Full Disclosure: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

744 messages starting Apr 01 07 and ending Apr 30 07
Date index | Thread index | Author index

• April 1 joke V Comics (Apr 01)
  • Re: April 1 joke Jason Miller (Apr 01)
    • Re: April 1 joke James Matthews (Apr 01)
      • Re: April 1 joke Matti Ranta (Apr 01)
      • Re: April 1 joke Dude VanWinkle (Apr 01)
• Maria Sharapova is a Cisco Certified Specialist Valery Marchuk (Apr 01)
• Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 01)
  • Re: Windows .ANI LoadAniIcon Stack Overflow dev code (Apr 01)
    • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 01)
      • Re: Windows .ANI LoadAniIcon Stack Overflow ad () heapoverflow com (Apr 01)
      • Re: Windows .ANI LoadAniIcon Stack Overflow ad () heapoverflow com (Apr 01)
      • Re: Windows .ANI LoadAniIcon Stack Overflow -> Its ok, its in IE Protected Mode Haroon Meer (Apr 01)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Dave Aitel (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 01)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Alexander Sotirov (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Thierry Zoller (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Jason Areff (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Jason Areff (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Morning Wood (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Thierry Zoller (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Thierry Zoller (Apr 02)
      • Message not available
      • Re: Windows .ANI LoadAniIcon Stack Overflow Thierry Zoller (Apr 02)
      • Message not available
      • Message not available
      • Re: Windows .ANI LoadAniIcon Stack Overflow Michele Cicciotti (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow George Ou (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow George Ou (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Alexander Sotirov (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow George Ou (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Alexander Sotirov (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow George Ou (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Alexander Sotirov (Apr 02)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 03)
      • Re: Windows .ANI LoadAniIcon Stack Overflow George Ou (Apr 03)
      • Re: Windows .ANI LoadAniIcon Stack Overflow ad () heapoverflow com (Apr 03)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Daniel Veditz (Apr 03)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 03)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Alexander Sotirov (Apr 03)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 03)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Alexander Sotirov (Apr 03)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 03)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Peter Ferrie (Apr 04)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Michal Majchrowicz (Apr 08)
      • Re: Windows .ANI LoadAniIcon Stack Overflow wac (Apr 08)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Michal Majchrowicz (Apr 10)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Brooks, Shane (Apr 10)
      • Re: Windows .ANI LoadAniIcon Stack Overflow Knud Erik Højgaard (Apr 10)
  • Re: Windows .ANI LoadAniIcon Stack Overflow wac (Apr 01)
    • Re: Windows .ANI LoadAniIcon Stack Overflow Chris Lyon (Apr 01)
      • Re: Windows .ANI LoadAniIcon Stack Overflow dev code (Apr 01)
  • Re: Windows .ANI LoadAniIcon Stack Overflow Goodfellas Research Security Team - Callax (Apr 01)
    • Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 01)
  • <Possible follow-ups>
  • Re: Windows .ANI LoadAniIcon Stack Overflow George Ou (Apr 01)
    • Re: Windows .ANI LoadAniIcon Stack Overflow James Matthews (Apr 01)
  • Re: Windows .ANI LoadAniIcon Stack Overflow Kristian Hermansen (Apr 02)
  • Re: Windows .ANI LoadAniIcon Stack Overflow KJKHyperion (Apr 02)
• Norton Multiple insufficient argument validation of hooked SSDT function Vulnerability Matousec - Transparent security Research (Apr 01)
• Kcpentrix 2.0 is Out !! Fred (Apr 01)
• Re: Busting The Bluetooth Myth Giorgio Fedon (Apr 01)
  • Re: Busting The Bluetooth Myth jf (Apr 01)
    • Re: Busting The Bluetooth Myth Giorgio Fedon (Apr 01)
      • Re: Busting The Bluetooth Myth Kevin Finisterre (lists) (Apr 01)
      • Re: Busting The Bluetooth Myth Giorgio Fedon (Apr 01)
      • Re: Busting The Bluetooth Myth Anders B Jansson (Apr 01)
      • Re: Busting The Bluetooth Myth Giorgio Fedon (Apr 01)
      • Re: Busting The Bluetooth Myth Kevin Finisterre (lists) (Apr 01)
      • Re: Busting The Bluetooth Myth Ed Carp (Apr 01)
      • Re: Busting The Bluetooth Myth Thierry Zoller (Apr 01)
      • Re: Busting The Bluetooth Myth Anders B Jansson (Apr 01)
• Severe CSRF vulnerabilities allow mail/msg spoofing in Libero.it portal Rosario Valotta (Apr 01)
• MS Patch Coming Tuesday Larry Seltzer (Apr 01)
  • Re: [funsec] MS Patch Coming Tuesday Blue Boar (Apr 01)
• Metasploit vs ANI H D Moore (Apr 02)
  • Re: Metasploit vs ANI George Ou (Apr 02)
• 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA Andrea "bunker" Purificato (Apr 02)
  • Re: 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA Gadi Evron (Apr 02)
    • Re: 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA Andrea Purificato - bunker (Apr 02)
  • Re: [RECTIFY] Oracle 10g exploit - dbms_aq.enqueue - become DBA Andrea "bunker" Purificato (Apr 03)
• Re: Cisco IP Phone vulnerability Shawn Merdinger (Apr 02)
• iDefense Security Advisory 03.31.07: Multiple Vendor ImageMagick DCM and XWD Buffer Overflow Vulnerabilities iDefense Labs (Apr 02)
• More information on ZERT patch for ANI 0day Gadi Evron (Apr 02)
  • Re: More information on ZERT patch for ANI 0day James (njan) Eaton-Lee (Apr 02)
    • Re: More information on ZERT patch for ANI 0day Gadi Evron (Apr 02)
      • Re: More information on ZERT patch for ANI 0day James (njan) Eaton-Lee (Apr 02)
      • Re: More information on ZERT patch for ANI 0day Gadi Evron (Apr 02)
      • Re: More information on ZERT patch for ANI 0day James (njan) Eaton-Lee (Apr 02)
      • Re: More information on ZERT patch for ANI 0day Gadi Evron (Apr 02)
      • Re: More information on ZERT patch for ANI 0day James (njan) Eaton-Lee (Apr 02)
      • Re: More information on ZERT patch for ANI 0day Gadi Evron (Apr 02)
  • Re: More information on ZERT patch for ANI 0day wac (Apr 02)
  • Re: More information on ZERT patch for ANI 0day Stefan Kelm (Apr 03)
    • Re: More information on ZERT patch for ANI 0day Matthew Murphy (Apr 03)
    • Re: More information on ZERT patch for ANI 0day Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] (Apr 03)
      • Re: More information on ZERT patch for ANI 0day Jason Frisvold (Apr 04)
      • Re: More information on ZERT patch for ANI 0day Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] (Apr 03)
