Full Disclosure: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

573 messages starting Mar 01 07 and ending Mar 31 07
Date index | Thread index | Author index

• Re: Stealing Browser History Without Using JavaScript Matthew Flaschen (Mar 01)
  • Re: Stealing Browser History Without Using JavaScript Peter Besenbruch (Mar 01)
• [USN-416-2] nvidia-glx-config regression Martin Pitt (Mar 01)
• MPlayer DMO buffer overflow Moritz Jodeit (Mar 01)
• tcpdump: off-by-one heap overflow in 802.11 printer Moritz Jodeit (Mar 01)
• Serendipity unauthenticated SQL-Injection SaMuschie (Mar 01)
• Re: Angel LMS 7.1 - Remote SQL Injection don bailey (Mar 01)
  • <Possible follow-ups>
  • Re: Angel LMS 7.1 - Remote SQL Injection don bailey (Mar 01)
    • Re: Angel LMS 7.1 - Remote SQL Injection str0ke (Mar 01)
• Comodo Bypassing settings protection using magic pipe Vulnerability Matousec - Transparent security Research (Mar 01)
• [ GLSA 200703-03 ] ClamAV: Denial of Service Raphael Marichez (Mar 01)
• [ GLSA 200703-01 ] Snort: Remote execution of arbitrary code Raphael Marichez (Mar 01)
• [ GLSA 200703-02 ] SpamAssassin: Long URI Denial of Service Raphael Marichez (Mar 01)
• [USN-428-2] Firefox regression Kees Cook (Mar 01)
• Re: March 2nd Chicago 2600/DefCon 312 Meeting Information Dude VanWinkle (Mar 01)
  • Re: March 2nd Chicago 2600/DefCon 312 Meeting Information Walt Williams (Mar 02)
  • <Possible follow-ups>
  • Re: March 2nd Chicago 2600/DefCon 312 Meeting Information James Matthews (Mar 02)
    • Re: March 2nd Chicago 2600/DefCon 312 Meeting Information M . B . Jr . (Mar 03)
• G.R.I.D.S. virus being spread by the Younger Woolwich Boyz Jaime Demetur (Mar 02)
• Knorr.de SQL Injection and XSS Vulnerabilities sbauer (Mar 02)
  • Re: Knorr.de SQL Injection and XSS Vulnerabilities Knud Erik Højgaard (Mar 02)
    • Re: Knorr.de SQL Injection and XSS Vulnerabilities Sebastian Bauer (Mar 02)
    • Re: Knorr.de SQL Injection and XSS Vulnerabilities Joe Hancock (Mar 02)
    • Re: Knorr.de SQL Injection and XSS Vulnerabilities Michal Zalewski (Mar 02)
  • Re: Knorr.de SQL Injection and XSS Vulnerabilities Lolek of TK53 (Mar 04)
    • Re: Knorr.de SQL Injection and XSS Vulnerabilities poo (Mar 05)
• MailEnable v2.37 APPEND exploit mu-b (Mar 02)
  • Re: MailEnable v2.37 APPEND exploit T Biehn (Mar 02)
  • Re: MailEnable v2.37 APPEND exploit poo (Mar 03)
• ZDI-07-008: Apache Tomcat JK Web Server Connector Long URL Stack Overflow Vulnerability zdi-disclosures (Mar 02)
• Woltlab Burning Board (wbb) 2.3.6 CSRF/XSS - 0day SaMuschie (Mar 02)
  • Re: Woltlab Burning Board (wbb) 2.3.6 CSRF/XSS - 0day MC Iglo (Mar 03)
• iDefense Security Advisory 03.02.07: Kaspersky AntiVirus UPX File Decompression DoS Vulnerability iDefense Labs (Mar 02)
• Limited format string in Netrek 2.12.0 Luigi Auriemma (Mar 02)
• [ MDKSA-2007:050-1 ] - Updated Firefox packages fix multiple vulnerabilities security (Mar 02)
• [ GLSA 200703-04 ] Mozilla Firefox: Multiple vulnerabilities Raphael Marichez (Mar 02)
• [ GLSA 200703-05 ] Mozilla Suite: Multiple vulnerabilities Raphael Marichez (Mar 03)
• rPSA-2007-0048-1 tcpdump rPath Update Announcements (Mar 03)
• March NorthernVirginia 2600/DefCon 571 Meeting Information Shyaam (Mar 03)
• rPSA-2007-0040-3 firefox thunderbird rPath Update Announcements (Mar 03)
• Tyger Bug Tracking System Multiple Vulnerability corrado.liotta (Mar 03)
• PostScript security research Paul Sebastian Ziegler (Mar 03)
  • Re: PostScript security research Valdis . Kletnieks (Mar 04)
  • <Possible follow-ups>
  • Re: PostScript security research Ulf Harnhammar (Mar 03)
• ERRATA: [ GLSA 200703-01 ] Snort: Remote execution of arbitrary code Raphael Marichez (Mar 03)
• [ GLSA 200703-06 ] AMD64 x86 emulation Qt library: Integer overflow Raphael Marichez (Mar 03)
• md5 is breaked with my new lib qbyte v2 Slythers Bro (Mar 04)
  • Re: md5 is breaked with my new lib qbyte v2 Slythers Bro (Mar 04)
    • Re: md5 is breaked with my new lib qbyte v2 Jason Miller (Mar 04)
• month of PHP bugs, secondary message? Gadi Evron (Mar 04)
  • Re: month of PHP bugs, secondary message? Marcus Meissner (Mar 04)
  • Re: month of PHP bugs, secondary message? Tyop? (Mar 04)
• asterisk remote pre-auth denial of service Anonymous Person (Mar 04)
• [SECURITY] [DSA 1262-1] New gnomemeeting packages fix arbitrary code execution Moritz Muehlenhoff (Mar 04)
• MOPB-08-2007 - dejavu of dejavu 3APA3A (Mar 04)
  • Re: MOPB-08-2007 - dejavu of dejavu Stefan Esser (Mar 04)
• Arbitrary file disclosure vulnerability in rrdbrowse <= 1.6 Sebastian Wolfgarten (Mar 04)
• Extending JavaScript Portscanning to Include Banner Grabbing mark (Mar 04)
  • Re: Extending JavaScript Portscanning to Include Banner Grabbing Robert Wesley McGrew (Mar 06)
• Konqueror DoS Via JavaScript Read Of FTP Iframe mark (Mar 04)
• HITBSecConf2007 - Malaysia: Call for Papers now Open Praburaajan (Mar 05)
• Hakin9 Magazine - Request for Article Shyaam (Mar 05)
• ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities Stefan Friedli (Mar 05)
• iDefense Security Advisory 03.05.07: Apple QuickTime Color Table ID Heap Corruption Vulnerability iDefense Labs (Mar 05)
• Apple QuickTime Player Remote Heap Overflow Piotr Bania (Mar 06)
• Apple QuickTime udta ATOM Integer Overflow Sowhat (Mar 06)
• Mercury/32 4.01b mu-b (Mar 06)
