Full-Disclosure

• Date Index

---

• [Full-disclosure] Monthly Hands-On Meetups, Professor Micheal Chatner
• [Full-disclosure] x0x0x? its a joke!, bussinessinbox box
  • Re: [Full-disclosure] x0x0x? its a joke!, Robert Holgstad
    • Re: [Full-disclosure] x0x0x? its a joke!, Thedjatclubrock
• [Full-disclosure] rPSA-2008-0264-1 ruby, rPath Update Announcements
• [Full-disclosure] [SECURITY] [DSA 1627-2] New opensc package fix incomplete check, Thijs Kinkhorst
• [Full-disclosure] [SECURITY] [DSA-1597-2] New mt-daapd package fix regression, Devin Carraway
• [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft, Fernando Gont
• [Full-disclosure] PoCfix (PoC for Postfix local root vuln - CVE-2008-2936), Roman Medina-Heigl Hernandez
• [Full-disclosure] Gustav, domain name reportage, n3td3v
  • Re: [Full-disclosure] Gustav, domain name reportage, n3td3v
    • Re: [Full-disclosure] Gustav, domain name reportage, n3td3v
      • Re: [Full-disclosure] Gustav, domain name reportage, n3td3v
      • Re: [Full-disclosure] Gustav, domain name reportage, Valdis . Kletnieks
      • Re: [Full-disclosure] Gustav, domain name reportage, n3td3v
      • Re: [Full-disclosure] Gustav, domain name reportage, Valdis . Kletnieks
      • Re: [Full-disclosure] Gustav, domain name reportage, n3td3v
      • Re: [Full-disclosure] Gustav, domain name reportage, Valdis . Kletnieks
      • Re: [Full-disclosure] Gustav, domain name reportage, n3td3v
      • Re: [Full-disclosure] Gustav, domain name reportage, Wesley McGrew
• [Full-disclosure] [PLSA 2008-33] [UPDATED] Opensc: Security Bypass, Pınar Yanardağ
• [Full-disclosure] [PLSA 2008-32] Mono: Cross Site Scripting, Pınar Yanardağ
• Re: [Full-disclosure] [inbox] Honeypot?, James Lay
• [Full-disclosure] x0x0x ? its a joke! a vendetta history.., bussinessinbox box
• [Full-disclosure] Honeypot?, James Lay
  • Re: [Full-disclosure] [inbox] Honeypot?, Exibar
• [Full-disclosure] hackmeeting: call for participation, bomboclat
• [Full-disclosure] Inside India’s CAPTCHA Solving Economy, Dancho Danchev
  • Re: [Full-disclosure] Inside India’s CAPTCHA Solving Economy, coderman
    • Re: [Full-disclosure] Inside India’s CAPTCHA Solving Economy, Paul Schmehl
      • Re: [Full-disclosure] Inside India’s CAPTCHA Solving Economy, Razi Shaban
      • Re: [Full-disclosure] Inside India’s CAPTCHA Solving Economy, n3td3v
      • Re: [Full-disclosure] Inside India’s CAPTCHA Solving Economy, Paul Schmehl
      • Re: [Full-disclosure] Inside India’s CAPTCHA Solving Economy, n3td3v
      • Re: [Full-disclosure] Inside India’s CAPTCHA Solving Economy, Valdis . Kletnieks
      • Re: [Full-disclosure] Inside India’s CAPTCHA Solving Economy, Raj Mathur
      • Re: [Full-disclosure] Inside India’s CAPTCHA Solving Economy, Raj Mathur
      • Re: [Full-disclosure] Inside India’s CAPTCHA Solving Economy, Razi Shaban
      • Re: [Full-disclosure] Inside India's CAPTCHA Solving Economy, Thedjatclubrock
• [Full-disclosure] VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues., VMware Security team
• [Full-disclosure] kings' tools, Kristo pher
• [Full-disclosure] [tool announce] KisGearth - optimized release..., Richard Sammet
• [Full-disclosure] [scip_Advisory 3807] Dreambox DM500 webserver long URL request denial of service, Marc Ruef
• [Full-disclosure] [ MDVSA-2008:181 ] ipsec-tools, security
• [Full-disclosure] ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability, zdi-disclosures
• [Full-disclosure] reviving the botnets@ mailing list: a new statregy in fighting cyber crime, Gadi Evron
  • Re: [Full-disclosure] reviving the botnets@ mailing list: a new statregy in fighting cyber crime, n3td3v
• [Full-disclosure] [USN-638-1] Yelp vulnerability, Kees Cook
• Re: [Full-disclosure] TCP Port randomization paper, Fernando Gont
• [Full-disclosure] [SECURITY] [DSA 1632-1] New tiff packages fix arbitrary code execution, Thijs Kinkhorst
• [Full-disclosure] White Wolf Labs #080826-1: Kyocera Mita Scanner File Utility (Multiple), Seth Fogie
• [Full-disclosure] [PLSA 2008-31] Tiff: Denial of Service, Pınar Yanardağ
• [Full-disclosure] test post, Jason Josno
  • Re: [Full-disclosure] DIE IN A FIRE post, M. Shirk
    • Re: [Full-disclosure] DIE IN A FIRE post, Simon Smith
      • Re: [Full-disclosure] DIE IN A FIRE post, Franck
      • Re: [Full-disclosure] DIE IN A FIRE post, Shirk Dog
      • Re: [Full-disclosure] DIE IN A FIRE post, John C. A. Bambenek, GCIH, CISSP
      • Re: [Full-disclosure] DIE IN A FIRE post, Randal T. Rioux
      • Re: [Full-disclosure] DIE IN A FIRE post, Simon Smith
      • Re: [Full-disclosure] DIE IN A FIRE post, James Matthews
      • Re: [Full-disclosure] DIE IN A FIRE post, mrdkaaa
  • Re: [Full-disclosure] test post, James Matthews
• [Full-disclosure] [ MDVSA-2008:180-1 ] libxml2, security
• [Full-disclosure] PacSec 2008 CFP   (Deadline Sept. 1, Conference Nov. 12/13) and BA-Con 2008 Speakers (Sept. 30/  Oct. 1)PacSec 2008 CFP (Deadline Sept. 1, Conference Nov. 12/13) and BA-Con 2008 Speakers (Sept. 30/ Oct. 1), Dragos Ruiu
• Re: [Full-disclosure] ISO Standards], Carlos Sahuquillo
• [Full-disclosure] news from Network Security Research, John Wane
• [Full-disclosure] [USN-637-1] Linux kernel vulnerabilities, Kees Cook
• [Full-disclosure] Secunia Research: Calendarix Basic Two SQL Injection Vulnerabilities, Secunia Research
• [Full-disclosure] [IVIZ-08-001] Microsoft Bitlocker Plain Text Password Disclosure, iViZ Security Advisories
  • Re: [Full-disclosure] [IVIZ-08-001] Microsoft Bitlocker Plain Text Password Disclosure, KJK::Hyperion
  • <Possible follow-ups>