      • Re: More information on ZERT patch for ANI 0day Jason Frisvold (Apr 04)
  • <Possible follow-ups>
  • Re: More information on ZERT patch for ANI 0day neal.krawetz (Apr 03)
• MS announces out-of-band patch for ANI 0day Gadi Evron (Apr 02)
• Re: [WEB SECURITY] Preventing Cross-site Request Forgeries Stephen de Vries (Apr 02)
• [SECURITY] [DSA 1274-1] New file packages fix arbitrary code execution Noah Meyerhans (Apr 02)
• SecTor Call for Papers & Registration now open Gord Taylor (Apr 02)
• Death by Cockatoo neal.krawetz (Apr 02)
• iDefense Security Advisory 04.02.07: Hewlett-Packard Mercury Quality Center ActiveX Control ProgColor Buffer Overflow Vulnerability iDefense Labs (Apr 02)
• [ GLSA 200704-01 ] Asterisk: Two SIP Denial of Service vulnerabilities Sune Kloppenborg Jeppesen (Apr 02)
• iDefense Security Advisory 03.31.07: IBM Tivoli Provisioning Manager for OS Deployment Multiple Vulnerabilities iDefense Labs (Apr 02)
• More information on ZERT patch for ANI 0day Randall M (Apr 02)
• Why Microsoft should make windows open source James Matthews (Apr 02)
  • Re: Why Microsoft should make windows open source Troy Cregger (Apr 04)
    • Re: Why Microsoft should make windows open source Simon Smith (Apr 04)
      • Re: Why Microsoft should make windows open source Morning Wood (Apr 04)
      • Re: Why Microsoft should make windows open source Valdis . Kletnieks (Apr 04)
      • Re: Why Microsoft should make windows open source Troy Cregger (Apr 04)
      • Re: Why Microsoft should make windows open source Troy Cregger (Apr 04)
      • Re: Why Microsoft should make windows open source Valdis . Kletnieks (Apr 04)
      • Re: Why Microsoft should make windows open source Vincent Archer (Apr 10)
• [SECURITY] [DSA 1275-1] New zope2.7 packages fix cross-site scripting flaw Noah Meyerhans (Apr 02)
• [CFP] VNSECON 07 - Call for Papers / HCMC - August 03-04, 2007 rd (Apr 02)
• HP Mercury Quality Center Any SQL execution Isma Khan (Apr 03)
• Vulnerable Vectors in PHP Based Redirection Pages[redirect.php4/redirect.php5] Aditya K Sood (Apr 03)
  • Message not available
    • Re: Vulnerable Vectors in PHP Based Redirection Pages[redirect.php4/redirect.php5] Aditya K Sood (Apr 03)
• Re: Exploiting Microsoft dynamic Dns updates Denis Jedig (Apr 03)
  • Re: Exploiting Microsoft dynamic Dns updates Andres Tarasco (Apr 03)
• another .ani 0-day bug third party patcher more usefull this time, version 0.2 wac (Apr 03)
• iDefense Security Advisory 04.03.07: Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability iDefense Labs (Apr 03)
• FLEA-2007-0006-1: ImageMagick Foresight Linux Essential Announcement Service (Apr 03)
• FLEA-2007-0006-2: ImageMagick Foresight Linux Essential Announcement Service (Apr 03)
• iDefense Security Advisory 04.03.07: Multiple Vendor Kerberos kadmind Buffer Overflow Vulnerability iDefense Labs (Apr 03)
• FLEA-2007-0007-1: nas Foresight Linux Essential Announcement Service (Apr 03)
• ZDI-07-012: Yahoo! Messenger AudioConf ActiveX Control Buffer Overflow zdi-disclosures (Apr 03)
• [SECURITY] [DSA 1276-1] New krb5 packages fix several vulnerabilities Moritz Muehlenhoff (Apr 03)
• [ GLSA 200704-02 ] MIT Kerberos 5: Arbitrary remote code execution Sune Kloppenborg Jeppesen (Apr 03)
• [ GLSA 200704-03 ] OpenAFS: Privilege escalation Raphael Marichez (Apr 03)
• [ GLSA 200704-04 ] OpenPBS: Multiple vulnerabilities Raphael Marichez (Apr 03)
• [ GLSA 200704-05 ] zziplib: Buffer Overflow Raphael Marichez (Apr 03)
• April Chi2600 / DefCon 312 Information Steven McGrath (Apr 03)
• JIKTO Full Disclosure Shaded Systems (Apr 03)
  • Re: JIKTO Full Disclosure rembrandt (Apr 04)
• iDefense Security Advisory 04.03.07: Multiple Vendor X Server BDF Font Parsing Integer Overflow Vulnerability iDefense Labs (Apr 03)
• iDefense Security Advisory 04.03.07: Multiple Vendor X Server fonts.dir File Parsing Integer Overflow Vulnerability iDefense Labs (Apr 03)
• iDefense Security Advisory 04.03.07: Multiple Vendor X Server XC-MISC Extension Memory Corruption Vulnerability iDefense Labs (Apr 03)
• [USN-448-1] X.org vulnerabilities Kees Cook (Apr 03)
• [USN-449-1] krb5 vulnerabilities Kees Cook (Apr 03)
• [ MDKSA-2007:074 ] - Updated qt3 packages to address utf8 decoder bug security (Apr 03)
• [ MDKSA-2007:075 ] - Updated qt4 packages to address utf8 decoder bug security (Apr 03)
• [ MDKSA-2007:076 ] - Updated kdelibs packages to address UTF8 issue in KJS security (Apr 03)
• Windows .ANI LoadAniIcon third party patch latest version 0.3 (so people can rollback their system before applying the patches) wac (Apr 03)
• rPSA-2007-0062-1 firefox rPath Update Announcements (Apr 04)
• rPSA-2007-0063-1 krb5 krb5-server krb5-services krb5-test krb5-workstation rPath Update Announcements (Apr 04)
• rPSA-2007-0064-1 ImageMagick rPath Update Announcements (Apr 04)
• rPSA-2007-0065-1 freetype xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs rPath Update Announcements (Apr 04)
• rPSA-2007-0066-1 kdelibs qt-x11-free rPath Update Announcements (Apr 04)
• Mozilla Firefox Insecure Element Stealth Injection Vulnerability Michal Majchrowicz (Apr 04)
  • Re: Mozilla Firefox Insecure Element Stealth Injection Vulnerability 3APA3A (Apr 04)
• Three New Papers on Oracle Forensics David Litchfield (Apr 04)
• CYBSEC Security Pre-Advisory: SAP RFC_SET_REG_SERVER_PROPERTY RFC Function Denial Of Service CYBSEC Advisories (Apr 04)
  • <Possible follow-ups>
  • CYBSEC Security Pre-Advisory: SAP RFC_SET_REG_SERVER_PROPERTY RFC Function Denial Of Service CYBSEC Advisories (Apr 04)
  • CYBSEC Security Pre-Advisory: SAP RFC_SET_REG_SERVER_PROPERTY RFC Function Denial Of Service CYBSEC Advisories (Apr 04)
• CYBSEC Security Pre-Advisory: SAP RFC_START_GUI RFC Function Buffer Overflow CYBSEC Advisories (Apr 04)
• CYBSEC Security Pre-Advisory: SAP RFC_START_PROGRAM RFC Function Multiple Vulnerabilities CYBSEC Advisories (Apr 04)
• CYBSEC Pre-Advisory: SAP TRUSTED_SYSTEM_SECURITY RFC Function Information Disclosure CYBSEC Advisories (Apr 04)
• CYBSEC Security Pre-Advisory: SAP SYSTEM_CREATE_INSTANCE RFC Function Buffer Overflow CYBSEC Advisories (Apr 04)
  • <Possible follow-ups>
  • CYBSEC Security Pre-Advisory: SAP SYSTEM_CREATE_INSTANCE RFC Function Buffer Overflow CYBSEC Advisories (Apr 04)
• Stereotyping DoS and Don'ts neal.krawetz (Apr 04)
  • Re: Stereotyping DoS and Don'ts Michal Zalewski (Apr 04)
  • Re: Stereotyping DoS and Don'ts J. Oquendo (Apr 04)
    • Re: Stereotyping DoS and Don'ts Valdis . Kletnieks (Apr 04)
      • Re: Stereotyping DoS and Don'ts J. Oquendo (Apr 04)
• CYBSEC Release: SAP Security - Paper & Tool release Mariano Nuñez Di Croce (Apr 04)
• Fabio has Tagged you! :) Fabio Sarmento (Apr 04)
  • Re: Fabio has Tagged you! :) Dude VanWinkle (Apr 05)
• VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates VMware Security team (Apr 04)
• The Cyber war on Iran United Hackers (Apr 04)
  • Re: The Cyber war on Iran Andrew Redman (Apr 04)
