oss-sec: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

390 messages starting Mar 31 08 and ending Jun 30 08
Date index | Thread index | Author index

• Re: CVE id request: comix Nico Golde (Mar 31)
  • <Possible follow-ups>
  • Re: CVE id request: comix Tomas Hoger (Apr 01)
    • Re: CVE id request: comix Nico Golde (Apr 01)
• CVE id request: mod_suphp Tomas Hoger (Apr 01)
  • Re: CVE id request: mod_suphp Steven M. Christey (Apr 02)
• CVE Request: otrs authentication bypass Ludwig Nussel (Apr 01)
  • Re: CVE Request: otrs authentication bypass Tomas Hoger (Apr 01)
    • Re: CVE Request: otrs authentication bypass Ludwig Nussel (Apr 01)
• CVE id request: squid Tomas Hoger (Apr 01)
  • Re: CVE id request: squid Steven M. Christey (Apr 01)
• CVE request: openssh "ForceCommand" improperly implemented Jonathan Smith (Apr 02)
  • Re: CVE request: openssh "ForceCommand" improperly implemented Steven M. Christey (Apr 02)
  • Re: CVE request: openssh "ForceCommand" improperly implemented Florian Weimer (Apr 02)
• Re: announcing oCERT & oss-security to Bugtraq & f-d Jonathan Smith (Apr 04)
  • Re: announcing oCERT & oss-security to Bugtraq & f-d Solar Designer (Apr 04)
    • Re: announcing oCERT & oss-security to Bugtraq & f-d Andrea Barisani (Apr 04)
      • Re: announcing oCERT & oss-security to Bugtraq & f-d Solar Designer (Apr 04)
      • Re: announcing oCERT & oss-security to Bugtraq & f-d Josh Bressers (Apr 04)
    • Re: announcing oCERT & oss-security to Bugtraq & f-d Josh Bressers (Apr 04)
      • Re: wiki: search for FIXME tags (Was: announcing oCERT & oss-security to Bugtraq & f-d) (GalaxyMaster) (Apr 05)
      • list: members vs. read-only subscribers Solar Designer (Apr 05)
      • Re: list: members vs. read-only subscribers Josh Bressers (Apr 07)
      • Re: list: members vs. read-only subscribers Solar Designer (Apr 08)
      • Re: list: members vs. read-only subscribers Josh Bressers (Apr 08)
      • Re: list: members vs. read-only subscribers Josh Bressers (Apr 22)
      • Re: list: members vs. read-only subscribers Solar Designer (Apr 22)
      • Re: list: members vs. read-only subscribers Jonathan Smith (Apr 22)
      • Re: list: members vs. read-only subscribers Solar Designer (Apr 22)
      • Re: list: members vs. read-only subscribers Josh Bressers (Apr 25)
      • Re: group announcement (was: list: members vs. read-only subscribers) Josh Bressers (May 02)
      • Re: group announcement (was: list: members vs. read-only subscribers) Vincent Danen (May 02)
      • Re: group announcement Jonathan Smith (May 02)
      • Re: group announcement (was: list: members vs. read-only subscribers) Steven M. Christey (May 02)
      • Re: group announcement (was: list: members vs. read-only subscribers) Josh Bressers (May 02)
      • Re: group announcement Jonathan Smith (May 02)
      • Re: group announcement Josh Bressers (May 04)
      • Re: group announcement Jim Meyering (May 05)
      • Re: group announcement Solar Designer (May 12)
      • Re: list: members vs. read-only subscribers Josh Bressers (Apr 23)
      • Re: list: members vs. read-only subscribers Vincent Danen (Apr 09)
      • Re: announcing oCERT & oss-security to Bugtraq & f-d Solar Designer (Apr 08)
      • Re: announcing oCERT & oss-security to Bugtraq & f-d Andrea Barisani (Apr 08)
      • Re: announcing oCERT & oss-security to Bugtraq & f-d Josh Bressers (Apr 08)
      • Re: announcing oCERT & oss-security to Bugtraq & f-d Andrea Barisani (Apr 08)