• Call for Participation Chaos Communication Camp 2007 fukami (Mar 06)
• silc-server 1.0.2 denial-of-service vulnerability Alexander Heidenreich (Mar 06)
• rPSA-2007-0050-1 kernel rPath Update Announcements (Mar 06)
• [ GLSA 200703-07 ] STLport: Possible remote execution of arbitrary code Matthias Geerdsen (Mar 06)
• [USN-429-1] tcpdump vulnerability Kees Cook (Mar 06)
• [USN-430-1] mod_python vulnerability Kees Cook (Mar 06)
• [SECURITY] [DSA 1263-1] New clamav packages fix denial of service Moritz Muehlenhoff (Mar 06)
• BackTrack v.2.0 Is out Mati Aharoni (Mar 06)
  • Re: BackTrack v.2.0 Is out Jason Miller (Mar 06)
• [ MDKSA-2007:052 ] - Updated Thunderbird packages fix multiple vulnerabilities security (Mar 06)
• [USN-431-1] Thunderbird vulnerabilities Kees Cook (Mar 06)
• [ MDKSA-2007:053 ] - Updated util-linux packages address umount crash issue security (Mar 06)
• iDefense Security Advisory 03.07.07: Ipswitch IMail Server 2006 Multiple ActiveX Control Buffer Overflow Vulnerabilities iDefense Labs (Mar 07)
• ZDI-07-010: Apple Quicktime UDTA Parsing Heap Overflow Vulnerability zdi-disclosures (Mar 07)
• ZDI-07-009: Novell Netmail WebAdmin Buffer Overflow Vulnerability zdi-disclosures (Mar 07)
• [SECURITY] [DSA 1264-1] New php4 packages fix several vulnerabilities Moritz Muehlenhoff (Mar 07)
• Buffer-overflow in Conquest client 8.2a (svn 691) Luigi Auriemma (Mar 07)
• Black Hat USA CFP Now Open! Jeff Moss (Mar 07)
• [USN-432-1] GnuPG vulnerability Kees Cook (Mar 07)
• [USN-424-2] PHP regression Kees Cook (Mar 07)
• Ann: Backtrack 2.0 released Thierry Zoller (Mar 08)
• rPSA-2007-0051-1 mod_python rPath Update Announcements (Mar 08)
• rPSA-2007-0052-1 kdelibs rPath Update Announcements (Mar 08)
• [ MDKSA-2007:057 ] - Updated xine-lib packages to address buffer overflow vulnerability security (Mar 08)
• [MU-200703-01] Remote DOS in Asterisk SIP noreply (Mar 08)
• FLSA - foresight linux security announcements Jonathan Smith (Mar 08)
  • Message not available
    • FLEA-2007-0001-1: firefox Foresight Linux Essential Announcement Service (Mar 21)
  • Message not available
    • FLEA-2007-0002-1: inkscape Foresight Linux Essential Announcement Service (Mar 24)
  • Message not available
    • FLEA-2007-0003-1: cups Foresight Linux Essential Announcement Service (Mar 25)
  • Message not available
    • FLEA-2007-0004-1: openoffice.org Foresight Linux Essential Announcement Service (Mar 29)
  • Message not available
    • FLEA-2007-0005-1: slocate Foresight Linux Essential Announcement Service (Mar 29)
• [ MDKSA-2007:056 ] - Updated tcpdump packages address off-by-one overflow security (Mar 08)
• [ MDKSA-2007:055 ] - Updated mplayer packages to address buffer overflow vulnerability security (Mar 08)
• [ MDKSA-2007:054 ] - Updated kdelibs packages to address DoS issue in KDE Javascript security (Mar 08)
• YouTube email exploit being used by Casey Nunez AKA TheDramaTube AKA The Hurricane Jaime Demetur (Mar 08)
  • Re: YouTube email exploit being used by Casey Nunez AKA TheDramaTube AKA The Hurricane Knud Erik Højgaard (Mar 08)
• Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 08)
  • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
    • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 09)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Tim (Mar 09)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Tim (Mar 09)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Laundrup, Jens (Mar 09)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Tim (Mar 09)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 09)
      • Message not available
      • Message not available
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 10)
      • Message not available
      • Message not available
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 10)
      • Message not available
      • Message not available
      • Message not available
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues KJKHyperion (Mar 10)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues czino2 (Mar 11)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 09)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
      • Message not available
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues steven (Mar 09)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues M. Burnett (Mar 09)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
    • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Brent Stackhouse (Mar 09)
  • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues M. Burnett (Mar 09)
    • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 09)
  • <Possible follow-ups>
  • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues KJKHyperion (Mar 09)
• PHP import_request_variables() arbitrary variable overwrite Stefano Di Paola (Mar 08)
  • Re: PHP import_request_variables() arbitrary variable overwrite Stefan Esser (Mar 10)
    • Re: PHP import_request_variables() arbitrary variable overwrite ascii (Mar 10)
    • Re: PHP import_request_variables() arbitrary variable overwrite Stefano Di Paola (Mar 10)
      • Re: PHP import_request_variables() arbitrary variable overwrite Stefan Esser (Mar 10)
• PHP import_request_variables() vs extract() ascii (Mar 08)
• List Charter John Cartwright (Mar 08)
• Good resources on Web 2.0 Justin Boem (Mar 08)