  • Re: [Full-disclosure] [IVIZ-08-001] Microsoft Bitlocker Plain Text Password Disclosure, Juha-Matti Laurio
    • Re: [Full-disclosure] [IVIZ-08-001] Microsoft Bitlocker Plain Text Password Disclosure, James Matthews
• [Full-disclosure] SQL Injection Vulnerability in BtiTracker and xbtit, Valery Marchuk
• [Full-disclosure] [IVIZ-08-008] LILO Security Model bypass exploiting wrong BIOS API usage, iViZ Security Advisories
• [Full-disclosure] Secunia Research: Novell iPrint Client ActiveX Control "GetFileList()" Information Disclosure, Secunia Research
• [Full-disclosure] Secunia Research: Novell iPrint Client ActiveX Control Multiple Buffer Overflows, Secunia Research
• [Full-disclosure] [IVIZ-08-007] DriveCrypt Security Model bypass exploiting wrong BIOS API usage, iViZ Security Advisories
• [Full-disclosure] [IVIZ-08-003] TrueCrypt Security Model bypass exploiting wrong BIOS API usage, iViZ Security Advisories
• [Full-disclosure] [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage, iViZ Security Advisories
  • [Full-disclosure] ISO Standards, Basha, Arif
    • Re: [Full-disclosure] ISO Standards, Line Noise
      • Re: [Full-disclosure] ISO Standards, Tonnerre Lombard
      • Re: [Full-disclosure] ISO Standards, M . B . Jr .
      • Re: [Full-disclosure] ISO Standards, James Matthews
• [Full-disclosure] [IVIZ-08-002] Hewlett-Packard BIOS Plain Text Password Disclosure, iViZ Security Advisories
• [Full-disclosure] [IVIZ-08-006] DiskCryptor Security Model bypass exploiting wrong BIOS API usage, iViZ Security Advisories
• [Full-disclosure] [IVIZ-08-005] IBM Lenovo BIOS Plain Text Password Disclosure, iViZ Security Advisories
• [Full-disclosure] [IVIZ-08-004] Intel BIOS Plain Text Password Disclosure, iViZ Security Advisories
• [Full-disclosure] [PLSA 2008-30] Vim: Arbitrary code execution, Pınar Yanardağ
• [Full-disclosure] [PLSA 2008-29] Vlc: Multiple Vulnerabilities, Pınar Yanardağ
• [Full-disclosure] [PLSA 2008-28] Libxml2: Denial of Service, Pınar Yanardağ
  • [Full-disclosure] [PLSA 2008-28] [Update] Libxml2: Denial of Service, Pınar Yanardağ
• Re: [Full-disclosure] Multiple XSS Vulnerabilities in Self Generate CMS (K?rast), devildeath1988
• [Full-disclosure] Call For Papers - Hackers 2 Hackers Conference 5th Edition - Brazil, Rodrigo Rubira Branco (BSDaemon)
• [Full-disclosure] Multiple XSS Vulnerabilities in Self Generate CMS, Kærast
• [Full-disclosure] libc/net inet_net_pton() integer overflow, Maksymilian Arciemowicz
• [Full-disclosure] Fwd: Hacker calls buddies overseas on U.S. government dime, n3td3v
  • Re: [Full-disclosure] Fwd: Hacker calls buddies overseas on U.S. government dime, James Matthews
    • Re: [Full-disclosure] Fwd: Hacker calls buddies overseas on U.S. government dime, n3td3v
      • Re: [Full-disclosure] Fwd: Hacker calls buddies overseas on U.S. government dime, Ureleet
  • Re: [Full-disclosure] Fwd: Hacker calls buddies overseas on U.S. government dime, Razi Shaban
• [Full-disclosure] Photo Cart 3.9 index.php "search" XSS, bug squash
• [Full-disclosure] [SECURITY] [DSA 1631-1] New libxml2 packages fix denial of service, Steve Kemp
  • [Full-disclosure] [SECURITY] [DSA 1631-1] New libxml2 packages fix denial of service, Steve Kemp
• [Full-disclosure] ACG-PTP 1.0.6 index.php persistent XSS, bug squash
• [Full-disclosure] Fedora confirms: Our servers were breached, Juha-Matti Laurio
  • Re: [Full-disclosure] Fedora confirms: Our servers were breached, coderman
    • Re: [Full-disclosure] Fedora confirms: Our servers were breached, James Matthews
  • Re: [Full-disclosure] Fedora confirms: Our servers were breached, Jerome Benoit
  • Re: [Full-disclosure] Fedora confirms: Our servers were breached, Dragos Ruiu
    • Re: [Full-disclosure] Fedora confirms: Our servers were breached, William McAfee
• [Full-disclosure] Vim: Arbitrary Code Execution in Commands: K, Control-], g], Jan Minář
  • Re: [Full-disclosure] Vim: Arbitrary Code Execution in Commands: K, Control-], g], staff
  • [Full-disclosure] Arbitrary Command Execution in Windows and Unix Shells., Bob Beck
  • Re: [Full-disclosure] Arbitrary Code Execution in Commands: K, Control-], g], Michael Wojcik
• [Full-disclosure] Contest: Best Advances for OpenVAS Network Vulnerability Tests, Michael Wiegand
• [Full-disclosure] Secunia Research: Trend Micro Products Web Management Authentication Bypass, Secunia Research
• [Full-disclosure] Announcement/OT: Ethical Hacking book release (Spanish), Security Lists
• [Full-disclosure] DXShopCart v4.30mc product search.php xss, bug squash
• [Full-disclosure] [SECURITY] [DSA 1630-1] New Linux 2.6.18 packages fix several vulnerabilities, dann frazier
• [Full-disclosure] rPSA-2008-0259-1 postfix, rPath Update Announcements
• [Full-disclosure] 0day services offer, Stephen Flaw
  • Re: [Full-disclosure] 0day services offer, Valdis . Kletnieks
  • Re: [Full-disclosure] 0day services offer, John Lamb
  • Re: [Full-disclosure] 0day services offer, Darkie Duck
    • Re: [Full-disclosure] 0day services offer, n3td3v
• [Full-disclosure] [ MDVSA-2008:180 ] libxml2, security
• [Full-disclosure] [ MDVSA-2008:179 ] metisse, security
• [Full-disclosure] DXShopCart V4.30mc search.php XSS, bug squash
• [Full-disclosure] UPDATE: [ GLSA 200804-22 ] PowerDNS Recursor: DNS Cache Poisoning, Robert Buchholz
• [Full-disclosure] Fujitsu Web-Based Admin View Directory Traversal Vulnerability, Deniz Cevik
• [Full-disclosure] Version-independent IOS shellcode, Andy Davis
• [Full-disclosure] Hacking OSPF with MD5 authentication enabled, Francois Ropert
  • Re: [Full-disclosure] Hacking OSPF with MD5 authentication enabled, GomoR