    • Re: The Cyber war on Iran Shyaam (Apr 04)
    • Re: The Cyber war on Iran DUCK MAN! (Apr 05)
  • Re: The Cyber war on Iran Valdis . Kletnieks (Apr 04)
    • Re: The Cyber war on Iran Paul Schmehl (Apr 04)
      • Re: The Cyber war on Iran Valdis . Kletnieks (Apr 04)
      • Re: The Cyber war on Iran Paul Schmehl (Apr 04)
      • Re: The Cyber war on Iran Nick Oliver (Apr 04)
      • Re: The Cyber war on Iran Kian Mohageri (Apr 04)
      • Re: The Cyber war on Iran V Comics (Apr 06)
      • Re: The Cyber war on Iran Randal T. Rioux (Apr 04)
      • Re: The Cyber war on Iran George Ou (Apr 04)
      • Re: The Cyber war on Iran jf (Apr 04)
      • Re: The Cyber war on Iran scott (Apr 04)
  • Re: The Cyber war on Iran Kian Mohageri (Apr 04)
    • Re: The Cyber war on Iran Dingo Ugly (Apr 04)
      • Re: The Cyber war on Iran Open Phugu (Apr 05)
      • Re: The Cyber war on Iran Timo Schoeler (Apr 05)
  • Re: The Cyber war on Iran Open Phugu (Apr 05)
  • <Possible follow-ups>
  • Re: The Cyber war on Iran rgolodner (Apr 04)
  • Re: The Cyber war on Iran Justin Klein Keane (Apr 05)
• Hackers uniting against Iran? United Hackers (Apr 04)
  • Re: Hackers uniting against Iran? Slythers Bro (Apr 04)
  • Re: Hackers uniting against Iran? Open Phugu (Apr 05)
  • Re: Hackers uniting against Iran? Lubomir Kundrak (Apr 11)
  • <Possible follow-ups>
  • Re: Hackers uniting against Iran? uberspritzer (Apr 04)
    • Re: Hackers uniting against Iran? Fajar Edisya Putera (Apr 04)
      • Re: Hackers uniting against Iran? scott (Apr 04)
      • Re: Hackers uniting against Iran? scott (Apr 04)
      • Re: Hackers uniting against Iran? Paul Schmehl (Apr 04)
      • Re: Hackers uniting against Iran? scott (Apr 04)
      • Re: Hackers uniting against Iran? scott (Apr 04)
      • Re: Hackers uniting against Iran? Kian Mohageri (Apr 04)
      • Re: Hackers uniting against Iran? Carlos Carvalho (Apr 05)
    • Re: Hackers uniting against Iran? evilrabbi (Apr 04)
      • Re: Hackers uniting against Iran? uberspritzer (Apr 05)
      • Re: Hackers uniting against Iran? Paul Schmehl (Apr 05)
      • Re: Hackers uniting against Iran? matthew wollenweber (Apr 05)
      • Re: Hackers uniting against Iran? Valdis . Kletnieks (Apr 05)
      • Re: Hackers uniting against Iran? Timo Schoeler (Apr 05)
      • Re: Hackers uniting against Iran? Shyaam (Apr 05)
      • Re: Hackers uniting against Iran? rek2 GNU/Linux LO LO LO (Apr 05)
      • Re: Hackers uniting against Iran? rek2 GNU/Linux LO LO LO (Apr 05)
      • Re: Hackers uniting against Iran? Troy Cregger (Apr 05)
      • Re: Hackers uniting against Iran? Peter Dawson (Apr 05)
      • Re: Hackers uniting against Iran? Timo Schoeler (Apr 05)
      • Re: Hackers uniting against Iran? Timo Schoeler (Apr 05)
      • Re: Hackers uniting against Iran? Martin Hudec (Apr 05)
      • Re: Hackers uniting against Iran? Timo Schoeler (Apr 06)
      • Re: Hackers uniting against Iran? Timo Schoeler (Apr 06)
      • Re: Hackers uniting against Iran? Paul Szabo (Apr 05)
      • Re: Hackers uniting against Iran? Red Leg (Apr 05)
      • Re: Hackers uniting against Iran? Timo Schoeler (Apr 06)
      • Re: Hackers uniting against Iran? Timo Schoeler (Apr 06)
      • Re: Hackers uniting against Iran? Troy Cregger (Apr 05)
      • Re: Hackers uniting against Iran? uberspritzer (Apr 05)
  • Re: Hackers uniting against Iran? scott (Apr 04)
  • Re: Hackers uniting against Iran? ericscher () mac com (Apr 06)
    • Re: Hackers uniting against Iran? Timo Schoeler (Apr 06)
      • Re: Hackers uniting against Iran? James Rankin (Apr 06)
      • Re: Hackers uniting against Iran? Timo Schoeler (Apr 06)
      • Re: Hackers uniting against Iran? Red Leg (Apr 06)
      • Re: Hackers uniting against Iran? Paul Hem (Apr 06)
      • Re: Hackers uniting against Iran? Valdis . Kletnieks (Apr 06)
      • Re: Hackers uniting against Iran?, Battle of Kursk Security Admin (NetSec) (Apr 06)
      • Re: Hackers uniting against Iran? Peter Dawson (Apr 07)
      • Re: Hackers uniting against Iran? Carlos Barros (Apr 07)
      • Re: Hackers uniting against Iran? Timo Schoeler (Apr 08)
      • Re: Hackers uniting against Iran? Timo Schoeler (Apr 08)
  • Re: Hackers uniting against Iran? Michele Cicciotti [Khamsa Italia Srl] (Apr 06)
  • Re: Hackers uniting against Iran? jptrash (Apr 06)
    • Re: Hackers uniting against Iran? Timo Schoeler (Apr 08)
• [ MDKSA-2007:077 ] - Updated krb5 packages fix vulnerabilities security (Apr 04)
• [ MDKSA-2007:078 ] - Updated kernel packages fix multiple vulnerabilities and bugs security (Apr 04)
• rPSA-2007-0067-1 nas rPath Update Announcements (Apr 04)
• [SECURITY] [DSA 1277-1] New XMMS packages fix arbitrary code execution Noah Meyerhans (Apr 04)
• [ MDKSA-2007:079 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities security (Apr 04)
• [ MDKSA-2007:080 ] - Updated tightvnc packages fix integer overflow vulnerabilities security (Apr 04)
• [ MDKSA-2007:081 ] - Updated freetype2 packages fix vulnerability security (Apr 04)
• iDefense Security Advisory 04.04.07: Kaspersky AntiVirus SysInfo ActiveX Control Information Disclosure Vulnerability iDefense Labs (Apr 04)
• iDefense Security Advisory 04.04.07: Kaspersky Internet Security Suite klif.sys Heap Overflow Vulnerability iDefense Labs (Apr 04)
• iDefense Security Advisory 04.04.07: ESRI ArcSDE Buffer Overflow Vulnerability iDefense Labs (Apr 04)
• Re: group hug scott (Apr 04)
  • <Possible follow-ups>
  • Re: group hug v3dt3n (Apr 05)
• Re: well done folks scott (Apr 04)
  • Re: well done folks Shyaam (Apr 05)
• Re: Why Microsoft should make windows open Jodi Middleton (Apr 05)
  • Re: Why Microsoft should make windows open Shyaam (Apr 05)
  • Re: Why Microsoft should make windows open Jodi Middleton (Apr 05)
• Re: Iran Cyber-War, Capitalism, etc... Throwaway1 () columbus rr com (Apr 05)
  • Re: Iran Cyber-War, Capitalism, etc... Shyaam (Apr 05)
• Microsoft .NET request filtering bypass vulnerability (BID 20753) Adrian Pastor (Apr 05)
• Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug pdp (architect) (Apr 05)
  • Re: [WEB SECURITY] Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug Daniel Veditz (Apr 04)
  • Re: Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug Thor Larholm (Apr 06)
• AN OUNCE OF PREVENTION... neal.krawetz (Apr 05)
  • Re: AN OUNCE OF PREVENTION... Graham Reed (Apr 10)
• FLEA-2007-0008-1: krb5 Foresight Linux Essential Announcement Service (Apr 05)
• FLEA-2007-0009-1: xorg-x11 freetype Foresight Linux Essential Announcement Service (Apr 05)
• FLEA-2007-0010-1: evolution Foresight Linux Essential Announcement Service (Apr 05)
• uberspritzer's rant ericscher () mac com (Apr 05)
• Wordpress 2.1.2 xmlrpc Vulnerabilities Sumit Siddharth (Apr 05)
• ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability zdi-disclosures (Apr 05)
• ZDI-07-014: Kaspersky Anti-Virus ActiveX Control Unsafe Method Exposure Vulnerablity zdi-disclosures (Apr 05)
