [Full-Disclosure] KDE Security Advisory: plain text password exposure Dirk Mueller (12/09/04)
• [Full-Disclosure] Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities Stefan Esser (11/23/04)
• [Full-Disclosure] Advisory 14/2004: Linux 2.x smbfs multiple remote vulnerabilities Stefan Esser (11/17/04)
• [Full-Disclosure] [HV-LOW] Symantec LiveUpdate issues may cause DoS vuln_at_hexview.com (11/05/04)
  • Re: [Full-Disclosure] [HV-LOW] Symantec LiveUpdate issues may cause DoS Dan Margolis (12/14/04)
  • Re: [Full-Disclosure] [HV-LOW] Symantec LiveUpdate issues may cause DoS Dan Margolis (12/14/04)
• [Full-Disclosure] [HV-MED] Zip/Linux long path buffer overflow vuln_at_hexview.com (11/04/04)
• Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory Secure Network Operations, Inc. (12/13/04)
• [ GLSA 200412-06 ] PHProjekt: setup.php vulnerability Thierry Carrez (12/10/04)
• RE: [Full-Disclosure] no full-disclosure for FULL-Disclosure down ?8-( Clairmont, Jan M (12/13/04)
• NetWare Screensaver Authentication Bypass From The Local Console Adam Gray (12/13/04)
• [ GLSA 200412-07 ] file: Arbitrary code execution Matthias Geerdsen (12/13/04)
• [Full-Disclosure] Gadu-Gadu several vulnerabilities Jaroslaw Sajko (12/13/04)
• Socket unreacheable in the Lithtech engine (new protocol) Luigi Auriemma (12/13/04)
• RE: [Full-Disclosure] GPRS/IP-session from Nokia/Symbian mobilephonestays up Juliao Duartenn (Oblog-Direccao) (12/13/04)
  • RE: [Full-Disclosure] GPRS/IP-session from Nokia/Symbian mobilephonestays up jamie fisher (12/13/04)
    • Re: [Full-Disclosure] GPRS/IP-session from Nokia/Symbian mobilephonestays up James Tucker (12/15/04)
• [Full-Disclosure] Multiple vulnerabilities in phpMyAdmin Nicolas Gregoire (12/13/04)
• [Full-Disclosure] TCP Port 42 port scans? What the heck over... James Lay (12/13/04)
  • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Dave Aitel (11/13/04)
  • RE: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Dave Killion (12/13/04)
    • [Full-Disclosure] RE: Cipher Tool richard capistrano (12/14/04)
      • Re: [Full-Disclosure] RE: Cipher Tool James Tucker (12/16/04)
      • RE: [Full-Disclosure] RE: Cipher Tool Todd Towles (12/20/04)
      • RE: [Full-Disclosure] RE: Cipher Tool Lohan Spies (12/15/04)
      • Re: [Full-Disclosure] RE: Cipher Tool Ron DuFresne (12/15/04)
      • RE: [Full-Disclosure] RE: Cipher Tool Todd Towles (12/22/04)
      • Re: [Full-Disclosure] RE: Cipher Tool Willem Koenings (12/22/04)
  • RE: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Dolan, Patrick (12/13/04)
  • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Ron (12/13/04)
  • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Daniel F. Chief Security Engineer - (12/13/04)
  • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Maxime Ducharme (12/13/04)
  • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Matt Ostiguy (12/13/04)
    • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Valdis.Kletnieks_at_vt.edu (12/15/04)
      • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Matt Ostiguy (12/15/04)
      • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Ron DuFresne (12/22/04)
      • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Valdis.Kletnieks_at_vt.edu (12/15/04)
      • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Ron DuFresne (12/22/04)
      • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Dave Aitel (12/22/04)
  • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Owned You (12/13/04)
  • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Florian Weimer (12/13/04)
    • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Niek (12/14/04)
    • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Kevin Finisterre (12/14/04)
    • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... wastedimage (12/14/04)
      • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Valdis.Kletnieks_at_vt.edu (12/16/04)
    • [Full-Disclosure] Security breach database n30 (12/15/04)
      • Re: [Full-Disclosure] Security breach database Martin Mkrtchian (12/20/04)