  • Re: Good resources on Web 2.0 Michael Silk (Mar 08)
    • Re: Good resources on Web 2.0 crazy frog crazy frog (Mar 09)
      • Re: [WEB SECURITY] Re: Good resources on Web 2.0 Dinis Cruz (Mar 09)
• [USN-433-1] Xine vulnerability Kees Cook (Mar 08)
• [CAID 35145]: CA eTrust Admin Privilege Escalation Vulnerability Williams, James K (Mar 08)
• [USN-434-1] Ekiga vulnerability Kees Cook (Mar 08)
• [ MDKSA-2007:058 ] - Updated ekiga packages fix string vulnerabilities. security (Mar 08)
• [ MDKSA-2007:059 ] - Updated gnupg packages provide enhanced forgery detection security (Mar 08)
• Buffer Overflow in Linux Drivers for Omnikey CardMan 4040 (CVE-2007-0005) Daniel Roethlisberger (Mar 09)
• Php Nuke POST XSS on steroids ascii (Mar 09)
  • Re: Php Nuke POST XSS on steroids Paul Laudanski (Mar 11)
    • Re: Php Nuke POST XSS on steroids ascii (Mar 11)
      • Re: Php Nuke POST XSS on steroids Paul Laudanski (Mar 13)
      • Re: Php Nuke POST XSS on steroids Paul Laudanski (Mar 13)
• SyScan'07 - Call for Paper - NEW UPDATES organiser () syscan org (Mar 09)
• hello! (just that) Santiago Marenssi (Mar 09)
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Michele Cicciotti (Mar 09)
  • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 09)
• SEC Consult SA-20070309-0 :: MySQL 5 Single Row Subselect Denial of Service research (Mar 09)
• firefox 2.0.0.2 crash Tõnu Samuel (Mar 09)
  • Re: firefox 2.0.0.2 crash fire-eyes (Mar 09)
  • Re: firefox 2.0.0.2 crash Valdis . Kletnieks (Mar 09)
    • Re: firefox 2.0.0.2 crash M. Shirk (Mar 09)
      • Re: firefox 2.0.0.2 crash moniker monikerd (Mar 09)
      • Re: firefox 2.0.0.2 crash Valdis . Kletnieks (Mar 09)
  • Re: firefox 2.0.0.2 crash Mihai Dontu (Mar 09)
    • Re: firefox 2.0.0.2 crash endrazine (Mar 11)
      • Re: firefox 2.0.0.2 crash Rik Bobbaers (Mar 12)
  • Re: firefox 2.0.0.2 crash Sam Hocevar (Mar 12)
  • Re: firefox 2.0.0.2 crash Troy Cregger (Mar 13)
  • <Possible follow-ups>
  • Re: firefox 2.0.0.2 crash Kristian Hermansen (khermans) (Mar 12)
    • Re: firefox 2.0.0.2 crash Jason Areff (Mar 12)
  • Re: firefox 2.0.0.2 crash Kristian Hermansen (khermans) (Mar 13)
• Re: [WEB SECURITY] Re: Good resources on Web 2.0 Kasey Cross (Mar 09)
  • Re: [WEB SECURITY] Re: Good resources on Web 2.0 bugtraq (Mar 11)
    • Re: [WEB SECURITY] Re: Good resources on Web 2.0 czino2 (Mar 11)
• [ MDKSA-2007:060 ] - Updated kernel packages fix multiple vulnerabilities and bugs security (Mar 09)
• [ GLSA 200703-08 ] SeaMonkey: Multiple vulnerabilities Raphael Marichez (Mar 09)
• [ GLSA 200703-09 ] Smb4K: Multiple vulnerabilities Raphael Marichez (Mar 09)
• [Argeniss] Practical 10 minutes security audit: Oracle Case (Paper) Cesar (Mar 09)
• Pre-open files attack agains locked file 3APA3A (Mar 10)
• [ GLSA 200703-10 ] KHTML: Cross-site scripting (XSS) vulnerability Raphael Marichez (Mar 10)
• [SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities Martin Schulze (Mar 10)
• Is OWASP vulnerable ?? Scarlet Pimpernel (Mar 10)
  • Re: Is OWASP vulnerable ?? jf (Mar 10)
  • Re: Is OWASP vulnerable ?? Paul Schmehl (Mar 10)
    • Re: Is OWASP vulnerable ?? Valdis . Kletnieks (Mar 10)
      • Re: Is OWASP vulnerable ?? Paul Schmehl (Mar 10)
      • Re: Is OWASP vulnerable ?? Valdis . Kletnieks (Mar 10)
      • Re: Is OWASP vulnerable ?? Paul Schmehl (Mar 10)
      • Re: Is OWASP vulnerable ?? jf (Mar 10)
      • Re: Is OWASP vulnerable ?? czino2 (Mar 11)
      • Re: Is OWASP vulnerable ?? Michael Silk (Mar 11)
  • Re: Is OWASP vulnerable ?? Andrew Farmer (Mar 10)
    • Re: Is OWASP vulnerable ?? Scarlet Pimpernel (Mar 10)
      • Re: Is OWASP vulnerable ?? jf (Mar 10)
      • Re: Is OWASP vulnerable ?? czino2 (Mar 11)
  • <Possible follow-ups>
  • Re: Is OWASP vulnerable ?? Steven M. Christey (Mar 12)
• Exploit selling service up and running kingcope (Mar 10)
  • Re: Exploit selling service up and running James Matthews (Mar 10)
    • Re: Exploit selling service up and running czino2 (Mar 11)
• Firefox: about:blank is phisher's best friend Michal Zalewski (Mar 10)
• etom 7.0 paper. Ozan Ozkara (Mar 11)
• Re: is scarlet pimpernel a dork? [was] Is OWASP vulnerable ?? Knud Erik Højgaard (Mar 11)
• XSS and SQL Injection in Election Commision of India website (now fixed) Ajay Pal Singh Atwal (Mar 11)
• A small phishing operation phpninja (Mar 12)
• R: A small phishing operation bunker (Mar 12)
• TinyMCE_exp Remote File Include Vulnerability 0o_zeus_o0 elitemexico.org (Mar 12)
• a heeeee he announcement heeeee he (Mar 12)
  • <Possible follow-ups>
  • a heeeee he announcement heeeee he (Mar 12)
• a heeee he announcement heeeee he (Mar 12)
• Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. Thierry Zoller (Mar 12)
  • Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. Net Tech (Mar 13)
    • Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. Thierry Zoller (Mar 13)
• RIM BlackBerry Pearl 8100 Browser DoS mike kemp (Mar 12)
• Call for Papers: DeepSec IDSC 2007 Europe/Vienna: 20-23 Nov 2007 Paul Böhm (Mar 12)
• XSS on eplus.de, german mobile telephony provider Hanno Böck (Mar 12)
• Re: PHP import_request_variables() arbitrary variable overwrite Steven M. Christey (Mar 12)
• [USN-435-1] Xine vulnerability Kees Cook (Mar 12)
• new AttackAPI pdp (architect) (Mar 12)