      • Re: announcing oCERT & oss-security to Bugtraq & f-d Solar Designer (Apr 08)
    • Re: announcing oCERT & oss-security to Bugtraq & f-d Vincent Danen (Apr 04)
  • Re: announcing oCERT & oss-security to Bugtraq & f-d Vincent Danen (Apr 04)
  • Re: "who shouldn't be on-list" security curmudgeon (Apr 04)
    • Re: Re: "who shouldn't be on-list" Jonathan Smith (Apr 04)
      • Re: Re: "who shouldn't be on-list" Vincent Danen (Apr 04)
• announcing oss-security to Bugtraq & f-d Solar Designer (Apr 04)
  • Re: announcing oss-security to Bugtraq & f-d Andrea Barisani (Apr 04)
    • wiki: vendor info Solar Designer (Apr 04)
      • Re: wiki: vendor info security curmudgeon (Apr 04)
      • Re: wiki: vendor info Josh Bressers (Apr 04)
      • Re: wiki: vendor info lyger (Apr 04)
      • Re: wiki: vendor info Vincent Danen (Apr 04)
      • Re: wiki: vendor info & osvdb.org/vendors Solar Designer (Apr 05)
      • Re: wiki: vendor info & osvdb.org/vendors Solar Designer (Apr 05)
      • Re: wiki: vendor info & osvdb.org/vendors security curmudgeon (Apr 05)
      • Re: wiki: vendor info (GalaxyMaster) (Apr 05)
      • Re: wiki: vendor info security curmudgeon (Apr 05)
• [oCERT 2008-02] libfishsound insufficient boundary checks Andrea Barisani (Apr 06)
  • Re: [oCERT 2008-02] libfishsound insufficient boundary checks Steven M. Christey (Apr 06)
• Security fixes in m4-1.4.11 Patrick J. Volkerding (Apr 06)
  • Re: Security fixes in m4-1.4.11 Steven M. Christey (Apr 06)
    • Re: Security fixes in m4-1.4.11 Lubomir Kundrak (Apr 07)
      • Re: Security fixes in m4-1.4.11 Florian Weimer (Apr 07)
    • Re: Security fixes in m4-1.4.11 Josh Bressers (Apr 11)
• Re: [oCERT 2008-02] libfishsound insufficient boundary Andrea Barisani (Apr 07)
• gcc 4.2 optimizations and integer overflow checks Josh Bressers (Apr 07)
  • Re: gcc 4.2 optimizations and integer overflow checks Steven M. Christey (Apr 07)
    • Re: gcc 4.2 optimizations and integer overflow checks Nico Golde (Apr 07)
      • Re: gcc 4.2 optimizations and integer overflow checks Solar Designer (Apr 07)
    • Re: gcc 4.2 optimizations and integer overflow checks Nico Golde (Apr 09)
      • Re: gcc 4.2 optimizations and integer overflow checks Steven M. Christey (Apr 10)
      • Re: gcc 4.2 optimizations and integer overflow checks Marcus Meissner (Apr 18)
      • Re: gcc 4.2 optimizations and integer overflow checks Solar Designer (Apr 18)
      • Re: gcc 4.2 optimizations and integer overflow checks Richard Guenther (Apr 20)
    • Re: gcc 4.2 optimizations and integer overflow checks Florian Weimer (Apr 11)
  • Re: gcc 4.2 optimizations and integer overflow checks Marcus Meissner (Apr 07)
• wiki: pagemove, reconfiguration of default word separator for page names (GalaxyMaster) (Apr 08)
• CVE Request (rsync) Josh Bressers (Apr 08)
  • Re: CVE Request (rsync) Steven M. Christey (Apr 10)
• buffer overflow in Python zlib extension module Jonathan Smith (Apr 10)
  • Re: buffer overflow in Python zlib extension module Steven M. Christey (Apr 10)
• CVE requests: drupal and phpbb Hanno Böck (Apr 10)
  • Re: CVE requests: drupal and phpbb Steven M. Christey (Apr 12)
• CVE request: openfire <3.5.0 Denial of Service Robert Buchholz (Apr 10)
  • Re: CVE request: openfire <3.5.0 Denial of Service Steven M. Christey (Apr 12)
• CVE request: Swfdec <0.6.4 remote file disclosure Robert Buchholz (Apr 10)