• CAUNewswire - CAU Introduces PHREAK® Certification for telephony hackers I)ruid (Apr 05)
• Question Regarding Wireless Frames Code Breaker (Apr 05)
  • Re: Question Regarding Wireless Frames Michael Holstein (Apr 06)
    • Re: Question Regarding Wireless Frames kevin horvath (Apr 06)
      • Re: Question Regarding Wireless Frames Michael Holstein (Apr 06)
      • Re: Question Regarding Wireless Frames AMILABS (Apr 06)
      • Re: Question Regarding Wireless Frames Code Breaker (Apr 06)
• AOL Nullsoft Winamp S3M Module "IN_MOD.DLL" Remote Heap Memory Corruption Piotr Bania (Apr 06)
• AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption (Off By Zero) Piotr Bania (Apr 06)
• AOL Nullsoft Winamp IT Module "IN_MOD.DLL" Remote Heap Memory Corruption Piotr Bania (Apr 06)
• WEEPING FOR WEP neal.krawetz (Apr 06)
  • Re: WEEPING FOR WEP Troy Cregger (Apr 06)
    • Re: WEEPING FOR WEP Valdis . Kletnieks (Apr 06)
    • Re: WEEPING FOR WEP Michael Holstein (Apr 06)
      • Re: WEEPING FOR WEP Troy Cregger (Apr 06)
      • Re: WEEPING FOR WEP Kevin Finisterre (lists) (Apr 06)
    • Re: WEEPING FOR WEP Steven Adair (Apr 06)
  • Re: WEEPING FOR WEP Bruce Ediger (Apr 06)
    • Re: WEEPING FOR WEP Valdis . Kletnieks (Apr 06)
    • Re: WEEPING FOR WEP Robert Allinson (Apr 06)
  • Re: WEEPING FOR WEP Michael Holstein (Apr 06)
  • Re: WEEPING FOR WEP Gary Warner (Apr 06)
    • Re: WEEPING FOR WEP James (njan) Eaton-Lee (Apr 06)
  • <Possible follow-ups>
  • Re: WEEPING FOR WEP george_ou (Apr 06)
    • Re: WEEPING FOR WEP Mike Vasquez (Apr 06)
  • Re: WEEPING FOR WEP george_ou (Apr 06)
    • Re: WEEPING FOR WEP Mike Vasquez (Apr 06)
      • Re: WEEPING FOR WEP Troy Cregger (Apr 09)
• [ GLSA 200704-06 ] Evince: Stack overflow in included gv code Raphael Marichez (Apr 06)
• [ GLSA 200704-07 ] libwpd: Multiple vulnerabilities Raphael Marichez (Apr 06)
• [SECURITY] [DSA 1278-1] New man-db packages fix arbitrary code execution Noah Meyerhans (Apr 06)
• word to buchkov jf (Apr 06)
  • Re: word to buchkov evilrabbi (Apr 07)
• Re: Hackers uniting against Iran?, Battle of Kursk Security Admin (NetSec) (Apr 06)
• Re: Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation GomoR (Apr 07)
• Vista Protected Processes Bypassed Randall M (Apr 07)
  • Re: Vista Protected Processes Bypassed scott (Apr 07)
  • Re: [funsec] Vista Protected Processes Bypassed C Q (Apr 08)
    • Re: [funsec] Vista Protected Processes Bypassed Valdis . Kletnieks (Apr 08)
      • Re: [funsec] Vista Protected Processes Bypassed Fernando Gont (Apr 08)
  • Re: [funsec] Vista Protected Processes Bypassed C Q (Apr 08)
• Hackers Humiliate Security Researcher neal.krawetz (Apr 07)
• Security Researcher Not Particularly Humiliated Raven Alder (Apr 08)
  • Re: Security Researcher Not Particularly Humiliated James Matthews (Apr 08)
  • Re: Security Researcher Not Particularly Humiliated George Ou (Apr 08)
    • Re: Security Researcher Not Particularly Humiliated James Matthews (Apr 08)
  • Re: Security Researcher Not Particularly Humiliated Ham Beast (Apr 09)
    • Re: Security Researcher Not Particularly Humiliated jf (Apr 09)
      • Re: Security Researcher Not Particularly Humiliated Mr Zebedee (Apr 10)
• Re: Backdoor within popular security software. Anonymous User (Apr 08)
  • Re: Backdoor within popular security software. Open Phugu (Apr 08)
• Re: Security Researcher Not Particularly Humiliated neal.krawetz (Apr 08)
  • Re: Security Researcher Not Particularly Humiliated George Ou (Apr 08)
  • <Possible follow-ups>
  • Re: Security Researcher Not Particularly Humiliated neal.krawetz (Apr 08)
    • Re: Security Researcher Not Particularly Humiliated George Ou (Apr 08)
• Some 0day Pocs Muts (Apr 09)
• DNS mining ? Maxim Veksler (Apr 09)
  • Re: DNS mining ? Valdis . Kletnieks (Apr 09)
    • Re: DNS mining ? Maxim Veksler (Apr 10)
      • Re: DNS mining ? Valdis . Kletnieks (Apr 10)
  • Re: DNS mining ? Steven Adair (Apr 09)
    • Re: DNS mining ? Aaron Gray (Apr 09)
      • Re: DNS mining ? Brian Dessent (Apr 09)
  • Message not available
    • Re: DNS mining ? Maxim Veksler (Apr 10)
• iDefense Security Advisory 04.09.07: AOL AIM and ICQ File Transfer Path-Traversal Vulnerability iDefense Labs (Apr 09)
• [USN-450-1] ipsec-tools vulnerability Kees Cook (Apr 09)
• rPSA-2007-0070-1 openoffice.org rPath Update Announcements (Apr 09)
• List Charter John Cartwright (Apr 09)
• Fwd: threat to corporate security n3td3v (Apr 09)
  • Re: [++++SPAM++++] Fwd: threat to corporate security Marco Ermini (Apr 10)
    • Re: [++++SPAM++++] Fwd: threat to corporate security n3td3v (Apr 10)
      • Re: [++++SPAM++++] Fwd: threat to corporate security Marco Ermini (Apr 11)
      • Re: [++++SPAM++++] Fwd: threat to corporate security afed (Apr 11)
  • <Possible follow-ups>
  • Re: Fwd: threat to corporate security n3td3v (Apr 09)
• DEF CON One Five CfP in effect! The Dark Tangent (Apr 09)
• War against Iran: Update from front lines Hackers United (Apr 10)
  • Re: War against Iran: Update from front lines Slythers Bro (Apr 10)
  • Re: War against Iran: Update from front lines Paul Sebastian Ziegler (Apr 10)
  • Re: War against Iran: Update from front lines rek2 GNU/Linux LO LO LO (Apr 10)
  • Re: War against Iran: Update from front lines n3td3v (Apr 10)
    • Message not available
      • Re: War against Iran: Update from front lines merda user (Apr 10)
    • Re: War against Iran: Update from front lines Dingo Ugly (Apr 10)
  • <Possible follow-ups>
  • War against Iran: Update from front lines United Hackers (Apr 10)
    • Re: War against Iran: Update from front lines Menzer, Mathias SZ/BHL-IN (Apr 10)
    • Re: War against Iran: Update from front lines Troy Cregger (Apr 10)
    • Re: War against Iran: Update from front lines Open Phugu (Apr 10)
      • Re: War against Iran: Update from front lines Timo Schoeler (Apr 10)
    • Re: War against Iran: Update from front lines chedder1 (Apr 15)
      • Re: War against Iran: Update from front lines Tremaine Lea (Apr 15)
      • Re: War against Iran: Update from front lines Timo Schoeler (Apr 15)
      • Re: War against Iran: Update from front lines Dude VanWinkle (Apr 15)
      • Message not available
      • Re: War against Iran: Update from front lines jonnyboi (Apr 15)
      • Re: War against Iran: Update from front lines Valdis . Kletnieks (Apr 15)
      • Re: War against Iran: Update from front lines Tremaine Lea (Apr 15)
• DropAFew - SQL injection and authorization issues Alexander Klink (Apr 10)
• EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation eEye Advisories (Apr 10)
• EEYE: Windows VDM Zero Page Race Condition Privilege Escalation eEye Advisories (Apr 10)
• iDefense Security Advisory 04.10.07: Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability iDefense Labs (Apr 10)
• [ MDKSA-2007:077-1 ] - Updated krb5 packages fix vulnerabilities security (Apr 10)
• Named and the mysterious .so resolves James Lay (Apr 10)
  • Re: Named and the mysterious .so resolves Knud Erik Højgaard (Apr 10)