• [USN-436-1] KTorrent vulnerabilities Kees Cook (Mar 12)
• XSS on eplus.de, german mobile telephony provider security (Mar 12)
• XSS at Aon.at, Austrian ISP Florian Stinglmayr (Mar 13)
  • Re: XSS at Aon.at, Austrian ISP Nikolay Kichukov (Mar 25)
• [USN-432-2] GnuPG2, GPGME vulnerability Kees Cook (Mar 13)
• heeee he heeeee he (Mar 13)
  • <Possible follow-ups>
  • heeee he heeeee he (Mar 19)
• heeeee he heeeee he (Mar 13)
  • Re: heeeee he Thierry Zoller (Mar 13)
  • <Possible follow-ups>
  • heeeee he heeeee he (Mar 15)
• Unrarlib 0.4.0 (urarlib_get) Local buffer overflow starcadi (Mar 13)
• [ MDKSA-2007:062 ] - Updated xine-lib packages to address buffer overflow vulnerability security (Mar 13)
• vbulletin admincp sql injection disfigure (Mar 13)
• [ MDKSA-2007:061 ] - Updated mplayer packages to address buffer overflow vulnerability security (Mar 13)
• CarolinaCon presentation drafts Vic Vandal (Mar 13)
• New report on Windows Vista network attack surface Jim Hoagland (Mar 13)
• [ GLSA 200703-11 ] Amarok: User-assisted remote execution of arbitrary code Raphael Marichez (Mar 13)
• [SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery Moritz Muehlenhoff (Mar 13)
• [Advisory]McAfee ePolicy Orchestrator Multiple Remote Buffer Overflow Vulnerabilities hfli (Mar 13)
• n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation security (Mar 14)
• n.runs-SA-2007.004 - PHProjekt 5.2.0 - Cross Site Scripting and Filter Evasion security (Mar 14)
• n.runs-SA-2007.003 - PHProjekt 5.2.0 - SQL Injection security (Mar 14)
• n.runs-SA-2007.005 - PHProjekt 5.2.0 - Cross Site Request Forgery security (Mar 14)
• [ GLSA 200703-12 ] SILC Server: Denial of Service Matthias Geerdsen (Mar 14)
• SEC Consult SA-20070314-0 :: Apache HTTP Server / Tomcat directory traversal David Matscheko (Mar 14)
• Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability starcadi starcadi (Mar 14)
  • Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability James Matthews (Mar 14)
    • Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability Ismail Dönmez (Mar 15)
      • Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability Marcus Meissner (Mar 15)
      • Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability Ismail Dönmez (Mar 15)
      • Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability Valdis . Kletnieks (Mar 15)
      • Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability Ismail Dönmez (Mar 15)
      • Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability Brian Eaton (Mar 16)
• XSS on RIS of the Austrian Government Florian Stinglmayr (Mar 14)
• iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability iDefense Labs (Mar 14)
• bindtty.c can not use in RHEL4 box modversion (Mar 14)
• GMail Contact Information Disclosure PoC beNi (Mar 14)
  • Re: [WEB SECURITY] GMail Contact Information Disclosure PoC chris (Mar 18)
    • Re: [WEB SECURITY] GMail Contact Information Disclosure PoC Dror Shalev (Mar 19)
• Phishing using IE7 local resource vulnerability avivra (Mar 14)
  • Re: Phishing using IE7 local resource vulnerability pdp (architect) (Mar 14)
• heee he heeeee he (Mar 14)
• [ GLSA 200703-13 ] SSH Communications Security's Secure Shell Server: SFTP privilege escalation Raphael Marichez (Mar 14)
• Horde IMP Webmail Client version H3 (4.1.4) fixes multiple XSS issues Moritz Naumann (Mar 14)
• Horde 3.1.4 (RC1) fixes XSS issue Moritz Naumann (Mar 14)
• Woltab Burning Board SQL Injection usergroups.php x666 (Mar 14)
  • Re: Woltab Burning Board SQL Injection usergroups.php Bastian Ahrens (Mar 15)
• Norton Insufficient validation of 'SymTDI' driver input buffer Matousec - Transparent security Research (Mar 15)
• iDefense Security Advisory 03.15.07: Horde Project Cleanup Script Arbitrary File Deletion Vulnerability iDefense Labs (Mar 15)
• tinyurl.com - Local Clipboard jay.tomas (Mar 15)
  • Re: tinyurl.com - Local Clipboard Shaun (Mar 15)
    • Re: tinyurl.com - Local Clipboard gabriel rosenkoetter (Mar 16)
  • <Possible follow-ups>
  • Re: tinyurl.com - Local Clipboard jay.tomas (Mar 15)
    • Re: tinyurl.com - Local Clipboard Debasis Mohanty (Mar 15)
      • Re: tinyurl.com - Local Clipboard Rod Trent (Mar 15)
      • Re: tinyurl.com - Local Clipboard Debasis Mohanty (Mar 15)
• QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow starcadi starcadi (Mar 15)
  • Re: QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow Knud Erik Højgaard (Mar 15)
    • Re: QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow Valdis . Kletnieks (Mar 15)
      • Re: QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow starcadi starcadi (Mar 16)
• LIBFtp 5.0 (sprintf(), strcpy()) Multiple local buffer overflow starcadi starcadi (Mar 15)
• Re: Phishing using IE7 local resource vulnerability avivra (Mar 15)
  • Re: Phishing using IE7 local resource vulnerability Matthew Murphy (Mar 15)
    • Re: Phishing using IE7 local resource vulnerability avivra (Mar 15)
• Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability Ulf Harnhammar (Mar 15)
  • Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability Ismail Dönmez (Mar 15)
    • Re: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability Alejandro Barrera (Mar 15)
• [SECURITY] [DSA 1267-1] New webcalendar packages fix remote file inclusion Moritz Muehlenhoff (Mar 15)