    • Re: [Full-disclosure] Hacking OSPF with MD5 authentication enabled, Francois Ropert
    • Re: [Full-disclosure] Hacking OSPF with MD5 authentication enabled, Francois Ropert
• [Full-disclosure] [ MDVSA-2008:178 ] xine-lib, security
• [Full-disclosure] [ MDVSA-2008:177 ] xine-lib, security
• [Full-disclosure] CORE-2008-0813 - vBulletin Cross Site Scripting Vulnerability, CORE Security Technologies Advisories
• [Full-disclosure] [ MDVSA-2008:176 ] mtr, security
• [Full-disclosure] [ MDVSA-2008:175 ] yelp, security
• [Full-disclosure] OWASP DirBuster 0.11.1 Released, James Fisher
  • Re: [Full-disclosure] OWASP DirBuster 0.11.1 Released, Robert Holgstad
    • Re: [Full-disclosure] OWASP DirBuster 0.11.1 Released, William McAfee
    • Re: [Full-disclosure] OWASP DirBuster 0.11.1 Released, Michael Krymson
      • Re: [Full-disclosure] OWASP DirBuster 0.11.1 Released, Tom Brennan
      • Re: [Full-disclosure] OWASP DirBuster 0.11.1 Released, James Matthews
• [Full-disclosure] BSQL Hacker 0.9.0.7 - Advanced SQL Injection Framework / Tool, Ferruh Mavituna
• [Full-disclosure] [ MDVSA-2008:174 ] kernel, security
• [Full-disclosure] [USN-636-1] Postfix vulnerability, Kees Cook
• [Full-disclosure] [ MDVSA-2008:173 ] kdegraphics, security
• [Full-disclosure] IMF 2008 - Call for Participation, Oliver Goebel
• [Full-disclosure] Denial of Service Survey, Tyler Reguly
• [Full-disclosure] Deep Blind SQL Injection Whitepaper, Ferruh Mavituna
  • Re: [Full-disclosure] Deep Blind SQL Injection Whitepaper, David Litchfield
    • Re: [Full-disclosure] Deep Blind SQL Injection Whitepaper, Ferruh Mavituna
      • Re: [Full-disclosure] Deep Blind SQL Injection Whitepaper, nummish
      • Re: [Full-disclosure] Deep Blind SQL Injection Whitepaper, Haroon Meer
  • Re: [Full-disclosure] Deep Blind SQL Injection Whitepaper, Sir Mordred
  • Re: [Full-disclosure] Deep Blind SQL Injection Whitepaper, Marco Slaviero
• [Full-disclosure] Introducing the Android Security Team, richc
• [Full-disclosure] [SECURITY] [DSA 1629-2] New postfix packages fix installability problem on i386, Thijs Kinkhorst
• [Full-disclosure] [SECURITY] [DSA 1629-1] New postfix packages fix privilege escalation, Thijs Kinkhorst
• [Full-disclosure] The Hacksaw Conspiracies, Phillip Tanner
  • Re: [Full-disclosure] The Hacksaw Conspiracies, T Biehn
  • Re: [Full-disclosure] The Hacksaw Conspiracies, William McAfee
• Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites, ff0000
  • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites, Peter Dawson
    • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites, Valdis . Kletnieks
      • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites, William McAfee
      • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites, Dave
      • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites, William McAfee
      • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites, n3td3v
      • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites, n3td3v
    • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites, coderman
• Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites, Paul Ferguson
  • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites, n3td3v
    • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites, William McAfee
• [Full-disclosure] Klueless Klowns Team PHP shell, Kristo pher
  • Re: [Full-disclosure] Klueless Klowns Team PHP shell, William McAfee
    • Re: [Full-disclosure] Klueless Klowns Team PHP shell, Andrew Farmer
• Re: [Full-disclosure] 0day offer, Jeffrey Starck
  • Re: [Full-disclosure] 0day offer, jeroen
• Re: [Full-disclosure] Full-Disclosure Digest, Vol 42, Issue 42, badr muhyeddin
  • Re: [Full-disclosure] Full-Disclosure Digest, Vol 42, Issue 42, William McAfee
• [Full-disclosure] Nokia 6131 NFC URI/URL Spoofing and DoS Advisory, Collin R. Mulliner
• [Full-disclosure] Linus summarizes state of the "security industry" with precision and accuracy., coderman
  • Re: [Full-disclosure] Linus summarizes state of the "security industry" with precision and accuracy., silky
  • Re: [Full-disclosure] Linus summarizes state of the "security industry" with precision and accuracy., Simon Valiquette
    • Re: [Full-disclosure] Linus summarizes state of the "security industry" with precision and accuracy., John C. A. Bambenek, GCIH, CISSP
      • Re: [Full-disclosure] Linus summarizes state of the "security industry" with precision and accuracy., Simon Valiquette
      • Re: [Full-disclosure] Linus summarizes state of the "security industry" with precision and accuracy., don bailey
      • Re: [Full-disclosure] Linus summarizes state of the "security industry" with precision and accuracy., Erik Harrison
      • Re: [Full-disclosure] Linus summarizes state of the "security industry" with precision and accuracy., don bailey
      • Re: [Full-disclosure] Linus summarizes state of the "security industry" with precision and accuracy., William McAfee
• [Full-disclosure] Beware the firefox ZERO DAYZZZZ, T Biehn
  • Re: [Full-disclosure] Beware the firefox ZERO DAYZZZZ, Thierry Zoller
  • <Possible follow-ups>
  • Re: [Full-disclosure] Beware the firefox ZERO DAYZZZZ, Memisyazici, Aras
• [Full-disclosure] Tool: PorkBind v1.3 Nameserver Security Scanner (New Version), Derek Callaway
• [Full-disclosure] [PLSA 2008-25] Postfix: Local privilege escalation, Pınar Yanardağ
• [Full-disclosure] [ MDVSA-2008:172 ] amarok, security
• [Full-disclosure] [ MDVSA-2008:171 ] postfix, security
• [Full-disclosure] Health website vulnerable to hacking, no response from admins after multiple attempts, Kristian Erik Hermansen