  • Re: Named and the mysterious .so resolves don bailey (Apr 10)
  • Re: Named and the mysterious .so resolves Michal Zalewski (Apr 10)
• [ MDKSA-2007:081-1 ] - Updated freetype2 packages fix vulnerability security (Apr 10)
• flickR Hack KaT (Apr 10)
  • <Possible follow-ups>
  • flickR Hack KaT (Apr 10)
    • Re: flickR Hack John Kinsella (Apr 10)
• [ MDKSA-2007:080-1 ] - Updated tightvnc packages fix integer overflow vulnerabilities security (Apr 10)
• [USN-451-1] Linux kernel vulnerabilities Kees Cook (Apr 10)
• Secunia Research: Microsoft Agent URL Parsing Memory Corruption Vulnerability Secunia Research (Apr 10)
• [ MDKSA-2007:075-1 ] - Updated qt4 packages to address utf8 decoder bug security (Apr 10)
• com_zoom2 Mambo Module Remote File Include Vulnerability 0o_zeus_o0 elitemexico.org (Apr 11)
• Application Layer Anti-virus/Firewall pdp (architect) (Apr 11)
• Cosign SSO Authentication Bypass Jon Oberheide (Apr 11)
• Vulnerability Purchasing Program Questions Steven Adair (Apr 11)
  • Re: Vulnerability Purchasing Program Questions Valdis . Kletnieks (Apr 11)
• [ MDKSA-2007:079-1 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities security (Apr 11)
• [ MDKSA-2007:082 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities security (Apr 11)
• [ MDKSA-2007:083 ] - Updated apache-mod_perl packages fix DoS vulnerability security (Apr 11)
• iDefense Security Advisory 04.11.07: Apache HTTPD suEXEC Multiple Vulnerabilities iDefense Labs (Apr 11)
• [USN-452-1] KDE library vulnerability Kees Cook (Apr 11)
• Let's Winnuke Google! neal.krawetz (Apr 12)
  • Re: Let's Winnuke Google! J. Oquendo (Apr 12)
    • Re: Let's Winnuke Google! James Matthews (Apr 12)
  • <Possible follow-ups>
  • Re: Let's Winnuke Google! jt5944-27a (Apr 12)
• [ GLSA 200704-08 ] DokuWiki: Cross-site scripting vulnerability Matthias Geerdsen (Apr 12)
• CVE-2007-1871: Cross site scripting in chcounter 3.1.3 Hanno Böck (Apr 12)
• CVE-2007-1872: Cross site scripting in toendaCMS 1.5.3 Hanno Böck (Apr 12)
• Cross site scripting in mephisto 0.7.3 Hanno Böck (Apr 12)
• A Botted Fortune 500 a Day Gadi Evron (Apr 12)
  • Re: A Botted Fortune 500 a Day James Matthews (Apr 12)
  • Re: A Botted Fortune 500 a Day Steven Adair (Apr 13)
    • Re: A Botted Fortune 500 a Day Jamie Riden (Apr 13)
      • Re: A Botted Fortune 500 a Day Steven Adair (Apr 13)
      • Re: A Botted Fortune 500 a Day Jamie Riden (Apr 13)
      • Re: A Botted Fortune 500 a Day Simon Smith (Apr 13)
    • Re: A Botted Fortune 500 a Day Nick FitzGerald (Apr 17)
      • Re: A Botted Fortune 500 a Day Troy (Apr 17)
      • Re: A Botted Fortune 500 a Day Nick FitzGerald (Apr 17)
      • Re: A Botted Fortune 500 a Day Valdis . Kletnieks (Apr 17)
  • Re: A Botted Fortune 500 a Day K K (Apr 17)
• INFIGO-2007-04-05: Enterprise Security Analyzer server remote buffer overflows infocus (Apr 12)
• Dotclear 1.* Cross Site Scripting Vulnerability nssimo nssimo (Apr 12)
  • <Possible follow-ups>
  • Dotclear 1.* Cross Site Scripting Vulnerability Julien Dhaille (Apr 17)
    • Re: Dotclear 1.* Cross Site Scripting Vulnerability Nikolay Kichukov (Apr 17)
      • Re: Dotclear 1.* Cross Site Scripting Vulnerability Julien Dhaille (Apr 17)
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless LAN Controller and Cisco Lightweight Access Points Cisco Systems Product Security Incident Response Team (Apr 12)
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless Control System Cisco Systems Product Security Incident Response Team (Apr 12)
• Aircrack-ng (airodump-ng) remote buffer overflow vulnerability jonnyboi (Apr 12)
• iDefense Security Advisory 04.12.07: Hewlett Packard HP-UX Remote pfs_mountd.rpc Buffer Overflow Vulnerability iDefense Labs (Apr 12)
• Spam is funny! neal.krawetz (Apr 12)
  • Re: Spam is funny! Shaun (Apr 29)
    • Re: Spam is funny! Nick FitzGerald (Apr 30)
      • Re: Spam is funny! Aaron Gray (Apr 30)
    • Re: Spam is funny! Morning Wood (Apr 30)
  • <Possible follow-ups>
  • Re: Spam is funny! neal.krawetz (Apr 13)
  • Re: Spam is funny! neal.krawetz (Apr 13)
  • Re: Spam is funny! neal.krawetz (Apr 13)
• A Botted Fortune 500 a Day RMueller (Apr 12)
  • Re: A Botted Fortune 500 a Day Knud Erik Højgaard (Apr 12)
  • Message not available
    • Re: A Botted Fortune 500 a Day Randall M (Apr 13)
      • Re: A Botted Fortune 500 a Day Dude VanWinkle (Apr 13)
      • Re: A Botted Fortune 500 a Day RMueller (Apr 13)
• [Argeniss] Hacking Databases for owning your data (paper) Cesar (Apr 12)
• patch-9449 Steward Smith (Apr 12)
  • Re: patch-9449 Matti Ranta (Apr 12)
    • Re: patch-9449 mis (Apr 12)
  • Re: patch-9449 Wong Chee Chun (Apr 13)
  • Re: patch-9449 Mike Shafer (Apr 13)
  • <Possible follow-ups>
  • Re: patch-9449 Juha-Matti Laurio (Apr 13)
• Ettercap-NG 0.7.3 Remote DoS evilrabbi (Apr 12)
  • <Possible follow-ups>
  • Ettercap-NG 0.7.3 Remote DoS evilrabbi (Apr 12)
• [OPENADS-SA-2007-003] Openads 2.0.11 vulnerability fixed Matteo Beccati (Apr 13)
• [OPENADS-SA-2007-004] Max Media Manager v0.1.29-rc and v0.3.31-alpha-pr2 vulnerability fixed Matteo Beccati (Apr 13)
• TSRT-07-04: LANDesk Management Suite Alert Service Stack Overflow Vulnerability TSRT (Apr 13)
• [ GLSA 200704-09 ] xine-lib: Heap-based buffer overflow Raphael Marichez (Apr 14)
• Vista typographical vulnerability lsi (Apr 14)
  • Re: Vista typographical vulnerability John English (Apr 15)
  • Re: Vista typographical vulnerability Troy (Apr 16)
    • Re: Vista typographical vulnerability Peter Dawson (Apr 16)
      • Re: Vista typographical vulnerability Valdis . Kletnieks (Apr 16)
• ZoneAlarm Multiple insufficient argument validation of hooked SSDT function Vulnerability Matousec - Transparent security Research (Apr 15)
• Re: [exploits] RPC vuln in DNS Server (fwd) Gadi Evron (Apr 15)
• URL Encoding/Decoding Flaw Mechanism In ASP.net[1.0-2.0] Based Web Applications. Aditya K Sood (Apr 15)
• Windows DNS DnssrvQuery Stack Overflow dev code (Apr 15)
• Cross Domain XMLHttpRequest Michal Majchrowicz (Apr 15)
  • Re: Cross Domain XMLHttpRequest ascii (Apr 15)
    • Re: Cross Domain XMLHttpRequest Michal Majchrowicz (Apr 15)
      • Re: Cross Domain XMLHttpRequest Stefan Esser (Apr 15)
      • Re: Cross Domain XMLHttpRequest Michal Majchrowicz (Apr 15)
      • Re: Cross Domain XMLHttpRequest Michal Zalewski (Apr 15)
      • Re: Cross Domain XMLHttpRequest Michal Majchrowicz (Apr 15)
• Microsoft DNS Server Remote Code execution Exploit and analysis Andres Tarasco (Apr 15)
• IMF 2007 - 2nd Call for Papers Oliver Goebel (Apr 16)
• INVASION OF THE CHILD HACKERS Dr. Neal Krawetz, PhD (Apr 16)
  • Re: INVASION OF THE CHILD HACKERS J. Oquendo (Apr 16)
  • Re: INVASION OF THE CHILD HACKERS Stack Smasher (Apr 16)
    • Re: INVASION OF THE CHILD HACKERS Anders B Jansson (Apr 16)
    • Re: INVASION OF THE CHILD HACKERS wac (Apr 16)
    • Re: INVASION OF THE CHILD HACKERS Marco Ermini (Apr 17)