• [CAID 34817, 35058, 35158, 35159]: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities Williams, James K (Mar 15)
• Tel Aviv University Security Forum - 18th of March Gadi Evron (Mar 15)
  • Re: Tel Aviv University Security Forum - 18th of March Hakuna Matata (Mar 16)
    • Re: Tel Aviv University Security Forum - 18th of March James Matthews (Mar 16)
    • Re: Tel Aviv University Security Forum - 18th of March Gadi Evron (Mar 16)
• April, 2007 is the "Month of Myspace Bugs" Mondo Armando (Mar 15)
• TOOL: LLTD implementation in Perl GomoR (Mar 16)
• OWASP Spring of Code 2007 Dinis Cruz (Mar 16)
• Call For Papers - IT Underground Dublin Marcin Tkaczyk (Mar 16)
• iDefense Security Advisory 03.16.07: Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilities iDefense Labs (Mar 16)
• Double Trap XSS Injection : An Analysis Aditya K Sood (Mar 16)
• [ MDKSA-2007:063 ] - Updated libwpd packages to address heap overflow vulnerabilities security (Mar 16)
• [ MDKSA-2007:064 ] - Updated openoffice.org packages to address libwpd heap overflow vulnerabilities security (Mar 16)
• [NETRAGARD-20070316 SECURITY ADVISORY][FrontBase Database <= 4.2.7 ALL PLATFORMS][REMOTE BUFFER OVERFLOW CONDITION][LEVEL: EASY][RISK:MEDIUM] Netragard Security Advisories (Mar 16)
• [ GLSA 200703-14 ] Asterisk: SIP Denial of Service Raphael Marichez (Mar 16)
• [ GLSA 200703-15 ] PostgreSQL: Multiple vulnerabilities Raphael Marichez (Mar 16)
• [ GLSA 200703-16 ] Apache JK Tomcat Connector: Remote execution of arbitrary code Raphael Marichez (Mar 16)
• rPSA-2007-0056-1 gnupg rPath Update Announcements (Mar 16)
• rPSA-2007-0057-1 libwpd rPath Update Announcements (Mar 16)
• ANNOUNCE: Apache-SSL release, version 1.3.37+ssl_1.57 Adam Laurie (Mar 17)
  • Xbox live accounts are being stolen Kevin Finisterre (lists) (Mar 17)
    • Re: Xbox live accounts are being stolen Jason Miller (Mar 17)
      • Re: Xbox live accounts are being stolen Peter Dawson (Mar 17)
      • Re: Xbox live accounts are being stolen Kevin Finisterre (lists) (Mar 17)
      • Re: Xbox live accounts are being stolen Kevin Finisterre (lists) (Mar 17)
      • Re: Xbox live accounts are being stolen php0t (Mar 18)
      • Re: Xbox live accounts are being stolen Andrew Redman (Mar 17)
      • Re: Xbox live accounts are being stolen Kevin Finisterre (lists) (Mar 17)
    • Re: Xbox live accounts are being stolen (update) Kevin Finisterre (lists) (Mar 19)
• Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability starcadi (Mar 17)
• [SECURITY] [DSA 1268-1] New libwpd packages fix arbitrary code execution Martin Schulze (Mar 17)
• fabios ultra vulnerability extravaganza fabiodancedjsupreme (Mar 17)
• Web Security and Bookmarklet Exploits pdp (architect) (Mar 18)
• [SECURITY] [DSA 1269-1] New lookup-el packages fix insecure temporary file Martin Schulze (Mar 18)
• nac-gaf spam attacks Steve Cooperman (Mar 18)
• [ GLSA 200703-17 ] ulogd: Remote execution of arbitrary code Raphael Marichez (Mar 18)
• [ GLSA 200703-18 ] Mozilla Thunderbird: Multiple vulnerabilities Raphael Marichez (Mar 18)
• [ GLSA 200703-19 ] LTSP: Authentication bypass in included LibVNCServer code Raphael Marichez (Mar 18)
• [ GLSA 200703-20 ] LSAT: Insecure temporary file creation Raphael Marichez (Mar 18)
• Layered Defense Research Advisory: F-Secure Anti-Virus Client Security 6.02 Format String Vulnerability Deral Heiland (Mar 19)
• unsubscribe Tucker Jeff (Mar 19)
• Asterisk SDP DOS vulnerability Radu State (Mar 19)
• w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities Jesper Jurcenoks (Mar 19)
• w-agora version 4.2.1 Information Disclosure Vulnerability Jesper Jurcenoks (Mar 19)
• A new apache 1.x 0day x666 (Mar 19)
  • Re: A new apache 1.x 0day Thierry Zoller (Mar 19)
    • Re: A new apache 1.x 0day don bailey (Mar 19)
  • Re: A new apache 1.x 0day Knud Erik Højgaard (Mar 19)
• dkftpbench 0.45 (Platoon:init) Local buffer overflow vulnerability starcadi (Mar 19)
  • Re: dkftpbench 0.45 (Platoon:init) Local buffer overflow vulnerability 3APA3A (Mar 20)
    • Re: dkftpbench 0.45 (Platoon:init) Local buffer overflow vulnerability starcadi (Mar 20)
• cftp 0.12 (readrc) Local buffer overflow vulnerability starcadi (Mar 19)
  • Re: cftp 0.12 (readrc) Local buffer overflow vulnerability 3APA3A (Mar 20)
• [USN-437-1] libwpd vulnerability Kees Cook (Mar 19)
• ZynOS v3.40 One packet killer Joxean Koret (Mar 19)
• Microsoft coverup ? Stolen Xbox live accounts list of known victims - Please Help Kevin Finisterre (lists) (Mar 19)
• Re: Sexy, spankable 22 year old girl looking for a wild time rgolodner (Mar 19)
• CISCO Phone 7940 DOS vulnerability Radu State (Mar 20)
  • Re: CISCO Phone 7940 DOS vulnerability Matthew Cerha (Mar 20)
  • Re: CISCO Phone 7940 DOS vulnerability Shawn Merdinger (Mar 20)
• Phishing site fabio (Mar 20)
• Advisory - Redirection Vulnerability in wp-login.php. Metaeye SG (Mar 20)
• Mercur SP4 IMAPD mu-b (Mar 20)
• Microsoft Internet Explorer Multiple Vulnerabilities(mshtml.dll) saied hackeriran (Mar 20)
• [SECURITY] [DSA 1270-1] New OpenOffice.org packages fix several vulnerabilities Martin Schulze (Mar 20)
  • Re: [SECURITY] [DSA 1270-1] New OpenOffice.org packages fix several vulnerabilities Peter Besenbruch (Mar 20)
• [ GLSA 200703-21 ] PHP: Multiple vulnerabilities Raphael Marichez (Mar 20)