• [Full-disclosure] weev, baby, Gadi Evron
  • Re: [Full-disclosure] weev, baby, hERB
    • Re: [Full-disclosure] weev, baby, coderman
  • Re: [Full-disclosure] weev, baby, n3td3v
• [Full-disclosure] Call for Papers CFS, Frank Manley
• [Full-disclosure] rPSA-2008-0255-1 freetype, rPath Update Announcements
• [Full-disclosure] weev, baby, Tea Baggins
• [Full-disclosure] Cisco Security Advisory: Vulnerability in Cisco WebEx Meeting Manager ActiveX Control, Cisco Systems Product Security Incident Response Team
• [Full-disclosure] [PLSA 2008-24] Amarok: Privilege escalation, Pınar Yanardağ
• [Full-disclosure] [ GLSA 200808-12 ] Postfix: Local privilege escalation vulnerability, Raphael Marichez
• [Full-disclosure] ZDI-08-053: Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability, zdi-disclosures
• [Full-disclosure] Security Assessment of the Internet Protocol, Fernando Gont
  • Re: [Full-disclosure] Security Assessment of the Internet Protocol, Mark Brunner
• [Full-disclosure] ZDI-08-052: OpenLDAP BER Decoding Remote DoS Vulnerability, zdi-disclosures
• Re: [Full-disclosure] Funniest thing at DefCon this year..., ff0000
  • Re: [Full-disclosure] Funniest thing at DefCon this year..., baldr
• [Full-disclosure] SUSE Security Announcement: openwsman (SUSE-SA:2008:041), Thomas Biege
• [Full-disclosure] Cisco IOS Shellcodes, Gyan Chawdhary
• Re: [Full-disclosure] DNS forward only: why does it help?, Florian Weimer
• [Full-disclosure] SUSE Security Announcement: postfix (SUSE-SA:2008:040), Thomas Biege
• [Full-disclosure] SECOBJADV-2008-03: PartyGaming PartyPoker Malicious Update Vulnerability, advisories
• [Full-disclosure] ISOI 5 (Tallinn) agenda is now online, Gadi Evron
• [Full-disclosure] Coordinated Russia vs Georgia cyber attack in progress, Dancho Danchev
• [Full-disclosure] CORE-2008-0103: Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass, CORE Security Technologies Advisories
• [Full-disclosure] [funsec] Estonia similarities begin to manifest (fwd), Gadi Evron
• [Full-disclosure] [ MDVSA-2008:170 ] cups, security
  • [Full-disclosure] Funniest thing at DefCon this year..., Exibar
    • Re: [Full-disclosure] Funniest thing at DefCon this year..., North, Quinn
    • Re: [Full-disclosure] Funniest thing at DefCon this year..., Ureleet
      • [Full-disclosure] UPDATE!! Funniest thing at DefCon this year..., Exibar
• [Full-disclosure] [ MDVSA-2008:168 ] stunnel, security
• [Full-disclosure] Microsoft Windows Messenger Remote Illegal Access Vulnerability, cocoruder
• [Full-disclosure] [ MDVSA-2008:169 ] hplip, security
• [Full-disclosure] rPSA-2008-0243-1 idle python, rPath Update Announcements
• [Full-disclosure] NULL pointer in Ventrilo 3.0.2, Luigi Auriemma
• [Full-disclosure] IntelliTamper v2.07/2.08 Beta 4 A HREF sploit, kralor
• [Full-disclosure] OpenVAS Stable Release, Michael Wiegand
• [Full-disclosure] Storesonline, Ecommerce hosting solution - how to avoid mistakes that put your business at risk, Mister Nice Guy
• [Full-disclosure] iDefense Security Advisory 08.12.08: Microsoft Windows Color Management Module Heap Buffer Overflow Vulnerability, iDefense Labs
• [Full-disclosure] iDefense Security Advisory 08.12.08: Microsoft Excel FORMAT Record Invalid Array Index Vulnerability, iDefense Labs
• [Full-disclosure] iDefense Security Advisory 08.12.08: Microsoft Excel Chart AxesSet Invalid Array Index Vulnerability, iDefense Labs
• [Full-disclosure] iDefense Security Advisory 08.12.08: Microsoft PowerPoint Viewer 2003 Cstring Integer Overflow Vulnerability, iDefense Labs
• [Full-disclosure] iDefense Security Advisory 08.12.08: Microsoft PowerPoint Viewer 2003 Out of Bounds Array Index Vulnerability, iDefense Labs
• [Full-disclosure] iDefense Security Advisory 08.12.08: Microsoft Office WPG Image File Heap Buffer Overflow Vulnerability, iDefense Labs
• [Full-disclosure] [ MDVSA-2008:166 ] clamav, security
• [Full-disclosure] [ MDVSA-2008:167 ] kernel, security
• [Full-disclosure] iDefense Security Advisory 08.12.08: Microsoft Office BMP Input Filter Heap Overflow Vulnerability, iDefense Labs
• [Full-disclosure] Vim: Netrw: FTP User Name and Password Disclosure, Jan Minář
  • Re: [Full-disclosure] Vim: Netrw: FTP User Name and Password Disclosure, Tony Mechelynck
• [Full-disclosure] ZDI-08-051: Microsoft Internet Explorer Table Layout Memory Corruption Vulnerability, zdi-disclosures
• [Full-disclosure] ZDI-08-050: Microsoft Internet Explorer XHTML Rendering Memory Corruption Vulnerability, zdi-disclosures
• [Full-disclosure] ZDI-08-049: Microsoft Windows Graphics Rendering Engine PICT Heap Corruption, zdi-disclosures
• [Full-disclosure] ZDI-08-048: Microsoft Excel COUNTRY Record Memory Corruption Vulnerability, zdi-disclosures
• [Full-disclosure] Step-by-step instructions for debugging Cisco IOS using gdb, Andy Davis
  • <Possible follow-ups>
  • [Full-disclosure] Step-by-step instructions for debugging Cisco IOS using gdb, Smiler S
    • Re: [Full-disclosure] Step-by-step instructions for debugging Cisco IOS using gdb, Andrew Farmer
    • Re: [Full-disclosure] Step-by-step instructions for debugging Cisco IOS using gdb, Andy Davis
  • Re: [Full-disclosure] Step-by-step instructions for debugging Cisco IOS using gdb, Smiler D
• [Full-disclosure] [TKADV2008-006] CA HIPS KmxFw.sys Kernel Memory Corruption, Tobias Klein
• [Full-disclosure] rPSA-2008-0253-1 git gitweb, rPath Update Announcements
• Re: [Full-disclosure] Petko D. Petkov hacked?, Squadron of Justice
• [Full-disclosure] selling 0-day, jeremie travis
  • Message not available
    • Re: [Full-disclosure] selling 0-day, jeremie travis