  • Re: CVE request: Swfdec <0.6.4 remote file disclosure Steven M. Christey (Apr 16)
• CVE request: Opera <9.27 Multiple issues Robert Buchholz (Apr 10)
  • Re: CVE request: Opera <9.27 Multiple issues Steven M. Christey (Apr 12)
    • Re: CVE request: Opera <9.27 Multiple issues Robert Buchholz (Apr 12)
• CVE request: tss <= 0.8.1-3: arbitary file reading Steve Kemp (Apr 12)
  • Re: CVE request: tss <= 0.8.1-3: arbitary file reading Nico Golde (Apr 17)
    • Re: CVE request: tss <= 0.8.1-3: arbitary file reading Steven M. Christey (Apr 17)
• [oCERT-2008-003] libpng zero-length chunks incorrect handling Andrea Barisani (Apr 13)
• CVE id request - clamav Tomas Hoger (Apr 15)
  • Re: CVE id request - clamav Steven M. Christey (Apr 16)
• clamav: Endless loop / hang with crafter arj, CVE-2008-1387 Hanno Böck (Apr 15)
• CVE id request: cecilia insecure temporary file usage Nico Golde (Apr 15)
  • Re: CVE id request: cecilia insecure temporary file usage Steven M. Christey (Apr 16)
• CVE id request: xine-lib insufficient boundary check in speex decoder Nico Golde (Apr 15)
  • Re: CVE id request: xine-lib insufficient boundary check in speex decoder Steven M. Christey (Apr 15)
• [oCERT-2008-004] multiple speex implementations insufficient boundary checks Andrea Barisani (Apr 17)
• CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) Hanno Böck (Apr 17)
  • Re: CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) Tomas Hoger (Apr 17)
  • Re: CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) Josh Bressers (Apr 17)
  • Re: CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) Steven M. Christey (Apr 17)
    • Re: CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) Hanno Böck (Apr 17)
      • Re: CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) Steven M. Christey (Apr 17)
      • Re: CVE request: firefox 2.0.14 ( Crash in JavaScript garbage collector) Hanno Böck (Apr 18)
• CVE id request: xine-lib <= 1.1.12 nsf handling Hanno Böck (Apr 17)
  • Re: CVE id request: xine-lib <= 1.1.12 nsf handling Steven M. Christey (Apr 17)
• CVE request: DBMail <2.2.9 Matthias Geerdsen (Apr 17)
  • Re: CVE request: DBMail <2.2.9 Steven M. Christey (Apr 17)
• CSRF vulnerability in ikiwiki Florian Weimer (Apr 18)
  • Re: CSRF vulnerability in ikiwiki Florian Weimer (Apr 20)
    • Re: CSRF vulnerability in ikiwiki Steven M. Christey (Apr 20)
• CVE request:Perl bug #48156 Jonathan Smith (Apr 20)
  • Re: CVE request:Perl bug #48156 Steven M. Christey (Apr 23)
    • Re: CVE request:Perl bug #48156 Florian Weimer (Apr 24)
• audit log injection attack via login Josh Bressers (Apr 21)
  • Re: audit log injection attack via login Steven M. Christey (Apr 23)
• CVE Request: inspircd Micah Anderson (Apr 22)
  • Re: CVE Request: inspircd Steven M. Christey (Apr 23)
    • Re: CVE Request: inspircd security curmudgeon (Apr 23)
    • Re: CVE Request: inspircd Micah Anderson (Apr 23)
• CVE request: phpmyadmin PMASA-2008-3 Hanno Böck (Apr 23)
  • Re: CVE request: phpmyadmin PMASA-2008-3 Steven M. Christey (Apr 23)
• web archives Steven M. Christey (Apr 23)
  • Re: web archives Jonathan Smith (Apr 23)
    • seclists.org archive request: oss-security Jonathan Smith (Apr 23)
      • Re: seclists.org archive request: oss-security security curmudgeon (Apr 23)
  • Re: web archives security curmudgeon (Apr 23)
  • Message not available
    • Re: web archives security curmudgeon (Apr 23)
• CVE request: licq denial of service Marcus Meissner (Apr 25)