      • Re: [Full-Disclosure] Security breach database Willem Koenings (12/18/04)
      • Re: [Full-Disclosure] Security breach database Valdis.Kletnieks_at_vt.edu (12/17/04)
      • Re: [Full-Disclosure] Security breach database Barrie Dempster (12/17/04)
      • Re: [Full-Disclosure] Security breach database Paul Laudanski (12/23/04)
  • RE: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Michael Scheidell (12/14/04)
    • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Maxime Ducharme (12/15/04)
    • Re: [Full-Disclosure] TCP Port 42 port scans? Scot Bryhan (12/17/04)
  • Re: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Maxime Ducharme (12/14/04)
  • RE: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Stuart Fox (DSL AK) (12/15/04)
  • RE: [Full-Disclosure] TCP Port 42 port scans? What the heck over... Esler, Joel - Contractor (12/15/04)
• Multiple vulnerabilities in phpMyAdmin Nicolas Gregoire (12/13/04)
• Gadu-Gadu several vulnerabilities Jaroslaw Sajko (12/13/04)
• [Full-Disclosure] SugarSales Multiple Vulnerabilities Daniel Fabian (12/13/04)
• [Full-Disclosure] [TURBOLINUX SECURITY INFO] 13/Dec/2004 Turbolinux (12/13/04)
• [VulnWatch] Multiple vulnerabilities in phpMyAdmin Nicolas Gregoire (12/13/04)
• SugarSales Multiple Vulnerabilities Daniel Fabian (12/13/04)
• [VulnWatch] NetWare Screensaver Authentication Bypass From The Local Console Adam Gray (12/13/04)
• [Full-Disclosure] Multiple XSS Vulnerabilities in several UBB.Thread Versions gp (12/13/04)
• [Full-Disclosure] Re: Online Script Decoder Feher Tamas (12/13/04)
  • Re: [Full-Disclosure] Re: Online Script Decoder Willem Koenings (12/13/04)
• [Full-Disclosure] NetWare Screensaver Authentication Bypass From The Local Console Adam Gray (12/13/04)
  • Re: NetWare Screensaver Authentication Bypass From The Local Console Brad Bendily (12/14/04)
  • [Full-Disclosure] Re: NetWare Screensaver Authentication Bypass From The Local Console Brad Bendily (12/14/04)
• [Full-Disclosure] List Charter John Cartwright (12/13/04)
• [Full-Disclosure] MS IE User's Authentication Details (userid/password) Sharing Issue Debasis Mohanty (12/12/04)
• [VulnWatch] [SA12981] Secunia Research: Opera Download Dialog Spoofing Vulnerability Thomas Kristensen (12/11/04)
• [Full-Disclosure] [ GLSA 200412-06 ] PHProjekt: setup.php vulnerability Thierry Carrez (12/10/04)
• [Full-Disclosure] HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! http-equiv_at_excite.com (12/11/04)
  • Re: [Full-Disclosure] HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! Scott Renna (12/11/04)
    • Re: [Full-Disclosure] HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! Valdis.Kletnieks_at_vt.edu (12/13/04)
      • Re: [Full-Disclosure] HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! Scott Renna (12/13/04)
      • RE: [Full-Disclosure] HOW TO BREAK XP SP2 POPUP BLOCKER: kick itin the nut ! John Omernik (12/14/04)
      • Re: [Full-Disclosure] HOW TO BREAK XP SP2 POPUP BLOCKER: kick itin the nut ! James Tucker (12/16/04)
      • Re: [Full-Disclosure] HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! Ron DuFresne (12/14/04)
      • Re: [Full-Disclosure] HOW TO BREAK XP SP2 POPUP BLOCKER: TIME TO WAKE UP! Gregh (12/19/04)
  • RE: [Full-Disclosure] HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! James Patterson Wicks (12/13/04)
    • Re: [Full-Disclosure] HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! James Tucker (12/14/04)
  • Re: [Full-Disclosure] HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut ! joe smith (12/13/04)
• In-game buffer-overflow in the Gamespy cd-key validation SDK Luigi Auriemma (12/10/04)
• KDE Security Advisory: kfax libtiff vulnerabilities Dirk Mueller (12/09/04)
• KDE Security Advisory: plain text password exposure Dirk Mueller (12/09/04)
• [ GLSA 200412-03 ] imlib: Buffer overflows in image decoding Thierry Carrez (12/06/04)
• [Advisory] Mozilla Products Remote Crash Vulnerability Niek van der Maas (12/06/04)