• [Full-disclosure] selling, jeremie travis
• [Full-disclosure] CA Host-Based Intrusion Prevention System SDK kmxfw.sys Multiple Vulnerabilities, Williams, James K
• [Full-disclosure] VMSA-2008-0013 Updated ESX packages for OpenSSL, net-snmp, perl, VMware Security Team
• [Full-disclosure] VMSA-2008-0012 Updated VirtualCenter addresses User Account Disclosure Vulnerability, VMware Security Team
• [Full-disclosure] Thanks Maynor., staff
  • Re: [Full-disclosure] Thanks Maynor., Sandy ***
  • Re: [Full-disclosure] Thanks Maynor., Robert Holgstad
• [Full-disclosure] iDefense Security Advisory 08.04.08: Solaris snoop SMB Decoding Multiple Format String Vulnerabilities, iDefense Labs
• [Full-disclosure] Fwd: Comments on: Alleged NASA hacker gets temporary reprieve, n3td3v
  • Re: [Full-disclosure] Fwd: Comments on: Alleged NASA hacker gets temporary reprieve, Ureleet
• [Full-disclosure] iDefense Security Advisory 08.04.08: Solaris snoop SMB Decoding Multiple Stack Buffer Overflow Vulnerabilities, iDefense Labs
• [Full-disclosure] children of the daycare of justice little league, Tea Baggins
• [Full-disclosure] ISP's confirm '2012: The Year The Internet Ends', energy
• [Full-disclosure] Secret Plan To Kill Internet By 2012 Leaked?, energy
• [Full-disclosure] StumbleUpon XSS (fixed), Berend-Jan Wever
  • Re: [Full-disclosure] StumbleUpon XSS (fixed), Robert Holgstad
• [Full-disclosure] Layered Defense Research Advisory: Alcatel-Lucent OmniSwitch products, Stack Buffer Overflow, Deral Heiland
• Re: [Full-disclosure] [Suspected Junk Mail] Re: Petko D. Petkov hacked?, Squadron of Justice
• [Full-disclosure] ekoparty 2008 - [First Round of Selection] - [Argentina], ekoparty
• [Full-disclosure] Ukraine?, Drop Drop
• [Full-disclosure] [PLSA 2008-22] Php: Multiple Overflows, Pınar Yanardağ
• [Full-disclosure] [PLSA 2008-21] Ruby: Multiple Vulnerabilities, Pınar Yanardağ
• [Full-disclosure] rPSA-2008-0247-1 gvim vim vim-minimal, rPath Update Announcements
• [Full-disclosure] rPSA-2008-0249-1 openldap openldap-clients openldap-servers, rPath Update Announcements
• [Full-disclosure] [ MDVSA-2008:165 ] perl, security
• [Full-disclosure] [ GLSA 200808-11 ] UUDeview: Insecure temporary file creation, Pierre-Yves Rofes
• [Full-disclosure] George Ledin virus material training Request., Jun...
  • Re: [Full-disclosure] George Ledin virus material training Request., Robert Holgstad
• [Full-disclosure] Surf Jack - HTTPS will not save you, Sandro Gauci
  • Re: [Full-disclosure] Surf Jack - HTTPS will not save you, coderman
    • Re: [Full-disclosure] Surf Jack - HTTPS will not save you, Noam Rathaus
• [Full-disclosure] anyone developing a secure telephony application for GSM CSD?, Fabio Pietrosanti (naif)
• [Full-disclosure] Inguma version 0.0.9 released, Joxean Koret
• Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, Paul Ferguson
  • <Possible follow-ups>
  • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, Paul Ferguson
    • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, John C. A. Bambenek, GCIH, CISSP
      • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, n3td3v
      • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, Valdis . Kletnieks
      • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, Robert Marquardt
      • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, n3td3v
    • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, Gadi Evron
    • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, Radoslav Dejanović
      • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, Static Rez
      • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, William McAfee
      • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, William McAfee
  • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, Paul Ferguson
    • Re: [Full-disclosure] [funsec] Internet attacks against Georgian web sites, Gadi Evron
• [Full-disclosure] Internet attacks against Georgian web sites, Gadi Evron
  • Re: [Full-disclosure] Internet attacks against Georgian web sites, n3td3v
  • Re: [Full-disclosure] Internet attacks against Georgian web sites, Gadi Evron
  • <Possible follow-ups>
  • Re: [Full-disclosure] Internet attacks against Georgian web sites, Viktor Larionov
    • Re: [Full-disclosure] Internet attacks against Georgian web sites, n3td3v
      • Message not available
      • Re: [Full-disclosure] Internet attacks against Georgian web sites, n3td3v
      • Re: [Full-disclosure] Internet attacks against Georgian web sites, Pavel Labushev
      • Re: [Full-disclosure] Internet attacks against Georgian web sites, n3td3v
      • Re: [Full-disclosure] Internet attacks against Georgian web sites, Ureleet
• [Full-disclosure] [SECURITY] [DSA 1627-1] New PowerDNS packages reduce DNS spoofing risk, Florian Weimer
• Re: [Full-disclosure] Internet justice delivered [UPDATE ON M. ROTHMAN AND ALAN], Squadron of Justice
  • Re: [Full-disclosure] Internet justice delivered [UPDATE ON M. ROTHMAN AND ALAN], Ureleet
• Re: [Full-disclosure] Internet justice delivered, criminals panic and run in despair, Squadron of Justice
  • <Possible follow-ups>
  • Re: [Full-disclosure] Internet justice delivered, criminals panic and run in despair, Squadron of Justice
• [Full-disclosure] Internet justice delivered, criminals panic and run in despair, alan shimel
  • Re: [Full-disclosure] Internet justice delivered, criminals panic and run in despair, Night Ninja
    • Re: [Full-disclosure] Internet justice delivered, criminals panic and run in despair, alan shimel
      • Re: [Full-disclosure] Internet justice delivered, criminals panic and run in despair, Valdis . Kletnieks