• [ GLSA 200703-22 ] Mozilla Network Security Service: Remote execution of arbitrary code Raphael Marichez (Mar 20)
• [ GLSA 200703-23 ] WordPress: Multiple vulnerabilities Raphael Marichez (Mar 20)
• [ MDKSA-2007:065 ] - Updated nas packages address multiple vulnerabilities security (Mar 20)
• [ MDKSA-2007:066 ] - Updated OpenAFS packages address vulnerability security (Mar 20)
• Helix Server heap overflow research (Mar 20)
• kill -9 coz it's my time to shine Gadi Evron (Mar 20)
  • Re: kill -9 coz it's my time to shine Tremaine Lea (Mar 21)
    • Re: kill -9 coz it's my time to shine scott (Mar 21)
      • Re: kill -9 coz it's my time to shine scott (Mar 21)
• [USN-438-1] Inkscape vulnerability Kees Cook (Mar 20)
• Newest hacks wangkaig (Mar 20)
  • Re: Newest hacks Jim Popovitch (Mar 20)
  • Re: Newest hacks Saeed Abu Nimeh (Mar 20)
  • Message not available
    • Re: Newest hacks Sebastian Krahmer (Mar 21)
  • <Possible follow-ups>
  • Re: Newest hacks Nick Eoannidis (Mar 21)
    • Re: Newest hacks Jason Miller (Mar 21)
      • Message not available
      • Re: Newest hacks Jason Miller (Mar 21)
      • Re: Newest hacks scott (Mar 21)
• Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) Michael Silk (Mar 21)
  • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) 3APA3A (Mar 21)
    • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) Tim (Mar 21)
      • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) 3APA3A (Mar 21)
      • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) Valdis . Kletnieks (Mar 21)
      • Re: Chinese Professor Cracks Fifth Data SecurityAlgorithm (SHA-1) Dave "No, not that one" Korn (Mar 22)
      • Re: Chinese Professor Cracks Fifth Data SecurityAlgorithm (SHA-1) Michael Silk (Mar 23)
      • Re: Chinese Professor Cracks Fifth Data SecurityAlgorithm (SHA-1) Dude VanWinkle (Mar 24)
    • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) Blue Boar (Mar 21)
      • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) 3APA3A (Mar 21)
      • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) Blue Boar (Mar 21)
      • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) 3APA3A (Mar 21)
      • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) Blue Boar (Mar 21)
      • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) 3APA3A (Mar 21)
      • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) wac (Mar 24)
      • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) Valdis . Kletnieks (Mar 24)
      • Re: Chinese Professor Cracks Fifth Data Security Algorithm (SHA-1) wac (Mar 25)
• Grandstream Budge Tone-200 denial of service vulnerability Radu State (Mar 21)
• I did not have sexual relations with that woman (xbox live pretexting) Kevin Finisterre (lists) (Mar 21)
• [USN-440-1] MySQL vulnerability Kees Cook (Mar 21)
• [USN-439-1] file vulnerability Kees Cook (Mar 21)
• [SECURITY] [DSA 1271-1] New openafs packages fix remote privilege escalation bug Noah Meyerhans (Mar 21)
• Secunia Research: InterActual Player / CinePlayer IASystemInfo.dll ActiveX Control Buffer Overflow Secunia Research (Mar 21)
• Secunia Research: Evolution Shared Memo Categories Format String Vulnerability Secunia Research (Mar 21)
• Secunia Research: XMMS Integer Overflow and Underflow Vulnerabilities Secunia Research (Mar 21)
• ZombieMap - GEO Zombie Mapper pdp (architect) (Mar 22)
• rPSA-2007-0059-1 file rPath Update Announcements (Mar 22)
• Exploiting Microsoft dynamic Dns updates Andres Tarasco (Mar 22)
• IntraProgrammed Search Engines Are XSS Driven Aditya K Sood (Mar 22)
• [ MDKSA-2007:067 ] - Updated file packages fix heap-based buffer overflow vulnerability security (Mar 22)
• [ MDKSA-2007:068 ] - Updated squid packages fix DoS vulnerability security (Mar 22)
• [SECURITY] [DSA 1272-1] New tcpdump packages fix denial of service Moritz Muehlenhoff (Mar 22)
• [ MDKSA-2007:069 ] - Updated inkscape packages to format string vulnerability security (Mar 22)
• Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability Kingcope (Mar 23)
  • <Possible follow-ups>
  • Re: Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability Joxean Koret (Mar 23)
    • Re: Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability Kingcope (Mar 23)
• dproxy - arbitrary code execution through stack buffer overflow vulnerability Alexander Klink (Mar 23)
  • Re: dproxy - arbitrary code execution through stack buffer overflow vulnerability mu-b (Mar 23)
    • Re: dproxy - arbitrary code execution through stack buffer overflow vulnerability Alexander Klink (Mar 23)
• XBOX ID's being Jacked richfa1 (Mar 23)
  • Re: XBOX ID's being Jacked Kevin Finisterre (lists) (Mar 23)
    • Message not available
      • Message not available
      • Re: XBOX ID's being Jacked Jason Miller (Mar 24)
• Fuzzled - Perl fuzzing framework Tim Brown (Mar 23)
  • Re: [fuzzing] Fuzzled - Perl fuzzing framework Jared DeMott (Mar 24)
• iDefense Security Advisory 03.23.07: DataRescue IDA Pro Remote Debugger Server Authentication Bypass Vulnerability iDefense Labs (Mar 23)
• iDefense Security Advisory 03.23.07: Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error Vulnerability iDefense Labs (Mar 23)
• Fix Update: Disable Google Desktop Link Integration with IE & FireFox Debasis Mohanty (Mar 23)
• POC: for Asterisk SIP INVITE remote DOS Radu State (Mar 24)