  • Re: [Advisory] Mozilla Products Remote Crash Vulnerability Berend-Jan Wever (12/06/04)
• [ GLSA 200412-04 ] Perl: Insecure temporary file creation Luke Macken (12/07/04)
• [Full-Disclosure] Address Bar Spoophing for the Pheeshies: IntotheNet Explorer 6 http-equiv_at_excite.com (12/08/04)
• [Full-Disclosure] Whois appears to have taken a hit Gregory Gilliss (12/08/04)
  • Re: [Full-Disclosure] Whois appears to have taken a hit Gregory Gilliss (12/08/04)
• Bypass personal firewall application protection . Again. offtopic (12/07/04)
• [Full-Disclosure] Contact BankOne.com ? Andrew Smith (12/07/04)
  • Re: [Full-Disclosure] Contact BankOne.com ? Owned You (12/07/04)
    • Re: [Full-Disclosure] Contact BankOne.com ? Martin Mkrtchian (12/08/04)
• [Full-Disclosure] VA Appliance Deployment White Paper Martin Mkrtchian (12/07/04)
• [Full-Disclosure] GPRS/IP-session from Nokia/Symbian mobile phone stays up Marco Davids (Prive) (12/07/04)
  • Re: [Full-Disclosure] GPRS/IP-session from Nokia/Symbian mobile phone stays up William Reading (12/07/04)
    • Re: [Full-Disclosure] GPRS/IP-session from Nokia/Symbian mobile phone stays up Marco Davids (Prive) (12/13/04)
      • Re: [Full-Disclosure] GPRS/IP-session from Nokia/Symbian mobile phone stays up Gautam R. Singh (12/13/04)
    • Re: [Full-Disclosure] GPRS/IP-session from Nokia/Symbian mobile phone stays up jamie fisher (12/13/04)
    • Re: [Full-Disclosure] GPRS/IP-session from Nokia/Symbian mobile phone stays up Todd T. Fries (12/13/04)
• [Full-Disclosure] MaxDB WebTools <= 7.5.00.18 buffer overflow and Denial of Service Evgeny Demidov (12/07/04)
• [Full-Disclosure] Re: Online Script Decoder Paul Szabo (12/07/04)
• Broadcast client crash in Battlefield 1942 1.6.19 and Vietnam 1.2 Luigi Auriemma (12/07/04)
• [ GLSA 200412-05 ] mirrorselect: Insecure temporary file creation Luke Macken (12/07/04)
• MaxDB WebTools <= 7.5.00.18 buffer overflow and Denial of Service Evgeny Demidov (12/07/04)
• [Full-Disclosure] Online Script Decoder GreyMagic Security (12/07/04)
  • Re: [Full-Disclosure] Online Script Decoder Elia Florio (12/07/04)
• [Full-Disclosure] Bypass personal firewall application protection . Again. offtopic (12/07/04)
  • Re: [Full-Disclosure] Bypass personal firewall application protection . Again. Andrei Zlate-Podani (12/07/04)
• [Full-Disclosure] [ GLSA 200412-05 ] mirrorselect: Insecure temporary file creation Luke Macken (12/07/04)
• [Full-Disclosure] help.msn.com jamie fisher (12/07/04)
• [Full-Disclosure] k-otik kiddies are really whores swallow mycum (12/07/04)
• [Full-Disclosure] MDKSA-2004:145 - Updated rp-pppoe packages fix vulnerability Mandrake Linux Security Team (12/07/04)
• [Full-Disclosure] [ GLSA 200412-04 ] Perl: Insecure temporary file creation Luke Macken (12/07/04)
• [Full-Disclosure] A suggestion to all AV vendors... bipin gautam (12/07/04)
  • Re: [Full-Disclosure] A suggestion to all AV vendors... Valdis.Kletnieks_at_vt.edu (12/07/04)
    • Re: [Full-Disclosure] A suggestion to all AV vendors... Ron (12/07/04)
      • Re: [Full-Disclosure] A suggestion to all AV vendors... Valdis.Kletnieks_at_vt.edu (12/07/04)
      • Re: [Full-Disclosure] A suggestion to all AV vendors... Ron (12/07/04)
      • Re: [Full-Disclosure] A suggestion to all AV vendors... Kenneth Ng (12/07/04)
      • Re: [Full-Disclosure] A suggestion to all AV vendors... Florian Weimer (12/12/04)
    • Re: [Full-Disclosure] A suggestion to all AV vendors... Kenneth Ng (12/07/04)
    • Re: [Full-Disclosure] A suggestion to all AV vendors... Mary Landesman (12/07/04)
    • Re: [Full-Disclosure] A suggestion to all AV vendors... colinm_at_clientsecure.net (12/07/04)
  • RE: [Full-Disclosure] A suggestion to all AV vendors... Todd Towles (12/07/04)
    • Re: [Full-Disclosure] A suggestion to all AV vendors... Stephen Menard (12/08/04)
  • RE: [Full-Disclosure] A suggestion to all AV vendors... bipin gautam (12/08/04)
• [Full-Disclosure] MDKSA-2004:147 - Updated openssl packages fix temporary file vulnerability Mandrake Linux Security Team (12/07/04)