• [Full-disclosure] I'm going to Internet Jail, framed by Squadron of Justice, alan shimel
• [Full-disclosure] what happened to fd??.. even eff cant save it??., Joel Jose
  • Re: [Full-disclosure] what happened to fd??.. even eff cant save it??., coderman
• [Full-disclosure] Latest judgement by Internet Justice Court: Still insecure, after all these years., Squadron of Justice
• [Full-disclosure] [ GLSA 200808-10 ] Adobe Reader: User-assisted execution of arbitrary code, Robert Buchholz
• [Full-disclosure] Emergency DNS Patch Still Vulnerable, Proves Russian Physicist, n3td3v
  • Re: [Full-disclosure] Emergency DNS Patch Still Vulnerable, Proves Russian Physicist, Valdis . Kletnieks
    • Re: [Full-disclosure] Emergency DNS Patch Still Vulnerable, Proves Russian Physicist, Paul Schmehl
• [Full-disclosure] List Charter, John Cartwright
• [Full-disclosure] Brazilian Bank (Caixa Economica Federal) Stupid Vuln #02 (Opera's Style), H2G-Labs Information Security
• [Full-disclosure] For great justice. new mirrors of PdP mailbox, Squadron of Justice
  • <Possible follow-ups>
  • Re: [Full-disclosure] For great justice. new mirrors of PdP mailbox, Squadron of Justice
• [Full-disclosure] c99 shell anyone?, Kristo pher
• [Full-disclosure] Great Council of Internet Superheros, n3td3v
  • Re: [Full-disclosure] Great Council of Internet Superheros, Ureleet
  • <Possible follow-ups>
  • Re: [Full-disclosure] Great Council of Internet Superheros, n3td3v
• [Full-disclosure] [ GLSA 200808-09 ] OpenLDAP: Denial of Service vulnerability, Raphael Marichez
• [Full-disclosure] [ GLSA 200808-08 ] stunnel: Security bypass, Raphael Marichez
• [Full-disclosure] [ GLSA 200808-07 ] ClamAV: Multiple Denials of Service, Raphael Marichez
• [Full-disclosure] Internet Justice #1 August 2008 (Part 9/10), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 8/10), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 7/10), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 10/10), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 2/10), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 5/10), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 6/10), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 4/10), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 3/10), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 1/10), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 6/7), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 5/7), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 4/7), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 3/7), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 2/7), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 7/7), Great Council of Internet Superheros
• [Full-disclosure] Internet Justice #1 August 2008 (Part 1/7), Great Council of Internet Superheros
  • <Possible follow-ups>
  • [Full-disclosure] Internet Justice #1 August 2008 (Part 1/7), Great Council of Internet Superheros
  • [Full-disclosure] Internet Justice #1 August 2008 (Part 1/7), Great Council of Internet Superheros
• Re: [Full-disclosure] [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory, Peter Williams
  • <Possible follow-ups>
  • Re: [Full-disclosure] [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory, Peter Williams
• [Full-disclosure] Squadron of Justice to the rescue, Great Council of Internet Superheros
  • <Possible follow-ups>
  • [Full-disclosure] Squadron of Justice to the rescue, Great Council of Internet Superheros
• [Full-disclosure] Vim: Unfixed Vulnerabilities in Tar Plugin Version 20, Jan Minář
• [Full-disclosure] Vim 7.2c.002 Fixes Arbitrary Command Execution when Handling Tar Archives, Jan Minář
• [Full-disclosure] Petko D. Petkov, Honeynet and Tom Ferris featured on an Internet Justice magazine, Great Council of Internet Superheros
• Re: [Full-disclosure] [Suspected Junk Mail] Re: Petko D. Petkov files unleashed, guilty by Internet council, Great Council of Internet Superheros
• [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Ben Laurie
  • Re: [Full-disclosure] [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory, Gerald Beuchelt
  • Re: [Full-disclosure] [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory, Eddy Nigg (StartCom Ltd.)
    • Re: [Full-disclosure] [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory, Ben Laurie
      • Re: [Full-disclosure] [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory, Eddy Nigg (StartCom Ltd.)
      • Re: [Full-disclosure] [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory, Ben Laurie
      • Re: [Full-disclosure] [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory, Eddy Nigg (StartCom Ltd.)
  • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Eric Rescorla
    • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Dave Korn
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Eric Rescorla
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Ben Laurie
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Perry E. Metzger
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Nicolas Williams
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Paul Hoffman
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Nicolas Williams
      • Re: [Full-disclosure] [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory, Dick Hardt
      • Re: [Full-disclosure] [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory, Gerald Beuchelt
      • Re: [Full-disclosure] [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory, Eddy Nigg (StartCom Ltd.)