• CVE request: horde-kronolith-2.1.7 XSS in addevent.php Matt Fleming (Apr 27)
• Re: CVE request: insecure X11 handling in ltsp Nico Golde (Apr 28)
  • Re: CVE request: insecure X11 handling in ltsp Steven M. Christey (Apr 30)
• CVE id request: wordpress Nico Golde (Apr 29)
  • Re: CVE id request: wordpress Nico Golde (May 08)
  • Re: CVE id request: wordpress Steven M. Christey (May 12)
• CVE request: egroupware Hanno Böck (Apr 29)
  • Re: CVE request: egroupware Steven M. Christey (Apr 30)
• security problem in ESP fragment handling? Marcus Meissner (Apr 30)
  • Re: security problem in ESP fragment handling? Steven M. Christey (Apr 30)
    • Re: security problem in ESP fragment handling? Marcus Meissner (Apr 30)
  • Re: security problem in ESP fragment handling? Mark J Cox (Apr 30)
    • Re: security problem in ESP fragment handling? Marcus Meissner (Apr 30)
• asterisk dupe? Moritz Muehlenhoff (Apr 30)
  • Re: asterisk dupe? Steven M. Christey (May 05)
• CVE-2008-0553 / CVE-2006-4484 also affects tkimg Tomas Hoger (May 02)
• CVE Request (PHP) Josh Bressers (May 02)
  • Re: CVE Request (PHP) Steven M. Christey (May 02)
    • Re: Re: CVE Request (PHP) Robert Buchholz (May 06)
      • Re: Re: CVE Request (PHP) Robert Buchholz (May 08)
      • Re: Re: CVE Request (PHP) Robert Buchholz (May 08)
• CVE id request - mysql Tomas Hoger (May 05)
  • Re: CVE id request - mysql Steven M. Christey (May 05)
• CVE id request - libid3tag Tomas Hoger (May 06)
  • Re: CVE id request - libid3tag Steven M. Christey (May 07)
• openssh CVE-2008-1657 question Vincent Danen (May 06)
  • Re: openssh CVE-2008-1657 question Nico Golde (May 06)
    • Re: openssh CVE-2008-1657 question Vincent Danen (May 06)
• CVE request: Bugzilla (Unauthorized Bug Change, XSS, Account Impersonation) Christian Hoffmann (May 07)
  • Re: CVE request: Bugzilla (Unauthorized Bug Change, XSS, Account Impersonation) Steven M. Christey (May 07)
    • Re: Re: CVE request: Bugzilla (Unauthorized Bug Change, XSS, Account Impersonation) Hanno Böck (May 13)
      • Re: Re: CVE request: Bugzilla (Unauthorized Bug Change, XSS, Account Impersonation) Tomas Hoger (May 13)
      • Re: Re: CVE request: Bugzilla (Unauthorized Bug Change, XSS, Account Impersonation) Steven M. Christey (May 13)
• CVE-2008-0352 is a dup of CVE-2007-4567 Kees Cook (May 07)
  • Re: CVE-2008-0352 is a dup of CVE-2007-4567 Mark J Cox (May 08)
• CVE-2008-1615 reproducer? Marcus Meissner (May 08)
  • Re: CVE-2008-1615 reproducer? Mark J Cox (May 08)
• versions affected by CVE-2008-1675 - update Nico Golde (May 09)
• Multiples vulnerabilities in wordnet Pierre-Yves Rofes (May 09)
  • Re: Multiples vulnerabilities in wordnet Ben Haskell (May 09)
  • Re: Multiples vulnerabilities in wordnet Steven M. Christey (May 12)
• CVE request: Linux vfs: fix permission checking in sys_utimensat Robert Buchholz (May 10)
  • Re: CVE request: Linux vfs: fix permission checking in sys_utimensat Steven M. Christey (May 12)
• CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution Robert Buchholz (May 10)
  • Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution Nico Golde (May 12)
    • Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution Robert Buchholz (May 12)
      • Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution Nico Golde (May 12)
      • Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution Robert Buchholz (May 13)
      • Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution Nico Golde (May 14)
      • Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution Sven Joachim (May 14)
      • Re: Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution Nico Golde (May 14)
      • Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution Sven Joachim (May 14)
      • Re: Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution Tavis Ormandy (May 14)
      • vim $TMPDIR directory stat (was: [oss-security] Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution) Nico Golde (May 14)
      • Re: Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution Gustavo De Nardin (spuk) (May 14)
  • Re: CVE request: Emacs 21 fast-lock-mode arbitrary lips code execution Steven M. Christey (May 12)
• CVE id request: vlc local privilege escalation Nico Golde (May 10)
  • Re: CVE id request: vlc local privilege escalation Steven M. Christey (May 12)
• CVE id request: uudeview Nico Golde (May 13)
  • Re: CVE id request: uudeview Nico Golde (May 14)
    • Re: CVE id request: uudeview Steven M. Christey (May 18)
  • Re: CVE id request: uudeview Robert Buchholz (May 30)
• CVE id request: Django Cross-Site Scripting Pierre-Yves Rofes (May 14)
  • Re: CVE id request: Django Cross-Site Scripting Steven M. Christey (May 18)
• OpenSSH key blacklisting Solar Designer (May 16)
  • Re: OpenSSH key blacklisting Craig Edwards (Brain) (May 16)
    • Re: OpenSSH key blacklisting Solar Designer (May 16)
  • Re: OpenSSH key blacklisting Vincent Danen (May 16)
  • Re: OpenSSH key blacklisting Robert Buchholz (May 16)
    • Re: OpenSSH key blacklisting Solar Designer (May 16)
      • Re: OpenSSH key blacklisting Robert Buchholz (May 17)
      • Re: OpenSSH key blacklisting Solar Designer (May 17)
      • Re: OpenSSH key blacklisting Robert Buchholz (May 17)
      • Re: OpenSSH key blacklisting Solar Designer (May 17)
      • Re: OpenSSH key blacklisting Kees Cook (May 18)
      • Re: OpenSSH key blacklisting Solar Designer (May 18)
      • Re: OpenSSH key blacklisting Kees Cook (May 19)
      • Re: OpenSSH key blacklisting Kees Cook (May 19)
      • Re: OpenSSH key blacklisting Kees Cook (May 18)
      • Re: OpenSSH key blacklisting Matthias Andree (May 20)
      • Re: OpenSSH key blacklisting Solar Designer (May 27)
      • Re: OpenSSH key blacklisting Dmitry V. Levin (May 27)
      • Re: OpenSSH key blacklisting Tim Brown (May 28)
      • Re: OpenSSH key blacklisting Sebastian Krahmer (May 28)
      • Re: OpenSSH key blacklisting Tim Brown (Jun 02)
      • Re: OpenSSH key blacklisting Sebastian Krahmer (Jun 02)
      • Re: OpenSSH key blacklisting Nathanael Hoyle (Jun 04)
      • Re: OpenSSH key blacklisting The Fungi (Jun 04)
      • Re: OpenSSH key blacklisting Nathanael Hoyle (Jun 04)
      • Re: OpenSSH key blacklisting Jonathan Smith (Jun 04)
      • Re: OpenSSH key blacklisting Nathanael Hoyle (May 28)
      • Re: OpenSSH key blacklisting Florian Weimer (May 28)
      • Re: OpenSSH key blacklisting Mike Frysinger (May 31)
  • Re: OpenSSH key blacklisting Gustavo De Nardin (spuk) (May 16)
    • Re: OpenSSH key blacklisting Solar Designer (May 16)
      • Re: OpenSSH key blacklisting Gustavo De Nardin (spuk) (May 16)
• CVE id request: apache2 Nico Golde (May 18)
  • Re: CVE id request: apache2 Mark J Cox (May 18)
• CVE ID request: GNUTLS Florian Weimer (May 19)
  • Re: CVE ID request: GNUTLS Jonathan Smith (May 19)
    • Re: CVE ID request: GNUTLS Simon Josefsson (May 20)