• [Full-Disclosure] MDKSA-2004:144 - Updated lvm1 packages fix temporary file vulnerability Mandrake Linux Security Team (12/07/04)
• [Full-Disclosure] MDKSA-2004:143 - Updated ImageMagick packages fix vulnerability Mandrake Linux Security Team (12/07/04)
• [Full-Disclosure] MDKSA-2004:146 - Updated nfs-utils packages fix remote DoS vulnerability Mandrake Linux Security Team (12/07/04)
• [Full-Disclosure] [Advisory] Mozilla Products Remote Crash Vulnerability PERFECT.MATERIAL (12/07/04)
• [Full-Disclosure] MDKSA-2004:142 - Updated gzip packages fix temporary file vulnerability Mandrake Linux Security Team (12/07/04)
• [ GLSA 200412-02 ] PDFlib: Multiple overflows in the included TIFF library Luke Macken (12/05/04)
• Multiple vulnerabilities in w3who ISAPI DLL Nicolas Gregoire (12/06/04)
• [Full-Disclosure] DoS protection in N-Tiered Web Apps? Lachniet, Mark (12/06/04)
• [Full-Disclosure] Absinthe 1.1 - Blind SQL Injection Tool Released nummish_at_0x90.org (12/06/04)
• [Full-Disclosure] Two downed CN sites allegedly attrib. to Lycos screen saver vigilaro_at_gmx.net (12/06/04)
  • [Full-Disclosure] Lycos Ends AntiSpam Effort, Denies Downing Spam Sites james edwards (12/06/04)
    • Re: [Full-Disclosure] Lycos Ends AntiSpam Effort, Denies Downing Spam Sites Andrew Farmer (12/07/04)
      • Re: [Full-Disclosure] Lycos Ends AntiSpam Effort, Denies Downing Spam Sites n3td3v (12/07/04)
• [Full-Disclosure] makelovenotspam [dot] com n3td3v (12/06/04)
  • Re: [Full-Disclosure] makelovenotspam [dot] com Constantin Hofstetter (12/06/04)
• [Full-Disclosure] [ GLSA 200412-03 ] imlib: Buffer overflows in image decoding Thierry Carrez (12/06/04)
• [Full-Disclosure] [ exploitwatch.org ] - Website now available as a RSS feed admin_at_exploitwatch.org (12/06/04)
• [VulnWatch] Multiple vulnerabilities in w3who ISAPI DLL Nicolas Gregoire (12/06/04)
• [Full-Disclosure] Re: [Advisory] Mozilla Products Remote Crash Vulnerability Berend-Jan Wever (12/06/04)
• [Full-Disclosure] [Advisory] Mozilla Products Remote Crash Vulnerability Niek van der Maas (12/06/04)
  • Re: [Full-Disclosure] [Advisory] Mozilla Products Remote Crash Vulnerability Kevin Finisterre (12/06/04)
    • Re: [Full-Disclosure] [Advisory] Mozilla Products Remote Crash Vulnerability Heikki Toivonen (12/07/04)
      • Re: [Full-Disclosure] [Advisory] Mozilla Products Remote Crash Vulnerability Juergen Schmidt (12/07/04)
      • Re: [Full-Disclosure] [Advisory] Mozilla Products Remote Crash Vulnerability Heikki Toivonen (12/07/04)
• [Full-Disclosure] RE: [Full-Disclosure]Core Wars and If Lycos can attack spammer sites, can we all start doing it? Clairmont, Jan M (12/06/04)
• [Full-Disclosure] Disclosure of local file content in Mozilla Firefox and Opera Giovanni Delvecchio (12/06/04)
  • Re: [Full-Disclosure] Disclosure of local file content in Mozilla Firefox and Opera Juergen Schmidt (12/06/04)
  • RE: [Full-Disclosure] Disclosure of local file content in Mozilla Firefox and Opera Thor Larholm (12/06/04)
    • RE: [Full-Disclosure] Disclosure of local file content in Mozilla Firefox and Opera Giovanni Delvecchio (12/07/04)
• [Full-Disclosure] Multiple vulnerabilities in w3who ISAPI DLL Nicolas Gregoire (12/06/04)
  • [VulnWatch] Re: [Full-Disclosure] Multiple vulnerabilities in w3who ISAPI DLL Nicolas Gregoire (12/08/04)
  • Re: [Full-Disclosure] Multiple vulnerabilities in w3who ISAPI DLL Nicolas Gregoire (12/08/04)
• [Full-Disclosure] Winamp - Buffer Overflow In IN_CDDA.dll [ Patch Released ] Brett Moore (12/06/04)
• [Full-Disclosure] [SECURITY] [DSA 605-1] New viewcvs packages fix information leak debian-security-announce_at_lists.debian.org (12/06/04)
• Fwd: Re: [Full-Disclosure] If Lycos can attack spammer sites, can we all start doing it? Stephen Hunt (12/06/04)
• [Full-Disclosure] new winamp is out David Vincent (12/06/04)
• Re: [Full-Disclosure] Format string flaw in VMWare Workstation 4.5.2 build-8848. BillyBob (12/05/04)
• [Full-Disclosure] Digest authentication share brute Max Moser (12/05/04)