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Dave Korn
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Dan Guido
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Jin Sei
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Peter Gutmann
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Dan Kaminsky
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Eric Rescorla
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Florian Weimer
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Nicolas Williams
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Leichter, Jerry
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Eric Rescorla
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Leichter, Jerry
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Forrest J. Cavalier III
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Seth Breidbart
      • [Full-disclosure] key blacklisting & file size (was: OpenID/Debian PRNG/DNS Cache poisoning advisory), Solar Designer
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Tim Dierks
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Ben Laurie
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Tim Dierks
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Stefan Kanthak
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Leichter, Jerry
    • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Clausen, Martin (DK - Copenhagen)
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Ben Laurie
      • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Ben Laurie
  • <Possible follow-ups>
  • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, "Hal Finney"
    • Re: [Full-disclosure] OpenID/Debian PRNG/DNS Cache poisoning advisory, Ben Laurie
• [Full-disclosure] [ MDVSA-2008:164 ] python, security
• [Full-disclosure] [ MDVSA-2008:163 ] python, security
• [Full-disclosure] [ MDVSA-2008:162 ] qemu, security
• [Full-disclosure] [ MDVSA-2008:161 ] rxvt, security
• [Full-disclosure] When will they ever get it !?!?!?!, wilder_jeff Wilder
• [Full-disclosure] question, Dennis Yurichev
  • Re: [Full-disclosure] question, Valdis . Kletnieks
    • Re: [Full-disclosure] question, James Matthews
  • <Possible follow-ups>
  • [Full-disclosure] question, Dennis Yurichev
    • Re: [Full-disclosure] question, James Matthews
• [Full-disclosure] facebook messages worm, Gadi Evron
  • Re: [Full-disclosure] [funsec] facebook messages worm, John C. A. Bambenek, GCIH, CISSP
  • Re: [Full-disclosure] [funsec] facebook messages worm, Gadi Evron
  • Re: [Full-disclosure] [funsec] facebook messages worm, Gadi Evron
• [Full-disclosure] No subject, az-guy
  • Re: [Full-disclosure] No subject, James Matthews
• [Full-disclosure] infected file ( can someone please report and take it down ? ), Dr. Mark A. Baiter [Chief Scatological Consultant]
• [Full-disclosure] Apache HTTP Server mod_proxy_ftp Wildcard Characters Cross-Site Scripting, Marc Bevand
• [Full-disclosure] Whitepaper: DNS zone redelegation, Bernhard Mueller
• Re: [Full-disclosure] [funsec] facebook messages worm, Juha-Matti Laurio
  • Re: [Full-disclosure] [funsec] facebook messages worm, Gadi Evron
  • <Possible follow-ups>
  • Re: [Full-disclosure] [funsec] facebook messages worm, Juha-Matti Laurio
• [Full-disclosure] Kaminsky Quittinq? Coffee Shop Inevitable?, InfoSec DramaReport
  • Re: [Full-disclosure] Kaminsky Quittinq? Coffee Shop Inevitable?, Paul Schmehl
• [Full-disclosure] More information on Petko D. Petkov, Great Council of Internet Superheros
• [Full-disclosure] GNUCITIZEN Stumbleupon account revised, Great Council of Internet Superheros
• [Full-disclosure] Petko D. Petkov files unleashed, guilty by Internet council, internetsuperheros
  • <Possible follow-ups>
  • [Full-disclosure] Petko D. Petkov files unleashed, guilty by Internet council, internetsuperheros
• [Full-disclosure] [PLSA 2008-19] Git: Multiple Buffer Overflows, Pınar Yanardağ
• [Full-disclosure] [PLSA 2008-18] Pidgin: Spoofing Vulnerability, Pınar Yanardağ
• [Full-disclosure] Endless loop and resources consumption in Halo 1.0.7.0615, Luigi Auriemma
• [Full-disclosure] [ GLSA 200808-06 ] libxslt: Execution of arbitrary code, Tobias Heinlein
• [Full-disclosure] [ GLSA 200808-05 ] ISC DHCP: Denial of Service, Tobias Heinlein
• [Full-disclosure] offering 0day, Jeffrey Starck
• [Full-disclosure] [USN-635-1] xine-lib vulnerabilities, Jamie Strandboge
• [Full-disclosure] Webex atucfobj Module ActiveX Control Buffer Overflow Vulnerability, Elazar Broad
• [Full-disclosure] CA Products That Embed Ingres Multiple Vulnerabilities, Williams, James K
• [Full-disclosure] Google Notebook and Google Bookmarks Cross Site Scripting Vulnerabilities, Alfredo Melloni
• [Full-disclosure] rPSA-2008-0246-1 gaim, rPath Update Announcements
• [Full-disclosure] rPSA-2008-0245-1 cups, rPath Update Announcements
• [Full-disclosure] Check this out, Manu Chao
• [Full-disclosure] McAfee + FUD ?, r0tten c0re
• [Full-disclosure] [ GLSA 200808-04 ] Wireshark: Denial of Service, Robert Buchholz
• [Full-disclosure] [ GLSA 200808-03 ] Mozilla products: Multiple vulnerabilities, Robert Buchholz
• [Full-disclosure] [ GLSA 200808-02 ] Net-SNMP: Multiple vulnerabilities, Robert Buchholz
• Re: [Full-disclosure] Nominate Dan Kaminsky for Most Overhyped Bug Pwnie Award, Ureleet
• Re: [Full-disclosure] Re : CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit, Ureleet
• Re: [Full-disclosure] Fwd: Are Bug Disclosures Helping or Hurting?, Ureleet
• Re: [Full-disclosure] Kaminsky's Law, Pavel Kankovsky
  • <Possible follow-ups>
  • Re: [Full-disclosure] Kaminsky's Law, Ureleet
    • Re: [Full-disclosure] Kaminsky's Law, TJ
• [Full-disclosure] [ GLSA 200808-01 ] xine-lib: User-assisted execution of arbitrary code, Robert Buchholz
• [Full-disclosure] (no subject), Bernhard Mueller
  • Re: [Full-disclosure] (no subject), Ureleet
    • Re: [Full-disclosure] (no subject), Bernhard Mueller
  • <Possible follow-ups>
  • [Full-disclosure] (no subject), ff0000
    • Re: [Full-disclosure] (no subject), Ureleet
    • Re: [Full-disclosure] (no subject), Valdis . Kletnieks
• [Full-disclosure] Interesting things at sec-consult.com, DNS-whitepaper available tomorrow, Bernhard Mueller
• [Full-disclosure] Fwd: Comment on: Microsoft to give partners heads-up on security vulnerabilities, n3td3v
  • Re: [Full-disclosure] Fwd: Comment on: Microsoft to give partners heads-up on security vulnerabilities, Ureleet