    • Re: CVE ID request: GNUTLS Tomas Hoger (May 20)
  • Re: CVE ID request: GNUTLS Mark J Cox (May 20)
• CVE request: mtr Jonathan Smith (May 20)
  • Re: CVE request: mtr Robert Buchholz (May 20)
    • Re: CVE request: mtr security curmudgeon (May 20)
      • Re: CVE request: mtr Jonathan Smith (May 20)
    • Re: CVE request: mtr Jonathan Smith (May 20)
  • Re: CVE request: mtr Steven M. Christey (May 20)
• CVE assignments during May Steven M. Christey (May 20)
• Root name server changes -> bind Marcus Meissner (May 21)
  • Re: Root name server changes -> bind Jonathan Smith (May 21)
    • Re: Root name server changes -> bind Florian Weimer (May 22)
      • Re: Root name server changes -> bind Jonathan Smith (May 22)
      • Re: Root name server changes -> bind Florian Weimer (May 22)
  • Re: Root name server changes -> bind Steven M. Christey (May 21)
    • Re: Root name server changes -> bind security curmudgeon (May 21)
      • Re: Root name server changes -> bind Mark J Cox (May 22)
  • Re: Root name server changes -> bind Thijs Kinkhorst (May 22)
    • Re: Root name server changes -> bind Marcus Meissner (May 23)
• vsftpd CVE-2007-5962 (Red Hat / Fedora specific) Tomas Hoger (May 21)
  • Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific) Jonathan Smith (May 21)
    • Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific) Josh Bressers (May 21)
      • Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific) Steven M. Christey (May 21)
      • Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific) Jonathan Smith (May 21)
• [vendor-sec] [oss-security] New Xen ioemu: PVFB backend issue Jan Lieskovsky (May 21)
  • Re: New Xen ioemu: PVFB backend issue Nico Golde (Jun 19)
    • Re: New Xen ioemu: PVFB backend issue Steven M. Christey (Jun 23)
      • Re: [vendor-sec] Re: [oss-security] New Xen ioemu: PVFB backend issue Robert Buchholz (Jun 24)
• CVE-2008-2292 net-snmp __snprint_value Nico Golde (May 24)
  • Re: CVE-2008-2292 net-snmp __snprint_value Nico Golde (May 24)
• CVE id request: libpam-pgsql Nico Golde (May 24)
• CVE id request: xscreensaver Steffen Joeris (May 25)
  • Re: CVE id request: xscreensaver Tomas Hoger (May 25)
    • Re: CVE id request: xscreensaver Steffen Joeris (May 25)
    • Re: CVE id request: xscreensaver Nico Golde (May 25)
    • Re: CVE id request: xscreensaver Bernhard R. Link (May 25)
• CVE id request: cbrpager Tomas Hoger (May 25)
  • Re: CVE id request: cbrpager Robert Buchholz (May 26)
• update on CVE-2008-2424 Nico Golde (May 26)
• Security, Open Source Style Josh Bressers (May 27)
  • Re: Security, Open Source Style Josh Bressers (May 27)
    • Re: Security, Open Source Style Steven M. Christey (May 28)
• CVE-2008-2363: pan - heap overflow Pavel Polischouk (May 29)
• Latest flash player is not vulnerable Eren Türkay (May 30)
  • Re: Latest flash player is not vulnerable security curmudgeon (May 30)
• CVE id request: ikiwiki Nico Golde (May 30)
  • Re: CVE id request: ikiwiki Martin Schulze (May 31)
• ARP handler Inspection tool released Andrea Di Pasquale (Jun 02)
  • Re: ARP handler Inspection tool released Nico Golde (Jun 02)
    • code reviews (was: ARP handler Inspection tool released) Solar Designer (Jun 02)
      • Re: code reviews (was: ARP handler Inspection tool released) Andrea Barisani (Jun 02)
      • Re: code reviews (was: ARP handler Inspection tool released) Chris Rohlf (Jun 02)