      • Re: INVASION OF THE CHILD HACKERS Stack Smasher (Apr 17)
  • <Possible follow-ups>
  • Re: INVASION OF THE CHILD HACKERS Allen,Steve (Apr 16)
• [ GLSA 200704-10 ] Inkscape: Two format string vulnerabilities Matthias Geerdsen (Apr 16)
• iDefense Security Advisory 04.16.07: ClamAV CAB File Unstore Buffer Overflow Vulnerability iDefense Labs (Apr 16)
• [ GLSA 200704-11 ] Vixie Cron: Denial of Service Matthias Geerdsen (Apr 16)
• [ MDKSA-2007:084 ] - Updated ipsec-tools packages fix DoS vulnerability security (Apr 16)
• [ MDKSA-2007:085 ] - Updated freeradius packages fix DoS vulnerability security (Apr 16)
• [ GLSA 200704-12 ] OpenOffice.org: Multiple vulnerabilities Raphael Marichez (Apr 16)
• [ MDKSA-2007:086 ] - Updated cups packages fix DoS vulnerability security (Apr 16)
• iDefense Security Advisory 04.16.07: Akamai Download Manager ActiveX Stack Buffer Overflow Vulnerability iDefense Labs (Apr 16)
• Persistent CSRF and The Hotlink Hell pdp (architect) (Apr 16)
  • Re: [WEB SECURITY] Persistent CSRF and The Hotlink Hell Ryan Barnett (Apr 16)
    • Re: [WEB SECURITY] Persistent CSRF and The Hotlink Hell Blue Boar (Apr 16)
• rPSA-2007-0071-1 kernel rPath Update Announcements (Apr 16)
• Akamai Technologies Security Advisory 2007-0001 Akamai Security Team (Apr 16)
• Re: [linux-elitists] Gutsy Gibbon to include strictly-free branch (fwd) Jay Sulzberger (Apr 16)
• Tiscali webmail exploited Rosario Valotta (Apr 17)
• Internet Explorer Crash J. Oquendo (Apr 17)
  • Re: Internet Explorer Crash Nikolay Kichukov (Apr 17)
    • Re: Internet Explorer Crash Michal Majchrowicz (Apr 17)
  • Re: Internet Explorer Crash Troy (Apr 17)
  • Re: Internet Explorer Crash Kradorex Xeron (Apr 18)
    • Re: Internet Explorer Crash Valdis . Kletnieks (Apr 18)
      • Re: Internet Explorer Crash Pavel Kankovsky (Apr 21)
      • Re: Internet Explorer Crash cardoso (Apr 21)
  • Message not available
    • Re: Internet Explorer Crash Michele Cicciotti (Apr 18)
  • <Possible follow-ups>
  • Internet Explorer Crash carl hardwick (Apr 17)
    • Re: Internet Explorer Crash 3APA3A (Apr 17)
  • Re: Internet Explorer Crash Dr. Neal Krawetz, PhD (Apr 17)
• ...Alright I need a little help.... srxnr srxnr (Apr 17)
  • Re: ...Alright I need a little help.... srxnr srxnr (Apr 17)
  • Re: ...Alright I need a little help.... H D Moore (Apr 17)
  • Re: ...Alright I need a little help.... Knud Erik Højgaard (Apr 17)
• Follow up browser DoS J. Oquendo (Apr 17)
• n.runs-SA-2007.007 - Sun Solaris 10 - Format string vulnerability security (Apr 17)
• FyLasso Antivulnerability 1.6.1 Released today! William Kimball (Apr 17)
• [ GLSA 200704-13 ] File: Denial of Service Raphael Marichez (Apr 17)
• [ GLSA 200704-14 ] FreeRADIUS: Denial of Service Raphael Marichez (Apr 17)
• [ GLSA 200704-15 ] MadWifi: Multiple vulnerabilities Raphael Marichez (Apr 17)
• iDefense Security Advisory 04.17.07: McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow iDefense Labs (Apr 17)
• iDefense Security Advisory 04.17.07: McAfee E-Business Admin Server Invalid Data Length DoS Vulnerability iDefense Labs (Apr 17)
• UK ISP threatens security researcher Gadi Evron (Apr 17)
  • <Possible follow-ups>
  • Re: UK ISP threatens security researcher Dr. Neal Krawetz, PhD (Apr 18)
    • Re: UK ISP threatens security researcher Tremaine Lea (Apr 18)
    • Re: UK ISP threatens security researcher Thomas Pollet (Apr 18)
    • Re: UK ISP threatens security researcher Matt Richard (Apr 18)
  • Re: UK ISP threatens security researcher Ajay Pal Singh Atwal (Apr 18)
  • Re: UK ISP threatens security researcher Glenn.Everhart (Apr 18)
  • Re: UK ISP threatens security researcher jt5944-27a (Apr 18)
• Re: [funsec] Re: A Botted Fortune 500 a Day Fergie (Apr 17)
• hiding routers Kristian Hermansen (Apr 18)
  • Re: hiding routers Sebastian Krahmer (Apr 18)
  • Re: hiding routers Felix Lindner (Apr 18)
  • Re: hiding routers Maxime Ducharme (Apr 19)
• Firefox 2.0.0.3 Phishing Protection Bypass Vulnerability carl hardwick (Apr 18)
  • Re: Firefox 2.0.0.3 Phishing Protection Bypass Vulnerability 3APA3A (Apr 18)
• Advisory: Bypass Oracle Logon Trigger Alexander Kornbrust (Apr 18)
• Advisory: SQL Injection in package SYS.DBMS_AQADM_SYS Alexander Kornbrust (Apr 18)
• Advisory: Shutdown unprotected Oracle TNS Listener via Oracle Discoverer Servlet [AS01] Alexander Kornbrust (Apr 18)
• Advisory: Cross-Site-Scripting Vulnerability in Oracle Secure Enterprise Search [SES01] Alexander Kornbrust (Apr 18)
• Advisory: SQL Injection in package SYS.DBMS_UPGRADE_INTERNAL Alexander Kornbrust (Apr 18)
• Reminder: HITBSecConf2007 - Malaysia: Call for Papers closing in 2 weeks Praburaajan (Apr 18)
• MS DNS worm Geo. (Apr 18)
  • Re: MS DNS worm ad () heapoverflow com (Apr 18)
  • <Possible follow-ups>
  • Re: MS DNS worm Zed Qyves (Apr 18)
• CfP: Hack.lu 2007 Hack Lu (Apr 18)
• Analysis of the Oracle April 2007 Critical Patch Update David Litchfield (Apr 18)
• Oracle E-Business Suite Vulnerability Information April 2007 Integrigy Alerts (Apr 18)
• rPSA-2007-0072-1 lighttpd rPath Update Announcements (Apr 18)
• rPSA-2007-0073-1 php php-mysql php-pgsql rPath Update Announcements (Apr 18)
• rPSA-2007-0074-1 dovecot rPath Update Announcements (Apr 18)
• UNIX man pages based fuzzing E. Kellinis (Apr 18)
• Oracle Database Buffer overflow vulnerabilities in package DBMS_SNAP_INTERNAL Team SHATTER (Apr 18)
• ZDI-07-015: Novell Groupwise WebAccess Base64 Decoding Stack Overflow Vulnerability zdi-disclosures (Apr 18)
• ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability zdi-disclosures (Apr 18)
• ZDI-07-017: Oracle E-Business Suite Arbitrary Document Download Vulnerability zdi-disclosures (Apr 18)
• ZDI-07-018: IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability zdi-disclosures (Apr 18)
• ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability zdi-disclosures (Apr 18)
• ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability zdi-disclosures (Apr 18)
• [USN-453-1] X.org vulnerability Kees Cook (Apr 18)
• [ MDKSA-2007:087 ] - Updated php packages fix multiple vulnerabilities security (Apr 18)
• [ MDKSA-2007:088 ] - Updated php packages fix multiple vulnerabilities security (Apr 18)
• [ MDKSA-2007:089 ] - Updated php packages fix multiple vulnerabilities security (Apr 18)
• [ MDKSA-2007:090 ] - Updated php packages fix multiple vulnerabilities security (Apr 18)
• [ MDKSA-2007:091 ] - Updated sqlite packages fix vulnerability security (Apr 18)
• Anyone have a Lindows/Linspire contact J. Oquendo (Apr 19)
• Re: ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability rashbi (Apr 19)
• Firefox 2.0.0.3 DoS crash carl hardwick (Apr 19)
  • Re: Firefox 2.0.0.3 DoS crash Tõnu Samuel (Apr 20)
  • Re: Firefox 2.0.0.3 DoS crash ascii (Apr 20)
• US State department rooted by 0-day Word attack ad () heapoverflow com (Apr 19)
  • Re: US State department rooted by 0-day Word attack Jim Popovitch (Apr 19)
    • Re: US State department rooted by 0-day Word attack Nick FitzGerald (Apr 19)