• Fizzle : Firefox Extension Vulnerability CrYpTiC MauleR (Mar 24)
  • <Possible follow-ups>
  • Fizzle : Firefox Extension Vulnerability CrYpTiC MauleR (Mar 24)
  • Fizzle : Firefox Extension Vulnerability CrYpTiC MauleR (Mar 24)
• hi5 Antiphishing Departement beNi (Mar 24)
  • Re: hi5 Antiphishing Departement wac (Mar 25)
• Re: Local user to root escalation in apache 1.3.34 (Debian only) Nikolay Kichukov (Mar 25)
  • Re: Local user to root escalation in apache 1.3.34 (Debian only) James Matthews (Mar 25)
• Redirection vulnerability in oracle entreprise manager handrix cobra (Mar 25)
• Phishing vulnerability in oracle entreprise manager handrix cobra (Mar 25)
• Phishtank.com Gone? Michael Ward (Mar 25)
  • Re: Phishtank.com Gone? Larry Seltzer (Mar 25)
    • Re: Phishtank.com Gone? Tremaine Lea (Mar 25)
      • Re: Phishtank.com Gone? Anshuman G (Mar 25)
      • Re: Phishtank.com Gone? Kradorex Xeron (Mar 25)
      • Re: Phishtank.com Gone? Kradorex Xeron (Mar 25)
    • Re: Phishtank.com Gone? Pieter de Boer (Mar 26)
  • Re: Phishtank.com Gone? adam lamarre (Mar 25)
  • Re: Phishtank.com Gone? Mike N (Mar 25)
• I'm not the only one who can't resolve phishtank.com, but some can.. Michael Ward (Mar 25)
  • Re: I'm not the only one who can't resolve phishtank.com, but some can.. Tremaine Lea (Mar 25)
    • Re: I'm not the only one who can't resolve phishtank.com, but some can.. Tim (Mar 25)
      • Re: I'm not the only one who can't resolve phishtank.com, but some can.. Kradorex Xeron (Mar 25)
      • Re: I'm not the only one who can't resolve phishtank.com, but some can.. Michael Ward (Mar 25)
      • Re: I'm not the only one who can't resolve phishtank.com, but some can.. Tim (Mar 25)
  • Re: I'm not the only one who can't resolve phishtank.com, but some can.. Florian Weimer (Mar 26)
  • <Possible follow-ups>
  • I'm not the only one who can't resolve phishtank.com, but some can.. Michael Ward (Mar 25)
• Libero.it (italian ISP) XSS vulnerability Rosario Valotta (Mar 26)
  • Re: Libero.it (italian ISP) XSS vulnerability Florian Stinglmayr (Mar 26)
• Xbox live account stolen. David Vernaci (Mar 26)
  • Re: Xbox live account stolen. Kevin Finisterre (lists) (Mar 26)
    • Re: Xbox live account stolen. Morning Wood (Mar 26)
• RainbowCrack-Online T Biehn (Mar 26)
  • Message not available
    • Re: RainbowCrack-Online T Biehn (Mar 26)
  • Re: RainbowCrack-Online Tõnu Samuel (Mar 26)
    • Re: RainbowCrack-Online James Matthews (Mar 26)
      • Re: RainbowCrack-Online poo (Mar 27)
• Rootkit.com : Prone To Redirection and Looping Attacks Aditya K Sood (Mar 26)
• [USN-441-1] Squid vulnerability Kees Cook (Mar 26)
• [USN-442-1] Evolution vulnerability Kees Cook (Mar 26)
• [ GLSA 200703-24 ] mgv: Stack overflow in included gv code Raphael Marichez (Mar 26)
• SignKorea's ActiveX Buffer Overflow Vulnerability Alex Park (Mar 26)
• Metasploit Framework 3.0 RELEASED! H D Moore (Mar 26)
• Linux Kernel DCCP Memory Disclosure Vulnerability Robert Święcki (Mar 27)
  • Re: Linux Kernel DCCP Memory Disclosure Vulnerability Robert Święcki (Mar 27)
• [ MDKSA-2007:070 ] - Updated evolution packages to address vulnerability security (Mar 27)
• RainbowCrack-Online Drama T Biehn (Mar 27)
  • Re: RainbowCrack-Online Drama Asaf Rafaely (Mar 28)
  • Re: RainbowCrack-Online Drama Kradorex Xeron (Mar 28)
    • Re: RainbowCrack-Online Drama James Matthews (Mar 28)
• Buffer Overflow in InterVetions' NaviCopa HTTP server 2.01 skillTube.com (Mar 27)
• Remote DOS HP JetDirect Print Servers handrix cobra (Mar 27)
• Rootkit.com Redirection Looping Attack Analysis Aditya K Sood (Mar 27)
• [USN-443-1] Firefox vulnerability Kees Cook (Mar 27)
• [USN-444-1] OpenOffice.org vulnerabilities Kees Cook (Mar 27)
• [USN-445-1] XMMS vulnerabilities Kees Cook (Mar 27)
• [SECURITY] [DSA 1273-1] New nas packages fix multiple remote vulnerabilities Noah Meyerhans (Mar 27)
• [USN-446-1] NAS vulnerabilities Kees Cook (Mar 27)
• Corel Wordperfect X3 Stack Overflow jonnyboi (Mar 28)
• iDefense Security Advisory 03.28.07: IBM Lotus Domino Web Access Cross Site Scripting Vulnerability iDefense Labs (Mar 28)
• iDefense Security Advisory 03.28.07: IBM Lotus Domino Server LDAP Request Invalid DN Message Heap Overflow Vulnerability iDefense Labs (Mar 28)
• Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team (Mar 28)
• Another XSS vulnerability in Italian provider Libero.it LK (Mar 28)
  • Re: Another XSS vulnerability in Italian provider Libero.it Kradorex Xeron (Mar 29)
  • <Possible follow-ups>
  • Another XSS vulnerability in Italian provider Libero.it Matteo G.P. Flora (Mar 28)
    • Another XSS vulnerability in Italian provider Libero.it Matteo G.P. Flora (Mar 28)
• Re: SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000). William A. Rowe, Jr. (Mar 28)
• ZDI-07-011: IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability zdi-disclosures (Mar 28)
• Update: ViewCVS and ViewVC 'checkout view' content type fixation issue Moritz Naumann (Mar 28)
  • Re: [viewvc-users] Update: ViewCVS and ViewVC 'checkout view' content type fixation issue C. Michael Pilato (Mar 28)
• [Full-Disclosure] Another XSS vulnerability in italian Libero.it Matteo G.P. Flora (Mar 28)
• NewOrder.box.sk Inherits Severe Redirection Vulnerability Aditya K Sood (Mar 28)