      • Re: code reviews (was: ARP handler Inspection tool released) Nico Golde (Jun 02)
      • Re: code reviews (was: ARP handler Inspection tool released) Andrea Barisani (Jun 02)
      • Re: code reviews (was: ARP handler Inspection tool released) Nico Golde (Jun 02)
      • Re: tool announcements (was: ARP handler Inspection tool released) Solar Designer (Jun 03)
      • Re: tool announcements (was: ARP handler Inspection tool released) Steven M. Christey (Jun 03)
      • Re: code reviews (was: ARP handler Inspection tool released) Solar Designer (Jun 03)
      • Re: code reviews (was: ARP handler Inspection tool released) Steve Kemp (Jun 03)
    • Re: ARP handler Inspection tool released Jonathan Smith (Jun 02)
      • tool announcements (was: ARP handler Inspection tool released) Solar Designer (Jun 03)
      • Re: tool announcements Jonathan Smith (Jun 03)
      • Re: tool announcements Pierre-Yves Rofes (Jun 03)
      • Re: tool announcements Steven M. Christey (Jun 03)
      • Re: tool announcements (was: ARP handler Inspection tool released) Michael Simpson (Jun 04)
• SQL_injection detection tool released MARE system Security (Jun 02)
• CVE id request: slash Steffen Joeris (Jun 04)
  • Re: CVE id request: slash Steffen Joeris (Jun 04)
• Python Unsafe Module Loading Ned Ludd (Jun 04)
  • Re: Python Unsafe Module Loading Robert Buchholz (Jun 05)
    • Re: Python Unsafe Module Loading Ned Ludd (Jun 05)
      • Re: Python Unsafe Module Loading Florian Weimer (Jun 05)
      • Re: Python Unsafe Module Loading Robert Buchholz (Jun 05)
• CVE-Request: courier-authlib sql injection Hanno Böck (Jun 08)
  • Re: CVE-Request: courier-authlib sql injection Robert Buchholz (Jun 08)
  • Re: CVE-Request: courier-authlib sql injection Steven M. Christey (Jun 10)
• [oCERT-2008-006] multiple SNMP implementations HMAC authentication spoofing Andrea Barisani (Jun 09)
• exploitability of off-by-one in motion webserver Nico Golde (Jun 10)
  • Re: exploitability of off-by-one in motion webserver Solar Designer (Jun 10)
    • Re: exploitability of off-by-one in motion webserver Nico Golde (Jun 10)
  • Re: exploitability of off-by-one in motion webserver Steven M. Christey (Jun 10)
• FreeType 2.3.6 Josh Bressers (Jun 10)
  • Re: FreeType 2.3.6 Josh Bressers (Jun 10)
    • Re: FreeType 2.3.6 Thomas Biege (Jun 17)
      • Re: FreeType 2.3.6 Tomas Hoger (Jun 17)
      • Re: FreeType 2.3.6 Thomas Biege (Jun 17)
      • Re: FreeType 2.3.6 Steven M. Christey (Jun 17)
• CVE id request: nasm off-by-one Nico Golde (Jun 11)
  • Re: CVE id request: nasm off-by-one Eren Türkay (Jun 11)
    • Re: CVE id request: nasm off-by-one Marcus Meissner (Jun 12)
  • Re: CVE id request: nasm off-by-one Steven M. Christey (Jun 16)
• CVE id request: TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core Thijs Kinkhorst (Jun 12)
  • Re: CVE id request: TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core Steven M. Christey (Jun 16)
• CVE id request: menalto gallery Hanno Böck (Jun 12)
  • Re: CVE id request: menalto gallery Steven M. Christey (Jun 16)
• malloc and heap corruption pandora (Jun 12)
• CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Matthias Andree (Jun 13)
  • Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Robert Buchholz (Jun 15)
    • Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Matthias Andree (Jun 16)
      • Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Jonathan Smith (Jun 16)
      • Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Matthias Andree (Jun 17)
  • Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Steven M. Christey (Jun 16)
  • Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Tomas Hoger (Jun 23)
• CVE request: Opera 9.50 Marcus Meissner (Jun 14)
  • Re: CVE request: Opera 9.50 Nico Golde (Jun 14)
  • Re: CVE request: Opera 9.50 Steven M. Christey (Jun 16)
• CVE id request: Clamav Steffen Joeris (Jun 15)
  • Re: CVE id request: Clamav Tomas Hoger (Jun 16)
  • Re: CVE id request: Clamav Steven M. Christey (Jun 16)
  • Re: CVE id request: Clamav Eren Türkay (Jun 17)
    • Re: CVE id request: Clamav Eren Türkay (Jun 17)
      • Re: CVE id request: Clamav Török Edwin (Jun 17)
• CVE Id request: vim Jamie Strandboge (Jun 16)
  • Re: CVE Id request: vim Jamie Strandboge (Jun 16)
  • Re: CVE Id request: vim Steven M. Christey (Jun 16)
• query on a pppol2tp_recvmsg() fix - security relevant? Marcus Meissner (Jun 18)
  • Re: query on a pppol2tp_recvmsg() fix - security relevant? Eren Türkay (Jun 18)
    • Re: query on a pppol2tp_recvmsg() fix - security relevant? Jan Lieskovsky (Jun 19)
      • Re: query on a pppol2tp_recvmsg() fix - security relevant? Steven M. Christey (Jun 23)
• CVE Request: Critical vuln in Firefox 3.0 Hanno Böck (Jun 19)
  • Re: CVE Request: Critical vuln in Firefox 3.0 Nico Golde (Jun 19)
    • Re: CVE Request: Critical vuln in Firefox 3.0 Steven M. Christey (Jun 19)
• CVE request: php 5.2.6 safe_mode bypass Hanno Böck (Jun 19)
  • Re: CVE request: php 5.2.6 safe_mode bypass Nico Golde (Jun 19)
• CVE request: php 5.2.6 ext/imap buffer overflows Christian Hoffmann (Jun 19)
  • Re: CVE request: php 5.2.6 ext/imap buffer overflows Steven M. Christey (Jun 23)
    • Re: CVE request: php 5.2.6 ext/imap buffer overflows Christian Hoffmann (Jun 24)
• CVE id request: tmsnc Nico Golde (Jun 20)
  • Re: CVE id request: tmsnc Eren Türkay (Jun 20)
    • Re: CVE id request: tmsnc Nico Golde (Jun 20)
      • Re: CVE id request: tmsnc Steven M. Christey (Jun 23)
• CVE id request: perl Steffen Joeris (Jun 21)
  • Re: CVE id request: perl Steven M. Christey (Jun 23)
• CVE request: phpmyadmin < 2.11.7 XSS Hanno Böck (Jun 23)
• ruby regression (was: Re: [vendor-sec] Ruby memory corruption bugs in array and string handling) Jonathan Smith (Jun 24)
  • Re: ruby regression (was: Re: [vendor-sec] Ruby memory corruption bugs in array and string handling) Drew Yao (Jun 24)
• CVE-2008-2365 kernel: ptrace: Crash on PTRACE_{ATTACH,DETACH} race -- affecting kernel versions <= 2.6.25 Jan Lieskovsky (Jun 26)
• CVE id request: checkinstall Steffen Joeris (Jun 27)
• Squid advisory Josh Bressers (Jun 27)
• CVE Request (pidgin) Josh Bressers (Jun 27)
• Two remote DoS issues in linuxdcpp Robert Buchholz (Jun 29)
• CVE id request mercurial:Insufficient input validation Steffen Joeris (Jun 30)
  • Re: CVE id request mercurial:Insufficient input validation Steven M. Christey (Jun 30)
• CVE-2008-2375 older vsftpd authentication memory leak Mark J Cox (Jun 30)
• openldap DoS Ludwig Nussel (Jun 30)
  • Re: openldap DoS Josh Bressers (Jun 30)
• Re: [vendor-sec] Re: patch sets for recent ruby vulnerabilities Jamie Strandboge (Jun 30)
• CVE request for dnsmasq DoS Jamie Strandboge (Jun 30)
• Re: patch sets for recent ruby vulnerabilities Jamie Strandboge (Jun 30)
  • <Possible follow-ups>
  • Re: patch sets for recent ruby vulnerabilities Jamie Strandboge (Jun 30)

Previous period

Next period