      • Re: US State department rooted by 0-day Word attack James Matthews (Apr 19)
      • Re: US State department rooted by 0-day Word attack Net Tech (Apr 20)
      • Re: US State department rooted by 0-day Word attack Valdis . Kletnieks (Apr 20)
• XSS in freePBX 2.2.x portal's Asterisk Log tool XenoMuta (Apr 19)
• ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability zdi-disclosures (Apr 19)
• eXtremail-v9 mu-b (Apr 20)
• ShortNotes : Stack Smashing with GCC4 xWinGs @ KJ (Apr 20)
  • Re: ShortNotes : Stack Smashing with GCC4 Marcus Meissner (Apr 20)
    • Message not available
      • Re: ShortNotes : Stack Smashing with GCC4 Guasconi Vincent (Apr 20)
  • <Possible follow-ups>
  • Re: ShortNotes : Stack Smashing with GCC4 Chris Rohlf (Apr 20)
• Re: [VulnWatch] Cross Domain XMLHttpRequest anurag . agarwal (Apr 20)
• Tel Aviv University Security Forum - Sunday, Apr 29 (TAUSEC) Gadi Evron (Apr 20)
• iDefense Security Advisory 04.20.07: Check Point Zone Labs SRESCAN IOCTL Local Privilege Escalation Vulnerability iDefense Labs (Apr 20)
• eEye Announcement, CEO blog and addiction Ross Brown (Apr 20)
  • Re: eEye Announcement, CEO blog and addiction T Biehn (Apr 20)
    • Re: eEye Announcement, CEO blog and addiction Knud Erik Højgaard (Apr 20)
      • Re: eEye Announcement, CEO blog and addiction ad () heapoverflow com (Apr 20)
      • Re: eEye Announcement, CEO blog and addiction poo (Apr 21)
• OT? - TDBanknorth + merchant's CC auth Troy (Apr 20)
  • Re: OT? - TDBanknorth + merchant's CC auth Jason Miller (Apr 20)
    • Re: OT? - TDBanknorth + merchant's CC auth James Matthews (Apr 20)
  • Re: OT? - TDBanknorth + merchant's CC auth Micheal Espinola Jr (Apr 20)
    • Re: OT? - TDBanknorth + merchant's CC auth Troy Cregger (Apr 20)
• FLEA-2007-0011-1: lighttpd Foresight Linux Essential Announcement Service (Apr 20)
• UseBB Version 1.0.4 Path Disclosure Vulnerability SecurityResearch (Apr 20)
• [MU-200704-01] Pre-Authentication Vulnerability in Mac OS X RPC runtime library noreply (Apr 20)
• OpenSSH - System Account Enumeration if S/Key is used rembrandt (Apr 20)
  • Re: OpenSSH - System Account Enumeration if S/Key is used Stanislaw Klekot (Apr 24)
    • Re: OpenSSH - System Account Enumeration if S/Key is used Brian Eaton (Apr 24)
    • Re: OpenSSH - System Account Enumeration if S/Key is used rembrandt (Apr 24)
  • Re: OpenSSH - System Account Enumeration if S/Key is used Nico Golde (Apr 25)
    • Re: OpenSSH - System Account Enumeration if S/Key is used Knud Erik Højgaard (Apr 25)
      • Re: OpenSSH - System Account Enumeration if S/Key is used Kradorex Xeron (Apr 25)
• aMSN <= 0.96 remote DoS vulnerability Levent Kayan (Apr 21)
• Apparently eEye's blog got p0wnd Paul Schmehl (Apr 21)
  • Re: Apparently eEye's blog got p0wnd poo (Apr 22)
    • Re: Apparently eEye's blog got p0wnd Paul Schmehl (Apr 22)
      • Re: Apparently eEye's blog got p0wnd Valdis . Kletnieks (Apr 23)
      • Re: Apparently eEye's blog got p0wnd Paul Schmehl (Apr 23)
      • Re: Apparently eEye's blog got p0wnd David Maynor (Apr 23)
      • Re: Apparently eEye's blog got p0wnd Paul Schmehl (Apr 23)
      • Re: Apparently eEye's blog got p0wnd Dude VanWinkle (Apr 30)
• freePBX 2.2.x's Music-on-hold Remote Code Execution Injection XenoMuta (Apr 21)
• Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability Youness Alaoui (Apr 22)
  • Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability Ismail Dönmez (Apr 22)
  • Message not available
    • Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability Levent Kayan (Apr 22)
      • Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability Ismail Dönmez (Apr 22)
      • Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability Ferdinand Klinzer (Apr 23)
      • Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability Levent Kayan (Apr 23)
• [SECURITY] [DSA 1279-1] New webcalendar packages fix cross-site scripting Moritz Muehlenhoff (Apr 22)
• Re: [levent () corehack org: Re: [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability] Levent Kayan (Apr 22)
• [ GLSA 200704-16 ] Aircrack-ng: Remote execution of arbitrary code Raphael Marichez (Apr 22)
• [ GLSA 200704-17 ] 3proxy: Buffer overflow Raphael Marichez (Apr 22)
• [ GLSA 200704-18 ] Courier-IMAP: Remote execution of arbitrary code Raphael Marichez (Apr 22)
• FLEA-2007-0012-1: madwifi Foresight Linux Essential Announcement Service (Apr 22)
• 3proxy 0.5.3i bugfix release Vladimir Dubrovin (Apr 23)
• FLEA-2007-0013-1: xine-lib Foresight Linux Essential Announcement Service (Apr 23)
• [ GLSA 200704-19 ] Blender: User-assisted remote execution of arbitrary code Raphael Marichez (Apr 23)
• [ MDKSA-2007:092 ] - Updated freeradius packages fix vulnerability security (Apr 23)
• [ MDKSA-2007:093 ] - Updated zziplib packages fix vulnerability security (Apr 23)
• [ GLSA 200704-20 ] NAS: Multiple vulnerabilities Raphael Marichez (Apr 23)
• Apache/PHP REQUEST_METHOD XSS Vulnerability Michal Majchrowicz (Apr 23)
  • Re: Apache/PHP REQUEST_METHOD XSS Vulnerability Kradorex Xeron (Apr 23)
    • Re: Apache/PHP REQUEST_METHOD XSS Vulnerability Michał Majchrowicz (Apr 23)
      • Message not available
      • Message not available
      • Re: Apache/PHP REQUEST_METHOD XSS Vulnerability Michal Majchrowicz (Apr 23)
      • Re: Apache/PHP REQUEST_METHOD XSS Vulnerability Kradorex Xeron (Apr 24)
      • Re: Apache/PHP REQUEST_METHOD XSS Vulnerability Michał Majchrowicz (Apr 24)
      • Re: Apache/PHP REQUEST_METHOD XSS Vulnerability عبد الله احمد عنان (Apr 24)
      • Re: Apache/PHP REQUEST_METHOD XSS Vulnerability Vincent Archer (Apr 25)
      • Re: Apache/PHP REQUEST_METHOD XSS Vulnerability Kradorex Xeron (Apr 25)
      • Re: Apache/PHP REQUEST_METHOD XSS Vulnerability Vincent Archer (Apr 25)
  • Message not available
    • Re: Apache/PHP REQUEST_METHOD XSS Vulnerability Michal Majchrowicz (Apr 23)
  • Message not available
    • Re: [VulnWatch] Apache/PHP REQUEST_METHOD XSS Vulnerability Michal Majchrowicz (Apr 24)
• Apache Illegal Request Handling Possible XSS Vulnerability Michal Majchrowicz (Apr 24)
  • Re: Apache Illegal Request Handling Possible XSS Vulnerability Richard Moore (Apr 24)
    • Re: Apache Illegal Request Handling Possible XSS Vulnerability Michal Majchrowicz (Apr 24)
      • Message not available
      • Re: Apache Illegal Request Handling Possible XSS Vulnerability Michal Majchrowicz (Apr 24)
      • Re: Apache Illegal Request Handling Possible XSS Vulnerability Richard Moore (Apr 24)
      • Re: Apache Illegal Request Handling Possible XSS Vulnerability Michal Majchrowicz (Apr 24)
      • Message not available
      • Re: Apache Illegal Request Handling Possible XSS Vulnerability KJKHyperion (Apr 24)
      • Re: Apache Illegal Request Handling Possible XSS Vulnerability Richard Moore (Apr 24)
      • Re: Apache Illegal Request Handling Possible XSS Vulnerability Kradorex Xeron (Apr 24)