• [Full-Disclosure] [ GLSA 200412-02 ] PDFlib: Multiple overflows in the included TIFF library Luke Macken (12/05/04)
• [Full-Disclosure] Re: Phpbb id: 10701 update and Attachmodule add-on Directory Traversal ntx0f (12/05/04)
• [Full-Disclosure] secret message time Owned You (12/04/04)
  • Re: [Full-Disclosure] secret message time Gadi Evron (12/04/04)
    • Re: [Full-Disclosure] secret message time J.A. Terranson (12/05/04)
• [Full-Disclosure] wireless sniffing question question question (12/04/04)
  • Re: [Full-Disclosure] wireless sniffing question Cedric Blancher (12/04/04)
• [ GLSA 200412-01 ] rssh, scponly: Unrestricted command execution Thierry Carrez (12/03/04)
• [Full-Disclosure] [FLSA-2004:2148] Updated httpd, apache and mod_ssl packages fix security issues Marc Deslauriers (12/04/04)
• [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked n3td3v (12/03/04)
  • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Bob Smith (12/04/04)
    • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Bob Smith (12/04/04)
      • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Micah McNelly (12/04/04)
      • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Sean Harlow (12/04/04)
      • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Vincent Archer (12/06/04)
      • RE: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Michael Evanchik (12/06/04)
      • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Bart.Lansing_at_kohls.com (12/06/04)
      • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Pierre-Yves Bonnetain (12/06/04)
    • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Andrew Farmer (12/04/04)
    • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Andrew Farmer (12/04/04)
  • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Bob Smith (12/04/04)
  • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Tatercrispies (12/04/04)
  • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked J.A. Terranson (12/04/04)
    • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Jason (12/04/04)
      • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked bkfsec (12/06/04)
  • RE: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked xtrecate (12/04/04)
  • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Chris Umphress (12/04/04)
  • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Pavel Kankovsky (12/05/04)
    • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Devdas Bhagat (12/05/04)
  • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Valdis.Kletnieks_at_vt.edu (12/06/04)
    • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked dk (12/07/04)
  • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Tatercrispies (12/06/04)
  • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked dcdave_at_att.net (12/06/04)
    • Re: [Full-Disclosure] I'm calling for LycosEU heads and team to resign or be sacked Rob Carmichael (12/07/04)
• [Full-Disclosure] What to do with bot networks Conor Sibley (12/03/04)
  • Re: [Full-Disclosure] What to do with bot networks Paul Schmehl (12/03/04)
    • AW: [Full-Disclosure] What to do with bot networks Robert Marquardt (12/03/04)
  • Re: [Full-Disclosure] What to do with bot networks Ron DuFresne (12/05/04)
• [Full-Disclosure] iDEFENSE Security Advisory 12.03.2004: Apple Darwin Streaming Server DESCRIBE Null Byte Denial of Service Vulnerability idlabs-advisories_at_idefense.com (12/03/04)
• [Full-Disclosure] [ GLSA 200412-01 ] rssh, scponly: Unrestricted command execution Thierry Carrez (12/03/04)
• [Full-Disclosure] Gaim Festival Logoff Vulnerability <= 0.81 (1.03) Kristian Hermansen (12/03/04)
• [Full-Disclosure] Tool Announcement: AIRT -- the Advanced Incident Response Tool (linux) madsys (12/03/04)
• [Full-Disclosure] SUSE Security Announcement: cyrus-imapd (SUSE-SA:2004:043) Thomas Biege (12/03/04)
• [Full-Disclosure] RE: Official IFRAME patch - make sure it installs correctly Rivera Alonso, David (12/03/04)
• [Full-Disclosure] RE: Remote Mercury32 Imap exploit Randal, Phil (12/03/04)
• [Full-Disclosure] [SECURITY] [DSA 604-1] New hpsockd packages