• [Full-disclosure] CORE-2008-0716 - Sun xVM VirtualBox Privilege Escalation Vulnerability, CORE Security Technologies Advisories
• [Full-disclosure] more rehashes of xss & 'evil gif', Robert Holgstad
  • Re: [Full-disclosure] more rehashes of xss & 'evil gif', raining lulz
  • Re: [Full-disclosure] more rehashes of xss & 'evil gif', n3td3v
• [Full-disclosure] phish war game, lsi
  • Re: [Full-disclosure] phish war game, Biz Marqee
  • Re: [Full-disclosure] phish war game, blah
• [Full-disclosure] New info tool available at freewebtown.com/sombra6/info.php now, Kristo pher
• [Full-disclosure] Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN), Team SHATTER
  • Re: [Full-disclosure] Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN), Memisyazici, Aras
    • Re: [Full-disclosure] Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN), Team SHATTER
• [Full-disclosure] Team SHATTER Security Advisory: Cross-site scripting in Oracle Enterprise Manager (REFRESHCHOICE Parameter), Team SHATTER
• [Full-disclosure] Team SHATTER Security Advisory: Cross-site scripting in Oracle Enterprise Manager (REFRESHHOME Parameter), Team SHATTER
• [Full-disclosure] Team SHATTER Security Advisory: SQL Injection in Oracle Application Server (WWEXP_API_ENGINE), Team SHATTER
• [Full-disclosure] free static analysis tool for c/c++, modversion
  • Re: [Full-disclosure] free static analysis tool for c/c++, Dean Pierce
    • Re: [Full-disclosure] free static analysis tool for c/c++, Fionnbharr
      • Re: [Full-disclosure] free static analysis tool for c/c++, modversion
  • Re: [Full-disclosure] free static analysis tool for c/c++, KJK::Hyperion
    • Re: [Full-disclosure] free static analysis tool for c/c++, modversion
      • Re: [Full-disclosure] free static analysis tool for c/c++, KJK::Hyperion
      • Re: [Full-disclosure] free static analysis tool for c/c++, modversion
• [Full-disclosure] [USN-626-2] Devhelp, Epiphany, Midbrowser and Yelp update, Jamie Strandboge
• [Full-disclosure] ASCII Art shellcode, Berend-Jan Wever
• [Full-disclosure] Alphanumeric Shellcode Encoding and Detection, Avraham Moshe Schneider
  • <Possible follow-ups>
  • Re: [Full-disclosure] Alphanumeric Shellcode Encoding and Detection, Avraham Moshe Schneider
    • Re: [Full-disclosure] Alphanumeric Shellcode Encoding and Detection, Avraham Schneider
      • Re: [Full-disclosure] Alphanumeric Shellcode Encoding and Detection, Avraham Schneider
      • Re: [Full-disclosure] Alphanumeric Shellcode Encoding and Detection, Avraham Schneider
• [Full-disclosure] [SECURITY] [DSA 1627-1] New opensc packages fix smart card vulnerability, Thijs Kinkhorst
• Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, n3td3v
  • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, Valdis . Kletnieks
    • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, n3td3v
      • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, Valdis . Kletnieks
      • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, n3td3v
      • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, Valdis . Kletnieks
      • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, n3td3v
      • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, Valdis . Kletnieks
      • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, TJ
      • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, Paul Schmehl
      • Re: [Full-disclosure] Media backlash ... insane?, TJ
      • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, Anders B Jansson
      • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, scott
      • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, Ureleet
      • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, jf
      • Re: [Full-disclosure] Media backlash begins against HD Moore and I)ruid, n3td3v
• Re: [Full-disclosure] how to request a cve id?, William A. Rowe, Jr.
• Re: [Full-disclosure] simple phishing fix, lsi
• [Full-disclosure] ArpON detects and blocks Arp Poisoning/Spoofing attacks, Andrea Di Pasquale
• [Full-disclosure] Server termination in America's Army 2.8.3.1, Luigi Auriemma
• [Full-disclosure] iDefense Security Advisory 08.01.08: Ingres Database for Linux ingvalidpw Untrusted Library Path Vulnerability, iDefense Labs
• [Full-disclosure] iDefense Security Advisory 08.01.08: Ingres Database for Linux libbecompat Stack Based Buffer Overflow Vulnerability, iDefense Labs
• [Full-disclosure] iDefense Security Advisory 08.01.08: Ingres Database for Linux verifydb Insecure File Permissions Modification Vulnerability, iDefense Labs
• [Full-disclosure] [ MDVSA-2008:160 ] libxslt, security
• [Full-disclosure] Fwd: Black Hat talk on Apple encryption cancelled, n3td3v
• [Full-disclosure] iDefense Security Advisory 07.31.08: Apple Mac OS X CoreGraphics PDF Type1 Font Integer Overflow Vulnerability, iDefense Labs
• [Full-disclosure] n.runs-SA-2008.005 - Apple Inc. - CoreServices Framework’s CarbonCore Framework - Arbitrary Code Execution (remote), security@xxxxxxxxx
• [Full-disclosure] DNS Multiple Race Exploiting Tool, AR
• [Full-disclosure] Tool Release: ProcL - Detect Hidden Process, Pallav Khandhar
• [Full-disclosure] [SECURITY] [DSA 1626-1] New httrack packages fix arbitrary code execution, Thijs Kinkhorst
• [Full-disclosure] [SECURITY] [DSA 1625-1] New cupsys packages fix arbitrary code execution, Thijs Kinkhorst
• [Full-disclosure] [USN-634-1] OpenLDAP vulnerability, Kees Cook
• [Full-disclosure] [USN-633-1] libxslt vulnerabilities, Kees Cook
• [Full-disclosure] [USN-632-1] Python vulnerabilities, Kees Cook
• [Full-disclosure] SUSE Security Announcement: net-snmp (SUSE-SA:2008:039), Thomas Biege
• [Full-disclosure] CA ARCserve Backup for Laptops and Desktops Server LGServer Service Vulnerability, Williams, James K
• [Full-disclosure] Re DNS spoofing issue discussion, Mary and Glenn Everhart
  • Re: [Full-disclosure] Re DNS spoofing issue discussion, don bailey
    • Re: [Full-disclosure] Re DNS spoofing issue discussion, Paul Schmehl
      • Re: [Full-disclosure] Re DNS spoofing issue discussion, don bailey
      • Re: [Full-disclosure] Re DNS spoofing issue discussion, Paul Schmehl
      • Re: [Full-disclosure] Re DNS spoofing issue discussion, don bailey
• [Full-disclosure] [ GLSA 200807-16 ] Python: Multiple vulnerabilities, Robert Buchholz

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > Full-Disclosure  > 2008-08