      • Re: Apache Illegal Request Handling Possible XSS Vulnerability Kradorex Xeron (Apr 24)
      • Re: Apache Illegal Request Handling Possible XSS Vulnerability Kradorex Xeron (Apr 24)
  • Re: Apache Illegal Request Handling Possible XSS Vulnerability Guasconi Vincent (Apr 24)
• Linksys SPA941 remote DOS with \377 character Radu State (Apr 24)
• rPSA-2007-0081-1 postgresql postgresql-server rPath Update Announcements (Apr 24)
• [ GLSA 200704-21 ] ClamAV: Multiple vulnerabilities Matthias Geerdsen (Apr 24)
• Security Advisory: CA CleverPath SQL Injection Irene Abezgauz (Apr 24)
• [SECURITY] [DSA 1280-1] New aircrack-ng packages fix arbitrary code execution Moritz Muehlenhoff (Apr 24)
• ZDI-07-022: CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities zdi-disclosures (Apr 24)
• ASA-2007-011: Multiple problems in SIP channel parser handling response codes Asterisk Development Team (Apr 24)
• ASA-2007-012: Remote Crash Vulnerability in Manager Interface Asterisk Development Team (Apr 24)
• ASA-2007-010: Two stack buffer overflows in SIP channel's T.38 SDP parsing code Asterisk Development Team (Apr 24)
• Anti-Virus vendors prove less-effective David Kierznowski (Apr 24)
  • Re: Anti-Virus vendors prove less-effective James Matthews (Apr 24)
    • Re: Anti-Virus vendors prove less-effective Nick FitzGerald (Apr 24)
    • Re: Anti-Virus vendors prove less-effective David Kierznowski (Apr 25)
• requesting info n n (Apr 25)
  • Re: requesting info Tim (Apr 25)
  • <Possible follow-ups>
  • requesting info n n (Apr 25)
    • Re: requesting info Paul Sebastian Ziegler (Apr 25)
    • Re: requesting info Michael Holstein (Apr 25)
      • Re: requesting info Jason Miller (Apr 25)
      • Re: requesting info James Matthews (Apr 25)
• [Fwd: Re: Apache Illegal Request Handling Possible XSS Vulnerability] Tõnu Samuel (Apr 25)
• Cisco Security Advisory: Default Passwords in NetFlow Collection Engine Cisco Systems Product Security Incident Response Team (Apr 25)
• IE 7 and Firefox Browsers Digest Authentication Request Splitting Stefano Di Paola (Apr 25)
• [SECURITY] [DSA 1281-1] New clamav packages fix several vulnerabilities Moritz Muehlenhoff (Apr 25)
• [ MDKSA-2007:094 ] - Updated postgresql packages fix vulnerability security (Apr 25)
• Severe vulnerability in https://secure.somethingawful.com Pedro Martinez (Apr 25)
  • Re: Severe vulnerability in https://secure.somethingawful.com evilrabbi (Apr 25)
• [CAID 35198, 35276]: CA BrightStor ARCserve Backup Media Server Vulnerabilities Williams, James K (Apr 25)
• [CAID 35277]: CA CleverPath Portal SQL Injection Vulnerability Williams, James K (Apr 25)
• Rapid integer factorization = end of RSA? Eugene Chukhlomin (Apr 26)
  • Re: Rapid integer factorization = end of RSA? Stanislaw Klekot (Apr 26)
  • Re: Rapid integer factorization = end of RSA? Kurt Buff (Apr 26)
  • Message not available
    • Re: Rapid integer factorization = end of RSA? e.chukhlomin (Apr 26)
      • Re: Rapid integer factorization = end of RSA? Valdis . Kletnieks (Apr 26)
      • Re: Rapid integer factorization = end of RSA? Pavel Kankovsky (Apr 27)
  • <Possible follow-ups>
  • Re: Rapid integer factorization = end of RSA? Eugene Chukhlomin (Apr 26)
    • Re: Rapid integer factorization = end of RSA? Stanislaw Klekot (Apr 26)
    • Re: Rapid integer factorization = end of RSA? virus (Apr 26)
      • Re: Rapid integer factorization = end of RSA? Brendan Dolan-Gavitt (Apr 26)
      • Re: Rapid integer factorization = end of RSA? virus (Apr 26)
      • Re: Rapid integer factorization = end of RSA? Stephan Gammeter (Apr 26)
      • Re: Rapid integer factorization = end of RSA? ShadowGamers (Apr 26)
      • Re: Rapid integer factorization = end of RSA? Peter Kosinar (Apr 26)
  • Re: Rapid integer factorization = end of RSA? Eugene Chukhlomin (Apr 26)
    • Re: Rapid integer factorization = end of RSA? Stanislaw Klekot (Apr 26)
  • Re: Rapid integer factorization = end of RSA? e.chukhlomin (Apr 27)
• [USN-453-2] rdesktop regression Martin Pitt (Apr 26)
• Re: WordPress v2.1.3 >> remote file include~ Tod Beardsley (Apr 26)
  • Re: WordPress v2.1.3 >> remote file include~ Guasconi Vincent (Apr 26)
• [SECURITY] [DSA 1282-1] New php4 packages fix several vulnerabilities Moritz Muehlenhoff (Apr 26)
• FW: Steganos Encrypted Safe NOT so safe Dan Bambach (Apr 26)
  • Message not available
    • Re: FW: Steganos Encrypted Safe NOT so safe Steven Adair (Apr 26)
      • Re: FW: Steganos Encrypted Safe NOT so safe Dan Bambach (Apr 26)
      • Re: FW: Steganos Encrypted Safe NOT so safe James Matthews (Apr 26)
      • Re: FW: Steganos Encrypted Safe NOT so safe Dan Bambach (Apr 26)
• iDefense Security Advisory 04.26.07: Novell eDirectory NCP Fragment Denial of Service Vulnerability iDefense Labs (Apr 26)
• mydns-1.1.0 remote heap overflow mu-b (Apr 27)
• Buying zeroday vulnerabilities 0buy (Apr 27)
  • Re: Buying zeroday vulnerabilities ad () heapoverflow com (Apr 27)
    • Re: Buying zeroday vulnerabilities T Biehn (Apr 27)
• [USN-455-1] PHP vulnerabilities Martin Pitt (Apr 27)
• [USN-454-1] PostgreSQL vulnerability Martin Pitt (Apr 27)
• iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Service Manager Buffer Overflow Vulnerability iDefense Labs (Apr 27)
• iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Recovery Points Insecure Password Storage Vulnerability iDefense Labs (Apr 27)
• [ GLSA 200704-22 ] BEAST: Denial of Service Raphael Marichez (Apr 27)
• [ GLSA 200704-23 ] capi4k-utils: Buffer overflow Raphael Marichez (Apr 27)
• AFFLIB(TM): Time-of-Check-Time-of-Use File Race VSR Advisories (Apr 27)
  • Re: AFFLIB(TM): Time-of-Check-Time-of-Use File Race Tim (Apr 29)
• AFFLIB(TM): Multiple Format String Injections VSR Advisories (Apr 27)
• AFFLIB(TM): Multiple Buffer Overflows VSR Advisories (Apr 27)
• AFFLIB(TM): Multiple Shell Metacharacter Injections VSR Advisories (Apr 27)
• Polynomials and factoring r ahead (Apr 28)
  • Re: Polynomials and factoring Valdis . Kletnieks (Apr 29)
• Cryptome is dead (at least for now) Line Noise (Apr 29)
  • Re: Cryptome is dead (at least for now) Fetch, Brandon (Apr 30)
• [SECURITY] [DSA 1283-1] New php5 packages fix several vulnerabilities Moritz Muehlenhoff (Apr 29)
• Firefox 2.0.0.3 non-existent applet DoS flaw carl hardwick (Apr 30)
• Aventail Connect SSL VPN Client Buffer Overflow Thomas Pollet (Apr 30)
• iDefense Security Advisory 04.27.07: VMware Workstation Shared Folders Directory Traversal Vulnerability iDefense Labs (Apr 30)
• after hrs patch/malware scanning bills (Apr 30)
• FLEA-2007-0014-1: vim Foresight Linux Essential Announcement Service (Apr 30)
• FLEA-2007-0015-1: gimp Foresight Linux Essential Announcement Service (Apr 30)
• NSA's surveillance project:True or crap scott (Apr 30)
  • Re: NSA's surveillance project:True or crap Tremaine Lea (Apr 30)
  • Re: NSA's surveillance project:True or crap foofus (Apr 30)
  • Re: NSA's surveillance project:True or crap the electric (Apr 30)

Previous period

Next period