  • Re: NewOrder.box.sk Inherits Severe RedirectionVulnerability Nikolay Kichukov (Mar 29)
    • Re: NewOrder.box.sk Inherits Severe RedirectionVulnerability Aditya K Sood (Mar 29)
      • Re: NewOrder.box.sk Inherits Severe RedirectionVulnerability Nikolay Kichukov (Mar 29)
      • Re: NewOrder.box.sk Inherits Severe bugtraq (Mar 30)
      • Re: NewOrder.box.sk Inherits Severe Aditya K Sood (Mar 29)
• [SECURITY] [DSA 1270-2] New OpenOffice.org packages fix several vulnerabilities Martin Schulze (Mar 28)
• [USN-447-1] KDE library vulnerabilities Kees Cook (Mar 28)
• rPSA-2007-0061-1 inkscape rPath Update Announcements (Mar 29)
• Widespread vulnerabilities in Libero.it/Infostrada.it web portals Rosario Valotta (Mar 29)
• Re: Another XSS vulnerability in Italian providerLibero.it paura (Mar 29)
  • Re: Another XSS vulnerability in Italian providerLibero.it Edmond Dantes (Mar 29)
    • Re: Another XSS vulnerability in Italian providerLibero.it MailLists Listas (Mar 29)
• [ MDKSA-2007:071 ] - Updated xmms packages to address integer vulnerabilities security (Mar 29)
• iDefense Security Advisory 03.29.07: IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability iDefense Labs (Mar 29)
• Buy 0day vulnerability opportunity2007 (Mar 29)
  • Re: Buy 0day vulnerability Michael Bann (Mar 29)
    • Re: Buy 0day vulnerability don bailey (Mar 29)
      • Re: Buy 0day vulnerability James Matthews (Mar 29)
      • CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability M. Shirk (Mar 29)
    • Re: Buy 0day vulnerability Guasconi Vincent (Mar 30)
      • Re: Buy 0day vulnerability Peter Dawson (Mar 30)
      • Re: Buy 0day vulnerability Guasconi Vincent (Mar 30)
      • Re: Buy 0day vulnerability Maxime Ducharme (Mar 30)
• [ MDKSA-2007:072 ] - Updated kdelibs packages to address FTP PASV issue in konqueror security (Mar 29)
• [ GLSA 200703-25 ] Ekiga: Format string vulnerability Raphael Marichez (Mar 29)
• [ MDKSA-2007:073 ] - Updated openoffice.org packages to address vulnerabilities security (Mar 29)
• VMSA-2007-0002 VMware ESX security updates VMware Security team (Mar 29)
• 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) Alexander Sotirov (Mar 29)
  • Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) James Rankin (Mar 30)
    • Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) James Matthews (Mar 30)
  • Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) Jan Wrobel (Mar 30)
    • Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) Alexander Sotirov (Mar 30)
      • Re: 0-day ANI vulnerability in Microsoft Windows(CVE-2007-0038) Eric Sites (Mar 30)
  • Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) Alexander Sotirov (Mar 31)
• ANI Zeroday, Third Party Patch Marc Maiffret (Mar 30)
• secure listserv config imipak (Mar 30)
• Preventing Cross-site Request Forgeries pdp (architect) (Mar 30)
  • Re: [WEB SECURITY] Preventing Cross-site Request Forgeries [ASP.NET crowd] Chris Weber (Mar 30)
    • Re: [WEB SECURITY] Preventing Cross-site Request Forgeries [ASP.NET crowd] Michael Sutton (Mar 30)
      • Re: [WEB SECURITY] Preventing Cross-site Request Forgeries [ASP.NET crowd] Chris Weber (Mar 30)
• Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability Michal Majchrowicz (Mar 30)
• MADYNES voip fuzzer Juan Perez (Mar 30)
• Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability 3APA3A (Mar 30)
  • Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability James Matthews (Mar 30)
    • Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability Jim Popovitch (Mar 30)
    • Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability Guasconi Vincent (Mar 30)
• A lot of XSS Hanno Böck (Mar 30)
  • Re: A lot of XSS Nikolay Kichukov (Mar 31)
• [ GLSA 200703-26 ] file: Integer underflow Raphael Marichez (Mar 30)
• TSRT-07-03: America Online SuperBuddy ActiveX Control Code Execution Vulnerability TSRT (Mar 30)
• dproxy-nexgen remote mu-b (Mar 30)
  • Re: dproxy-nexgen remote Alexander Klink (Mar 31)
• CA BrightStor ARCserve Backup Mediasvr.exe vulnerability Williams, James K (Mar 30)
  • Re: CA BrightStor ARCserve Backup Mediasvr.exevulnerability Morning Wood (Mar 30)
• On-going Internet Emergency and Domain Names Gadi Evron (Mar 30)
• n3td3v calls for immediate halt to the month of Myspace bugs n3td3v (Mar 30)
• Windows .ANI LoadAniIcon Stack Overflow dev code (Mar 30)
  • Re: Windows .ANI LoadAniIcon Stack Overflow wac (Mar 31)
  • <Possible follow-ups>
  • Re: Windows .ANI LoadAniIcon Stack Overflow dev code (Mar 31)
    • Re: Windows .ANI LoadAniIcon Stack Overflow James Matthews (Mar 31)
• Global Space Exploitation In PHP Based Web Applications Aditya K Sood (Mar 31)
  • Message not available
    • Re: [WEB SECURITY] Re: Global Space Exploitation In PHP Based Web Applications Aditya K Sood (Mar 31)
• [ GLSA 200703-27 ] Squid: Denial of Service Raphael Marichez (Mar 31)
• [ GLSA 200703-28 ] CUPS: Denial of Service Raphael Marichez (Mar 31)
• Digg Delicious Technorati & Netscape XSS (worm?) mybeni websecurity (Mar 31)
• Cisco IP Phone vulnerability J. Oquendo (Mar 31)
  • Re: Cisco IP Phone vulnerability alessandro salvatori (Mar 31)
• ISP in the UK Terminates Account after Full Disclosure Aviram Jenik (Mar 31)
• CAU-2007-0001: Window Transparency Information Disclosure I)ruid (Mar 31)

Previous period

Next period